{"version":3,"sources":["../webpack/bootstrap","../node_modules/@sentry/core/esm/constants.js","../node_modules/webpack/buildin/harmony-module.js","../node_modules/@babel/runtime/regenerator/index.js","../node_modules/@sentry/utils/esm/node.js","../node_modules/@sentry/utils/esm/syncpromise.js","../node_modules/@sentry/utils/esm/browser.js","../node_modules/@babel/runtime/helpers/defineProperty.js","../node_modules/@sentry/utils/esm/env.js","../node_modules/regenerator-runtime/runtime.js","../node_modules/@babel/runtime/helpers/asyncToGenerator.js","../node_modules/@azure/msal-browser/dist/_virtual/_tslib.js","../node_modules/@azure/msal-common/dist/telemetry/performance/PerformanceEvent.js","../node_modules/@azure/msal-common/dist/_virtual/_tslib.js","../node_modules/@azure/msal-common/dist/utils/Constants.js","../node_modules/@azure/msal-browser/dist/utils/BrowserConstants.js","../node_modules/@azure/msal-common/dist/error/AuthError.js","../node_modules/@azure/msal-common/dist/error/ServerError.js","../node_modules/@azure/msal-common/dist/error/InteractionRequiredAuthError.js","../node_modules/@azure/msal-common/dist/error/JoseHeaderError.js","../node_modules/@azure/msal-browser/dist/cache/CryptoKeyStore.js","../node_modules/@azure/msal-common/dist/crypto/JoseHeader.js","../node_modules/@azure/msal-browser/dist/utils/MathUtils.js","../node_modules/@azure/msal-browser/dist/crypto/GuidGenerator.js","../node_modules/@azure/msal-browser/dist/utils/BrowserStringUtils.js","../node_modules/@azure/msal-browser/dist/encode/Base64Encode.js","../node_modules/@azure/msal-browser/dist/encode/Base64Decode.js","../node_modules/@azure/msal-common/dist/error/ClientAuthError.js","../node_modules/@azure/msal-common/dist/utils/StringUtils.js","../node_modules/@azure/msal-browser/dist/error/BrowserAuthError.js","../node_modules/@azure/msal-browser/dist/crypto/PkceGenerator.js","../node_modules/@azure/msal-browser/dist/crypto/ModernBrowserCrypto.js","../node_modules/@azure/msal-browser/dist/crypto/MsrBrowserCrypto.js","../node_modules/@azure/msal-browser/dist/crypto/MsBrowserCrypto.js","../node_modules/@azure/msal-browser/dist/error/BrowserConfigurationAuthError.js","../node_modules/@azure/msal-browser/dist/crypto/BrowserCrypto.js","../node_modules/@azure/msal-browser/dist/cache/DatabaseStorage.js","../node_modules/@azure/msal-browser/dist/cache/MemoryStorage.js","../node_modules/@azure/msal-browser/dist/cache/AsyncMemoryStorage.js","../node_modules/@azure/msal-common/dist/logger/Logger.js","../node_modules/@azure/msal-browser/dist/crypto/CryptoOps.js","../node_modules/@azure/msal-common/dist/authority/AuthorityType.js","../node_modules/@azure/msal-common/dist/telemetry/performance/PerformanceClient.js","../node_modules/@azure/msal-common/dist/telemetry/performance/StubPerformanceClient.js","../node_modules/@azure/msal-common/dist/crypto/ICrypto.js","../node_modules/@azure/msal-common/dist/cache/entities/CredentialEntity.js","../node_modules/@azure/msal-common/dist/cache/entities/IdTokenEntity.js","../node_modules/@azure/msal-common/dist/error/ClientConfigurationError.js","../node_modules/@azure/msal-common/dist/request/ScopeSet.js","../node_modules/@azure/msal-common/dist/account/ClientInfo.js","../node_modules/@azure/msal-common/dist/cache/entities/AccountEntity.js","../node_modules/@azure/msal-common/dist/account/CcsCredential.js","../node_modules/@azure/msal-common/dist/account/AuthToken.js","../node_modules/@azure/msal-common/dist/packageMetadata.js","../node_modules/@azure/msal-common/dist/cache/CacheManager.js","../node_modules/@azure/msal-common/dist/utils/TimeUtils.js","../node_modules/@azure/msal-common/dist/cache/entities/AccessTokenEntity.js","../node_modules/@azure/msal-common/dist/cache/entities/RefreshTokenEntity.js","../node_modules/@azure/msal-common/dist/cache/entities/AppMetadataEntity.js","../node_modules/@azure/msal-common/dist/cache/entities/ServerTelemetryEntity.js","../node_modules/@azure/msal-common/dist/cache/entities/AuthorityMetadataEntity.js","../node_modules/@azure/msal-common/dist/cache/entities/ThrottlingEntity.js","../node_modules/@azure/msal-common/dist/utils/ProtocolUtils.js","../node_modules/@azure/msal-browser/dist/cache/BrowserStorage.js","../node_modules/@azure/msal-common/dist/authority/ProtocolMode.js","../node_modules/@azure/msal-common/dist/authority/AuthorityOptions.js","../node_modules/@azure/msal-common/dist/url/UrlString.js","../node_modules/@azure/msal-browser/dist/utils/BrowserProtocolUtils.js","../node_modules/@azure/msal-browser/dist/cache/BrowserCacheManager.js","../node_modules/@azure/msal-common/dist/config/ClientConfiguration.js","../node_modules/@azure/msal-common/dist/network/INetworkModule.js","../node_modules/@azure/msal-browser/dist/network/FetchClient.js","../node_modules/@azure/msal-browser/dist/network/XhrClient.js","../node_modules/@azure/msal-browser/dist/utils/BrowserUtils.js","../node_modules/@azure/msal-browser/dist/navigation/NavigationClient.js","../node_modules/@azure/msal-browser/dist/config/Configuration.js","../node_modules/@azure/msal-browser/dist/packageMetadata.js","../node_modules/@azure/msal-browser/dist/event/EventType.js","../node_modules/@azure/msal-browser/dist/event/EventHandler.js","../node_modules/@azure/msal-common/dist/crypto/PopTokenGenerator.js","../node_modules/@azure/msal-common/dist/network/ThrottlingUtils.js","../node_modules/@azure/msal-common/dist/network/NetworkManager.js","../node_modules/@azure/msal-common/dist/request/RequestValidator.js","../node_modules/@azure/msal-common/dist/request/RequestParameterBuilder.js","../node_modules/@azure/msal-common/dist/client/BaseClient.js","../node_modules/@azure/msal-common/dist/cache/entities/CacheRecord.js","../node_modules/@azure/msal-common/dist/cache/persistence/TokenCacheContext.js","../node_modules/@azure/msal-common/dist/response/ResponseHandler.js","../node_modules/@azure/msal-common/dist/client/AuthorizationCodeClient.js","../node_modules/@azure/msal-common/dist/authority/OpenIdConfigResponse.js","../node_modules/@azure/msal-common/dist/authority/AuthorityMetadata.js","../node_modules/@azure/msal-common/dist/authority/RegionDiscovery.js","../node_modules/@azure/msal-browser/dist/error/NativeAuthError.js","../node_modules/@azure/msal-common/dist/authority/Authority.js","../node_modules/@azure/msal-common/dist/authority/CloudInstanceDiscoveryResponse.js","../node_modules/@azure/msal-common/dist/authority/CloudInstanceDiscoveryErrorResponse.js","../node_modules/@azure/msal-common/dist/authority/AuthorityFactory.js","../node_modules/@azure/msal-common/dist/telemetry/server/ServerTelemetryManager.js","../node_modules/@azure/msal-browser/dist/interaction_client/BaseInteractionClient.js","../node_modules/@azure/msal-browser/dist/interaction_client/StandardInteractionClient.js","../node_modules/@azure/msal-common/dist/client/RefreshTokenClient.js","../node_modules/@azure/msal-common/dist/client/SilentFlowClient.js","../node_modules/@azure/msal-browser/dist/interaction_client/SilentCacheClient.js","../node_modules/@azure/msal-browser/dist/interaction_client/NativeInteractionClient.js","../node_modules/@azure/msal-browser/dist/broker/nativeBroker/NativeMessageHandler.js","../node_modules/@azure/msal-browser/dist/interaction_handler/InteractionHandler.js","../node_modules/@azure/msal-browser/dist/interaction_client/PopupClient.js","../node_modules/@azure/msal-browser/dist/interaction_handler/RedirectHandler.js","../node_modules/@azure/msal-browser/dist/interaction_client/RedirectClient.js","../node_modules/@azure/msal-browser/dist/interaction_handler/SilentHandler.js","../node_modules/@azure/msal-browser/dist/interaction_client/SilentIframeClient.js","../node_modules/@azure/msal-browser/dist/interaction_client/SilentRefreshClient.js","../node_modules/@azure/msal-browser/dist/cache/TokenCache.js","../node_modules/@azure/msal-browser/dist/interaction_client/HybridSpaAuthorizationCodeClient.js","../node_modules/@azure/msal-browser/dist/interaction_client/SilentAuthCodeClient.js","../node_modules/@azure/msal-browser/dist/telemetry/BrowserPerformanceMeasurement.js","../node_modules/@azure/msal-browser/dist/telemetry/BrowserPerformanceClient.js","../node_modules/@azure/msal-browser/dist/app/PublicClientApplication.js","../node_modules/@azure/msal-browser/dist/app/ClientApplication.js","auth.js","../node_modules/@sentry/core/esm/hub.js","../node_modules/@sentry/utils/esm/logger.js","../node_modules/@sentry/utils/esm/is.js","../node_modules/@sentry/utils/esm/worldwide.js","../node_modules/@sentry/utils/esm/object.js","../node_modules/@sentry/utils/esm/misc.js","index.jsx","../node_modules/webpack/buildin/global.js","../node_modules/process/browser.js","../node_modules/@sentry/core/esm/exports.js","../node_modules/@sentry/utils/esm/string.js","../node_modules/@sentry/core/esm/session.js","../node_modules/@sentry/utils/esm/time.js","../node_modules/@sentry/core/esm/scope.js"],"names":["installedModules","__webpack_require__","moduleId","exports","module","i","l","modules","call","m","c","d","name","getter","o","Object","defineProperty","enumerable","get","r","Symbol","toStringTag","value","t","mode","__esModule","ns","create","key","bind","n","getDefault","getModuleExports","object","property","prototype","hasOwnProperty","p","s","DEFAULT_ENVIRONMENT","originalModule","webpackPolyfill","children","isNodeEnv","toString","process","dynamicRequire","mod","request","require","States","resolvedSyncPromise","SyncPromise","resolve","rejectedSyncPromise","reason","_","reject","constructor","executor","__init","this","__init2","__init3","__init4","_state","PENDING","_handlers","_resolve","_reject","e","then","onfulfilled","onrejected","push","result","_executeHandlers","catch","val","finally","onfinally","isRejected","_setResult","RESOLVED","REJECTED","state","_value","cachedHandlers","slice","forEach","handler","WINDOW","htmlTreeAsString","elem","options","currentElem","MAX_TRAVERSE_HEIGHT","out","height","len","separator","sepLength","length","nextStr","keyAttrs","Array","isArray","maxStringLength","_htmlElementAsString","parentNode","reverse","join","_oO","el","className","classes","attr","tagName","toLowerCase","keyAttrPairs","filter","keyAttr","getAttribute","map","keyAttrPair","id","split","allowedAttrs","getLocationHref","document","location","href","oO","getDomElement","selector","querySelector","_defineProperty","obj","configurable","writable","isBrowserBundle","__SENTRY_BROWSER_BUNDLE__","getSDKSource","runtime","undefined","Op","hasOwn","$Symbol","iteratorSymbol","iterator","asyncIteratorSymbol","asyncIterator","toStringTagSymbol","define","err","wrap","innerFn","outerFn","self","tryLocsList","protoGenerator","Generator","generator","context","Context","_invoke","makeInvokeMethod","GenStateSuspendedStart","invoke","method","arg","GenStateExecuting","Error","GenStateCompleted","doneResult","delegate","delegateResult","maybeInvokeDelegate","ContinueSentinel","sent","_sent","dispatchException","abrupt","record","tryCatch","type","done","GenStateSuspendedYield","fn","GeneratorFunction","GeneratorFunctionPrototype","IteratorPrototype","getProto","getPrototypeOf","NativeIteratorPrototype","values","Gp","defineIteratorMethods","AsyncIterator","PromiseImpl","__await","unwrapped","error","previousPromise","enqueue","callInvokeWithMethodAndArg","TypeError","info","resultName","next","nextLoc","pushTryEntry","locs","entry","tryLoc","catchLoc","finallyLoc","afterLoc","tryEntries","resetTryEntry","completion","reset","iterable","iteratorMethod","isNaN","displayName","isGeneratorFunction","genFun","ctor","mark","setPrototypeOf","__proto__","awrap","async","Promise","iter","keys","pop","skipTempReset","prev","charAt","stop","rootRecord","rval","exception","handle","loc","caught","hasCatch","hasFinally","finallyEntry","complete","finish","thrown","delegateYield","regeneratorRuntime","accidentalStrictMode","globalThis","Function","asyncGeneratorStep","gen","_next","_throw","_asyncToGenerator","args","arguments","apply","extendStatics","b","__extends","__","PerformanceEvents","PerformanceEventStatus","__assign","assign","__rest","indexOf","getOwnPropertySymbols","propertyIsEnumerable","__awaiter","thisArg","_arguments","P","fulfilled","step","rejected","adopt","__generator","body","f","y","g","label","trys","ops","verb","v","op","__read","ar","__spread","concat","IntFields","Set","__spreadArrays","il","k","a","j","jl","HeaderNames","PersistentCacheKeys","AADAuthorityConstants","AADServerParamKeys","ClaimsRequestKeys","Constants","LIBRARY_NAME","SKU","CACHE_PREFIX","DEFAULT_AUTHORITY","DEFAULT_AUTHORITY_HOST","DEFAULT_COMMON_TENANT","ADFS","DSTS","AAD_INSTANCE_DISCOVERY_ENDPT","CIAM_AUTH_URL","AAD_TENANT_DOMAIN_SUFFIX","RESOURCE_DELIM","NO_ACCOUNT","CLAIMS","CONSUMER_UTID","OPENID_SCOPE","PROFILE_SCOPE","OFFLINE_ACCESS_SCOPE","EMAIL_SCOPE","CODE_RESPONSE_TYPE","CODE_GRANT_TYPE","RT_GRANT_TYPE","FRAGMENT_RESPONSE_MODE","S256_CODE_CHALLENGE_METHOD","URL_FORM_CONTENT_TYPE","AUTHORIZATION_PENDING","NOT_DEFINED","EMPTY_STRING","NOT_APPLICABLE","FORWARD_SLASH","IMDS_ENDPOINT","IMDS_VERSION","IMDS_TIMEOUT","AZURE_REGION_AUTO_DISCOVER_FLAG","REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX","REGIONAL_AUTH_NON_MSI_QUERY_STRING","KNOWN_PUBLIC_CLOUDS","TOKEN_RESPONSE_TYPE","ID_TOKEN_RESPONSE_TYPE","SHR_NONCE_VALIDITY","INVALID_INSTANCE","OIDC_DEFAULT_SCOPES","OIDC_SCOPES","SSOTypes","PromptValue","LOGIN","SELECT_ACCOUNT","CONSENT","NONE","CREATE","NO_SESSION","ResponseMode","GrantType","CacheAccountType","Separators","CredentialType","CacheType","CodeChallengeMethodValues","PLAIN","S256","AuthorityMetadataSource","APP_METADATA","THE_FAMILY_ID","AUTHORITY_METADATA_CONSTANTS","AuthenticationScheme","SERVER_TELEM_CONSTANTS","SCHEMA_VERSION","MAX_CUR_HEADER_BYTES","MAX_LAST_HEADER_BYTES","MAX_CACHED_ERRORS","CACHE_KEY","CATEGORY_SEPARATOR","VALUE_SEPARATOR","OVERFLOW_TRUE","OVERFLOW_FALSE","UNKNOWN_ERROR","PasswordGrantConstants","ResponseCodes","RegionDiscoverySources","RegionDiscoveryOutcomes","CacheOutcome","JsonTypes","ThrottlingConstants","Errors","NativeExtensionMethod","BrowserCacheLocation","HTTP_REQUEST_TYPE","TemporaryCacheKeys","StaticCacheKeys","InMemoryCacheKeys","ApiId","InteractionType","InteractionStatus","AuthErrorMessage","code","desc","_super","AuthError","errorCode","errorMessage","suberror","_this","errorString","subError","setCorrelationId","correlationId","createUnexpectedError","errDesc","createPostRequestFailed","ServerError","InteractionRequiredServerErrorMessage","InteractionRequiredAuthSubErrorMessage","InteractionRequiredAuthErrorMessage","InteractionRequiredAuthError","timestamp","traceId","claims","isInteractionRequiredError","isInteractionRequiredErrorCode","isInteractionRequiredSubError","isInteractionRequiredErrorDesc","some","irErrorCode","createNoTokensFoundError","createNativeAccountUnavailableError","BrowserConstants","NativeConstants","WrapperSKU","DEFAULT_REQUEST","scopes","KEY_FORMAT_JWK","CacheLookupPolicy","DB_NAME","CryptoKeyStoreNames","JoseHeaderErrorMessage","JoseHeaderError","createMissingKidError","createMissingAlgError","JoseHeader","typ","alg","kid","getShrHeaderString","shrHeaderOptions","shrHeader","Pop","JSON","stringify","MathUtils","decimalToHex","num","hex","GuidGenerator","cryptoObj","generateGuid","buffer","Uint8Array","getRandomValues","guidHolder","guidResponse","Math","random","isGuid","guid","test","BrowserStringUtils","stringToUtf8Arr","sDOMStr","nChr","nArrLen","nStrLen","nMapIdx","charCodeAt","aBytes","nIdx","nChrIdx","stringToArrayBuffer","dataString","data","ArrayBuffer","dataView","utf8ArrToString","sView","nPart","nLen","String","fromCharCode","getSortedObjectString","sort","Base64Encode","urlEncode","input","encodeURIComponent","encode","replace","urlEncodeArr","inputArr","base64EncArr","inputUtf8Arr","eqLen","sB64Enc","nMod3","nUint24","uint6ToB64","substring","nUint6","Base64Decode","decode","encodedString","base64DecToArr","base64String","nBlockSize","nInLen","nOutLen","ceil","nMod4","nOutIdx","nInIdx","b64ToUint6","charNum","ClientAuthErrorMessage","ClientAuthError","createClientInfoDecodingError","caughtError","createClientInfoEmptyError","createTokenParsingError","caughtExtractionError","createTokenNullOrEmptyError","invalidRawTokenString","createEndpointDiscoveryIncompleteError","errDetail","createNetworkError","endpoint","createUnableToGetOpenidConfigError","createHashNotDeserializedError","hashParamObj","createInvalidStateError","invalidState","createStateMismatchError","createStateNotFoundError","missingState","createNonceMismatchError","createAuthTimeNotFoundError","createMaxAgeTranspiredError","createNonceNotFoundError","missingNonce","createMultipleMatchingTokensInCacheError","createMultipleMatchingAccountsInCacheError","createMultipleMatchingAppMetadataInCacheError","createTokenRequestCannotBeMadeError","createAppendEmptyScopeToSetError","givenScope","createRemoveEmptyScopeFromSetError","createAppendScopeSetError","appendError","createEmptyInputScopeSetError","createDeviceCodeCancelledError","createDeviceCodeExpiredError","createDeviceCodeUnknownError","createNoAccountInSilentRequestError","createNullOrUndefinedCacheRecord","createInvalidCacheEnvironmentError","createNoAccountFoundError","createCachePluginError","createNoCryptoObjectError","operationName","createInvalidCacheTypeError","createUnexpectedAccountTypeError","createUnexpectedCredentialTypeError","createInvalidAssertionError","createInvalidCredentialError","createRefreshRequiredError","createUserTimeoutReachedError","createTokenClaimsRequiredError","createNoAuthCodeInServerResponseError","createBindingKeyNotRemovedError","createLogoutNotSupportedError","createKeyIdMissingError","createNoNetworkConnectivityError","createUserCanceledError","StringUtils","decodeAuthToken","authToken","isEmpty","matches","exec","header","JWSPayload","JWSSig","str","isEmptyObj","strObj","parse","startsWith","search","endsWith","lastIndexOf","queryStringToObject","query","params","decodeURIComponent","pair","trim","_a","trimArrayEntries","arr","removeEmptyStringsFromArray","jsonParseHelper","matchPattern","pattern","RegExp","BrowserAuthErrorMessage","BrowserAuthError","createPkceNotGeneratedError","createCryptoNotAvailableError","createHttpMethodNotImplementedError","createEmptyNavigationUriError","createEmptyHashError","hashValue","createHashDoesNotContainStateError","createHashDoesNotContainKnownPropertiesError","createUnableToParseStateError","createStateInteractionTypeMismatchError","createInteractionInProgressError","createPopupWindowError","createEmptyWindowCreatedError","createUserCancelledError","createMonitorPopupTimeoutError","createMonitorIframeTimeoutError","createRedirectInIframeError","windowParentCheck","createBlockReloadInHiddenIframeError","createBlockAcquireTokenInPopupsError","createIframeClosedPrematurelyError","createSilentLogoutUnsupportedError","createNoAccountError","createSilentPromptValueError","givenPrompt","createUnableToParseTokenRequestCacheError","createNoTokenRequestCacheError","createAuthRequestNotSetError","createNoCachedAuthorityError","createNonBrowserEnvironmentError","createDatabaseNotOpenError","createPostRequestFailedError","errorDesc","createGetRequestFailedError","createFailedToParseNetworkResponseError","createUnableToLoadTokenError","errorDetail","createSigningKeyNotFoundInStorageError","keyId","createAuthCodeRequiredError","createAuthCodeOrNativeAccountIdRequiredError","createSpaCodeAndNativeAccountIdPresentError","createDatabaseUnavailableError","createUnableToAcquireTokenFromNativePlatformError","createNativeHandshakeTimeoutError","createNativeExtensionNotInstalledError","createNativeConnectionNotEstablishedError","createNativeBrokerCalledBeforeInitialize","createNativePromptParameterNotSupportedError","PkceGenerator","base64Encode","generateCodes","codeVerifier","codeChallenge","generateCodeVerifier","generateCodeChallengeFromVerifier","verifier","challenge","pkceCodeVerifier","pkceHashedCodeVerifier","e_1","sha256Digest","ModernBrowserCrypto","dataBuffer","window","crypto","generateKey","algorithm","extractable","keyUsages","subtle","exportKey","importKey","keyData","sign","digest","MsrBrowserCrypto","initPrng","entropy","msrCrypto","MsBrowserCrypto","msGenerateKey","addEventListener","target","msExportKey","resultBuffer","resultString","keyString","keyBuffer","msImportKey","msSign","digestOperation","BrowserConfigurationAuthErrorMessage","BrowserConfigurationAuthError","createRedirectUriEmptyError","createPostLogoutRedirectUriEmptyError","createStorageNotSupportedError","givenStorageLocation","createRedirectCallbacksNotSetError","createStubPcaInstanceCalledError","createInMemoryRedirectUnavailableError","createEntropyNotProvided","S256_HASH_ALG","PUBLIC_EXPONENT","BrowserCrypto","logger","cryptoOptions","_b","hasBrowserCrypto","verbose","subtleCrypto","hasIECrypto","hasMsrCrypto","useMsrCrypto","keygenAlgorithmOptions","hash","modulusLength","publicExponent","generateKeyPair","usages","exportJwk","importJwk","DatabaseStorage","dbName","version","tableName","dbOpen","open","openDB","indexedDB","createObjectStore","event","db","closeConnection","close","validateDbIsOpen","getItem","dbGet","transaction","objectStore","setItem","payload","dbPut","put","removeItem","dbDelete","delete","getKeys","dbGetKeys","getAllKeys","containsKey","dbContainsKey","count","deleteDatabase","deleteDbRequest","MemoryStorage","cache","Map","set","cacheKeys","has","clear","AsyncMemoryStorage","storeName","inMemoryCache","indexedDBCache","handleDatabaseAccessError","item","e_2","e_3","e_4","e_5","clearInMemory","clearPersistent","dbDeleted","e_6","LogLevel","CryptoKeyStore","asymmetricKeys","symmetricKeys","message","CryptoOps","performanceClient","cryptoConfig","browserCrypto","b64Encode","b64Decode","guidGenerator","pkceGenerator","createNewGuid","base64Decode","generatePkceCodes","getPublicKeyThumbprint","publicKeyThumbMeasurement","keyPair","publicKeyJwk","pubKeyThumprintObj","publicJwkString","publicJwkHash","privateKeyJwk","unextractablePrivateKey","startMeasurement","CryptoOptsGetPublicKeyThumbprint","EXTRACTABLE","POP_KEY_USAGES","publicKey","kty","hashString","privateKey","requestMethod","resourceRequestMethod","requestUri","resourceRequestUri","endMeasurement","success","removeTokenBindingKey","clearKeystore","signJwt","signJwtMeasurement","cachedKeyPair","publicKeyJwkString","encodedKeyIdThumbprint","encodedShrHeader","encodedPayload","tokenString","tokenBuffer","signatureBuffer","encodedSignature","signedJwt","CryptoOptsSignJwt","cnf","jwk","plainText","hashBuffer","hashBytes","AuthorityType","Logger","loggerOptions","packageName","packageVersion","level","Info","setLoggerOptions","createDefaultLoggerOptions","localCallback","loggerCallback","piiLoggingEnabled","logLevel","clone","logMessage","containsPii","Date","toUTCString","log","executeCallback","errorPii","warning","Warning","warningPii","infoPii","Verbose","verbosePii","trace","Trace","tracePii","isPiiLoggingEnabled","PerformanceClient","clientId","authority","libraryName","libraryVersion","applicationTelemetry","callbacks","eventsByCorrelationId","queueMeasurements","preQueueTimeByCorrelationId","startPerformanceMeasurement","measureName","startPerformanceMeasuremeant","getIntFields","getPreQueueTime","eventName","preQueueEvent","time","calculateQueuedTime","preQueueTime","currentTime","addQueueMeasurement","queueTime","manuallyCompleted","queueMeasurement","existingMeasurements","measurementArray","eventCorrelationId","generateId","performanceMeasurement","inProgressEvent","eventId","status","InProgress","startTimeMs","now","appName","appVersion","cacheEventByCorrelationId","discardMeasurement","discardMeasurements","addStaticFields","fields","increment","counters","measurement","rootEvent","isRoot","queueInfo","totalQueueTime","totalQueueCount","manuallyCompletedCount","getQueueInfo","discardCache","incompleteSubMeasurements","durationMs","flushMeasurement","floor","finalEvent","incompleteSubsCount","subMeasurement","round","queuedTimeMs","queuedCount","queuedManuallyCompletedCount","Completed","truncateIntegralFields","emitEvents","counter","queueMeasurementForCorrelationId","addPerformanceCallback","callback","callbackId","removePerformanceCallback","events","intFields","StubPerformanceMeasurement","StubPerformanceClient","setPreQueueTime","DEFAULT_CRYPTO_IMPLEMENTATION","CredentialEntity","generateAccountId","generateAccountIdForCacheKey","homeAccountId","environment","generateCredentialId","generateCredentialIdForCacheKey","credentialType","realm","familyId","generateTarget","generateTargetForCacheKey","generateCredentialKey","generateCredentialCacheKey","tokenType","requestedClaimsHash","generateType","ID_TOKEN","ACCESS_TOKEN","ACCESS_TOKEN_WITH_AUTH_SCHEME","REFRESH_TOKEN","generateClaimsHashForCacheKey","generateSchemeForCacheKey","CACHE_KEY_SEPARATOR","BEARER","IdTokenEntity","createIdTokenEntity","idToken","tenantId","idTokenEntity","secret","isIdTokenEntity","entity","ClientConfigurationErrorMessage","ClientConfigurationError","createClaimsRequestParsingError","claimsRequestParseError","createInsecureAuthorityUriError","urlString","createUrlParseError","urlParseError","createUrlEmptyError","createEmptyScopesArrayError","createClientIdSingleScopeError","inputScopes","createInvalidPromptError","promptValue","createInvalidClaimsRequestError","createEmptyLogoutRequestError","createEmptyTokenRequestError","createInvalidCodeChallengeMethodError","createInvalidCodeChallengeParamsError","createInvalidCloudDiscoveryMetadataError","createInvalidAuthorityMetadataError","createUntrustedAuthorityError","createInvalidAzureCloudInstanceError","createMissingSshJwkError","createMissingSshKidError","createMissingNonceAuthenticationHeadersError","createInvalidAuthenticationHeaderError","invalidHeaderName","details","createAuthorityMismatchError","ScopeSet","scopeArr","filteredInput","validateInputScopes","scope","add","fromString","inputScopeString","createSearchScopes","scopeSet","containsOnlyOIDCScopes","removeScope","removeOIDCScopes","containsScope","lowerCaseScopesSet","printScopesLowerCase","containsScopeSet","size","asArray","every","defaultScopeCount","defaultScope","appendScope","newScope","appendScopes","newScopes","unionScopeSets","otherScopes","unionScopes","intersectingScopeSets","sizeOtherScopes","getScopeCount","sizeThisScopes","array","printScopes","buildClientInfo","rawClientInfo","decodedClientInfo","buildClientInfoFromHomeAccountId","clientInfoParts","CLIENT_INFO_SEPARATOR","uid","utid","CcsCredentialType","AccountEntity","generateAccountKey","generateAccountCacheKey","username","localAccountId","authorityType","ADFS_ACCOUNT_TYPE","MSAV1_ACCOUNT_TYPE","MSA","MSSTS_ACCOUNT_TYPE","MSSTS","GENERIC_ACCOUNT_TYPE","GENERIC","getAccountInfo","idTokenClaims","nativeAccountId","accountInterface","createAccount","clientInfo","cloudGraphHostName","msGraphHost","_c","_d","_e","_f","account","env","getPreferredCache","tid","oid","sub","preferredUsername","preferred_username","email","emails","createGenericAccount","Adfs","upn","generateHomeAccountId","serverClientInfo","authType","accountId","Dsts","isAccountEntity","accountInfoIsEqual","accountA","accountB","compareClaims","claimsMatch","accountAClaims","accountBClaims","iat","nonce","AuthToken","rawToken","extractTokenClaims","encodedToken","decodedToken","base64TokenPayload","base64Decoded","checkMaxAge","authTime","maxAge","CacheManager","cryptoImpl","commonLogger","getAllAccounts","allAccountKeys","getAccountKeys","accountEntities","reduce","accounts","getAccount","accountEntity","getAccountInfoFromEntity","getAccountInfoFilteredBy","accountFilter","allAccounts","getAccountsFilteredBy","accountInfo","getIdToken","saveCacheRecord","cacheRecord","setAccount","setIdTokenCredential","accessToken","saveAccessToken","refreshToken","setRefreshTokenCredential","appMetadata","setAppMetadata","credential","accessTokenFilter","tokenKeys","currentScopes","removedAccessTokens","getTokenKeys","accessTokenKeyMatchesFilter","tokenEntity","getAccessTokenCredential","credentialMatchesFilter","removeAccessToken","all","setAccessTokenCredential","matchingAccounts","cacheKey","isAccountKey","matchHomeAccountId","matchLocalAccountId","matchUsername","matchEnvironment","matchRealm","matchNativeAccountId","includes","isCredentialKey","lowerCaseKey","clientIdValidation","familyIdValidation","matchClientId","userAssertionHash","matchUserAssertionHash","matchCredentialType","matchFamilyId","matchTarget","matchTokenType","SSH","matchKeyId","getAppMetadataFilteredBy","getAppMetadataFilteredByInternal","allCacheKeys","matchingAppMetadata","isAppMetadata","getAppMetadata","getAuthorityMetadataByAlias","host","getAuthorityMetadataKeys","matchedEntity","isAuthorityMetadata","getAuthorityMetadata","aliases","removeAllAccounts","removedAccounts","removeAccount","accountKey","removeAccountContext","allTokenKeys","removedCredentials","removeIdToken","removeRefreshToken","POP","removeAppMetadata","readCacheRecord","cachedAccount","readAccountFromCache","cachedIdToken","cachedAccessToken","getAccessToken","cachedRefreshToken","getRefreshToken","cachedAppMetadata","readAppMetadataFromCache","idTokenFilter","idTokens","getIdTokensByFilter","numIdTokens","idTokenKeys","idTokenKeyMatchesFilter","getIdTokenCredential","inputKey","authScheme","authenticationScheme","sshKid","accessTokenKeys","accessTokens","numAccessTokens","keyMustContainAllScopes","getAccessTokensByFilter","familyRT","refreshTokenFilter","refreshTokenKeys","refreshTokens","refreshTokenKeyMatchesFilter","getRefreshTokenCredential","appMetadataFilter","appMetadataEntries","numAppMetadata","isAppMetadataFOCI","cloudMetadata","generateAuthorityMetadataCacheKey","toObject","json","propertyName","DefaultStorageClass","setServerTelemetry","getServerTelemetry","setAuthorityMetadata","setThrottlingCache","getThrottlingCache","updateCredentialCacheKey","TimeUtils","nowSeconds","getTime","isTokenExpired","expiresOn","offset","expirationSec","Number","wasClockTurnedBack","cachedAt","delay","setTimeout","AccessTokenEntity","createAccessTokenEntity","extExpiresOn","cryptoUtils","refreshOn","requestedClaims","atEntity","extendedExpiresOn","tokenClaims","isAccessTokenEntity","RefreshTokenEntity","createRefreshTokenEntity","rtEntity","isRefreshTokenEntity","AppMetadataEntity","generateAppMetadataKey","generateAppMetadataCacheKey","createAppMetadataEntity","isAppMetadataEntity","ServerTelemetryEntity","failedRequests","errors","cacheHits","isServerTelemetryEntity","validateKey","validateEntity","AuthorityMetadataEntity","expiresAt","updateCloudDiscoveryMetadata","metadata","fromNetwork","preferred_cache","preferred_network","aliasesFromNetwork","updateEndpointMetadata","authorization_endpoint","token_endpoint","end_session_endpoint","issuer","endpointsFromNetwork","jwks_uri","updateCanonicalAuthority","canonical_authority","resetExpiresAt","isExpired","isAuthorityMetadataEntity","ThrottlingEntity","isThrottlingEntity","ProtocolUtils","setRequestState","userState","meta","libraryState","generateLibraryState","stateObj","stateString","parseRequestState","splitState","libraryStateString","libraryStateObj","userRequestState","ProtocolMode","AzureCloudInstance","BrowserStorage","cacheLocation","validateWindowStorage","windowStorage","LocalStorage","SessionStorage","UrlString","url","_urlString","getHash","canonicalizeUri","lowerCaseUrl","validateAsUri","components","getUrlComponents","HostNameAndPort","PathSegments","Protocol","appendQueryString","queryString","removeHashFromUrl","replaceTenantPath","urlObject","pathArray","COMMON","ORGANIZATIONS","constructAuthorityUriFromObject","parseHash","regEx","match","urlComponents","AbsolutePath","QueryString","pathSegments","getDomainFromUrl","getAbsoluteUrl","relativeUrl","baseUrl","baseComponents","hashIndex1","hashIndex2","parseQueryString","queryIndex1","queryIndex2","getDeserializedHash","parsedHash","deserializedHash","getDeserializedQueryString","parsedQueryString","deserializedQueryString","hashContainsKnownProperties","parameters","error_description","BrowserProtocolUtils","extractBrowserRequestState","parseServerResponseFromHash","locationHash","hashUrlString","BrowserCacheManager","cacheConfig","COOKIE_LIFE_MULTIPLIER","internalStorage","browserStorage","setupBrowserStorage","temporaryCacheStorage","setupTemporaryCacheStorage","temporaryCacheLocation","cacheMigrationEnabled","migrateCacheEntries","createKeyMaps","idTokenKey","clientInfoKey","CLIENT_INFO","errorKey","ERROR","errorDescKey","ERROR_DESC","index","migrateCacheEntry","newKey","setTemporaryCache","accountKeys","ACCOUNT_KEYS","TOKEN_KEYS","credObj","validateAndParseJson","addTokenKey","accessTokenEntity","refreshTokenEntity","accountObj","addAccountKeyToMap","jsonValue","parsedJson","removeAccountKeyFromMap","parsedAccount","removalIndex","splice","removeTokenKey","idRemoval","accessRemoval","refreshRemoval","parsedIdToken","accessTokenKey","parsedAccessToken","refreshTokenKey","parsedRefreshToken","appMetadataKey","parsedMetadata","serverTelemetryKey","serverTelemetry","setWrapperMetadata","wrapperSKU","wrapperVersion","WRAPPER_SKU","WRAPPER_VER","getWrapperMetadata","getActiveAccount","activeAccountKeyFilters","generateCacheKey","ACTIVE_ACCOUNT_FILTERS","activeAccountValueFilters","activeAccountKeyLocal","ACTIVE_ACCOUNT","activeAccountValueLocal","activeAccount","getAccountInfoByFilter","setActiveAccount","activeAccountValueObj","activeAccountKey","activeAccountValue","getAccountInfoByHints","loginHint","sid","accountSid","throttlingCacheKey","parsedThrottlingCache","throttlingCache","getTemporaryCache","storeAuthStateInCookie","itemCookie","getItemCookie","setItemCookie","clearItemCookie","clearTokensAndKeysWithClaims","cookieName","cookieValue","expires","cookieStr","getCookieExpirationTime","secureCookies","cookie","cookieList","clearMsalCookies","cookiePrefix","cookieKey","cookieLifeDays","today","getCache","setCache","ADAL_ID_TOKEN","generateAuthorityKey","stateId","AUTHORITY","generateNonceKey","NONCE_IDTOKEN","generateStateKey","REQUEST_STATE","getCachedAuthority","cachedState","stateCacheKey","authorityCacheKey","updateCacheEntries","authorityInstance","nonceCacheKey","ccsCredential","HOME_ACCOUNT_ID","CCS_CREDENTIAL","UPN","resetRequestCache","REQUEST_PARAMS","ORIGIN_URI","URL_HASH","CORRELATION_ID","NATIVE_REQUEST","setInteractionInProgress","cleanRequestByState","stateKey","cleanRequestByInteractionType","interactionType","stateValue","parsedState","cacheCodeRequest","authCodeRequest","encodedValue","getCachedRequest","encodedTokenRequest","parsedRequest","cachedAuthority","getCachedNativeRequest","cachedRequest","isInteractionInProgress","getInteractionInProgress","INTERACTION_STATUS_KEY","inProgress","getLegacyLoginHint","adalIdTokenString","msalIdTokenString","cachedIdTokenString","currentCacheKey","updatedCacheKey","cacheItem","getRedirectRequestContext","REDIRECT_CONTEXT","setRedirectRequestContext","DEFAULT_SYSTEM_OPTIONS","tokenRenewalOffsetSeconds","preventCorsPreflight","DEFAULT_LOGGER_IMPLEMENTATION","claimsBasedCachingEnabled","DEFAULT_NETWORK_IMPLEMENTATION","sendGetRequestAsync","sendPostRequestAsync","DEFAULT_LIBRARY_INFO","sku","cpu","os","DEFAULT_CLIENT_CREDENTIALS","clientSecret","clientAssertion","DEFAULT_AZURE_CLOUD_OPTIONS","azureCloudInstance","None","tenant","application","StubbedNetworkModule","FetchClient","response","fetch","GET","headers","getFetchHeaders","navigator","onLine","getHeaderDict","reqBody","POST","Headers","optionsHeaders","append","headerDict","XhrClient","sendRequestAsync","xhr","XMLHttpRequest","setXhrHeaders","onload","jsonResponse","responseText","networkResponse","onerror","send","headers_1","setRequestHeader","headerArr","getAllResponseHeaders","parts","headerName","shift","headerVal","BrowserUtils","clearHash","contentWindow","history","replaceState","origin","pathname","replaceHash","urlParts","isInIframe","parent","isInPopup","opener","getCurrentUri","getHomepage","getBrowserNetworkClient","blockReloadInHiddenIframes","blockRedirectInIframe","allowRedirectInIframe","isIframedApp","Redirect","blockAcquireTokenInPopups","blockNonBrowserEnvironment","isBrowserEnvironment","blockNativeBrokerCalledBeforeInitialized","allowNativeBroker","initialized","detectIEOrEdge","ua","userAgent","msie","msie11","msedge","NavigationClient","navigateInternal","defaultNavigateWindow","navigateExternal","noHistory","timeout","DEFAULT_IFRAME_TIMEOUT_MS","EventType","KeyLocation","EventHandler","eventCallbacks","listeningToStorageEvents","handleAccountCacheChange","addEventCallback","removeEventCallback","enableAccountStorageEvents","disableAccountStorageEvents","removeEventListener","emitEvent","eventType","message_1","cacheValue","newValue","oldValue","parsedValue","ACCOUNT_ADDED","ACCOUNT_REMOVED","ThrottlingUtils","generateThrottlingStorageKey","thumbprint","preProcess","cacheManager","throttleTime","errorCodes","postProcess","checkResponseStatus","checkResponseForRetryAfter","thumbprintValue","calculateThrottleTime","parseInt","RETRY_AFTER","error_codes","currentSeconds","min","removeThrottle","homeAccountIdentifier","shrClaims","NetworkManager","networkClient","sendPostRequest","tokenEndpoint","RequestValidator","validateRedirectUri","redirectUri","validatePrompt","prompt","promptValues","validateClaims","validateCodeChallengeParams","codeChallengeMethod","validateCodeChallengeMethod","sanitizeEQParams","eQParams","queryParams","fromEntries","entries","RequestParameterBuilder","addResponseTypeCode","RESPONSE_TYPE","addResponseTypeForTokenAndIdToken","addResponseMode","responseMode","RESPONSE_MODE","QUERY","addNativeBroker","NATIVE_BROKER","addScopes","addOidcScopes","requestScopes","SCOPE","addClientId","CLIENT_ID","addRedirectUri","REDIRECT_URI","addPostLogoutRedirectUri","POST_LOGOUT_URI","addIdTokenHint","idTokenHint","ID_TOKEN_HINT","addDomainHint","domainHint","DOMAIN_HINT","addLoginHint","LOGIN_HINT","addCcsUpn","CCS_HEADER","addCcsOid","addSid","SID","addClaims","clientCapabilities","mergedClaims","addClientCapabilitiesToClaims","addCorrelationId","CLIENT_REQUEST_ID","addLibraryInfo","libraryInfo","X_CLIENT_SKU","X_CLIENT_VER","X_CLIENT_OS","X_CLIENT_CPU","addApplicationTelemetry","appTelemetry","X_APP_NAME","X_APP_VER","addPrompt","PROMPT","addState","STATE","addNonce","NONCE","addCodeChallengeParams","CODE_CHALLENGE","CODE_CHALLENGE_METHOD","addAuthorizationCode","CODE","addDeviceCode","DEVICE_CODE","addRefreshToken","addCodeVerifier","CODE_VERIFIER","addClientSecret","CLIENT_SECRET","addClientAssertion","CLIENT_ASSERTION","addClientAssertionType","clientAssertionType","CLIENT_ASSERTION_TYPE","addOboAssertion","oboAssertion","OBO_ASSERTION","addRequestTokenUse","tokenUse","REQUESTED_TOKEN_USE","addGrantType","grantType","GRANT_TYPE","addClientInfo","addExtraQueryParameters","sanitizedEQParams","XMS_CC","addUsername","addPassword","password","addPopToken","cnfString","TOKEN_TYPE","REQ_CNF","addSshJwk","sshJwkString","addServerTelemetry","serverTelemetryManager","X_CLIENT_CURR_TELEM","generateCurrentRequestHeaderValue","X_CLIENT_LAST_TELEM","generateLastRequestHeaderValue","addThrottling","X_MS_LIB_CAPABILITY","addLogoutHint","logoutHint","LOGOUT_HINT","createQueryString","queryParameterArray","BaseClient","configuration","config","buildClientConfiguration","authOptions","userAuthOptions","userSystemOptions","systemOptions","userLoggerOption","userCacheOptions","cacheOptions","storageImplementation","storageInterface","networkImplementation","networkInterface","cryptoImplementation","cryptoInterface","clientCredentials","telemetry","persistencePlugin","serializableCache","azureCloudOptions","skipAuthorityMetadataCache","networkManager","createTokenRequestHeaders","ccsCred","CONTENT_TYPE","executePostToTokenEndpoint","clearTelemetryCache","updateAuthority","updatedAuthority","discoveryComplete","createTokenQueryParameters","parameterBuilder","tokenQueryParameters","CacheRecord","appMetadataEntity","PopTokenGenerator","generateCnf","reqCnf","reqCnfString","PopTokenGenerateCnf","PopTokenGenerateKid","generateKid","reqCnfHash","xms_ksl","SW","signPopToken","signPayload","shrNonce","resourceUrlString","resourceUrlComponents","at","ts","toUpperCase","u","q","client_claims","TokenCacheContext","tokenCache","hasChanged","ResponseHandler","cacheStorage","validateServerAuthorizationCodeResponse","serverResponseHash","trace_id","correlation_id","client_info","validateTokenResponse","serverResponse","errString","handleServerTokenResponse","serverTokenResponse","reqTimestamp","authCodePayload","handlingRefreshTokenResponse","forceCacheRefreshTokenResponse","serverRequestId","idTokenObj","requestStateObj","cacheContext","HandleServerTokenResponse","id_token","auth_time","key_id","generateCacheRecord","beforeCacheAccess","generateAuthenticationResult","afterCacheAccess","generateAccountEntity","access_token","responseScopes","expiresIn","expires_in","extExpiresIn","ext_expires_in","refreshIn","refresh_in","tokenExpirationSeconds","extendedTokenExpirationSeconds","refreshOnSeconds","token_type","refresh_token","foci","cloud_graph_host_name","msGraphhost","msgraph_host","protocolMode","fromTokenCache","requestState","requestId","popTokenGenerator","spa_accountid","canonicalAuthority","uniqueId","fromCache","spa_code","fromNativeBroker","AuthorizationCodeClient","includeRedirectUri","getAuthCodeUrl","GetAuthCodeUrl","AuthClientCreateQueryString","createAuthCodeUrlQueryString","authorizationEndpoint","acquireToken","atsMeasurement","httpVerAuthority","responseHandler","_g","AuthClientAcquireToken","AuthClientExecuteTokenRequest","executeTokenRequest","X_MS_REQUEST_ID","X_MS_HTTP_VERSION","subErrorCode","handleFragmentResponse","hashFragment","serverParams","getLogoutUri","logoutRequest","createLogoutUrlQueryString","endSessionEndpoint","queryParametersString","requestBody","AuthClientCreateTokenRequestBody","createTokenRequestBody","reqCnfData","assertion","assertionType","AUTHORIZATION_CODE_GRANT","sshJwk","tokenBodyParameters","enableSpaAuthorizationCode","RETURN_SPA_CODE","accountLoginHintClaim","extraScopesToConsent","extractAccountSid","extractLoginHint","extraQueryParameters","nativeBroker","postLogoutRedirectUri","login_hint","isOpenIdConfigResponse","EndpointMetadata","InstanceDiscoveryMetadata","NativeStatusCode","RegionDiscovery","detectRegion","environmentRegion","regionDiscoveryMetadata","autodetectedRegionName","localIMDSVersionResponse","currentIMDSVersion","currentIMDSVersionResponse","RegionDiscoveryDetectRegion","IMDS_OPTIONS","RegionDiscoveryGetRegionFromIMDS","getRegionFromIMDS","httpSuccess","region_source","IMDS","httpBadRequest","RegionDiscoveryGetCurrentVersion","getCurrentVersion","FAILED_AUTO_DETECTION","ENVIRONMENT_VARIABLE","Metadata","Authority","authorityOptions","_canonicalAuthority","region_used","region_outcome","regionDiscovery","getAuthorityType","authorityUri","Ciam","Default","canonicalAuthorityUrlComponents","_canonicalAuthorityUrlComponents","replacePath","canReplaceTenant","reservedTenantDomains","AAD","replaceTenant","cachedAuthorityUrlComponents","cachedAuthorityParts","currentPart","cachedPart","OIDC","resolveEndpointsAsync","metadataEntity","cloudDiscoverySource","endpointSource","AuthorityResolveEndpointsAsync","hostnameAndPort","AuthorityUpdateCloudDiscoveryMetadata","AuthorityUpdateEndpointMetadata","CACHE","harcodedMetadata","getEndpointMetadataFromConfig","CONFIG","isAuthoritySameType","AuthorityGetEndpointMetadataFromNetwork","getEndpointMetadataFromNetwork","azureRegionConfiguration","azureRegion","AuthorityUpdateMetadataWithRegionalInformation","updateMetadataWithRegionalInformation","NETWORK","getEndpointMetadataFromHardcodedValues","HARDCODED_VALUES","defaultOpenIdConfigurationEndpoint","authorityMetadata","userConfiguredAzureRegion","CONFIGURED_NO_AUTO_DETECTION","replaceWithRegionalInformation","AUTO_DETECTION_REQUESTED_SUCCESSFUL","AUTO_DETECTION_REQUESTED_FAILED","metadataEntityExpired","knownAuthorities","getCloudDiscoveryMetadataFromConfig","AuthorityGetCloudDiscoveryMetadataFromNetwork","getCloudDiscoveryMetadataFromNetwork","getCloudDiscoveryMetadataFromHarcodedValues","createCloudDiscoveryMetadataFromHost","cloudDiscoveryMetadata","parsedResponse","getCloudDiscoveryMetadataFromNetworkResponse","isInKnownAuthorities","instanceDiscoveryEndpoint","typedResponseBody","error_1","typedError","isCloudInstanceDiscoveryResponse","tenant_discovery_endpoint","isCloudInstanceDiscoveryErrorResponse","generateAuthority","authorityString","authorityAzureCloudInstance","isAlias","isPublicCloudAuthority","buildRegionalAuthorityString","region","authorityUrlInstance","authorityUrlParts","hostNameAndPort","transformCIAMAuthority","ciamAuthority","authorityUrlComponents","CONSUMERS","AuthorityFactory","createDiscoveredInstance","authorityUriFinal","acquireTokenAuthority","AuthorityFactoryCreateDiscoveredInstance","createInstance","authorityUrl","ServerTelemetryManager","telemetryRequest","cacheOutcome","NO_CACHE_HIT","apiId","wrapperVer","telemetryCacheKey","platformFields","requestWithRegionDiscoveryFields","getRegionDiscoveryFields","lastRequests","getLastRequests","maxErrors","maxErrorsToSend","errorCount","cacheFailedRequest","incrementCacheHits","initialValue","numErrorsFlushed","serverTelemEntity","serverTelemetryEntity","dataSize","regionDiscoveryFields","regionUsed","regionSource","regionOutcome","updateRegionDiscoveryMetadata","setCacheOutcome","BaseInteractionClient","storageImpl","eventHandler","navigationClient","nativeMessageHandler","system","clearCacheOnLogout","initializeBaseRequest","validatedRequest","InitializeBaseRequest","auth","validateRequestAuthority","getRedirectUri","requestRedirectUri","getDiscoveredAuthority","initializeServerTelemetryManager","forceRefresh","telemetryPayload","requestAuthority","StandardInteractionClient","initializeAuthorizationCodeRequest","generatedPkceParams","StandardInteractionClientInitializeAuthorizationCodeRequest","initializeLogoutRequest","validLogoutRequest","getLogoutHintFromIdTokenClaims","createAuthCodeClient","requestAzureCloudOptions","clientConfig","StandardInteractionClientCreateAuthCodeClient","StandardInteractionClientGetClientConfiguration","getClientConfiguration","discoveredAuthority","StandardInteractionClientGetDiscoveredAuthority","validateAndExtractStateFromHash","requestCorrelationId","platformStateObj","getAuthorityMeasurement","userAuthority","builtAuthority","initializeAuthorizationRequest","browserState","legacyLoginHint","StandardInteractionClientInitializeAuthorizationRequest","FRAGMENT","NativeAuthErrorMessage","NativeAuthError","description","ext","isFatal","PERSISTENT_ERROR","DISABLED","createError","ACCOUNT_UNAVAILABLE","USER_INTERACTION_REQUIRED","USER_CANCEL","NO_NETWORK","createUserSwitchError","createTokensNotFoundInCacheError","RefreshTokenClient","httpVerToken","_h","RefreshTokenClientAcquireToken","RefreshTokenClientExecuteTokenRequest","refreshTokenSize","forceCache","acquireTokenByRefreshToken","noFamilyRTInCache","clientMismatchErrorWithFamilyRT","RefreshTokenClientAcquireTokenByRefreshToken","RefreshTokenClientAcquireTokenWithCachedRefreshToken","acquireTokenWithCachedRefreshToken","refreshTokenRequest","acquireTokenMeasurement","RefreshTokenClientCreateTokenRequestBody","BaseClientCreateTokenRequestHeaders","REFRESH_TOKEN_GRANT","SilentFlowClient","acquireCachedToken","FORCE_REFRESH","CLAIMS_REQUESTED_CACHE_SKIPPED","NO_CACHED_ACCESS_TOKEN","CACHED_ACCESS_TOKEN_EXPIRED","REFRESH_CACHED_ACCESS_TOKEN","generateResultFromCacheRecord","SilentCacheClient","silentRequest","silentAuthClient","cachedToken","SilentCacheClientAcquireToken","acquireTokenSilent_silentFlow","createSilentFlowClient","logout","initializeSilentRequest","InitializeSilentRequest","NativeInteractionClient","provider","nativeStorageImpl","nativeStorageManager","silentCacheClient","nativeATMeasurement","nativeRequest","messageBody","validatedResponse","NativeInteractionClientAcquireToken","initializeNativeRequest","acquireTokensFromCache","isNativeBroker","GetToken","sendMessage","validateNativeResponse","handleNativeResponse","createSilentCacheRequest","acquireTokenRedirect","navigationOptions","redirectNavigationTimeout","navigateToLoginRequestUrl","handleRedirectPromise","authorityPreferredCache","createIdTokenObj","createHomeAccountIdentifier","createAccountEntity","cacheAccount","cacheNativeTokens","generateScopes","generatePopAccessToken","shrParameters","shr","mats","accountProperties","responseAccessToken","addTelemetryFromNativeResponse","properties","isResponseFromCache","nativeCacheRecord","getMATSFromResponse","extensionId","getExtensionId","extensionVersion","getExtensionVersion","matsBrokerVersion","broker_version","matsAccountJoinOnStart","account_join_on_start","matsAccountJoinOnEnd","account_join_on_end","matsDeviceJoin","device_join","matsPromptBehavior","prompt_behavior","matsApiErrorCode","api_error_code","matsUiVisible","ui_visible","matsSilentCode","silent_code","matsSilentBiSubCode","silent_bi_sub_code","matsSilentMessage","silent_message","matsSilentStatus","silent_status","matsHttpStatus","http_status","matsHttpEventCount","http_event_count","MATS","is_cached","remainingProperties","getPrompt","ssoSilent","windowTitleSubstring","title","extraParameters","extendedExpiryToken","NativeMessageHandler","handshakeTimeoutMs","resolvers","handshakeResolvers","responseId","messageChannel","MessageChannel","windowListener","onWindowMessage","handshakeEvent","NativeMessageHandlerHandshake","req","channel","port1","postMessage","createProvider","preferredProvider","backupProvider","sendHandshakeRequest","HandshakeRequest","extensionHandshakeTimeoutMs","onmessage","onChannelMessage","port2","timeoutId","extensionHandshakeTimedOut","source","clearTimeout","handshakeResolver","extensionInstalled","resolver","Response","HandshakeResponse","isNativeAvailable","nativeExtensionProvider","InteractionHandler","authCodeModule","authModule","handleCodeResponseFromHash","networkModule","authCodeResponse","HandleCodeResponseFromHash","HandleCodeResponseFromServer","handleCodeResponseFromServer","validateNonce","nonceKey","cachedNonce","cachedCcsCred","tokenResponse","cloud_instance_host_name","UpdateTokenEndpointAuthority","updateTokenEndpointAuthority","checkCcsCredentials","cloudInstanceHostname","cloudInstanceAuthorityUri","cloudInstanceAuthority","PopupClient","unloadWindow","nativeStorage","popupName","generatePopupName","popupWindowAttributes","asyncPopups","acquireTokenPopupAsync","popup","openSizedPopup","generateLogoutPopupName","mainWindowRedirectUri","logoutPopupAsync","validRequest","authClient","fetchNativeAccountIdMeasurement","navigateUrl","interactionHandler","popupParameters","popupWindow","state_1","nativeInteractionClient","acquireTokenPopup","Popup","FetchAccountIdWithNativeBroker","initiateAuthRequest","POPUP_OPENED","monitorPopupForHash","logoutUri","absoluteUrl","LOGOUT_START","logoutPopup","LOGOUT_SUCCESS","openPopup","waitForLogoutPopup","LOGOUT_FAILURE","LOGOUT_END","requestUrl","maxTicks","windowHashTimeout","pollIntervalMilliseconds","ticks","intervalId","setInterval","closed","cleanPopup","clearInterval","urlNavigate","popupParams","focus","currentWindow","winLeft","screenLeft","screenX","winTop","screenTop","screenY","winWidth","innerWidth","documentElement","clientWidth","winHeight","innerHeight","clientHeight","width","popupSize","top","popupPosition","left","max","preventDefault","RedirectHandler","redirectStartPage","redirectTimeout","onRedirectNavigate","RedirectClient","handleBackButton","persisted","RESTORE_FROM_BFCACHE","getRedirectStartPage","responseHash","loginRequestUrl","loginRequestUrlNormalized","currentUrlNormalized","handleHashResult","processHashOnRedirect","homepage","getRedirectResponseHash","handleHash","cachedHash","currentAuthority","requestStartPage","SilentHandler","navigateFrameWait","SilentHandlerInitiateAuthRequest","SilentHandlerLoadFrame","loadFrame","loadFrameSync","monitorIframeForHash","iframe","SilentHandlerMonitorIframeForHash","timeoutMark","performance","removeHiddenIframe","contentHash","frameHandle","createHiddenIframe","src","authFrame","createElement","style","visibility","position","border","setAttribute","getElementsByTagName","appendChild","removeChild","SilentIframeClient","SilentIframeClientAcquireToken","Silent","SilentIframeClientTokenHelper","silentTokenHelper","silentHandler","msalFrame","iframeHashTimeout","SilentRefreshClient","refreshTokenClient","SilentRefreshClientAcquireToken","createRefreshTokenClient","TokenCache","storage","loadExternalTokens","cacheRecordAccount","loadAccount","loadIdToken","loadAccessToken","loadRefreshToken","requestHomeAccountId","HybridSpaAuthorizationCodeClient","SilentAuthCodeClient","cloudInstanceHostName","BrowserPerformanceMeasurement","makeMeasureName","startMark","makeStartMark","endMark","makeEndMark","supportsBrowserPerformance","measure","clearMarks","clearMeasures","getEntriesByName","flushMeasurements","measurements","entriesForMeasurement","duration","BrowserPerformanceClient","getPageVisibility","visibilityState","deleteIncompleteSubMeasurements","isRootEvent","incompleteMeasurements","supportsBrowserPerformanceNow","startPageVisibility","res","endPageVisibility","resQueueTime","PublicClientApplication","astsAsyncMeasurement","activeSilentTokenRequests","trackPageVisibility","loginRedirect","getRequestCorrelationId","loginPopup","acquireTokenSilent","silentRequestKey","cachedResponse","AcquireTokenSilent","cacheLookupPolicy","preflightBrowserEnvironmentCheck","AcquireTokenSilentAsync","acquireTokenSilentAsync","accessTokenSize","idTokenSize","visibilityChangeCount","silentRequest_1","requestWithCLP_1","ACQUIRE_TOKEN_START","acquireTokenNative","createSilentIframeClient","createSilentCacheClient","AcquireTokenFromCache","acquireTokenFromCache","cacheError","AccessToken","ACQUIRE_TOKEN_NETWORK_START","AcquireTokenByRefreshToken","refreshTokenError","isServerError","rtNotFound","isInvalidGrantError","AccessTokenAndRefreshToken","RefreshToken","Skip","AcquireTokenBySilentIframe","acquireTokenBySilentIframe","ACQUIRE_TOKEN_SUCCESS","tokenRenewalError","ACQUIRE_TOKEN_FAILURE","ClientApplication","buildConfiguration","userInputAuth","userInputCache","userInputSystem","userInputTelemetry","DEFAULT_AUTH_OPTIONS","DEFAULT_CACHE_OPTIONS","DEFAULT_LOGGER_OPTIONS","DEFAULT_BROWSER_SYSTEM_OPTIONS","loadFrameTimeout","nativeBrokerHandshakeTimeout","providedSystemOptions","DEFAULT_TELEMETRY_OPTIONS","redirectResponse","hybridAuthCodeResponses","nativeCacheOptions","nativeInternalStorage","trackPageVisibilityWithMeasurement","initialize","initMeasurement","claimsTokensRemovalMeasurement","InitializeClientApplication","INITIALIZE_START","ClearTokensAndKeysWithClaims","INITIALIZE_END","loggedInAccounts","redirectResponseKey","nativeClient","redirectClient","HANDLE_REDIRECT_START","createRedirectClient","LOGIN_SUCCESS","HANDLE_REDIRECT_END","LOGIN_FAILURE","isLoggedIn","LOGIN_START","canUseNative","getNativeAccountId","atPopupMeasurement","AcquireTokenPopup","createPopupClient","ssoSilentMeasurement","acquireTokenByCodeAsyncMeasurement","silentIframeClient","SsoSilent","SSO_SILENT_START","SSO_SILENT_SUCCESS","SSO_SILENT_FAILURE","acquireTokenByCode","atbcMeasurement","hybridAuthCode_1","ACQUIRE_TOKEN_BY_CODE_START","AcquireTokenByCode","acquireTokenByCodeAsync","ACQUIRE_TOKEN_BY_CODE_SUCCESS","ACQUIRE_TOKEN_BY_CODE_FAILURE","AcquireTokenByCodeAsync","createSilentAuthCodeClient","commonRequest","silentRefreshClient","RefreshTokenAndNetwork","createSilentRefreshClient","logoutRedirect","getAccountByUsername","getAccountByHomeId","getAccountByLocalId","preflightInteractiveRequest","getTokenCache","getLogger","setLogger","initializeWrapperLibrary","setNavigationClient","getConfiguration","IS_LOGIN_NOT_REQUIRED","msalInstance","loginRequest","guestUserName","getMsalInstance","getAuthUser","profile","Sentry","getAuthToken","exp","fetchWithAuthHeader","optionsWithToken","Authorization","DEFAULT_BREADCRUMBS","Hub","client","_version","_stack","bindClient","isOlderThan","getStackTop","setupIntegrations","pushScope","getScope","getStack","getClient","popScope","withScope","captureException","hint","_lastEventId","event_id","syntheticException","_withClient","originalException","captureMessage","captureEvent","lastEventId","addBreadcrumb","breadcrumb","beforeBreadcrumb","maxBreadcrumbs","getOptions","mergedBreadcrumb","finalBreadcrumb","emit","setUser","user","setTags","tags","setExtras","extras","setTag","setExtra","extra","setContext","configureScope","run","oldHub","makeMain","getIntegration","integration","__SENTRY_DEBUG__","warn","startTransaction","customSamplingContext","_callExtensionMethod","console","traceHeaders","captureSession","endSession","_sendSessionUpdate","session","getSession","setSession","startSession","release","getUser","currentSession","shouldSendDefaultPii","Boolean","sendDefaultPii","sentry","getMainCarrier","__SENTRY__","extensions","hub","registry","getHubFromCarrier","setHubOnCarrier","getCurrentHub","acs","getGlobalHub","hasHubOnCarrier","carrier","CONSOLE_LEVELS","originalConsoleMethods","consoleSandbox","wrappedFuncs","wrappedLevels","originalConsoleMethod","makeLogger","enabled","enable","disable","objectToString","isError","wat","isInstanceOf","isBuiltin","isErrorEvent","isDOMError","isDOMException","isString","isPrimitive","isPlainObject","isEvent","Event","isElement","Element","isRegExp","isThenable","isSyntheticEvent","base","isGlobalObj","GLOBAL_OBJ","global","getGlobalObject","getGlobalSingleton","creator","gbl","fill","replacementFactory","original","wrapped","markFunctionWrapped","_Oo","addNonEnumerableProperty","proto","getOriginalFunction","func","__sentry_original__","convertToPlainObject","stack","getOwnProperties","newObj","serializeEventTarget","currentTarget","CustomEvent","detail","extractedProps","extractExceptionKeysForMessage","maxLength","includedKeys","serialized","dropUndefinedKeys","inputValue","_dropUndefinedKeys","memoizationMap","memoVal","returnValue","uuid4","msCrypto","randomUUID","getRandomByte","getFirstException","getEventDescription","firstException","addExceptionTypeValue","addExceptionMechanism","newMechanism","currentMechanism","mechanism","handled","mergedData","checkOrSetAlreadyCaught","__sentry_captured__","arrayify","maybeArray","localVersion","sleep","ms","initializeMsal","checkVersion","redirect","ok","versionObj","releaseVersion","confirm","reload","stopChecking","checkAuthentication","cachedSetTimeout","cachedClearTimeout","defaultSetTimout","defaultClearTimeout","runTimeout","fun","currentQueue","queue","draining","queueIndex","cleanUpNextTick","drainQueue","runClearTimeout","marker","Item","noop","nextTick","browser","argv","versions","on","addListener","once","off","removeListener","removeAllListeners","prependListener","prependOnceListener","listeners","binding","cwd","chdir","dir","umask","captureContext","truncate","snipLine","line","colno","newLine","lineLength","start","end","safeJoin","delimiter","output","stringMatchesSomePattern","testString","patterns","requireExactStringMatch","isMatchingPattern","makeSession","startingTime","init","started","ignoreDuration","toJSON","sessionToJSON","toISOString","did","attrs","ip_address","ipAddress","user_agent","updateSession","closeSession","dateTimestampSource","platformPerformance","getNodePerformance","getBrowserPerformance","timeOrigin","timestampSource","dateTimestampInSeconds","timestampInSeconds","_browserPerformanceTimeOriginMode","browserPerformanceTimeOrigin","threshold","performanceNow","dateNow","timeOriginDelta","abs","timeOriginIsReliable","navigationStart","timing","navigationStartDelta","Scope","_notifyingListeners","_scopeListeners","_eventProcessors","_breadcrumbs","_attachments","_user","_tags","_extra","_contexts","_sdkProcessingMetadata","_propagationContext","generatePropagationContext","static","_level","_span","_session","_transactionName","_fingerprint","_requestSession","addScopeListener","addEventProcessor","_notifyScopeListeners","getRequestSession","setRequestSession","requestSession","setFingerprint","fingerprint","setLevel","setTransactionName","setSpan","span","getSpan","getTransaction","update","updatedScope","contexts","propagationContext","maxCrumbs","getLastBreadcrumb","clearBreadcrumbs","addAttachment","attachment","getAttachments","clearAttachments","applyToEvent","getTraceContext","sdkProcessingMetadata","dynamicSamplingContext","getDynamicSamplingContext","transactionName","_applyFingerprint","breadcrumbs","_notifyEventProcessors","getGlobalEventProcessors","setSDKProcessingMetadata","newData","setPropagationContext","getPropagationContext","processors","processor","final","addGlobalEventProcessor","spanId"],"mappings":";whBACE,IAAIA,EAAmB,GAGvB,SAASC,oBAAoBC,GAG5B,GAAGF,EAAiBE,GACnB,OAAOF,EAAiBE,GAAUC,QAGnC,IAAIC,EAASJ,EAAiBE,GAAY,CACzCG,EAAGH,EACHI,GAAG,EACHH,QAAS,IAUV,OANAI,EAAQL,GAAUM,KAAKJ,EAAOD,QAASC,EAAQA,EAAOD,QAASF,qBAG/DG,EAAOE,GAAI,EAGJF,EAAOD,QAKfF,oBAAoBQ,EAAIF,EAGxBN,oBAAoBS,EAAIV,EAGxBC,oBAAoBU,EAAI,SAASR,EAASS,EAAMC,GAC3CZ,oBAAoBa,EAAEX,EAASS,IAClCG,OAAOC,eAAeb,EAASS,EAAM,CAAEK,YAAY,EAAMC,IAAKL,KAKhEZ,oBAAoBkB,EAAI,SAAShB,GACX,oBAAXiB,QAA0BA,OAAOC,aAC1CN,OAAOC,eAAeb,EAASiB,OAAOC,YAAa,CAAEC,MAAO,WAE7DP,OAAOC,eAAeb,EAAS,aAAc,CAAEmB,OAAO,KAQvDrB,oBAAoBsB,EAAI,SAASD,EAAOE,GAEvC,GADU,EAAPA,IAAUF,EAAQrB,oBAAoBqB,IAC/B,EAAPE,EAAU,OAAOF,EACpB,GAAW,EAAPE,GAA8B,iBAAVF,GAAsBA,GAASA,EAAMG,WAAY,OAAOH,EAChF,IAAII,EAAKX,OAAOY,OAAO,MAGvB,GAFA1B,oBAAoBkB,EAAEO,GACtBX,OAAOC,eAAeU,EAAI,UAAW,CAAET,YAAY,EAAMK,MAAOA,IACtD,EAAPE,GAA4B,iBAATF,EAAmB,IAAI,IAAIM,KAAON,EAAOrB,oBAAoBU,EAAEe,EAAIE,EAAK,SAASA,GAAO,OAAON,EAAMM,IAAQC,KAAK,KAAMD,IAC9I,OAAOF,GAIRzB,oBAAoB6B,EAAI,SAAS1B,GAChC,IAAIS,EAAST,GAAUA,EAAOqB,WAC7B,SAASM,aAAe,OAAO3B,EAAgB,SAC/C,SAAS4B,mBAAqB,OAAO5B,GAEtC,OADAH,oBAAoBU,EAAEE,EAAQ,IAAKA,GAC5BA,GAIRZ,oBAAoBa,EAAI,SAASmB,EAAQC,GAAY,OAAOnB,OAAOoB,UAAUC,eAAe5B,KAAKyB,EAAQC,IAGzGjC,oBAAoBoC,EAAI,IAIjBpC,oBAAoBA,oBAAoBqC,EAAI,K,mCClFrD,wCAAMC,EAAsB,c,kBCA5BnC,EAAOD,QAAU,SAASqC,GACzB,IAAKA,EAAeC,gBAAiB,CACpC,IAAIrC,EAASW,OAAOY,OAAOa,GAEtBpC,EAAOsC,WAAUtC,EAAOsC,SAAW,IACxC3B,OAAOC,eAAeZ,EAAQ,SAAU,CACvCa,YAAY,EACZC,IAAK,WACJ,OAAOd,EAAOE,KAGhBS,OAAOC,eAAeZ,EAAQ,KAAM,CACnCa,YAAY,EACZC,IAAK,WACJ,OAAOd,EAAOC,KAGhBU,OAAOC,eAAeZ,EAAQ,UAAW,CACxCa,YAAY,IAEbb,EAAOqC,gBAAkB,EAE1B,OAAOrC,I,mBCtBRA,EAAOD,QAAU,EAAQ,M,kCCAzB,oHAYA,SAASwC,YAGP,OACG,eACgF,qBAAjF5B,OAAOoB,UAAUS,SAASpC,UAAwB,IAAZqC,EAA0BA,EAAU,GAU9E,SAASC,eAAeC,EAAKC,GAE3B,OAAOD,EAAIE,QAAQD,M,6DC7BrB,wJAKIE,EALJ,QAsBA,SAASC,oBAAoB7B,GAC3B,OAAO,IAAI8B,aAAYC,IACrBA,EAAQ/B,MAUZ,SAASgC,oBAAoBC,GAC3B,OAAO,IAAIH,aAAY,CAACI,EAAGC,KACzBA,EAAOF,OA/BC,SAAWL,GAEFA,EAAOA,EAAgB,QAA1B,GAAyC,UAErCA,EAAOA,EAAiB,SAA3B,GAA2C,WAExCA,EAAOA,EAAiB,SAA3B,GAA2C,WANlD,CAOTA,IAAWA,EAAS,KAgCvB,MAAME,YAEHM,YACCC,GACCP,YAAYjB,UAAUyB,OAAOpD,KAAKqD,MAAMT,YAAYjB,UAAU2B,QAAQtD,KAAKqD,MAAMT,YAAYjB,UAAU4B,QAAQvD,KAAKqD,MAAMT,YAAYjB,UAAU6B,QAAQxD,KAAKqD,MAC9JA,KAAKI,OAASf,EAAOgB,QACrBL,KAAKM,UAAY,GAEjB,IACER,EAASE,KAAKO,SAAUP,KAAKQ,SAC7B,MAAOC,GACPT,KAAKQ,QAAQC,IAKhBC,KACCC,EACAC,GAEA,OAAO,IAAIrB,aAAY,CAACC,EAASI,KAC/BI,KAAKM,UAAUO,KAAK,EAClB,EACAC,IACE,GAAKH,EAKH,IACEnB,EAAQmB,EAAYG,IACpB,MAAOL,GACPb,EAAOa,QALTjB,EAAQsB,IASZpB,IACE,GAAKkB,EAGH,IACEpB,EAAQoB,EAAWlB,IACnB,MAAOe,GACPb,EAAOa,QALTb,EAAOF,MAUbM,KAAKe,sBAKRC,MACCJ,GAEA,OAAOZ,KAAKU,MAAKO,GAAOA,GAAKL,GAI9BM,QAAQC,GACP,OAAO,IAAI5B,aAAY,CAACC,EAASI,KAC/B,IAAIqB,EACAG,EAEJ,OAAOpB,KAAKU,MACVjD,IACE2D,GAAa,EACbH,EAAMxD,EACF0D,GACFA,OAGJzB,IACE0B,GAAa,EACbH,EAAMvB,EACFyB,GACFA,OAGJT,MAAK,KACDU,EACFxB,EAAOqB,GAITzB,EAAQyB,SAMZlB,SAAUC,KAAKO,SAAY9C,IAC3BuC,KAAKqB,WAAWhC,EAAOiC,SAAU7D,IAIjCwC,UAAWD,KAAKQ,QAAWd,IAC3BM,KAAKqB,WAAWhC,EAAOkC,SAAU7B,IAIjCQ,UAAWF,KAAKqB,WAAa,CAACG,EAAO/D,KACjCuC,KAAKI,SAAWf,EAAOgB,UAIvB,YAAW5C,GACR,EAASiD,KAAKV,KAAKO,SAAUP,KAAKQ,UAIzCR,KAAKI,OAASoB,EACdxB,KAAKyB,OAAShE,EAEduC,KAAKe,sBAILZ,UAAWH,KAAKe,iBAAmB,KACnC,GAAIf,KAAKI,SAAWf,EAAOgB,QACzB,OAGF,MAAMqB,EAAiB1B,KAAKM,UAAUqB,QACtC3B,KAAKM,UAAY,GAEjBoB,EAAeE,SAAQC,IACjBA,EAAQ,KAIR7B,KAAKI,SAAWf,EAAOiC,UAEzBO,EAAQ,GAAG7B,KAAKyB,QAGdzB,KAAKI,SAAWf,EAAOkC,UACzBM,EAAQ,GAAG7B,KAAKyB,QAGlBI,EAAQ,IAAK,U,iCCzLnB,mKAIA,MAAMC,EAAS,cAUf,SAASC,iBACPC,EACAC,EAAU,IAOV,IACE,IAAIC,EAAcF,EAClB,MAAMG,EAAsB,EACtBC,EAAM,GACZ,IAAIC,EAAS,EACTC,EAAM,EACV,MAAMC,EAAY,MACZC,EAAYD,EAAUE,OAC5B,IAAIC,EACJ,MAAMC,EAAWC,MAAMC,QAAQZ,GAAWA,EAAUA,EAAQU,SACtDG,GAAoBF,MAAMC,QAAQZ,IAAYA,EAAQa,iBA3B9B,GA6B9B,KAAOZ,GAAeG,IAAWF,IAC/BO,EAAUK,qBAAqBb,EAAaS,KAK5B,SAAZD,GAAuBL,EAAS,GAAKC,EAAMF,EAAIK,OAASD,EAAYE,EAAQD,QAAUK,KAI1FV,EAAIvB,KAAK6B,GAETJ,GAAOI,EAAQD,OACfP,EAAcA,EAAYc,WAG5B,OAAOZ,EAAIa,UAAUC,KAAKX,GAC1B,MAAOY,GACP,MAAO,aASX,SAASJ,qBAAqBK,EAAIT,GAChC,MAAMX,EAAOoB,EAIPhB,EAAM,GACZ,IAAIiB,EACAC,EACAvF,EACAwF,EACA/G,EAEJ,IAAKwF,IAASA,EAAKwB,QACjB,MAAO,GAGTpB,EAAIvB,KAAKmB,EAAKwB,QAAQC,eAGtB,MAAMC,EACJf,GAAYA,EAASF,OACjBE,EAASgB,QAAOC,GAAW5B,EAAK6B,aAAaD,KAAUE,KAAIF,GAAW,CAACA,EAAS5B,EAAK6B,aAAaD,MAClG,KAEN,GAAIF,GAAgBA,EAAajB,OAC/BiB,EAAa9B,SAAQmC,IACnB3B,EAAIvB,KAAK,IAAIkD,EAAY,OAAOA,EAAY,gBAS9C,GANI/B,EAAKgC,IACP5B,EAAIvB,KAAK,IAAImB,EAAKgC,MAIpBX,EAAYrB,EAAKqB,UACbA,GAAa,YAASA,GAExB,IADAC,EAAUD,EAAUY,MAAM,OACrBzH,EAAI,EAAGA,EAAI8G,EAAQb,OAAQjG,IAC9B4F,EAAIvB,KAAK,IAAIyC,EAAQ9G,MAI3B,MAAM0H,EAAe,CAAC,aAAc,OAAQ,OAAQ,QAAS,OAC7D,IAAK1H,EAAI,EAAGA,EAAI0H,EAAazB,OAAQjG,IACnCuB,EAAMmG,EAAa1H,GACnB+G,EAAOvB,EAAK6B,aAAa9F,GACrBwF,GACFnB,EAAIvB,KAAK,IAAI9C,MAAQwF,OAGzB,OAAOnB,EAAIc,KAAK,IAMlB,SAASiB,kBACP,IACE,OAAOrC,EAAOsC,SAASC,SAASC,KAChC,MAAOC,GACP,MAAO,IAqBX,SAASC,cAAcC,GACrB,OAAI3C,EAAOsC,UAAYtC,EAAOsC,SAASM,cAC9B5C,EAAOsC,SAASM,cAAcD,GAEhC,O,gBCpITlI,EAAOD,QAfP,SAASqI,gBAAgBC,EAAK7G,EAAKN,GAYjC,OAXIM,KAAO6G,EACT1H,OAAOC,eAAeyH,EAAK7G,EAAK,CAC9BN,MAAOA,EACPL,YAAY,EACZyH,cAAc,EACdC,UAAU,IAGZF,EAAI7G,GAAON,EAGNmH,GAGyBrI,EAAOD,QAAQsB,YAAa,EAAMrB,EAAOD,QAAiB,QAAIC,EAAOD,S,iCCKvG,SAASyI,kBACP,MAA4C,oBAA9BC,6BAA+CA,0BAM/D,SAASC,eAEP,MAAO,MA7BT,8F,oBCOA,IAAIC,EAAW,SAAU5I,GACvB,aAEA,IAEI6I,EAFAC,EAAKlI,OAAOoB,UACZ+G,EAASD,EAAG7G,eAEZ+G,EAA4B,mBAAX/H,OAAwBA,OAAS,GAClDgI,EAAiBD,EAAQE,UAAY,aACrCC,EAAsBH,EAAQI,eAAiB,kBAC/CC,EAAoBL,EAAQ9H,aAAe,gBAE/C,SAASoI,OAAOhB,EAAK7G,EAAKN,GAOxB,OANAP,OAAOC,eAAeyH,EAAK7G,EAAK,CAC9BN,MAAOA,EACPL,YAAY,EACZyH,cAAc,EACdC,UAAU,IAELF,EAAI7G,GAEb,IAEE6H,OAAO,GAAI,IACX,MAAOC,GACPD,OAAS,SAAShB,EAAK7G,EAAKN,GAC1B,OAAOmH,EAAI7G,GAAON,GAItB,SAASqI,KAAKC,EAASC,EAASC,EAAMC,GAEpC,IAAIC,EAAiBH,GAAWA,EAAQ1H,qBAAqB8H,UAAYJ,EAAUI,UAC/EC,EAAYnJ,OAAOY,OAAOqI,EAAe7H,WACzCgI,EAAU,IAAIC,QAAQL,GAAe,IAMzC,OAFAG,EAAUG,QAuMZ,SAASC,iBAAiBV,EAASE,EAAMK,GACvC,IAAI9E,EAAQkF,EAEZ,OAAO,SAASC,OAAOC,EAAQC,GAC7B,GAAIrF,IAAUsF,EACZ,MAAM,IAAIC,MAAM,gCAGlB,GAAIvF,IAAUwF,EAAmB,CAC/B,GAAe,UAAXJ,EACF,MAAMC,EAKR,OAAOI,aAMT,IAHAX,EAAQM,OAASA,EACjBN,EAAQO,IAAMA,IAED,CACX,IAAIK,EAAWZ,EAAQY,SACvB,GAAIA,EAAU,CACZ,IAAIC,EAAiBC,oBAAoBF,EAAUZ,GACnD,GAAIa,EAAgB,CAClB,GAAIA,IAAmBE,EAAkB,SACzC,OAAOF,GAIX,GAAuB,SAAnBb,EAAQM,OAGVN,EAAQgB,KAAOhB,EAAQiB,MAAQjB,EAAQO,SAElC,GAAuB,UAAnBP,EAAQM,OAAoB,CACrC,GAAIpF,IAAUkF,EAEZ,MADAlF,EAAQwF,EACFV,EAAQO,IAGhBP,EAAQkB,kBAAkBlB,EAAQO,SAEN,WAAnBP,EAAQM,QACjBN,EAAQmB,OAAO,SAAUnB,EAAQO,KAGnCrF,EAAQsF,EAER,IAAIY,EAASC,SAAS5B,EAASE,EAAMK,GACrC,GAAoB,WAAhBoB,EAAOE,KAAmB,CAO5B,GAJApG,EAAQ8E,EAAQuB,KACZb,EACAc,EAEAJ,EAAOb,MAAQQ,EACjB,SAGF,MAAO,CACL5J,MAAOiK,EAAOb,IACdgB,KAAMvB,EAAQuB,MAGS,UAAhBH,EAAOE,OAChBpG,EAAQwF,EAGRV,EAAQM,OAAS,QACjBN,EAAQO,IAAMa,EAAOb,OA/QPJ,CAAiBV,EAASE,EAAMK,GAE7CD,EAcT,SAASsB,SAASI,EAAInD,EAAKiC,GACzB,IACE,MAAO,CAAEe,KAAM,SAAUf,IAAKkB,EAAGpL,KAAKiI,EAAKiC,IAC3C,MAAOhB,GACP,MAAO,CAAE+B,KAAM,QAASf,IAAKhB,IAhBjCvJ,EAAQwJ,KAAOA,KAoBf,IAAIY,EAAyB,iBACzBoB,EAAyB,iBACzBhB,EAAoB,YACpBE,EAAoB,YAIpBK,EAAmB,GAMvB,SAASjB,aACT,SAAS4B,qBACT,SAASC,8BAIT,IAAIC,EAAoB,GACxBtC,OAAOsC,EAAmB3C,GAAgB,WACxC,OAAOvF,QAGT,IAAImI,EAAWjL,OAAOkL,eAClBC,EAA0BF,GAAYA,EAASA,EAASG,OAAO,MAC/DD,GACAA,IAA4BjD,GAC5BC,EAAO1I,KAAK0L,EAAyB9C,KAGvC2C,EAAoBG,GAGtB,IAAIE,EAAKN,2BAA2B3J,UAClC8H,UAAU9H,UAAYpB,OAAOY,OAAOoK,GAYtC,SAASM,sBAAsBlK,GAC7B,CAAC,OAAQ,QAAS,UAAUsD,SAAQ,SAASgF,GAC3ChB,OAAOtH,EAAWsI,GAAQ,SAASC,GACjC,OAAO7G,KAAKwG,QAAQI,EAAQC,SAkClC,SAAS4B,cAAcpC,EAAWqC,GAChC,SAAS/B,OAAOC,EAAQC,EAAKrH,EAASI,GACpC,IAAI8H,EAASC,SAAStB,EAAUO,GAASP,EAAWQ,GACpD,GAAoB,UAAhBa,EAAOE,KAEJ,CACL,IAAI9G,EAAS4G,EAAOb,IAChBpJ,EAAQqD,EAAOrD,MACnB,OAAIA,GACiB,iBAAVA,GACP4H,EAAO1I,KAAKc,EAAO,WACdiL,EAAYlJ,QAAQ/B,EAAMkL,SAASjI,MAAK,SAASjD,GACtDkJ,OAAO,OAAQlJ,EAAO+B,EAASI,MAC9B,SAASiG,GACVc,OAAO,QAASd,EAAKrG,EAASI,MAI3B8I,EAAYlJ,QAAQ/B,GAAOiD,MAAK,SAASkI,GAI9C9H,EAAOrD,MAAQmL,EACfpJ,EAAQsB,MACP,SAAS+H,GAGV,OAAOlC,OAAO,QAASkC,EAAOrJ,EAASI,MAvBzCA,EAAO8H,EAAOb,KA4BlB,IAAIiC,EAgCJ9I,KAAKwG,QA9BL,SAASuC,QAAQnC,EAAQC,GACvB,SAASmC,6BACP,OAAO,IAAIN,GAAY,SAASlJ,EAASI,GACvC+G,OAAOC,EAAQC,EAAKrH,EAASI,MAIjC,OAAOkJ,EAaLA,EAAkBA,EAAgBpI,KAChCsI,2BAGAA,4BACEA,8BAkHV,SAAS5B,oBAAoBF,EAAUZ,GACrC,IAAIM,EAASM,EAAS1B,SAASc,EAAQM,QACvC,GAAIA,IAAWzB,EAAW,CAKxB,GAFAmB,EAAQY,SAAW,KAEI,UAAnBZ,EAAQM,OAAoB,CAE9B,GAAIM,EAAS1B,SAAiB,SAG5Bc,EAAQM,OAAS,SACjBN,EAAQO,IAAM1B,EACdiC,oBAAoBF,EAAUZ,GAEP,UAAnBA,EAAQM,QAGV,OAAOS,EAIXf,EAAQM,OAAS,QACjBN,EAAQO,IAAM,IAAIoC,UAChB,kDAGJ,OAAO5B,EAGT,IAAIK,EAASC,SAASf,EAAQM,EAAS1B,SAAUc,EAAQO,KAEzD,GAAoB,UAAhBa,EAAOE,KAIT,OAHAtB,EAAQM,OAAS,QACjBN,EAAQO,IAAMa,EAAOb,IACrBP,EAAQY,SAAW,KACZG,EAGT,IAAI6B,EAAOxB,EAAOb,IAElB,OAAMqC,EAOFA,EAAKrB,MAGPvB,EAAQY,EAASiC,YAAcD,EAAKzL,MAGpC6I,EAAQ8C,KAAOlC,EAASmC,QAQD,WAAnB/C,EAAQM,SACVN,EAAQM,OAAS,OACjBN,EAAQO,IAAM1B,GAUlBmB,EAAQY,SAAW,KACZG,GANE6B,GA3BP5C,EAAQM,OAAS,QACjBN,EAAQO,IAAM,IAAIoC,UAAU,oCAC5B3C,EAAQY,SAAW,KACZG,GAoDX,SAASiC,aAAaC,GACpB,IAAIC,EAAQ,CAAEC,OAAQF,EAAK,IAEvB,KAAKA,IACPC,EAAME,SAAWH,EAAK,IAGpB,KAAKA,IACPC,EAAMG,WAAaJ,EAAK,GACxBC,EAAMI,SAAWL,EAAK,IAGxBvJ,KAAK6J,WAAWhJ,KAAK2I,GAGvB,SAASM,cAAcN,GACrB,IAAI9B,EAAS8B,EAAMO,YAAc,GACjCrC,EAAOE,KAAO,gBACPF,EAAOb,IACd2C,EAAMO,WAAarC,EAGrB,SAASnB,QAAQL,GAIflG,KAAK6J,WAAa,CAAC,CAAEJ,OAAQ,SAC7BvD,EAAYtE,QAAQ0H,aAActJ,MAClCA,KAAKgK,OAAM,GA8Bb,SAAS1B,OAAO2B,GACd,GAAIA,EAAU,CACZ,IAAIC,EAAiBD,EAAS1E,GAC9B,GAAI2E,EACF,OAAOA,EAAevN,KAAKsN,GAG7B,GAA6B,mBAAlBA,EAASb,KAClB,OAAOa,EAGT,IAAKE,MAAMF,EAASxH,QAAS,CAC3B,IAAIjG,GAAK,EAAG4M,EAAO,SAASA,OAC1B,OAAS5M,EAAIyN,EAASxH,QACpB,GAAI4C,EAAO1I,KAAKsN,EAAUzN,GAGxB,OAFA4M,KAAK3L,MAAQwM,EAASzN,GACtB4M,KAAKvB,MAAO,EACLuB,KAOX,OAHAA,KAAK3L,MAAQ0H,EACbiE,KAAKvB,MAAO,EAELuB,MAGT,OAAOA,EAAKA,KAAOA,GAKvB,MAAO,CAAEA,KAAMnC,YAIjB,SAASA,aACP,MAAO,CAAExJ,MAAO0H,EAAW0C,MAAM,GA+MnC,OA7mBAG,kBAAkB1J,UAAY2J,2BAC9BrC,OAAO2C,EAAI,cAAeN,4BAC1BrC,OAAOqC,2BAA4B,cAAeD,mBAClDA,kBAAkBoC,YAAcxE,OAC9BqC,2BACAtC,EACA,qBAaFrJ,EAAQ+N,oBAAsB,SAASC,GACrC,IAAIC,EAAyB,mBAAXD,GAAyBA,EAAOzK,YAClD,QAAO0K,IACHA,IAASvC,mBAG2B,uBAAnCuC,EAAKH,aAAeG,EAAKxN,QAIhCT,EAAQkO,KAAO,SAASF,GAQtB,OAPIpN,OAAOuN,eACTvN,OAAOuN,eAAeH,EAAQrC,6BAE9BqC,EAAOI,UAAYzC,2BACnBrC,OAAO0E,EAAQ3E,EAAmB,sBAEpC2E,EAAOhM,UAAYpB,OAAOY,OAAOyK,GAC1B+B,GAOThO,EAAQqO,MAAQ,SAAS9D,GACvB,MAAO,CAAE8B,QAAS9B,IAsEpB2B,sBAAsBC,cAAcnK,WACpCsH,OAAO6C,cAAcnK,UAAWmH,GAAqB,WACnD,OAAOzF,QAET1D,EAAQmM,cAAgBA,cAKxBnM,EAAQsO,MAAQ,SAAS7E,EAASC,EAASC,EAAMC,EAAawC,QACxC,IAAhBA,IAAwBA,EAAcmC,SAE1C,IAAIC,EAAO,IAAIrC,cACb3C,KAAKC,EAASC,EAASC,EAAMC,GAC7BwC,GAGF,OAAOpM,EAAQ+N,oBAAoBrE,GAC/B8E,EACAA,EAAK1B,OAAO1I,MAAK,SAASI,GACxB,OAAOA,EAAO+G,KAAO/G,EAAOrD,MAAQqN,EAAK1B,WAuKjDZ,sBAAsBD,GAEtB3C,OAAO2C,EAAI5C,EAAmB,aAO9BC,OAAO2C,EAAIhD,GAAgB,WACzB,OAAOvF,QAGT4F,OAAO2C,EAAI,YAAY,WACrB,MAAO,wBAkCTjM,EAAQyO,KAAO,SAAS3M,GACtB,IAAI2M,EAAO,GACX,IAAK,IAAIhN,KAAOK,EACd2M,EAAKlK,KAAK9C,GAMZ,OAJAgN,EAAK9H,UAIE,SAASmG,OACd,KAAO2B,EAAKtI,QAAQ,CAClB,IAAI1E,EAAMgN,EAAKC,MACf,GAAIjN,KAAOK,EAGT,OAFAgL,KAAK3L,MAAQM,EACbqL,KAAKvB,MAAO,EACLuB,KAQX,OADAA,KAAKvB,MAAO,EACLuB,OAsCX9M,EAAQgM,OAASA,OAMjB/B,QAAQjI,UAAY,CAClBuB,YAAa0G,QAEbyD,MAAO,SAASiB,GAcd,GAbAjL,KAAKkL,KAAO,EACZlL,KAAKoJ,KAAO,EAGZpJ,KAAKsH,KAAOtH,KAAKuH,MAAQpC,EACzBnF,KAAK6H,MAAO,EACZ7H,KAAKkH,SAAW,KAEhBlH,KAAK4G,OAAS,OACd5G,KAAK6G,IAAM1B,EAEXnF,KAAK6J,WAAWjI,QAAQkI,gBAEnBmB,EACH,IAAK,IAAIlO,KAAQiD,KAEQ,MAAnBjD,EAAKoO,OAAO,IACZ9F,EAAO1I,KAAKqD,KAAMjD,KACjBoN,OAAOpN,EAAK4E,MAAM,MACrB3B,KAAKjD,GAAQoI,IAMrBiG,KAAM,WACJpL,KAAK6H,MAAO,EAEZ,IACIwD,EADYrL,KAAK6J,WAAW,GACLE,WAC3B,GAAwB,UAApBsB,EAAWzD,KACb,MAAMyD,EAAWxE,IAGnB,OAAO7G,KAAKsL,MAGd9D,kBAAmB,SAAS+D,GAC1B,GAAIvL,KAAK6H,KACP,MAAM0D,EAGR,IAAIjF,EAAUtG,KACd,SAASwL,OAAOC,EAAKC,GAYnB,OAXAhE,EAAOE,KAAO,QACdF,EAAOb,IAAM0E,EACbjF,EAAQ8C,KAAOqC,EAEXC,IAGFpF,EAAQM,OAAS,OACjBN,EAAQO,IAAM1B,KAGNuG,EAGZ,IAAK,IAAIlP,EAAIwD,KAAK6J,WAAWpH,OAAS,EAAGjG,GAAK,IAAKA,EAAG,CACpD,IAAIgN,EAAQxJ,KAAK6J,WAAWrN,GACxBkL,EAAS8B,EAAMO,WAEnB,GAAqB,SAAjBP,EAAMC,OAIR,OAAO+B,OAAO,OAGhB,GAAIhC,EAAMC,QAAUzJ,KAAKkL,KAAM,CAC7B,IAAIS,EAAWtG,EAAO1I,KAAK6M,EAAO,YAC9BoC,EAAavG,EAAO1I,KAAK6M,EAAO,cAEpC,GAAImC,GAAYC,EAAY,CAC1B,GAAI5L,KAAKkL,KAAO1B,EAAME,SACpB,OAAO8B,OAAOhC,EAAME,UAAU,GACzB,GAAI1J,KAAKkL,KAAO1B,EAAMG,WAC3B,OAAO6B,OAAOhC,EAAMG,iBAGjB,GAAIgC,GACT,GAAI3L,KAAKkL,KAAO1B,EAAME,SACpB,OAAO8B,OAAOhC,EAAME,UAAU,OAG3B,KAAIkC,EAMT,MAAM,IAAI7E,MAAM,0CALhB,GAAI/G,KAAKkL,KAAO1B,EAAMG,WACpB,OAAO6B,OAAOhC,EAAMG,gBAU9BlC,OAAQ,SAASG,EAAMf,GACrB,IAAK,IAAIrK,EAAIwD,KAAK6J,WAAWpH,OAAS,EAAGjG,GAAK,IAAKA,EAAG,CACpD,IAAIgN,EAAQxJ,KAAK6J,WAAWrN,GAC5B,GAAIgN,EAAMC,QAAUzJ,KAAKkL,MACrB7F,EAAO1I,KAAK6M,EAAO,eACnBxJ,KAAKkL,KAAO1B,EAAMG,WAAY,CAChC,IAAIkC,EAAerC,EACnB,OAIAqC,IACU,UAATjE,GACS,aAATA,IACDiE,EAAapC,QAAU5C,GACvBA,GAAOgF,EAAalC,aAGtBkC,EAAe,MAGjB,IAAInE,EAASmE,EAAeA,EAAa9B,WAAa,GAItD,OAHArC,EAAOE,KAAOA,EACdF,EAAOb,IAAMA,EAETgF,GACF7L,KAAK4G,OAAS,OACd5G,KAAKoJ,KAAOyC,EAAalC,WAClBtC,GAGFrH,KAAK8L,SAASpE,IAGvBoE,SAAU,SAASpE,EAAQkC,GACzB,GAAoB,UAAhBlC,EAAOE,KACT,MAAMF,EAAOb,IAcf,MAXoB,UAAhBa,EAAOE,MACS,aAAhBF,EAAOE,KACT5H,KAAKoJ,KAAO1B,EAAOb,IACM,WAAhBa,EAAOE,MAChB5H,KAAKsL,KAAOtL,KAAK6G,IAAMa,EAAOb,IAC9B7G,KAAK4G,OAAS,SACd5G,KAAKoJ,KAAO,OACa,WAAhB1B,EAAOE,MAAqBgC,IACrC5J,KAAKoJ,KAAOQ,GAGPvC,GAGT0E,OAAQ,SAASpC,GACf,IAAK,IAAInN,EAAIwD,KAAK6J,WAAWpH,OAAS,EAAGjG,GAAK,IAAKA,EAAG,CACpD,IAAIgN,EAAQxJ,KAAK6J,WAAWrN,GAC5B,GAAIgN,EAAMG,aAAeA,EAGvB,OAFA3J,KAAK8L,SAAStC,EAAMO,WAAYP,EAAMI,UACtCE,cAAcN,GACPnC,IAKb,MAAS,SAASoC,GAChB,IAAK,IAAIjN,EAAIwD,KAAK6J,WAAWpH,OAAS,EAAGjG,GAAK,IAAKA,EAAG,CACpD,IAAIgN,EAAQxJ,KAAK6J,WAAWrN,GAC5B,GAAIgN,EAAMC,SAAWA,EAAQ,CAC3B,IAAI/B,EAAS8B,EAAMO,WACnB,GAAoB,UAAhBrC,EAAOE,KAAkB,CAC3B,IAAIoE,EAAStE,EAAOb,IACpBiD,cAAcN,GAEhB,OAAOwC,GAMX,MAAM,IAAIjF,MAAM,0BAGlBkF,cAAe,SAAShC,EAAUd,EAAYE,GAa5C,OAZArJ,KAAKkH,SAAW,CACd1B,SAAU8C,OAAO2B,GACjBd,WAAYA,EACZE,QAASA,GAGS,SAAhBrJ,KAAK4G,SAGP5G,KAAK6G,IAAM1B,GAGNkC,IAQJ/K,EA9sBK,CAqtBiBC,EAAOD,SAGtC,IACE4P,mBAAqBhH,EACrB,MAAOiH,GAWmB,iBAAfC,WACTA,WAAWF,mBAAqBhH,EAEhCmH,SAAS,IAAK,yBAAdA,CAAwCnH,K,iBC/uB5C,SAASoH,mBAAmBC,EAAK/M,EAASI,EAAQ4M,EAAOC,EAAQ1O,EAAK8I,GACpE,IACE,IAAIqC,EAAOqD,EAAIxO,GAAK8I,GAChBpJ,EAAQyL,EAAKzL,MACjB,MAAOoL,GAEP,YADAjJ,EAAOiJ,GAILK,EAAKrB,KACPrI,EAAQ/B,GAERoN,QAAQrL,QAAQ/B,GAAOiD,KAAK8L,EAAOC,GAwBvClQ,EAAOD,QApBP,SAASoQ,kBAAkB3E,GACzB,OAAO,WACL,IAAI9B,EAAOjG,KACP2M,EAAOC,UACX,OAAO,IAAI/B,SAAQ,SAAUrL,EAASI,GACpC,IAAI2M,EAAMxE,EAAG8E,MAAM5G,EAAM0G,GAEzB,SAASH,MAAM/O,GACb6O,mBAAmBC,EAAK/M,EAASI,EAAQ4M,MAAOC,OAAQ,OAAQhP,GAGlE,SAASgP,OAAO5G,GACdyG,mBAAmBC,EAAK/M,EAASI,EAAQ4M,MAAOC,OAAQ,QAAS5G,GAGnE2G,WAAMrH,QAKwB5I,EAAOD,QAAQsB,YAAa,EAAMrB,EAAOD,QAAiB,QAAIC,EAAOD,S,gTClBrGwQ,cAAgB,SAAShQ,EAAGiQ,GAI5B,OAHAD,cAAgB5P,OAAOuN,gBAClB,CAAEC,UAAW,cAAgB9H,OAAS,SAAU9F,EAAGiQ,GAAKjQ,EAAE4N,UAAYqC,IACvE,SAAUjQ,EAAGiQ,GAAK,IAAK,IAAIvO,KAAKuO,EAAO7P,OAAOoB,UAAUC,eAAe5B,KAAKoQ,EAAGvO,KAAI1B,EAAE0B,GAAKuO,EAAEvO,KACzFsO,cAAchQ,EAAGiQ,IAG5B,SAASC,UAAUlQ,EAAGiQ,GAElB,SAASE,KAAOjN,KAAKH,YAAc/C,EADnCgQ,cAAchQ,EAAGiQ,GAEjBjQ,EAAEwB,UAAkB,OAANyO,EAAa7P,OAAOY,OAAOiP,IAAME,GAAG3O,UAAYyO,EAAEzO,UAAW,IAAI2O,IAGnF,ICnBIC,EA4MAC,EDzLAC,SAAW,WAQX,OAPAA,SAAWlQ,OAAOmQ,QAAU,SAASD,SAAS1P,GAC1C,IAAK,IAAIe,EAAGjC,EAAI,EAAGyB,EAAI2O,UAAUnK,OAAQjG,EAAIyB,EAAGzB,IAE5C,IAAK,IAAIgC,KADTC,EAAImO,UAAUpQ,GACOU,OAAOoB,UAAUC,eAAe5B,KAAK8B,EAAGD,KAAId,EAAEc,GAAKC,EAAED,IAE9E,OAAOd,GAEJ0P,SAASP,MAAM7M,KAAM4M,YAGhC,SAASU,OAAO7O,EAAGgC,GACf,IAAI/C,EAAI,GACR,IAAK,IAAIc,KAAKC,EAAOvB,OAAOoB,UAAUC,eAAe5B,KAAK8B,EAAGD,IAAMiC,EAAE8M,QAAQ/O,GAAK,IAC9Ed,EAAEc,GAAKC,EAAED,IACb,GAAS,MAALC,GAAqD,mBAAjCvB,OAAOsQ,sBACtB,KAAIhR,EAAI,EAAb,IAAgBgC,EAAItB,OAAOsQ,sBAAsB/O,GAAIjC,EAAIgC,EAAEiE,OAAQjG,IAC3DiE,EAAE8M,QAAQ/O,EAAEhC,IAAM,GAAKU,OAAOoB,UAAUmP,qBAAqB9Q,KAAK8B,EAAGD,EAAEhC,MACvEkB,EAAEc,EAAEhC,IAAMiC,EAAED,EAAEhC,KAE1B,OAAOkB,EAGX,SAASgQ,UAAUC,EAASC,EAAYC,EAAGxH,GAEvC,OAAO,IAAKwH,IAAMA,EAAIhD,WAAU,SAAUrL,EAASI,GAC/C,SAASkO,UAAUrQ,GAAS,IAAMsQ,KAAK1H,EAAU+C,KAAK3L,IAAW,MAAOgD,GAAKb,EAAOa,IACpF,SAASuN,SAASvQ,GAAS,IAAMsQ,KAAK1H,EAAiB,MAAE5I,IAAW,MAAOgD,GAAKb,EAAOa,IACvF,SAASsN,KAAKjN,GAAUA,EAAO+G,KAAOrI,EAAQsB,EAAOrD,OAJzD,SAASwQ,MAAMxQ,GAAS,OAAOA,aAAiBoQ,EAAIpQ,EAAQ,IAAIoQ,GAAE,SAAUrO,GAAWA,EAAQ/B,MAI7BwQ,CAAMnN,EAAOrD,OAAOiD,KAAKoN,UAAWE,UAClGD,MAAM1H,EAAYA,EAAUwG,MAAMc,EAASC,GAAc,KAAKxE,WAItE,SAAS8E,YAAYP,EAASQ,GAC1B,IAAsGC,EAAGC,EAAG3Q,EAAG4Q,EAA3G3O,EAAI,CAAE4O,MAAO,EAAGjH,KAAM,WAAa,GAAW,EAAP5J,EAAE,GAAQ,MAAMA,EAAE,GAAI,OAAOA,EAAE,IAAO8Q,KAAM,GAAIC,IAAK,IAChG,OAAOH,EAAI,CAAElF,KAAMsF,KAAK,GAAI,MAASA,KAAK,GAAI,OAAUA,KAAK,IAAwB,mBAAXnR,SAA0B+Q,EAAE/Q,OAAOiI,UAAY,WAAa,OAAOxF,OAAUsO,EACvJ,SAASI,KAAKzQ,GAAK,OAAO,SAAU0Q,GAAK,OACzC,SAASZ,KAAKa,GACV,GAAIR,EAAG,MAAM,IAAInF,UAAU,mCAC3B,KAAOtJ,OACH,GAAIyO,EAAI,EAAGC,IAAM3Q,EAAY,EAARkR,EAAG,GAASP,EAAU,OAAIO,EAAG,GAAKP,EAAS,SAAO3Q,EAAI2Q,EAAU,SAAM3Q,EAAEf,KAAK0R,GAAI,GAAKA,EAAEjF,SAAW1L,EAAIA,EAAEf,KAAK0R,EAAGO,EAAG,KAAK/G,KAAM,OAAOnK,EAE3J,OADI2Q,EAAI,EAAG3Q,IAAGkR,EAAK,CAAS,EAARA,EAAG,GAAQlR,EAAED,QACzBmR,EAAG,IACP,KAAK,EAAG,KAAK,EAAGlR,EAAIkR,EAAI,MACxB,KAAK,EAAc,OAAXjP,EAAE4O,QAAgB,CAAE9Q,MAAOmR,EAAG,GAAI/G,MAAM,GAChD,KAAK,EAAGlI,EAAE4O,QAASF,EAAIO,EAAG,GAAIA,EAAK,CAAC,GAAI,SACxC,KAAK,EAAGA,EAAKjP,EAAE8O,IAAIzD,MAAOrL,EAAE6O,KAAKxD,MAAO,SACxC,QACI,KAAMtN,EAAIiC,EAAE6O,MAAM9Q,EAAIA,EAAE+E,OAAS,GAAK/E,EAAEA,EAAE+E,OAAS,KAAkB,IAAVmM,EAAG,IAAsB,IAAVA,EAAG,IAAW,CAAEjP,EAAI,EAAG,SACjG,GAAc,IAAViP,EAAG,MAAclR,GAAMkR,EAAG,GAAKlR,EAAE,IAAMkR,EAAG,GAAKlR,EAAE,IAAM,CAAEiC,EAAE4O,MAAQK,EAAG,GAAI,MAC9E,GAAc,IAAVA,EAAG,IAAYjP,EAAE4O,MAAQ7Q,EAAE,GAAI,CAAEiC,EAAE4O,MAAQ7Q,EAAE,GAAIA,EAAIkR,EAAI,MAC7D,GAAIlR,GAAKiC,EAAE4O,MAAQ7Q,EAAE,GAAI,CAAEiC,EAAE4O,MAAQ7Q,EAAE,GAAIiC,EAAE8O,IAAI5N,KAAK+N,GAAK,MACvDlR,EAAE,IAAIiC,EAAE8O,IAAIzD,MAChBrL,EAAE6O,KAAKxD,MAAO,SAEtB4D,EAAKT,EAAKxR,KAAKgR,EAAShO,GAC1B,MAAOc,GAAKmO,EAAK,CAAC,EAAGnO,GAAI4N,EAAI,EAAK,QAAUD,EAAI1Q,EAAI,EACtD,GAAY,EAARkR,EAAG,GAAQ,MAAMA,EAAG,GAAI,MAAO,CAAEnR,MAAOmR,EAAG,GAAKA,EAAG,QAAK,EAAQ/G,MAAM,GArB9BkG,CAAK,CAAC9P,EAAG0Q,MAyB7D,SAASE,OAAO5R,EAAGgB,GACf,IAAIrB,EAAsB,mBAAXW,QAAyBN,EAAEM,OAAOiI,UACjD,IAAK5I,EAAG,OAAOK,EACf,IAAmBK,EAAYmD,EAA3BjE,EAAII,EAAED,KAAKM,GAAO6R,EAAK,GAC3B,IACI,WAAc,IAAN7Q,GAAgBA,KAAM,MAAQX,EAAId,EAAE4M,QAAQvB,MAAMiH,EAAGjO,KAAKvD,EAAEG,OAExE,MAAOoL,GAASpI,EAAI,CAAEoI,MAAOA,GAC7B,QACI,IACQvL,IAAMA,EAAEuK,OAASjL,EAAIJ,EAAU,SAAII,EAAED,KAAKH,GAElD,QAAU,GAAIiE,EAAG,MAAMA,EAAEoI,OAE7B,OAAOiG,EAGX,SAASC,WACL,IAAK,IAAID,EAAK,GAAItS,EAAI,EAAGA,EAAIoQ,UAAUnK,OAAQjG,IAC3CsS,EAAKA,EAAGE,OAAOH,OAAOjC,UAAUpQ,KACpC,OAAOsS,GCnGX,SAAW5B,GAKPA,EAAsC,mBAAI,qBAK1CA,EAA8C,2BAAI,6BAKlDA,EAAsC,mBAAI,qBAK1CA,EAA2C,wBAAI,0BAK/CA,EAAqC,kBAAI,oBAKzCA,EAAoD,iCAAI,mCAKxDA,EAAqC,kBAAI,oBAKzCA,EAAiD,8BAAI,gCAKrDA,EAAkD,+BAAI,iCAKtDA,EAAmD,gCAAI,kCAKvDA,EAA6B,UAAI,YAKjCA,EAAmE,gDAAI,kDAKvEA,EAAkD,+BAAI,iCAKtDA,EAAuD,oCAAI,sCAI3DA,EAAuD,oCAAI,sCAI3DA,EAAoC,iBAAI,kBAIxCA,EAAsD,mCAAI,qCAI1DA,EAAwC,qBAAI,uBAI5CA,EAAyD,sCAAI,wCAI7DA,EAAkD,+BAAI,iCAItDA,EAAwE,qDAAI,uDAI5EA,EAAgE,6CAAI,+CAIpEA,EAA4D,yCAAI,2CAKhEA,EAAyC,sBAAI,wBAK7CA,EAA8C,2BAAI,6BAIlDA,EAAyC,sBAAI,wBAI7CA,EAA2C,wBAAI,0BAC/CA,EAA+C,4BAAI,8BAInDA,EAAiD,8BAAI,gCAIrDA,EAAoD,iCAAI,mCACxDA,EAAqD,kCAAI,oCACzDA,EAA0C,uBAAI,yBAI9CA,EAAiE,8CAAI,gDACrEA,EAAmE,gDAAI,kDACvEA,EAA2E,wDAAI,0DAC/EA,EAA+E,4DAAI,8DAInFA,EAAkC,eAAI,iBAItCA,EAAgD,6BAAI,+BACpDA,EAA8C,2BAAI,6BAClDA,EAAgD,6BAAI,+BAIpDA,EAA0C,uBAAI,yBAC9CA,EAAiD,8BAAI,gCACrDA,EAAoD,iCAAI,mCACxDA,EAA+C,4BAAI,8BAInDA,EAAuC,oBAAI,sBAC3CA,EAAuC,oBAAI,sBAI3CA,EAA6C,0BAAI,4BAIjDA,EAA4D,yCAAI,2CAChEA,EAAkD,+BAAI,iCACtDA,EAAiE,8CAAI,gDACrEA,EAAyD,sCAAI,wCAC7DA,EAA2D,wCAAI,0CAC/DA,EAAmD,gCAAI,kCACvDA,EAAkE,+CAAI,iDAItEA,EAA+C,4BAAI,8BACnDA,EAAoD,iCAAI,mCACxDA,EAAoD,iCAAI,mCACxDA,EAA2C,wBAAI,0BAC/CA,EAAkD,+BAAI,iCACtDA,EAAmE,gDAAI,kDACvEA,EAAoD,iCAAI,mCACxDA,EAA2D,wCAAI,0CAC/DA,EAAsD,mCAAI,qCAC1DA,EAAiD,8BAAI,gCAIrDA,EAAgD,6BAAI,+BAnMxD,CAoMGA,IAAsBA,EAAoB,KAQ7C,SAAWC,GACPA,EAAuBA,EAAmC,WAAI,GAAK,aACnEA,EAAuBA,EAAmC,WAAI,GAAK,aACnEA,EAAuBA,EAAkC,UAAI,GAAK,YAHtE,CAIGA,IAA2BA,EAAyB,KACvD,IAAI8B,EAAY,IAAIC,IAAI,CACpB,kBACA,aACA,cACA,mBACA,iBACA,mBACA,eACA,cACA,WCrNA,qBAAgB,SAASpS,EAAGiQ,GAI5B,OAHA,qBAAgB7P,OAAOuN,gBAClB,CAAEC,UAAW,cAAgB9H,OAAS,SAAU9F,EAAGiQ,GAAKjQ,EAAE4N,UAAYqC,IACvE,SAAUjQ,EAAGiQ,GAAK,IAAK,IAAIvO,KAAKuO,EAAO7P,OAAOoB,UAAUC,eAAe5B,KAAKoQ,EAAGvO,KAAI1B,EAAE0B,GAAKuO,EAAEvO,KACzF,qBAAc1B,EAAGiQ,IAG5B,SAAS,eAAUjQ,EAAGiQ,GAElB,SAASE,KAAOjN,KAAKH,YAAc/C,EADnC,qBAAcA,EAAGiQ,GAEjBjQ,EAAEwB,UAAkB,OAANyO,EAAa7P,OAAOY,OAAOiP,IAAME,GAAG3O,UAAYyO,EAAEzO,UAAW,IAAI2O,IAGnF,IAAI,cAAW,WAQX,OAPA,cAAW/P,OAAOmQ,QAAU,SAASD,SAAS1P,GAC1C,IAAK,IAAIe,EAAGjC,EAAI,EAAGyB,EAAI2O,UAAUnK,OAAQjG,EAAIyB,EAAGzB,IAE5C,IAAK,IAAIgC,KADTC,EAAImO,UAAUpQ,GACOU,OAAOoB,UAAUC,eAAe5B,KAAK8B,EAAGD,KAAId,EAAEc,GAAKC,EAAED,IAE9E,OAAOd,GAEJ,cAASmP,MAAM7M,KAAM4M,YAGhC,SAAS,eAAUe,EAASC,EAAYC,EAAGxH,GAEvC,OAAO,IAAKwH,IAAMA,EAAIhD,WAAU,SAAUrL,EAASI,GAC/C,SAASkO,UAAUrQ,GAAS,IAAMsQ,KAAK1H,EAAU+C,KAAK3L,IAAW,MAAOgD,GAAKb,EAAOa,IACpF,SAASuN,SAASvQ,GAAS,IAAMsQ,KAAK1H,EAAiB,MAAE5I,IAAW,MAAOgD,GAAKb,EAAOa,IACvF,SAASsN,KAAKjN,GAAUA,EAAO+G,KAAOrI,EAAQsB,EAAOrD,OAJzD,SAASwQ,MAAMxQ,GAAS,OAAOA,aAAiBoQ,EAAIpQ,EAAQ,IAAIoQ,GAAE,SAAUrO,GAAWA,EAAQ/B,MAI7BwQ,CAAMnN,EAAOrD,OAAOiD,KAAKoN,UAAWE,UAClGD,MAAM1H,EAAYA,EAAUwG,MAAMc,EAASC,GAAc,KAAKxE,WAItE,SAAS,iBAAYuE,EAASQ,GAC1B,IAAsGC,EAAGC,EAAG3Q,EAAG4Q,EAA3G3O,EAAI,CAAE4O,MAAO,EAAGjH,KAAM,WAAa,GAAW,EAAP5J,EAAE,GAAQ,MAAMA,EAAE,GAAI,OAAOA,EAAE,IAAO8Q,KAAM,GAAIC,IAAK,IAChG,OAAOH,EAAI,CAAElF,KAAMsF,KAAK,GAAI,MAASA,KAAK,GAAI,OAAUA,KAAK,IAAwB,mBAAXnR,SAA0B+Q,EAAE/Q,OAAOiI,UAAY,WAAa,OAAOxF,OAAUsO,EACvJ,SAASI,KAAKzQ,GAAK,OAAO,SAAU0Q,GAAK,OACzC,SAASZ,KAAKa,GACV,GAAIR,EAAG,MAAM,IAAInF,UAAU,mCAC3B,KAAOtJ,OACH,GAAIyO,EAAI,EAAGC,IAAM3Q,EAAY,EAARkR,EAAG,GAASP,EAAU,OAAIO,EAAG,GAAKP,EAAS,SAAO3Q,EAAI2Q,EAAU,SAAM3Q,EAAEf,KAAK0R,GAAI,GAAKA,EAAEjF,SAAW1L,EAAIA,EAAEf,KAAK0R,EAAGO,EAAG,KAAK/G,KAAM,OAAOnK,EAE3J,OADI2Q,EAAI,EAAG3Q,IAAGkR,EAAK,CAAS,EAARA,EAAG,GAAQlR,EAAED,QACzBmR,EAAG,IACP,KAAK,EAAG,KAAK,EAAGlR,EAAIkR,EAAI,MACxB,KAAK,EAAc,OAAXjP,EAAE4O,QAAgB,CAAE9Q,MAAOmR,EAAG,GAAI/G,MAAM,GAChD,KAAK,EAAGlI,EAAE4O,QAASF,EAAIO,EAAG,GAAIA,EAAK,CAAC,GAAI,SACxC,KAAK,EAAGA,EAAKjP,EAAE8O,IAAIzD,MAAOrL,EAAE6O,KAAKxD,MAAO,SACxC,QACI,KAAMtN,EAAIiC,EAAE6O,MAAM9Q,EAAIA,EAAE+E,OAAS,GAAK/E,EAAEA,EAAE+E,OAAS,KAAkB,IAAVmM,EAAG,IAAsB,IAAVA,EAAG,IAAW,CAAEjP,EAAI,EAAG,SACjG,GAAc,IAAViP,EAAG,MAAclR,GAAMkR,EAAG,GAAKlR,EAAE,IAAMkR,EAAG,GAAKlR,EAAE,IAAM,CAAEiC,EAAE4O,MAAQK,EAAG,GAAI,MAC9E,GAAc,IAAVA,EAAG,IAAYjP,EAAE4O,MAAQ7Q,EAAE,GAAI,CAAEiC,EAAE4O,MAAQ7Q,EAAE,GAAIA,EAAIkR,EAAI,MAC7D,GAAIlR,GAAKiC,EAAE4O,MAAQ7Q,EAAE,GAAI,CAAEiC,EAAE4O,MAAQ7Q,EAAE,GAAIiC,EAAE8O,IAAI5N,KAAK+N,GAAK,MACvDlR,EAAE,IAAIiC,EAAE8O,IAAIzD,MAChBrL,EAAE6O,KAAKxD,MAAO,SAEtB4D,EAAKT,EAAKxR,KAAKgR,EAAShO,GAC1B,MAAOc,GAAKmO,EAAK,CAAC,EAAGnO,GAAI4N,EAAI,EAAK,QAAUD,EAAI1Q,EAAI,EACtD,GAAY,EAARkR,EAAG,GAAQ,MAAMA,EAAG,GAAI,MAAO,CAAEnR,MAAOmR,EAAG,GAAKA,EAAG,QAAK,EAAQ/G,MAAM,GArB9BkG,CAAK,CAAC9P,EAAG0Q,MAyB7D,SAASQ,iBACL,IAAK,IAAI1Q,EAAI,EAAGjC,EAAI,EAAG4S,EAAKxC,UAAUnK,OAAQjG,EAAI4S,EAAI5S,IAAKiC,GAAKmO,UAAUpQ,GAAGiG,OACxE,IAAInF,EAAIsF,MAAMnE,GAAI4Q,EAAI,EAA3B,IAA8B7S,EAAI,EAAGA,EAAI4S,EAAI5S,IACzC,IAAK,IAAI8S,EAAI1C,UAAUpQ,GAAI+S,EAAI,EAAGC,EAAKF,EAAE7M,OAAQ8M,EAAIC,EAAID,IAAKF,IAC1D/R,EAAE+R,GAAKC,EAAEC,GACjB,OAAOjS,EC7EX,IAiEImS,EAaAC,EAaAC,EASAC,EAsDAC,EA1JAC,EAAY,CACZC,aAAc,UACdC,IAAK,iBAELC,aAAc,OAEdC,kBAAmB,4CACnBC,uBAAwB,4BACxBC,sBAAuB,SAEvBC,KAAM,OACNC,KAAM,SAENC,6BAA8B,sGAE9BC,cAAe,iBACfC,yBAA0B,mBAE1BC,eAAgB,IAEhBC,WAAY,aAEZC,OAAQ,SAERC,cAAe,uCAEfC,aAAc,SACdC,cAAe,UACfC,qBAAsB,iBACtBC,YAAa,QAEbC,mBAAoB,OACpBC,gBAAiB,qBACjBC,cAAe,gBACfC,uBAAwB,WACxBC,2BAA4B,OAC5BC,sBAAuB,kDACvBC,sBAAuB,wBACvBC,YAAa,cACbC,aAAc,GACdC,eAAgB,MAChBC,cAAe,IACfC,cAAe,4DACfC,aAAc,aACdC,aAAc,IACdC,gCAAiC,gBACjCC,kCAAmC,sBACnCC,mCAAoC,wBACpCC,oBAAqB,CAAC,4BAA6B,oBAAqB,sBAAuB,mBAC/FC,oBAAqB,QACrBC,uBAAwB,WACxBC,mBAAoB,IACpBC,iBAAkB,oBAElBC,EAAsB,CACtB1C,EAAUgB,aACVhB,EAAUiB,cACVjB,EAAUkB,sBAEVyB,EAActD,eAAeqD,EAAqB,CAClD1C,EAAUmB,eAMd,SAAWxB,GACPA,EAA0B,aAAI,eAC9BA,EAAyB,YAAI,cAC7BA,EAAwB,WAAI,kBAC5BA,EAA6B,gBAAI,mBACjCA,EAAgC,mBAAI,sBACpCA,EAA6B,gBAAI,kBACjCA,EAA+B,kBAAI,eAPvC,CAQGA,IAAgBA,EAAc,KAKjC,SAAWC,GACPA,EAA8B,SAAI,UAClCA,EAAiC,YAAI,cACrCA,EAAmC,cAAI,eACvCA,EAA2B,MAAI,QAC/BA,EAAgC,WAAI,oBACpCA,EAAoC,eAAI,iBACxCA,EAA4C,uBAAI,yBAPpD,CAQGA,IAAwBA,EAAsB,KAKjD,SAAWC,GACPA,EAA8B,OAAI,SAClCA,EAAqC,cAAI,gBACzCA,EAAiC,UAAI,YAHzC,CAIGA,IAA0BA,EAAwB,KAKrD,SAAWC,GACPA,EAA8B,UAAI,YAClCA,EAAiC,aAAI,eACrCA,EAAkC,cAAI,gBACtCA,EAAkC,cAAI,gBACtCA,EAA+B,WAAI,aACnCA,EAA2B,OAAI,SAC/BA,EAA0B,MAAI,QAC9BA,EAA0B,MAAI,QAC9BA,EAAsC,kBAAI,oBAC1CA,EAAiC,aAAI,eACrCA,EAA6B,SAAI,WACjCA,EAAkC,cAAI,gBACtCA,EAA+B,WAAI,aACnCA,EAA0B,MAAI,QAC9BA,EAA0B,MAAI,QAC9BA,EAA2B,OAAI,SAC/BA,EAAkC,cAAI,gBACtCA,EAAgC,YAAI,cACpCA,EAAyB,KAAI,OAC7BA,EAAmC,eAAI,iBACvCA,EAA0C,sBAAI,wBAC9CA,EAAkC,cAAI,gBACtCA,EAAsC,kBAAI,oBAC1CA,EAAiC,aAAI,eACrCA,EAAiC,aAAI,eACrCA,EAAgC,YAAI,cACpCA,EAAiC,aAAI,eACrCA,EAAwC,oBAAI,6BAC5CA,EAAwC,oBAAI,0BAC5CA,EAAwC,oBAAI,sBAC5CA,EAA+B,WAAI,aACnCA,EAA8B,UAAI,YAClCA,EAAoC,gBAAI,2BACxCA,EAAkC,cAAI,gBACtCA,EAAgC,YAAI,cACpCA,EAAkC,cAAI,gBACtCA,EAAqC,iBAAI,mBACzCA,EAA0C,sBAAI,wBAC9CA,EAA+B,WAAI,aACnCA,EAA4B,QAAI,UAChCA,EAAkC,cAAI,YACtCA,EAAwC,oBAAI,sBAC5CA,EAAiC,aAAI,eACrCA,EAAyB,KAAI,OAC7BA,EAA+B,WAAI,kBACnCA,EAAoC,gBAAI,kBACxCA,EAAkC,cAAI,eACtCA,EAAgC,YAAI,cAhDxC,CAiDGA,IAAuBA,EAAqB,KAK/C,SAAWC,GACPA,EAAgC,aAAI,eACpCA,EAA0B,OAAI,SAFlC,CAGGA,IAAsBA,EAAoB,KAM7C,IAWI6C,EAXAC,EAAc,CACdC,MAAO,QACPC,eAAgB,iBAChBC,QAAS,UACTC,KAAM,OACNC,OAAQ,SACRC,WAAY,eAMhB,SAAWP,GACPA,EAAkB,QAAI,UACtBA,EAAc,IAAI,MAClBA,EAAqB,WAAI,aACzBA,EAAmB,SAAI,WACvBA,EAAsB,YAAI,cAC1BA,EAAwB,cAAI,gBAC5BA,EAAoB,UAAI,YACxBA,EAAqB,WAAI,oBACzBA,EAAyB,eAAI,wBATjC,CAUGA,IAAaA,EAAW,KAI3B,IAOIQ,EASAC,EAaAC,EAUAC,EAQAC,EAUAC,EAzDAC,EAA4B,CAC5BC,MAAO,QACPC,KAAM,SAMV,SAAWR,GACPA,EAAoB,MAAI,QACxBA,EAAuB,SAAI,WAC3BA,EAAwB,UAAI,YAHhC,CAIGA,IAAiBA,EAAe,KAKnC,SAAWC,GACPA,EAA0B,eAAI,WAC9BA,EAAoC,yBAAI,qBACxCA,EAAoC,yBAAI,qBACxCA,EAAyC,8BAAI,WAC7CA,EAA+B,oBAAI,gBACnCA,EAA6B,kBAAI,cACjCA,EAAsB,WAAI,8CAP9B,CAQGA,IAAcA,EAAY,KAK7B,SAAWC,GACPA,EAAqC,mBAAI,QACzCA,EAAoC,kBAAI,OACxCA,EAAqC,mBAAI,MACzCA,EAAuC,qBAAI,UAJ/C,CAKGA,IAAqBA,EAAmB,KAK3C,SAAWC,GACPA,EAAgC,oBAAI,IACpCA,EAAkC,sBAAI,IAF1C,CAGGA,IAAeA,EAAa,KAK/B,SAAWC,GACPA,EAAyB,SAAI,UAC7BA,EAA6B,aAAI,cACjCA,EAA8C,8BAAI,8BAClDA,EAA8B,cAAI,eAJtC,CAKGA,IAAmBA,EAAiB,KAKvC,SAAWC,GACPA,EAAUA,EAAgB,KAAI,MAAQ,OACtCA,EAAUA,EAAe,IAAI,MAAQ,MACrCA,EAAUA,EAAiB,MAAI,MAAQ,QACvCA,EAAUA,EAAmB,QAAI,MAAQ,UACzCA,EAAUA,EAAwB,aAAI,MAAQ,eAC9CA,EAAUA,EAAyB,cAAI,MAAQ,gBAC/CA,EAAUA,EAAoB,SAAI,MAAQ,WAC1CA,EAAUA,EAAwB,aAAI,MAAQ,eAC9CA,EAAUA,EAAqB,UAAI,MAAQ,YAT/C,CAUGA,IAAcA,EAAY,KAI7B,IAOII,EAPAC,EAAe,cAEfC,EAAgB,IAChBC,EACW,qBADXA,EAEsB,OAG1B,SAAWH,GACPA,EAAgC,OAAI,SACpCA,EAA+B,MAAI,QACnCA,EAAiC,QAAI,UACrCA,EAA0C,iBAAI,mBAJlD,CAKGA,IAA4BA,EAA0B,KACzD,IAeII,EAfAC,EAAyB,CACzBC,eAAgB,EAChBC,qBAAsB,GACtBC,sBAAuB,IACvBC,kBAAmB,GACnBC,UAAW,mBACXC,mBAAoB,IACpBC,gBAAiB,IACjBC,cAAe,IACfC,eAAgB,IAChBC,cAAe,kBAMnB,SAAWX,GACPA,EAA6B,OAAI,SACjCA,EAA0B,IAAI,MAC9BA,EAA0B,IAAI,WAHlC,CAIGA,IAAyBA,EAAuB,KAInD,IAiBIY,EAQAC,EAQAC,EAUAC,EAQAC,EASAC,EA5DAC,EAE+B,GAF/BA,EAImC,KAJnCA,EAMmB,aANnBA,EAQ2B,oBAE3BC,EACqB,gBADrBA,EAEuB,mBAM3B,SAAWP,GACPA,EAAiC,SAAI,WACrCA,EAAiC,SAAI,WAFzC,CAGGA,IAA2BA,EAAyB,KAKvD,SAAWC,GACPA,EAAcA,EAA2B,YAAI,KAAO,cACpDA,EAAcA,EAA8B,eAAI,KAAO,iBAF3D,CAGGA,IAAkBA,EAAgB,KAKrC,SAAWC,GACPA,EAA8C,sBAAI,IAClDA,EAAuC,eAAI,IAC3CA,EAA6C,qBAAI,IACjDA,EAA6B,KAAI,IAJrC,CAKGA,IAA2BA,EAAyB,KAKvD,SAAWC,GACPA,EAAqD,4BAAI,IACzDA,EAAsD,6BAAI,IAC1DA,EAAiD,wBAAI,IACrDA,EAA6D,oCAAI,IACjEA,EAAyD,gCAAI,IALjE,CAMGA,IAA4BA,EAA0B,KAEzD,SAAWC,GACPA,EAA2B,aAAI,IAC/BA,EAA4B,cAAI,IAChCA,EAAqC,uBAAI,IACzCA,EAA0C,4BAAI,IAC9CA,EAA0C,4BAAI,IAC9CA,EAA6C,+BAAI,IANrD,CAOGA,IAAiBA,EAAe,KAEnC,SAAWC,GACPA,EAAe,IAAI,MACnBA,EAAe,IAAI,MACnBA,EAAe,IAAI,MAHvB,CAIGA,IAAcA,EAAY,KAC7B,ICxUIG,EAOAC,EASAC,EAQAC,EAkBAC,EAQAC,GAWAC,GAeAC,GAWAC,GCzHAC,GACiB,CACbC,KAAM,mBACNC,KAAM,uCAHVF,GAKmB,CACfC,KAAM,sBACNC,KAAM,wIAMV,GAA2B,SAAUC,GAErC,SAASC,UAAUC,EAAWC,EAAcC,GACxC,IAAIC,EAAQpW,KACRqW,EAAcH,EAAeD,EAAY,KAAOC,EAAeD,EAOnE,OANAG,EAAQL,EAAOpZ,KAAKqD,KAAMqW,IAAgBrW,KAC1C9C,OAAOuN,eAAe2L,EAAOJ,UAAU1X,WACvC8X,EAAMH,UAAYA,GAAanG,EAAU4B,aACzC0E,EAAMF,aAAeA,GAAgBpG,EAAU4B,aAC/C0E,EAAME,SAAWH,GAAYrG,EAAU4B,aACvC0E,EAAMrZ,KAAO,YACNqZ,EAoBX,OA9BA,eAAUJ,UAAWD,GAYrBC,UAAU1X,UAAUiY,iBAAmB,SAAUC,GAC7CxW,KAAKwW,cAAgBA,GAMzBR,UAAUS,sBAAwB,SAAUC,GACxC,OAAO,IAAIV,UAAUJ,GAAiCC,KAAMD,GAAiCE,KAAO,KAAOY,IAO/GV,UAAUW,wBAA0B,SAAUD,GAC1C,OAAO,IAAIV,UAAUJ,GAAmCC,KAAMD,GAAmCE,KAAO,KAAOY,IAE5GV,UA/BmB,CAgC5BjP,OC7CE,GAA6B,SAAUgP,GAEvC,SAASa,YAAYX,EAAWC,EAAcI,GAC1C,IAAIF,EAAQL,EAAOpZ,KAAKqD,KAAMiW,EAAWC,EAAcI,IAAatW,KAGpE,OAFAoW,EAAMrZ,KAAO,cACbG,OAAOuN,eAAe2L,EAAOQ,YAAYtY,WAClC8X,EAEX,OAPA,eAAUQ,YAAab,GAOhBa,YARqB,CAS9B,ICREC,GAAwC,CACxC,uBACA,mBACA,kBAEAC,GAAyC,CACzC,eACA,oBACA,eACA,wBACA,oBAKAC,GACoB,CAChBlB,KAAM,kBACNC,KAAM,wDAHViB,GAK4B,CACxBlB,KAAM,6BACNC,KAAM,uJAMV,GAA8C,SAAUC,GAExD,SAASiB,6BAA6Bf,EAAWC,EAAcI,EAAUW,EAAWC,EAASV,EAAeW,GACxG,IAAIf,EAAQL,EAAOpZ,KAAKqD,KAAMiW,EAAWC,EAAcI,IAAatW,KAOpE,OANA9C,OAAOuN,eAAe2L,EAAOY,6BAA6B1Y,WAC1D8X,EAAMa,UAAYA,GAAanH,EAAU4B,aACzC0E,EAAMc,QAAUA,GAAWpH,EAAU4B,aACrC0E,EAAMI,cAAgBA,GAAiB1G,EAAU4B,aACjD0E,EAAMe,OAASA,GAAUrH,EAAU4B,aACnC0E,EAAMrZ,KAAO,+BACNqZ,EA6BX,OAtCA,eAAUY,6BAA8BjB,GAiBxCiB,6BAA6BI,2BAA6B,SAAUnB,EAAWI,EAAaC,GACxF,IAAIe,IAAmCpB,GAAaY,GAAsCtJ,QAAQ0I,IAAc,EAC5GqB,IAAkChB,GAAYQ,GAAuCvJ,QAAQ+I,IAAa,EAC1GiB,IAAmClB,GAAeQ,GAAsCW,MAAK,SAAUC,GACvG,OAAOpB,EAAY9I,QAAQkK,IAAgB,KAE/C,OAAOJ,GAAkCE,GAAkCD,GAK/EN,6BAA6BU,yBAA2B,WACpD,OAAO,IAAIV,6BAA6BD,GAAuDlB,KAAMkB,GAAuDjB,OAMhKkB,6BAA6BW,oCAAsC,WAC/D,OAAO,IAAIX,6BAA6BD,GAA+DlB,KAAMkB,GAA+DjB,OAEzKkB,6BAvCsC,CAwC/C,IHtEEY,GAQqB,gBARrBA,GAYa,IAZbA,GAgBc,IAhBdA,GAoBmB,OApBnBA,GAwB0B,GAxB1BA,GA4BU,kBAEVC,GACY,uCADZA,GAEwB,mCAFxBA,GAGgB,QAGpB,SAAW1C,GACPA,EAAwC,iBAAI,YAC5CA,EAAyC,kBAAI,oBAC7CA,EAAgC,SAAI,WACpCA,EAAgC,SAAI,WAJxC,CAKGA,IAA0BA,EAAwB,KAErD,SAAWC,GACPA,EAAmC,aAAI,eACvCA,EAAqC,eAAI,iBACzCA,EAAoC,cAAI,gBAH5C,CAIGA,IAAyBA,EAAuB,KAKnD,SAAWC,GACPA,EAAuB,IAAI,MAC3BA,EAAwB,KAAI,OAFhC,CAGGA,IAAsBA,EAAoB,KAK7C,SAAWC,GACPA,EAA8B,UAAI,YAClCA,EAA0C,sBAAI,uBAC9CA,EAAkC,cAAI,gBACtCA,EAAkC,cAAI,gBACtCA,EAAkC,cAAI,iBACtCA,EAA+B,WAAI,iBACnCA,EAAiC,aAAI,qBACrCA,EAA6B,SAAI,UACjCA,EAAmC,eAAI,iBACvCA,EAA2B,OAAI,SAC/BA,EAA2C,uBAAI,qBAC/CA,EAAmC,eAAI,iBACvCA,EAAmC,eAAI,wBACvCA,EAAmC,eAAI,iBACvCA,EAAqC,iBAAI,2BAf7C,CAgBGA,IAAuBA,EAAqB,KAE/C,SAAWC,GACPA,EAA8B,aAAI,oBAClCA,EAA4B,WAAI,kBAFpC,CAGGA,IAAoBA,EAAkB,KAKzC,SAAWC,GACPA,EAA+B,YAAI,cACnCA,EAA+B,YAAI,kBAFvC,CAGGA,KAAsBA,GAAoB,KAQ7C,SAAWC,GACPA,EAAMA,EAA4B,qBAAI,KAAO,uBAC7CA,EAAMA,EAAyB,kBAAI,KAAO,oBAC1CA,EAAMA,EAAiB,UAAI,KAAO,YAClCA,EAAMA,EAAmC,4BAAI,KAAO,8BACpDA,EAAMA,EAA6B,sBAAI,KAAO,wBAC9CA,EAAMA,EAA0B,mBAAI,KAAO,qBAC3CA,EAAMA,EAAqC,8BAAI,IAAM,gCACrDA,EAAMA,EAAc,OAAI,KAAO,SAC/BA,EAAMA,EAAmB,YAAI,KAAO,cATxC,CAUGA,KAAUA,GAAQ,KAKrB,SAAWC,GACPA,EAA0B,SAAI,WAC9BA,EAAuB,MAAI,QAC3BA,EAAwB,OAAI,SAC5BA,EAAsB,KAAI,OAJ9B,CAKGA,KAAoBA,GAAkB,KAMzC,SAAWC,GAIPA,EAA2B,QAAI,UAI/BA,EAAyB,MAAI,QAI7BA,EAA0B,OAAI,SAI9BA,EAAgC,aAAI,eAIpCA,EAA6B,UAAI,YAIjCA,EAAkC,eAAI,iBAItCA,EAAwB,KAAI,OA5BhC,CA6BGA,KAAsBA,GAAoB,KAC7C,IAQImC,GARAC,GAAkB,CAClBC,OAAQxF,GAKRyF,GAAiB,OAGrB,SAAWH,GACPA,EAAkB,MAAI,oBACtBA,EAAoB,QAAI,sBAF5B,CAGGA,KAAeA,GAAa,KAE/B,IAGII,GAHAC,GAAU,WAId,SAAWD,GAMPA,EAAkBA,EAA2B,QAAI,GAAK,UAKtDA,EAAkBA,EAA+B,YAAI,GAAK,cAM1DA,EAAkBA,EAA8C,2BAAI,GAAK,6BAMzEA,EAAkBA,EAAgC,aAAI,GAAK,eAM3DA,EAAkBA,EAA0C,uBAAI,GAAK,yBAKrEA,EAAkBA,EAAwB,KAAI,GAAK,OAlCvD,CAmCGA,KAAsBA,GAAoB,KI7M7C,ICHIE,GDGAC,GACiB,CACbxC,KAAM,oBACNC,KAAM,sJAHVuC,GAKiB,CACbxC,KAAM,oBACNC,KAAM,0JAMV,GAAiC,SAAUC,GAE3C,SAASuC,gBAAgBrC,EAAWC,GAChC,IAAIE,EAAQL,EAAOpZ,KAAKqD,KAAMiW,EAAWC,IAAiBlW,KAG1D,OAFAoW,EAAMrZ,KAAO,kBACbG,OAAOuN,eAAe2L,EAAOkC,gBAAgBha,WACtC8X,EAcX,OAnBA,eAAUkC,gBAAiBvC,GAU3BuC,gBAAgBC,sBAAwB,WACpC,OAAO,IAAID,gBAAgBD,GAAuCxC,KAAMwC,GAAuCvC,OAKnHwC,gBAAgBE,sBAAwB,WACpC,OAAO,IAAIF,gBAAgBD,GAAuCxC,KAAMwC,GAAuCvC,OAE5GwC,gBApByB,CAqBlC,IErCE,GAA4B,WAC5B,SAASG,WAAWxW,GAChBjC,KAAK0Y,IAAMzW,EAAQyW,IACnB1Y,KAAK2Y,IAAM1W,EAAQ0W,IACnB3Y,KAAK4Y,IAAM3W,EAAQ2W,IA2BvB,OAjBAH,WAAWI,mBAAqB,SAAUC,GAEtC,IAAKA,EAAiBF,IAClB,MAAM,GAAgBL,wBAG1B,IAAKO,EAAiBH,IAClB,MAAM,GAAgBH,wBAE1B,IAAIO,EAAY,IAAIN,WAAW,CAE3BC,IAAKI,EAAiBJ,KAAO1D,EAAUgE,IACvCJ,IAAKE,EAAiBF,IACtBD,IAAKG,EAAiBH,MAE1B,OAAOM,KAAKC,UAAUH,IAEnBN,WA/BoB,GCA3BU,GAA2B,WAC3B,SAASA,aAcT,OAPAA,UAAUC,aAAe,SAAUC,GAE/B,IADA,IAAIC,EAAMD,EAAIta,SAAS,IAChBua,EAAI7W,OAAS,GAChB6W,EAAM,IAAMA,EAEhB,OAAOA,GAEJH,UAfmB,GCA1B,GAA+B,WAC/B,SAASI,cAAcC,GACnBxZ,KAAKwZ,UAAYA,EA6ErB,OArDAD,cAAcjb,UAAUmb,aAAe,WACnC,IACI,IAAIC,EAAS,IAAIC,WAAW,IAQ5B,OAPA3Z,KAAKwZ,UAAUI,gBAAgBF,GAE/BA,EAAO,IAAM,GACbA,EAAO,IAAM,GAEbA,EAAO,IAAM,IACbA,EAAO,IAAM,IACNP,GAAUC,aAAaM,EAAO,IAAMP,GAAUC,aAAaM,EAAO,IACnEP,GAAUC,aAAaM,EAAO,IAAMP,GAAUC,aAAaM,EAAO,IAClE,IAAMP,GAAUC,aAAaM,EAAO,IAAMP,GAAUC,aAAaM,EAAO,IACxE,IAAMP,GAAUC,aAAaM,EAAO,IAAMP,GAAUC,aAAaM,EAAO,IACxE,IAAMP,GAAUC,aAAaM,EAAO,IAAMP,GAAUC,aAAaM,EAAO,IACxE,IAAMP,GAAUC,aAAaM,EAAO,KAAOP,GAAUC,aAAaM,EAAO,KACzEP,GAAUC,aAAaM,EAAO,KAAOP,GAAUC,aAAaM,EAAO,KACnEP,GAAUC,aAAaM,EAAO,KAAOP,GAAUC,aAAaM,EAAO,KAE7E,MAAO7T,GAKH,IAJA,IAAIgU,EAAa,uCACbP,EAAM,mBACNhc,EAAI,EACJwc,EAAehK,EAAU4B,aACpBlV,EAAI,EAAGA,EAAI,GAAIA,IACE,MAAlBqd,EAAWrd,IAAgC,MAAlBqd,EAAWrd,KAEpCc,EAAoB,GAAhByc,KAAKC,SAAgB,GAEP,MAAlBH,EAAWrd,GACXsd,GAAgBR,EAAIhc,GAEG,MAAlBuc,EAAWrd,IAEhBc,GAAK,EAELwc,GAAgBR,EADhBhc,GAAK,IAILwc,GAAgBD,EAAWrd,GAGnC,OAAOsd,IAOfP,cAAcjb,UAAU2b,OAAS,SAAUC,GAEvC,MADgB,6EACCC,KAAKD,IAEnBX,cA/EuB,GCG9B,GAAoC,WACpC,SAASa,sBAwGT,OAlGAA,mBAAmBC,gBAAkB,SAAUC,GAK3C,IAJA,IAAIC,EACAC,EAAU,EACVC,EAAUH,EAAQ7X,OAEbiY,EAAU,EAAGA,EAAUD,EAASC,IAErCF,IADAD,EAAOD,EAAQK,WAAWD,IACR,IAAO,EAAIH,EAAO,KAAQ,EAAIA,EAAO,MAAU,EAAIA,EAAO,QAAW,EAAIA,EAAO,SAAY,EAAI,EAItH,IAFA,IAAIK,EAAS,IAAIjB,WAAWa,GAEnBK,EAAO,EAAGC,EAAU,EAAGD,EAAOL,EAASM,KAC5CP,EAAOD,EAAQK,WAAWG,IACf,IAEPF,EAAOC,KAAUN,EAEZA,EAAO,MAEZK,EAAOC,KAAU,KAAON,IAAS,GACjCK,EAAOC,KAAU,KAAc,GAAPN,IAEnBA,EAAO,OAEZK,EAAOC,KAAU,KAAON,IAAS,IACjCK,EAAOC,KAAU,KAAON,IAAS,EAAI,IACrCK,EAAOC,KAAU,KAAc,GAAPN,IAEnBA,EAAO,SAEZK,EAAOC,KAAU,KAAON,IAAS,IACjCK,EAAOC,KAAU,KAAON,IAAS,GAAK,IACtCK,EAAOC,KAAU,KAAON,IAAS,EAAI,IACrCK,EAAOC,KAAU,KAAc,GAAPN,IAEnBA,EAAO,UAEZK,EAAOC,KAAU,KAAON,IAAS,IACjCK,EAAOC,KAAU,KAAON,IAAS,GAAK,IACtCK,EAAOC,KAAU,KAAON,IAAS,GAAK,IACtCK,EAAOC,KAAU,KAAON,IAAS,EAAI,IACrCK,EAAOC,KAAU,KAAc,GAAPN,KAIxBK,EAAOC,KAAU,KAAON,IAAS,IACjCK,EAAOC,KAAU,KAAON,IAAS,GAAK,IACtCK,EAAOC,KAAU,KAAON,IAAS,GAAK,IACtCK,EAAOC,KAAU,KAAON,IAAS,GAAK,IACtCK,EAAOC,KAAU,KAAON,IAAS,EAAI,IACrCK,EAAOC,KAAU,KAAc,GAAPN,IAGhC,OAAOK,GAMXR,mBAAmBW,oBAAsB,SAAUC,GAG/C,IAFA,IAAIC,EAAO,IAAIC,YAAYF,EAAWvY,QAClC0Y,EAAW,IAAIxB,WAAWsB,GACrBze,EAAI,EAAGA,EAAIwe,EAAWvY,OAAQjG,IACnC2e,EAAS3e,GAAKwe,EAAWL,WAAWne,GAExC,OAAOye,GAMXb,mBAAmBgB,gBAAkB,SAAUR,GAE3C,IADA,IAAIS,EAAQvL,EAAU4B,aACb4J,OAAQ,EAAQC,EAAOX,EAAOnY,OAAQoY,EAAO,EAAGA,EAAOU,EAAMV,IAClES,EAAQV,EAAOC,GACfQ,GAASG,OAAOC,aAAaH,EAAQ,KAAOA,EAAQ,KAAOT,EAAO,EAAIU,EAElD,YAAfD,EAAQ,MAAqBV,IAASC,GAAQ,KAAO,KAAOD,IAASC,GAAQ,KAAO,KAAOD,IAASC,GAAQ,KAAO,KAAOD,IAASC,GAAQ,KAAO,GAAKD,IAASC,GAAQ,IACvKS,EAAQ,KAAOA,EAAQ,KAAOT,EAAO,EAAIU,GACtCD,EAAQ,KAAO,KAAOV,IAASC,GAAQ,KAAO,KAAOD,IAASC,GAAQ,KAAO,KAAOD,IAASC,GAAQ,KAAO,GAAKD,IAASC,GAAQ,IACjIS,EAAQ,KAAOA,EAAQ,KAAOT,EAAO,EAAIU,GACtCD,EAAQ,KAAO,KAAOV,IAASC,GAAQ,KAAO,KAAOD,IAASC,GAAQ,KAAO,GAAKD,IAASC,GAAQ,IAClGS,EAAQ,KAAOA,EAAQ,KAAOT,EAAO,EAAIU,GACtCD,EAAQ,KAAO,KAAOV,IAASC,GAAQ,KAAO,GAAKD,IAASC,GAAQ,IACnES,EAAQ,KAAOA,EAAQ,KAAOT,EAAO,EAAIU,GACtCD,EAAQ,KAAO,GAAKV,IAASC,GAAQ,IAElCS,GAE5B,OAAOD,GAMXjB,mBAAmBsB,sBAAwB,SAAU9W,GACjD,OAAOqU,KAAKC,UAAUtU,EAAK1H,OAAO6N,KAAKnG,GAAK+W,SAEzCvB,mBAzG4B,GCCnC,GAA8B,WAC9B,SAASwB,gBAqET,OA/DAA,aAAatd,UAAUud,UAAY,SAAUC,GACzC,OAAOC,mBAAmB/b,KAAKgc,OAAOF,GACjCG,QAAQ,KAAMnM,EAAU4B,cACxBuK,QAAQ,MAAO,KACfA,QAAQ,MAAO,OAMxBL,aAAatd,UAAU4d,aAAe,SAAUC,GAC5C,OAAOnc,KAAKoc,aAAaD,GACpBF,QAAQ,KAAMnM,EAAU4B,cACxBuK,QAAQ,MAAO,KACfA,QAAQ,MAAO,MAMxBL,aAAatd,UAAU0d,OAAS,SAAUF,GACtC,IAAIO,EAAe,GAAmBhC,gBAAgByB,GACtD,OAAO9b,KAAKoc,aAAaC,IAM7BT,aAAatd,UAAU8d,aAAe,SAAUxB,GAG5C,IAFA,IAAI0B,GAAS,EAAK1B,EAAOnY,OAAS,GAAM,EACpC8Z,EAAUzM,EAAU4B,aACf8K,OAAQ,EAAQjB,EAAOX,EAAOnY,OAAQga,EAAU,EAAG5B,EAAO,EAAGA,EAAOU,EAAMV,IAC/E2B,EAAQ3B,EAAO,EAKf4B,GAAW7B,EAAOC,KAAU,KAAO2B,EAAQ,IAC7B,IAAVA,GAAe5B,EAAOnY,OAASoY,GAAS,IACxC0B,GAAWf,OAAOC,aAAazb,KAAK0c,WAAWD,IAAY,GAAK,IAAKzc,KAAK0c,WAAWD,IAAY,GAAK,IAAKzc,KAAK0c,WAAWD,IAAY,EAAI,IAAKzc,KAAK0c,WAAqB,GAAVD,IAChKA,EAAU,GAGlB,OAAiB,IAAVH,EAAcC,EAAUA,EAAQI,UAAU,EAAGJ,EAAQ9Z,OAAS6Z,IAAoB,IAAVA,EAAc,IAAM,OAMvGV,aAAatd,UAAUoe,WAAa,SAAUE,GAC1C,OAAOA,EAAS,GACZA,EAAS,GACPA,EAAS,GACPA,EAAS,GACPA,EAAS,GACPA,EAAS,EACI,KAAXA,EACE,GACa,KAAXA,EACE,GAEI,IAErBhB,aAtEsB,GCA7B,GAA8B,WAC9B,SAASiB,gBA+DT,OAzDAA,aAAave,UAAUwe,OAAS,SAAUhB,GACtC,IAAIiB,EAAgBjB,EAAMG,QAAQ,KAAM,KAAKA,QAAQ,KAAM,KAC3D,OAAQc,EAActa,OAAS,GAC3B,KAAK,EACD,MACJ,KAAK,EACDsa,GAAiB,KACjB,MACJ,KAAK,EACDA,GAAiB,IACjB,MACJ,QACI,MAAM,IAAIhW,MAAM,yBAExB,IAAIsV,EAAerc,KAAKgd,eAAeD,GACvC,OAAO,GAAmB3B,gBAAgBiB,IAO9CQ,aAAave,UAAU0e,eAAiB,SAAUC,EAAcC,GAK5D,IAJA,IAAIX,EAAUU,EAAahB,QAAQ,oBAAqBnM,EAAU4B,cAC9DyL,EAASZ,EAAQ9Z,OACjB2a,EAAUF,EAAanD,KAAKsD,MAAe,EAATF,EAAa,IAAM,GAAKD,GAAcA,EAAsB,EAATC,EAAa,IAAM,EACxGvC,EAAS,IAAIjB,WAAWyD,GACnBZ,OAAQ,EAAQc,OAAQ,EAAQb,EAAU,EAAGc,EAAU,EAAGC,EAAS,EAAGA,EAASL,EAAQK,IAG5F,GAFAF,EAAiB,EAATE,EACRf,GAAWzc,KAAKyd,WAAWlB,EAAQ5B,WAAW6C,KAAY,GAAK,EAAIF,EACrD,IAAVA,GAAeH,EAASK,GAAW,EAAG,CACtC,IAAKhB,EAAQ,EAAGA,EAAQ,GAAKe,EAAUH,EAASZ,IAASe,IACrD3C,EAAO2C,GAAWd,KAAa,KAAOD,EAAQ,IAAM,IAExDC,EAAU,EAGlB,OAAO7B,GAMXiC,aAAave,UAAUmf,WAAa,SAAUC,GAC1C,OAAOA,EAAU,IAAMA,EAAU,GAC7BA,EAAU,GACRA,EAAU,IAAMA,EAAU,IACxBA,EAAU,GACRA,EAAU,IAAMA,EAAU,GACxBA,EAAU,EACI,KAAZA,EACE,GACc,KAAZA,EACE,GAEI,GAErBb,aAhEsB,GCD7Bc,GACyB,CACrB9H,KAAM,6BACNC,KAAM,+GAHV6H,GAKsB,CAClB9H,KAAM,0BACNC,KAAM,mFAPV6H,GASmB,CACf9H,KAAM,sBACNC,KAAM,8EAXV6H,GAakB,CACd9H,KAAM,sBACNC,KAAM,oFAfV6H,GAiByB,CACrB9H,KAAM,6BACNC,KAAM,2EAnBV6H,GAqBc,CACV9H,KAAM,gBACNC,KAAM,+EAvBV6H,GAyB8B,CAC1B9H,KAAM,sBACNC,KAAM,+IA3BV6H,GA6BqB,CACjB9H,KAAM,wBACNC,KAAM,uGA/BV6H,GAqCmB,CACf9H,KAAM,gBACNC,KAAM,6IAvCV6H,GAyCoB,CAChB9H,KAAM,iBACNC,KAAM,iGA3CV6H,GA6CoB,CAChB9H,KAAM,kBACNC,KAAM,mBA/CV6H,GAiDoB,CAChB9H,KAAM,iBACNC,KAAM,wFAnDV6H,GAqDoB,CAChB9H,KAAM,kBACNC,KAAM,mBAvDV6H,GAyDuB,CACnB9H,KAAM,sBACNC,KAAM,gOA3DV6H,GA+DuB,CACnB9H,KAAM,qBACNC,KAAM,6FAjEV6H,GAuEwB,CACpB9H,KAAM,2BACNC,KAAM,qJAzEV6H,GA4E0B,CACtB9H,KAAM,6BACNC,KAAM,6HA9EV6H,GAgF6B,CACzB9H,KAAM,gCACNC,KAAM,oIAlFV6H,GAoF0B,CACtB9H,KAAM,yBACNC,KAAM,6EAtFV6H,GAwFuB,CACnB9H,KAAM,4BACNC,KAAM,8FA1FV6H,GA4FuB,CACnB9H,KAAM,4BACNC,KAAM,gGA9FV6H,GAgGqB,CACjB9H,KAAM,yBACNC,KAAM,wCAlGV6H,GAoGyB,CACrB9H,KAAM,uBACNC,KAAM,6CAtGV6H,GAwG4B,CACxB9H,KAAM,gCACNC,KAAM,mHA1GV6H,GA4GmB,CACf9H,KAAM,sBACNC,KAAM,2BA9GV6H,GAgHwB,CACpB9H,KAAM,4BACNC,KAAM,oDAlHV6H,GAoH0B,CACtB9H,KAAM,+BACNC,KAAM,2FAtHV6H,GAwHoB,CAChB9H,KAAM,uBACNC,KAAM,8CA1HV6H,GA4HyB,CACrB9H,KAAM,4BACNC,KAAM,6DA9HV6H,GAgIgB,CACZ9H,KAAM,mBACNC,KAAM,4CAlIV6H,GAoIkB,CACd9H,KAAM,sCACNC,KAAM,iFAtIV6H,GAwIa,CACT9H,KAAM,mBACNC,KAAM,6EA1IV6H,GA4IkB,CACd9H,KAAM,qBACNC,KAAM,sBA9IV6H,GAgJuB,CACnB9H,KAAM,0BACNC,KAAM,4BAlJV6H,GAoJ0B,CACtB9H,KAAM,6BACNC,KAAM,+BAtJV6H,GAwJkB,CACd9H,KAAM,oBACNC,KAAM,4FA1JV6H,GA4JyB,CACrB9H,KAAM,4BACNC,KAAM,kKA9JV6H,GAgKsB,CAClB9H,KAAM,yBACNC,KAAM,sOAlKV6H,GAoKoB,CAChB9H,KAAM,uBACNC,KAAM,wDAtKV6H,GAwKqB,CACjB9H,KAAM,0CACNC,KAAM,mEA1KV6H,GA4K+B,CAC3B9H,KAAM,kDACNC,KAAM,qEA9KV6H,GAwL2B,CACvB9H,KAAM,0BACNC,KAAM,+DA1LV6H,GA4LoB,CAChB9H,KAAM,qCACNC,KAAM,+CA9LV6H,GAgMc,CACV9H,KAAM,iBACNC,KAAM,yIAlMV6H,GAoMuB,CACnB9H,KAAM,0BACNC,KAAM,4DAtMV6H,GAwMmB,CACf9H,KAAM,gBACNC,KAAM,2BAMV,GAAiC,SAAUC,GAE3C,SAAS6H,gBAAgB3H,EAAWC,GAChC,IAAIE,EAAQL,EAAOpZ,KAAKqD,KAAMiW,EAAWC,IAAiBlW,KAG1D,OAFAoW,EAAMrZ,KAAO,kBACbG,OAAOuN,eAAe2L,EAAOwH,gBAAgBtf,WACtC8X,EAiSX,OAtSA,eAAUwH,gBAAiB7H,GAW3B6H,gBAAgBC,8BAAgC,SAAUC,GACtD,OAAO,IAAIF,gBAAgBD,GAA+C9H,KAAM8H,GAA+C7H,KAAO,uBAAyBgI,IAMnKF,gBAAgBG,2BAA6B,WACzC,OAAO,IAAIH,gBAAgBD,GAA4C9H,KAAM,GAAK8H,GAA4C7H,OAMlI8H,gBAAgBI,wBAA0B,SAAUC,GAChD,OAAO,IAAIL,gBAAgBD,GAAyC9H,KAAM8H,GAAyC7H,KAAO,uBAAyBmI,IAMvJL,gBAAgBM,4BAA8B,SAAUC,GACpD,OAAO,IAAIP,gBAAgBD,GAAwC9H,KAAM8H,GAAwC7H,KAAO,qBAAuBqI,IAKnJP,gBAAgBQ,uCAAyC,SAAUC,GAC/D,OAAO,IAAIT,gBAAgBD,GAA+C9H,KAAM8H,GAA+C7H,KAAO,YAAcuI,IAKxJT,gBAAgBU,mBAAqB,SAAUC,EAAUF,GACrD,OAAO,IAAIT,gBAAgBD,GAAoC9H,KAAM8H,GAAoC7H,KAAO,0BAA4BuI,EAAY,0BAA4BE,EAASta,MAAM,KAAK,KAK5M2Z,gBAAgBY,mCAAqC,SAAUH,GAC3D,OAAO,IAAIT,gBAAgBD,GAAoD9H,KAAM8H,GAAoD7H,KAAO,0CAA4CuI,IAMhMT,gBAAgBa,+BAAiC,SAAUC,GACvD,OAAO,IAAId,gBAAgBD,GAA2C9H,KAAM8H,GAA2C7H,KAAO,kBAAoB4I,IAMtJd,gBAAgBe,wBAA0B,SAAUC,EAAcvI,GAC9D,OAAO,IAAIuH,gBAAgBD,GAAyC9H,KAAM8H,GAAyC7H,KAAO,mBAAqB8I,EAAe,eAAiBvI,IAKnLuH,gBAAgBiB,yBAA2B,WACvC,OAAO,IAAIjB,gBAAgBD,GAA0C9H,KAAM8H,GAA0C7H,OAMzH8H,gBAAgBkB,yBAA2B,SAAUC,GACjD,OAAO,IAAInB,gBAAgBD,GAA0C9H,KAAM8H,GAA0C7H,KAAO,MAAQiJ,IAKxInB,gBAAgBoB,yBAA2B,WACvC,OAAO,IAAIpB,gBAAgBD,GAA0C9H,KAAM8H,GAA0C7H,OAMzH8H,gBAAgBqB,4BAA8B,WAC1C,OAAO,IAAIrB,gBAAgBD,GAA6C9H,KAAM8H,GAA6C7H,OAK/H8H,gBAAgBsB,4BAA8B,WAC1C,OAAO,IAAItB,gBAAgBD,GAA6C9H,KAAM8H,GAA6C7H,OAM/H8H,gBAAgBuB,yBAA2B,SAAUC,GACjD,OAAO,IAAIxB,gBAAgBD,GAA0C9H,KAAM8H,GAA0C7H,KAAO,MAAQsJ,IAKxIxB,gBAAgByB,yCAA2C,WACvD,OAAO,IAAIzB,gBAAgBD,GAA8C9H,KAAM8H,GAA8C7H,KAAO,MAKxI8H,gBAAgB0B,2CAA6C,WACzD,OAAO,IAAI1B,gBAAgBD,GAAgD9H,KAAM8H,GAAgD7H,OAKrI8H,gBAAgB2B,8CAAgD,WAC5D,OAAO,IAAI3B,gBAAgBD,GAAmD9H,KAAM8H,GAAmD7H,OAK3I8H,gBAAgB4B,oCAAsC,WAClD,OAAO,IAAI5B,gBAAgBD,GAAgD9H,KAAM8H,GAAgD7H,OAMrI8H,gBAAgB6B,iCAAmC,SAAUC,GACzD,OAAO,IAAI9B,gBAAgBD,GAA6C9H,KAAM8H,GAA6C7H,KAAO,iBAAmB4J,IAMzJ9B,gBAAgB+B,mCAAqC,SAAUD,GAC3D,OAAO,IAAI9B,gBAAgBD,GAA6C9H,KAAM8H,GAA6C7H,KAAO,iBAAmB4J,IAMzJ9B,gBAAgBgC,0BAA4B,SAAUC,GAClD,OAAO,IAAIjC,gBAAgBD,GAA2C9H,KAAM8H,GAA2C7H,KAAO,kBAAoB+J,IAMtJjC,gBAAgBkC,8BAAgC,WAC5C,OAAO,IAAIlC,gBAAgBD,GAA+C9H,KAAM,GAAK8H,GAA+C7H,OAKxI8H,gBAAgBmC,+BAAiC,WAC7C,OAAO,IAAInC,gBAAgBD,GAAkD9H,KAAM,GAAK8H,GAAkD7H,OAK9I8H,gBAAgBoC,6BAA+B,WAC3C,OAAO,IAAIpC,gBAAgBD,GAAyC9H,KAAM,GAAK8H,GAAyC7H,OAK5H8H,gBAAgBqC,6BAA+B,WAC3C,OAAO,IAAIrC,gBAAgBD,GAA8C9H,KAAM,GAAK8H,GAA8C7H,OAKtI8H,gBAAgBsC,oCAAsC,WAClD,OAAO,IAAItC,gBAAgBD,GAAgD9H,KAAM,GAAK8H,GAAgD7H,OAK1I8H,gBAAgBuC,iCAAmC,WAC/C,OAAO,IAAIvC,gBAAgBD,GAA0C9H,KAAM8H,GAA0C7H,OAKzH8H,gBAAgBwC,mCAAqC,WACjD,OAAO,IAAIxC,gBAAgBD,GAA+C9H,KAAM8H,GAA+C7H,OAKnI8H,gBAAgByC,0BAA4B,WACxC,OAAO,IAAIzC,gBAAgBD,GAAsC9H,KAAM8H,GAAsC7H,OAKjH8H,gBAAgB0C,uBAAyB,WACrC,OAAO,IAAI1C,gBAAgBD,GAAwC9H,KAAM,GAAK8H,GAAwC7H,OAM1H8H,gBAAgB2C,0BAA4B,SAAUC,GAClD,OAAO,IAAI5C,gBAAgBD,GAAmC9H,KAAM,GAAK8H,GAAmC7H,KAAO0K,IAKvH5C,gBAAgB6C,4BAA8B,WAC1C,OAAO,IAAI7C,gBAAgBD,GAAwC9H,KAAM,GAAK8H,GAAwC7H,OAK1H8H,gBAAgB8C,iCAAmC,WAC/C,OAAO,IAAI9C,gBAAgBD,GAA6C9H,KAAM,GAAK8H,GAA6C7H,OAKpI8H,gBAAgB+C,oCAAsC,WAClD,OAAO,IAAI/C,gBAAgBD,GAAgD9H,KAAM,GAAK8H,GAAgD7H,OAK1I8H,gBAAgBgD,4BAA8B,WAC1C,OAAO,IAAIhD,gBAAgBD,GAAwC9H,KAAM,GAAK8H,GAAwC7H,OAK1H8H,gBAAgBiD,6BAA+B,WAC3C,OAAO,IAAIjD,gBAAgBD,GAA+C9H,KAAM,GAAK8H,GAA+C7H,OAKxI8H,gBAAgBkD,2BAA6B,WACzC,OAAO,IAAIlD,gBAAgBD,GAA4C9H,KAAM8H,GAA4C7H,OAK7H8H,gBAAgBmD,8BAAgC,WAC5C,OAAO,IAAInD,gBAAgBD,GAA0C9H,KAAM8H,GAA0C7H,OAKzH8H,gBAAgBoD,+BAAiC,WAC7C,OAAO,IAAIpD,gBAAgBD,GAA2C9H,KAAM8H,GAA2C7H,OAK3H8H,gBAAgBqD,sCAAwC,WACpD,OAAO,IAAIrD,gBAAgBD,GAAqD9H,KAAM8H,GAAqD7H,OAE/I8H,gBAAgBsD,gCAAkC,WAC9C,OAAO,IAAItD,gBAAgBD,GAAiD9H,KAAM8H,GAAiD7H,OAKvI8H,gBAAgBuD,8BAAgC,WAC5C,OAAO,IAAIvD,gBAAgBD,GAA0C9H,KAAM8H,GAA0C7H,OAKzH8H,gBAAgBwD,wBAA0B,WACtC,OAAO,IAAIxD,gBAAgBD,GAAoC9H,KAAM8H,GAAoC7H,OAK7G8H,gBAAgByD,iCAAmC,WAC/C,OAAO,IAAIzD,gBAAgBD,GAA6C9H,KAAM8H,GAA6C7H,OAK/H8H,gBAAgB0D,wBAA0B,WACtC,OAAO,IAAI1D,gBAAgBD,GAAyC9H,KAAM8H,GAAyC7H,OAEhH8H,gBAvSyB,CAwSlC,ICzfE,GAA6B,WAC7B,SAAS2D,eAgHT,OAzGAA,YAAYC,gBAAkB,SAAUC,GACpC,GAAIF,YAAYG,QAAQD,GACpB,MAAM,GAAgBvD,4BAA4BuD,GAEtD,IACIE,EADkB,uCACQC,KAAKH,GACnC,IAAKE,GAAWA,EAAQlf,OAAS,EAC7B,MAAM,GAAgBub,wBAAwB,6BAA+B/E,KAAKC,UAAUuI,IAOhG,MALmB,CACfI,OAAQF,EAAQ,GAChBG,WAAYH,EAAQ,GACpBI,OAAQJ,EAAQ,KASxBJ,YAAYG,QAAU,SAAUM,GAC5B,YAAuB,IAARA,IAAwBA,GAAO,IAAMA,EAAIvf,QAM5D8e,YAAYU,WAAa,SAAUC,GAC/B,GAAIA,IAAWX,YAAYG,QAAQQ,GAC/B,IACI,IAAItd,EAAMqU,KAAKkJ,MAAMD,GACrB,OAAmC,IAA5BhlB,OAAO6N,KAAKnG,GAAKnC,OAE5B,MAAOhC,IAEX,OAAO,GAEX8gB,YAAYa,WAAa,SAAUJ,EAAKK,GACpC,OAA+B,IAAxBL,EAAIzU,QAAQ8U,IAEvBd,YAAYe,SAAW,SAAUN,EAAKK,GAClC,OAAQL,EAAIvf,QAAU4f,EAAO5f,QAAYuf,EAAIO,YAAYF,KAAaL,EAAIvf,OAAS4f,EAAO5f,QAO9F8e,YAAYiB,oBAAsB,SAAUC,GACxC,IAAI7d,EAAM,GACN8d,EAASD,EAAMxe,MAAM,KACrB6Y,OAAS,SAAUre,GAAK,OAAOkkB,mBAAmBlkB,EAAEwd,QAAQ,MAAO,OASvE,OARAyG,EAAO9gB,SAAQ,SAAUghB,GACrB,GAAIA,EAAKC,OAAQ,CACb,IAAIC,EAAKF,EAAK3e,MAAM,SAAU,GAAIlG,EAAM+kB,EAAG,GAAIrlB,EAAQqlB,EAAG,GACtD/kB,GAAON,IACPmH,EAAIkY,OAAO/e,IAAQ+e,OAAOrf,QAI/BmH,GAOX2c,YAAYwB,iBAAmB,SAAUC,GACrC,OAAOA,EAAIlf,KAAI,SAAU0F,GAAS,OAAOA,EAAMqZ,WAMnDtB,YAAY0B,4BAA8B,SAAUD,GAChD,OAAOA,EAAIrf,QAAO,SAAU6F,GACxB,OAAQ+X,YAAYG,QAAQlY,OAOpC+X,YAAY2B,gBAAkB,SAAUlB,GACpC,IACI,OAAO/I,KAAKkJ,MAAMH,GAEtB,MAAOvhB,GACH,OAAO,OAQf8gB,YAAY4B,aAAe,SAAUC,EAAStH,GAM1C,OADY,IAAIuH,OAAOD,EAAQnH,QAAQ,MAAO,QAAQA,QAAQ,MAAO,SAASA,QAAQ,MAAO,QAChF9B,KAAK2B,IAEfyF,YAjHqB,GCC5B+B,GACkB,CACdzN,KAAM,mBACNC,KAAM,gEAHVwN,GAKoB,CAChBzN,KAAM,qBACNC,KAAM,mDAPVwN,GAS+B,CAC3BzN,KAAM,8BACNC,KAAM,mEAXVwN,GAauB,CACnBzN,KAAM,qBACNC,KAAM,oEAfVwN,GAiBgB,CACZzN,KAAM,mBACNC,KAAM,mKAnBVwN,GAqB8B,CAC1BzN,KAAM,mBACNC,KAAM,qFAvBVwN,GAyBwC,CACpCzN,KAAM,yCACNC,KAAM,uJA3BVwN,GA6ByB,CACrBzN,KAAM,wBACNC,KAAM,+EA/BVwN,GAiCmC,CAC/BzN,KAAM,kCACNC,KAAM,2EAnCVwN,GAqCuB,CACnBzN,KAAM,0BACNC,KAAM,kLAvCVwN,GAyCkB,CACdzN,KAAM,qBACNC,KAAM,4GA3CVwN,GA6CkB,CACdzN,KAAM,qBACNC,KAAM,yDA/CVwN,GAiDoB,CAChBzN,KAAM,iBACNC,KAAM,4BAnDVwN,GAqD0B,CACtBzN,KAAM,yBACNC,KAAM,mGAvDVwN,GAyD2B,CACvBzN,KAAM,yBACNC,KAAM,oGA3DVwN,GA6DuB,CACnBzN,KAAM,qBACNC,KAAM,yLA/DVwN,GAiEuC,CACnCzN,KAAM,sBACNC,KAAM,uIAnEVwN,GAqEgC,CAC5BzN,KAAM,sBACNC,KAAM,uFAvEVwN,GAyE8B,CAC1BzN,KAAM,4BACNC,KAAM,sDA3EVwN,GA6E8B,CAC1BzN,KAAM,4BACNC,KAAM,mFA/EVwN,GAiFgB,CACZzN,KAAM,mBACNC,KAAM,2JAnFVwN,GAqFwB,CACpBzN,KAAM,4BACNC,KAAM,kHAvFVwN,GAyF0B,CACtBzN,KAAM,+BACNC,KAAM,oCA3FVwN,GA6FqC,CACjCzN,KAAM,4CACNC,KAAM,iDA/FVwN,GAiGwB,CACpBzN,KAAM,4BACNC,KAAM,8BAnGVwN,GAqGmB,CACfzN,KAAM,6BACNC,KAAM,kGAvGVwN,GAyGkB,CACdzN,KAAM,qBACNC,KAAM,sBA3GVwN,GA6GyB,CACrBzN,KAAM,0BACNC,KAAM,2EA/GVwN,GAiHiB,CACbzN,KAAM,oBACNC,KAAM,yBAnHVwN,GAqHuB,CACnBzN,KAAM,0BACNC,KAAM,4DAvHVwN,GAyHmB,CACfzN,KAAM,sBACNC,KAAM,6IA3HVwN,GA6HkB,CACdzN,KAAM,qBACNC,KAAM,mFA/HVwN,GAiI8B,CAC1BzN,KAAM,2BACNC,KAAM,0DAnIVwN,GAqIwB,CACpBzN,KAAM,uBACNC,KAAM,iCAvIVwN,GAyI6B,CACzBzN,KAAM,uBACNC,KAAM,8DA3IVwN,GA6IkB,CACdzN,KAAM,qBACNC,KAAM,gGA/IVwN,GAiJiC,CAC7BzN,KAAM,wCACNC,KAAM,2EAnJVwN,GAqJgC,CAC5BzN,KAAM,uCACNC,KAAM,+DAvJVwN,GAyJqB,CACjBzN,KAAM,uBACNC,KAAM,iMA3JVwN,GA6JwC,CACpCzN,KAAM,+CACNC,KAAM,oHA/JVwN,GAiKwB,CACpBzN,KAAM,2BACNC,KAAM,2EAnKVwN,GAqK6B,CACzBzN,KAAM,iCACNC,KAAM,mGAvKVwN,GAyKgC,CAC5BzN,KAAM,oCACNC,KAAM,mLA3KVwN,GA6KoC,CAChCzN,KAAM,yCACNC,KAAM,sLA/KVwN,GAiL0B,CACtBzN,KAAM,8BACNC,KAAM,qHAMV,GAAkC,SAAUC,GAE5C,SAASwN,iBAAiBtN,EAAWC,GACjC,IAAIE,EAAQL,EAAOpZ,KAAKqD,KAAMiW,EAAWC,IAAiBlW,KAG1D,OAFA9C,OAAOuN,eAAe2L,EAAOmN,iBAAiBjlB,WAC9C8X,EAAMrZ,KAAO,mBACNqZ,EA4RX,OAjSApJ,UAAUuW,iBAAkBxN,GAW5BwN,iBAAiBC,4BAA8B,SAAUnF,GACrD,OAAO,IAAIkF,iBAAiBD,GAAyCzN,KAAMyN,GAAyCxN,KAAO,WAAauI,IAM5IkF,iBAAiBE,8BAAgC,SAAUpF,GACvD,OAAO,IAAIkF,iBAAiBD,GAA2CzN,KAAMyN,GAA2CxN,KAAO,WAAauI,IAMhJkF,iBAAiBG,oCAAsC,SAAU9c,GAC7D,OAAO,IAAI2c,iBAAiBD,GAAsDzN,KAAMyN,GAAsDxN,KAAO,kBAAoBlP,IAK7K2c,iBAAiBI,8BAAgC,WAC7C,OAAO,IAAIJ,iBAAiBD,GAA8CzN,KAAMyN,GAA8CxN,OAMlIyN,iBAAiBK,qBAAuB,SAAUC,GAC9C,OAAO,IAAIN,iBAAiBD,GAAuCzN,KAAMyN,GAAuCxN,KAAO,eAAiB+N,IAK5IN,iBAAiBO,mCAAqC,WAClD,OAAO,IAAIP,iBAAiBD,GAAqDzN,KAAMyN,GAAqDxN,OAKhJyN,iBAAiBQ,6CAA+C,WAC5D,OAAO,IAAIR,iBAAiBD,GAA+DzN,KAAMyN,GAA+DxN,OAKpKyN,iBAAiBS,8BAAgC,WAC7C,OAAO,IAAIT,iBAAiBD,GAAgDzN,KAAMyN,GAAgDxN,OAKtIyN,iBAAiBU,wCAA0C,WACvD,OAAO,IAAIV,iBAAiBD,GAA0DzN,KAAMyN,GAA0DxN,OAK1JyN,iBAAiBW,iCAAmC,WAChD,OAAO,IAAIX,iBAAiBD,GAA8CzN,KAAMyN,GAA8CxN,OAMlIyN,iBAAiBY,uBAAyB,SAAU9F,GAChD,IAAInI,EAAeoN,GAAyCxN,KAE5D,OADAI,EAAgB,GAAYwL,QAAQrD,GAAuDnI,EAA1CA,EAAe,aAAemI,EACxE,IAAIkF,iBAAiBD,GAAyCzN,KAAMK,IAM/EqN,iBAAiBa,8BAAgC,WAC7C,OAAO,IAAIb,iBAAiBD,GAAyCzN,KAAMyN,GAAyCxN,OAKxHyN,iBAAiBc,yBAA2B,WACxC,OAAO,IAAId,iBAAiBD,GAA2CzN,KAAMyN,GAA2CxN,OAK5HyN,iBAAiBe,+BAAiC,WAC9C,OAAO,IAAIf,iBAAiBD,GAAiDzN,KAAMyN,GAAiDxN,OAKxIyN,iBAAiBgB,gCAAkC,WAC/C,OAAO,IAAIhB,iBAAiBD,GAAkDzN,KAAMyN,GAAkDxN,OAM1IyN,iBAAiBiB,4BAA8B,SAAUC,GACrD,OAAO,IAAIlB,iBAAiBD,GAA8CzN,KAAMyN,GAA8CxN,KAAO,kCAAoC2O,IAK7KlB,iBAAiBmB,qCAAuC,WACpD,OAAO,IAAInB,iBAAiBD,GAA8DzN,KAAMyN,GAA8DxN,OAMlKyN,iBAAiBoB,qCAAuC,WACpD,OAAO,IAAIpB,iBAAiBD,GAAuDzN,KAAMyN,GAAuDxN,OAKpJyN,iBAAiBqB,mCAAqC,WAClD,OAAO,IAAIrB,iBAAiBD,GAAqDzN,KAAMyN,GAAqDxN,OAKhJyN,iBAAiBsB,mCAAqC,WAClD,OAAO,IAAItB,iBAAiBD,GAAqDzN,KAAMyN,GAAqDxN,OAKhJyN,iBAAiBuB,qBAAuB,WACpC,OAAO,IAAIvB,iBAAiBD,GAAuCzN,KAAMyN,GAAuCxN,OAKpHyN,iBAAiBwB,6BAA+B,SAAUC,GACtD,OAAO,IAAIzB,iBAAiBD,GAA+CzN,KAAMyN,GAA+CxN,KAAO,iBAAmBkP,IAK9JzB,iBAAiB0B,0CAA4C,WACzD,OAAO,IAAI1B,iBAAiBD,GAA4DzN,KAAMyN,GAA4DxN,OAK9JyN,iBAAiB2B,+BAAiC,WAC9C,OAAO,IAAI3B,iBAAiBD,GAAiDzN,KAAMyN,GAAiDxN,OAKxIyN,iBAAiB4B,6BAA+B,WAC5C,OAAO,IAAI5B,iBAAiBD,GAA0CzN,KAAMyN,GAA0CxN,OAK1HyN,iBAAiB6B,6BAA+B,WAC5C,OAAO,IAAI7B,iBAAiBD,GAA+CzN,KAAMyN,GAA+CxN,OAKpIyN,iBAAiB9C,4BAA8B,WAC3C,OAAO,IAAI8C,iBAAiBD,GAAyCzN,KAAM,GAAKyN,GAAyCxN,OAK7HyN,iBAAiB8B,iCAAmC,WAChD,OAAO,IAAI9B,iBAAiBD,GAAgDzN,KAAMyN,GAAgDxN,OAKtIyN,iBAAiB+B,2BAA6B,WAC1C,OAAO,IAAI/B,iBAAiBD,GAAwCzN,KAAMyN,GAAwCxN,OAKtHyN,iBAAiBlC,iCAAmC,WAChD,OAAO,IAAIkC,iBAAiBD,GAA8CzN,KAAMyN,GAA8CxN,OAKlIyN,iBAAiBgC,6BAA+B,SAAUC,EAAWjH,GACjE,OAAO,IAAIgF,iBAAiBD,GAA0CzN,KAAMyN,GAA0CxN,KAAO,4BAA8B0P,EAAY,0BAA4BjH,EAASta,MAAM,KAAK,KAK3Nsf,iBAAiBkC,4BAA8B,SAAUD,EAAWjH,GAChE,OAAO,IAAIgF,iBAAiBD,GAAyCzN,KAAMyN,GAAyCxN,KAAO,4BAA8B0P,EAAY,0BAA4BjH,EAASta,MAAM,KAAK,KAKzNsf,iBAAiBmC,wCAA0C,SAAUnH,GACjE,OAAO,IAAIgF,iBAAiBD,GAAqDzN,KAAMyN,GAAqDxN,KAAO,0BAA4ByI,EAASta,MAAM,KAAK,KAKvMsf,iBAAiBoC,6BAA+B,SAAUC,GACtD,OAAO,IAAIrC,iBAAiBD,GAA+CzN,KAAMyN,GAA+CxN,KAAO,MAAQ8P,IAKnJrC,iBAAiBsC,uCAAyC,SAAUC,GAChE,OAAO,IAAIvC,iBAAiBD,GAAoDzN,KAAMyN,GAAoDxN,KAAO,gCAAkCgQ,IAKvLvC,iBAAiBwC,4BAA8B,WAC3C,OAAO,IAAIxC,iBAAiBD,GAAyCzN,KAAMyN,GAAyCxN,OAKxHyN,iBAAiByC,6CAA+C,WAC5D,OAAO,IAAIzC,iBAAiBD,GAAwDzN,KAAMyN,GAAwDxN,OAKtJyN,iBAAiB0C,4CAA8C,WAC3D,OAAO,IAAI1C,iBAAiBD,GAAuDzN,KAAMyN,GAAuDxN,OAKpJyN,iBAAiB2C,+BAAiC,WAC9C,OAAO,IAAI3C,iBAAiBD,GAA4CzN,KAAMyN,GAA4CxN,OAK9HyN,iBAAiB4C,kDAAoD,WACjE,OAAO,IAAI5C,iBAAiBD,GAA+DzN,KAAMyN,GAA+DxN,OAKpKyN,iBAAiB6C,kCAAoC,WACjD,OAAO,IAAI7C,iBAAiBD,GAA+CzN,KAAMyN,GAA+CxN,OAKpIyN,iBAAiB8C,uCAAyC,WACtD,OAAO,IAAI9C,iBAAiBD,GAAoDzN,KAAMyN,GAAoDxN,OAM9IyN,iBAAiB+C,0CAA4C,WACzD,OAAO,IAAI/C,iBAAiBD,GAAuDzN,KAAMyN,GAAuDxN,OAKpJyN,iBAAiBgD,yCAA2C,WACxD,OAAO,IAAIhD,iBAAiBD,GAA2DzN,KAAMyN,GAA2DxN,OAM5JyN,iBAAiBiD,6CAA+C,WAC5D,OAAO,IAAIjD,iBAAiBD,GAAiDzN,KAAMyN,GAAiDxN,OAEjIyN,iBAlS0B,CAmSnC,ICzdE,GAA+B,WAC/B,SAASkD,cAAcjN,GACnBxZ,KAAK0mB,aAAe,IAAI,GACxB1mB,KAAKwZ,UAAYA,EAgErB,OA3DAiN,cAAcnoB,UAAUqoB,cAAgB,WACpC,OAAOjZ,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI4mB,EAAcC,EAClB,OAAO3Y,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,OADAqY,EAAe5mB,KAAK8mB,uBACb,CAAC,EAAa9mB,KAAK+mB,kCAAkCH,IAChE,KAAK,EAED,OADAC,EAAgB/D,EAAGxb,OACZ,CAAC,EAAc,CACd0f,SAAUJ,EACVK,UAAWJ,YAUvCJ,cAAcnoB,UAAUwoB,qBAAuB,WAC3C,IAEI,IAAIpN,EAAS,IAAIC,WArCA,IAyCjB,OAHA3Z,KAAKwZ,UAAUI,gBAAgBF,GAEL1Z,KAAK0mB,aAAaxK,aAAaxC,GAG7D,MAAOjZ,GACH,MAAM,GAAiB+iB,4BAA4B/iB,KAO3DgmB,cAAcnoB,UAAUyoB,kCAAoC,SAAUG,GAClE,OAAOxZ,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAImnB,EAAwBC,EAC5B,OAAOlZ,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAKwZ,UAAU6N,aAAaH,IACrD,KAAK,EAGD,OAFAC,EAAyBrE,EAAGxb,OAErB,CAAC,EAActH,KAAK0mB,aAAaxK,aAAa,IAAIvC,WAAWwN,KACxE,KAAK,EAED,MADAC,EAAMtE,EAAGxb,OACH,GAAiBkc,4BAA4B4D,GACvD,KAAK,EAAG,MAAO,CAAC,WAKzBX,cAnEuB,GCN9B,GAAqC,WACrC,SAASa,uBAwCT,OAtCAA,oBAAoBhpB,UAAUsb,gBAAkB,SAAU2N,GACtD,OAAOC,OAAOC,OAAO7N,gBAAgB2N,IAEzCD,oBAAoBhpB,UAAUopB,YAAc,SAAUC,EAAWC,EAAaC,GAC1E,OAAOna,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOC,OAAOK,OAAOJ,YAAYC,EAAWC,EAAaC,WAI3FP,oBAAoBhpB,UAAUypB,UAAY,SAAUhqB,GAChD,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOC,OAAOK,OAAOC,UAAU9P,GAAgBla,WAIjFupB,oBAAoBhpB,UAAU0pB,UAAY,SAAUC,EAASN,EAAWC,EAAaC,GACjF,OAAOna,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOC,OAAOK,OAAOE,UAAU/P,GAAgBgQ,EAASN,EAAWC,EAAaC,WAIlHP,oBAAoBhpB,UAAU4pB,KAAO,SAAUP,EAAW5pB,EAAKkd,GAC3D,OAAOvN,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOC,OAAOK,OAAOI,KAAKP,EAAW5pB,EAAKkd,WAI5EqM,oBAAoBhpB,UAAU6pB,OAAS,SAAUR,EAAW1M,GACxD,OAAOvN,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOC,OAAOK,OAAOK,OAAOR,EAAW1M,WAIlEqM,oBAzC6B,GCApC,GAAkC,WAClC,SAASc,oBA4CT,OA1CAA,iBAAiB9pB,UAAU+pB,SAAW,SAAUC,GAE5C,OAAOd,OAAOe,UAAUF,SAAStZ,SAASuZ,KAE9CF,iBAAiB9pB,UAAUsb,gBAAkB,SAAU2N,GACnD,OAAOC,OAAOe,UAAU3O,gBAAgB2N,IAE5Ca,iBAAiB9pB,UAAUopB,YAAc,SAAUC,EAAWC,EAAaC,GACvE,OAAOna,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOe,UAAUT,OAAOJ,YAAYC,EAAWC,EAAaC,WAI9FO,iBAAiB9pB,UAAUypB,UAAY,SAAUhqB,GAC7C,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOe,UAAUT,OAAOC,UAAU9P,GAAgBla,WAIpFqqB,iBAAiB9pB,UAAU0pB,UAAY,SAAUC,EAASN,EAAWC,EAAaC,GAC9E,OAAOna,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOe,UAAUT,OAAOE,UAAU/P,GAAgBgQ,EAASN,EAAWC,EAAaC,WAIrHO,iBAAiB9pB,UAAU4pB,KAAO,SAAUP,EAAW5pB,EAAKkd,GACxD,OAAOvN,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOe,UAAUT,OAAOI,KAAKP,EAAW5pB,EAAKkd,WAI/EmN,iBAAiB9pB,UAAU6pB,OAAS,SAAUR,EAAW1M,GACrD,OAAOvN,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc0E,OAAOe,UAAUT,OAAOK,OAAOR,EAAW1M,WAIrEmN,iBA7C0B,GCEjC,GAAiC,WACjC,SAASI,mBA+FT,OA7FAA,gBAAgBlqB,UAAUsb,gBAAkB,SAAU2N,GAClD,OAAOC,OAAiB,SAAE5N,gBAAgB2N,IAE9CiB,gBAAgBlqB,UAAUopB,YAAc,SAAUC,EAAWC,EAAaC,GACtE,OAAOna,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc,IAAIjY,SAAQ,SAAUrL,EAASI,GAC7C,IAAI6oB,EAAgBjB,OAAiB,SAAEM,OAAOJ,YAAYC,EAAWC,EAAaC,GAClFY,EAAcC,iBAAiB,YAAY,SAAUjoB,GACjDjB,EAAQiB,EAAEkoB,OAAO7nB,WAErB2nB,EAAcC,iBAAiB,SAAS,SAAU7f,GAC9CjJ,EAAOiJ,iBAM/B2f,gBAAgBlqB,UAAUypB,UAAY,SAAUhqB,GAC5C,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc,IAAIjY,SAAQ,SAAUrL,EAASI,GAC7C,IAAIgpB,EAAcpB,OAAiB,SAAEM,OAAOC,UAAU9P,GAAgBla,GACtE6qB,EAAYF,iBAAiB,YAAY,SAAUjoB,GAC/C,IAAIooB,EAAepoB,EAAEkoB,OAAO7nB,OACxBgoB,EAAe,GAAmB1N,gBAAgB,IAAIzB,WAAWkP,IAChE5M,QAAQ,MAAOnM,EAAU4B,cACzBuK,QAAQ,MAAOnM,EAAU4B,cACzBuK,QAAQ,MAAOnM,EAAU4B,cACzBzN,MAAM,KAAKf,KAAK4M,EAAU4B,cAC1BuK,QAAQ,KAAUnM,EAAU4B,cACjC,IACIlS,EAAQyZ,KAAKkJ,MAAM2G,IAEvB,MAAOroB,GACHb,EAAOa,OAGfmoB,EAAYF,iBAAiB,SAAS,SAAU7f,GAC5CjJ,EAAOiJ,iBAM/B2f,gBAAgBlqB,UAAU0pB,UAAY,SAAUC,EAASN,EAAWC,EAAaC,GAC7E,OAAOna,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI+oB,EAAWC,EACf,OAAO9a,YAAYlO,MAAM,SAAU8iB,GAG/B,OAFAiG,EAAY,GAAmBrN,sBAAsBuM,GACrDe,EAAY,GAAmBjO,oBAAoBgO,GAC5C,CAAC,EAAc,IAAIle,SAAQ,SAAUrL,EAASI,GAC7C,IAAIqpB,EAAczB,OAAiB,SAAEM,OAAOE,UAAU/P,GAAgB+Q,EAAWrB,EAAWC,EAAaC,GACzGoB,EAAYP,iBAAiB,YAAY,SAAUjoB,GAC/CjB,EAAQiB,EAAEkoB,OAAO7nB,WAErBmoB,EAAYP,iBAAiB,SAAS,SAAU7f,GAC5CjJ,EAAOiJ,iBAM/B2f,gBAAgBlqB,UAAU4pB,KAAO,SAAUP,EAAW5pB,EAAKkd,GACvD,OAAOvN,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc,IAAIjY,SAAQ,SAAUrL,EAASI,GAC7C,IAAIspB,EAAS1B,OAAiB,SAAEM,OAAOI,KAAKP,EAAW5pB,EAAKkd,GAC5DiO,EAAOR,iBAAiB,YAAY,SAAUjoB,GAC1CjB,EAAQiB,EAAEkoB,OAAO7nB,WAErBooB,EAAOR,iBAAiB,SAAS,SAAU7f,GACvCjJ,EAAOiJ,iBAM/B2f,gBAAgBlqB,UAAU6pB,OAAS,SAAUR,EAAW1M,GACpD,OAAOvN,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc,IAAIjY,SAAQ,SAAUrL,EAASI,GAC7C,IAAIupB,EAAkB3B,OAAiB,SAAEM,OAAOK,OAAOR,EAAW1M,EAAKvB,QACvEyP,EAAgBT,iBAAiB,YAAY,SAAUjoB,GACnDjB,EAAQiB,EAAEkoB,OAAO7nB,WAErBqoB,EAAgBT,iBAAiB,SAAS,SAAU7f,GAChDjJ,EAAOiJ,iBAMxB2f,gBAhGyB,GCChCY,GACmB,CACfvT,KAAM,qBACNC,KAAM,oEAHVsT,GAKqB,CACjBvT,KAAM,wBACNC,KAAM,4CAPVsT,GAS0B,CACtBvT,KAAM,wBACNC,KAAM,yDAXVsT,GAawB,CACpBvT,KAAM,wBACNC,KAAM,+PAfVsT,GAuBuB,CACnBvT,KAAM,2CACNC,KAAM,kLAzBVsT,GA2B0B,CACtBvT,KAAM,8BACNC,KAAM,yRA7BVsT,GA+BoB,CAChBvT,KAAM,uBACNC,KAAM,sHAMV,GAA+C,SAAUC,GAEzD,SAASsT,8BAA8BpT,EAAWC,GAC9C,IAAIE,EAAQL,EAAOpZ,KAAKqD,KAAMiW,EAAWC,IAAiBlW,KAG1D,OAFAoW,EAAMrZ,KAAO,gCACbG,OAAOuN,eAAe2L,EAAOiT,8BAA8B/qB,WACpD8X,EA6CX,OAlDApJ,UAAUqc,8BAA+BtT,GAUzCsT,8BAA8BC,4BAA8B,WACxD,OAAO,IAAID,8BAA8BD,GAAuDvT,KAAMuT,GAAuDtT,OAKjKuT,8BAA8BE,sCAAwC,WAClE,OAAO,IAAIF,8BAA8BD,GAAyDvT,KAAMuT,GAAyDtT,OAMrKuT,8BAA8BG,+BAAiC,SAAUC,GACrE,OAAO,IAAIJ,8BAA8BD,GAA8DvT,KAAMuT,GAA8DtT,KAAO,oBAAsB2T,IAK5MJ,8BAA8BK,mCAAqC,WAC/D,OAAO,IAAIL,8BAA8BD,GAA4DvT,KAAMuT,GAA4DtT,OAK3KuT,8BAA8BM,iCAAmC,WAC7D,OAAO,IAAIN,8BAA8BD,GAA2DvT,KAAMuT,GAA2DtT,OAKzKuT,8BAA8BO,uCAAyC,WACnE,OAAO,IAAIP,8BAA8BD,GAA8DvT,KAAMuT,GAA8DtT,OAK/KuT,8BAA8BQ,yBAA2B,WACrD,OAAO,IAAIR,8BAA8BD,GAAwDvT,KAAMuT,GAAwDtT,OAE5JuT,8BAnDuC,CAoDhD,ICnFES,GAAgB,UAIhBC,GAAkB,IAAIpQ,WAAW,CAAC,EAAM,EAAM,IAK9C,GAA+B,WAC/B,SAASqQ,cAAcC,EAAQC,GAC3B,IAAIpH,EAAIqH,EAGR,GAFAnqB,KAAKiqB,OAASA,EACdjqB,KAAKkqB,cAAgBA,EACjBlqB,KAAKoqB,mBAELpqB,KAAKiqB,OAAOI,QAAQ,oDACpBrqB,KAAKsqB,aAAe,IAAI,QAEvB,GAAItqB,KAAKuqB,cAEVvqB,KAAKiqB,OAAOI,QAAQ,gDACpBrqB,KAAKsqB,aAAe,IAAI,OAEvB,KAAItqB,KAAKwqB,kBAAiD,QAA7B1H,EAAK9iB,KAAKkqB,qBAAkC,IAAPpH,OAAgB,EAASA,EAAG2H,cAU/F,MAJIzqB,KAAKwqB,gBACLxqB,KAAKiqB,OAAO/gB,KAAK,mGAErBlJ,KAAKiqB,OAAOphB,MAAM,kDACZ,GAAiB4a,8BAA8B,oEARrDzjB,KAAKiqB,OAAOI,QAAQ,iDACpBrqB,KAAKsqB,aAAe,IAAI,GAU5B,GAAItqB,KAAKsqB,aAAajC,SAAU,CAE5B,GADAroB,KAAKiqB,OAAOI,QAAQ,+CACgB,QAA7BF,EAAKnqB,KAAKkqB,qBAAkC,IAAPC,OAAgB,EAASA,EAAG7B,SAEpE,MADAtoB,KAAKiqB,OAAOphB,MAAM,gEACZ,GAA8BghB,2BAExC7pB,KAAKiqB,OAAOI,QAAQ,mCACpBrqB,KAAKsqB,aAAajC,SAASroB,KAAKkqB,cAAc5B,SAElDtoB,KAAK0qB,uBAAyB,CAC1B3tB,KAjDe,oBAkDf4tB,KAAMb,GACNc,cA/CS,KAgDTC,eAAgBd,IA4FxB,OAtFAC,cAAc1rB,UAAUisB,YAAc,WAClC,MAAO,aAAc/C,QAKzBwC,cAAc1rB,UAAU8rB,iBAAmB,WACvC,MAAO,WAAY5C,QAKvBwC,cAAc1rB,UAAUksB,aAAe,WACnC,MAAO,cAAehD,QAM1BwC,cAAc1rB,UAAU+oB,aAAe,SAAUrM,GAC7C,OAAOtN,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIib,EACJ,OAAO/M,YAAYlO,MAAM,SAAU8iB,GAG/B,OAFA7H,EAAO,GAAmBZ,gBAAgBW,GAEnC,CAAC,EAAchb,KAAKsqB,aAAanC,OAAO,CAAEprB,KAAM+sB,IAAiB7O,WAQpF+O,cAAc1rB,UAAUsb,gBAAkB,SAAU2N,GAChD,OAAOvnB,KAAKsqB,aAAa1Q,gBAAgB2N,IAO7CyC,cAAc1rB,UAAUwsB,gBAAkB,SAAUlD,EAAamD,GAC7D,OAAOrd,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc9iB,KAAKsqB,aAAa5C,YAAY1nB,KAAK0qB,uBAAwB9C,EAAamD,WAS1Gf,cAAc1rB,UAAU0sB,UAAY,SAAUjtB,GAC1C,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc9iB,KAAKsqB,aAAavC,UAAUhqB,WAW9DisB,cAAc1rB,UAAU2sB,UAAY,SAAUltB,EAAK6pB,EAAamD,GAC5D,OAAOrd,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc9iB,KAAKsqB,aAAatC,UAAUjqB,EAAKiC,KAAK0qB,uBAAwB9C,EAAamD,WAS7Gf,cAAc1rB,UAAU4pB,KAAO,SAAUnqB,EAAKkd,GAC1C,OAAOvN,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc9iB,KAAKsqB,aAAapC,KAAKloB,KAAK0qB,uBAAwB3sB,EAAKkd,WAIpF+O,cArIuB,GChB9B,GAAiC,WACjC,SAASkB,kBACLlrB,KAAKmrB,OAAShT,GACdnY,KAAKorB,QrBmKI,EqBlKTprB,KAAKqrB,UrBmKOlT,eqBlKZnY,KAAKsrB,QAAS,EA+OlB,OA1OAJ,gBAAgB5sB,UAAUitB,KAAO,WAC7B,OAAO7d,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIoW,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc,IAAIjY,SAAQ,SAAUrL,EAASI,GAC7C,IAAI4rB,EAAShE,OAAOiE,UAAUF,KAAKnV,EAAM+U,OAAQ/U,EAAMgV,SACvDI,EAAO9C,iBAAiB,iBAAiB,SAAUjoB,GACnCA,EACNkoB,OAAO7nB,OAAO4qB,kBAAkBtV,EAAMiV,cAEhDG,EAAO9C,iBAAiB,WAAW,SAAUjoB,GACzC,IAAIkrB,EAAQlrB,EACZ2V,EAAMwV,GAAKD,EAAMhD,OAAO7nB,OACxBsV,EAAMkV,QAAS,EACf9rB,OAEJgsB,EAAO9C,iBAAiB,SAAS,WAAc,OAAO9oB,EAAO,GAAiBsmB,gDASlGgF,gBAAgB5sB,UAAUutB,gBAAkB,WACxC,IAAID,EAAK5rB,KAAK4rB,GACVA,GAAM5rB,KAAKsrB,SACXM,EAAGE,QACH9rB,KAAKsrB,QAAS,IAMtBJ,gBAAgB5sB,UAAUytB,iBAAmB,WACzC,OAAOre,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACD,OAAMvO,KAAKsrB,OAAe,CAAC,EAAa,GACjC,CAAC,EAAatrB,KAAKurB,QAC9B,KAAK,EAAG,MAAO,CAAC,EAAczI,EAAGxb,QACjC,KAAK,EAAG,MAAO,CAAC,WAShC4jB,gBAAgB5sB,UAAU0tB,QAAU,SAAUjuB,GAC1C,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIoW,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAK+rB,oBAClC,KAAK,EAED,OADAjJ,EAAGxb,OACI,CAAC,EAAc,IAAIuD,SAAQ,SAAUrL,EAASI,GAE7C,IAAKwW,EAAMwV,GACP,OAAOhsB,EAAO,GAAiB0lB,8BAEnC,IAEI2G,EAFc7V,EAAMwV,GAAGM,YAAY,CAAC9V,EAAMiV,WAAY,YAC5Bc,YAAY/V,EAAMiV,WACxBhuB,IAAIU,GAC5BkuB,EAAMvD,iBAAiB,WAAW,SAAUjoB,GACxC,IAAIkrB,EAAQlrB,EACZ2V,EAAMyV,kBACNrsB,EAAQmsB,EAAMhD,OAAO7nB,WAEzBmrB,EAAMvD,iBAAiB,SAAS,SAAUjoB,GACtC2V,EAAMyV,kBACNjsB,EAAOa,kBAYvCyqB,gBAAgB5sB,UAAU8tB,QAAU,SAAUruB,EAAKsuB,GAC/C,OAAO3e,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIoW,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAK+rB,oBAClC,KAAK,EAED,OADAjJ,EAAGxb,OACI,CAAC,EAAc,IAAIuD,SAAQ,SAAUrL,EAASI,GAE7C,IAAKwW,EAAMwV,GACP,OAAOhsB,EAAO,GAAiB0lB,8BAEnC,IAEIgH,EAFclW,EAAMwV,GAAGM,YAAY,CAAC9V,EAAMiV,WAAY,aAC5Bc,YAAY/V,EAAMiV,WACxBkB,IAAIF,EAAStuB,GACrCuuB,EAAM5D,iBAAiB,WAAW,WAC9BtS,EAAMyV,kBACNrsB,OAEJ8sB,EAAM5D,iBAAiB,SAAS,SAAUjoB,GACtC2V,EAAMyV,kBACNjsB,EAAOa,kBAWvCyqB,gBAAgB5sB,UAAUkuB,WAAa,SAAUzuB,GAC7C,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIoW,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAK+rB,oBAClC,KAAK,EAED,OADAjJ,EAAGxb,OACI,CAAC,EAAc,IAAIuD,SAAQ,SAAUrL,EAASI,GAC7C,IAAKwW,EAAMwV,GACP,OAAOhsB,EAAO,GAAiB0lB,8BAEnC,IAEImH,EAFcrW,EAAMwV,GAAGM,YAAY,CAAC9V,EAAMiV,WAAY,aAC5Bc,YAAY/V,EAAMiV,WACrBqB,OAAO3uB,GAClC0uB,EAAS/D,iBAAiB,WAAW,WACjCtS,EAAMyV,kBACNrsB,OAEJitB,EAAS/D,iBAAiB,SAAS,SAAUjoB,GACzC2V,EAAMyV,kBACNjsB,EAAOa,kBAUvCyqB,gBAAgB5sB,UAAUquB,QAAU,WAChC,OAAOjf,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIoW,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAK+rB,oBAClC,KAAK,EAED,OADAjJ,EAAGxb,OACI,CAAC,EAAc,IAAIuD,SAAQ,SAAUrL,EAASI,GAC7C,IAAKwW,EAAMwV,GACP,OAAOhsB,EAAO,GAAiB0lB,8BAEnC,IAEIsH,EAFcxW,EAAMwV,GAAGM,YAAY,CAAC9V,EAAMiV,WAAY,YAC5Bc,YAAY/V,EAAMiV,WACpBwB,aAC5BD,EAAUlE,iBAAiB,WAAW,SAAUjoB,GAC5C,IAAIkrB,EAAQlrB,EACZ2V,EAAMyV,kBACNrsB,EAAQmsB,EAAMhD,OAAO7nB,WAEzB8rB,EAAUlE,iBAAiB,SAAS,SAAUjoB,GAC1C2V,EAAMyV,kBACNjsB,EAAOa,kBAWvCyqB,gBAAgB5sB,UAAUwuB,YAAc,SAAU/uB,GAC9C,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIoW,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAK+rB,oBAClC,KAAK,EAED,OADAjJ,EAAGxb,OACI,CAAC,EAAc,IAAIuD,SAAQ,SAAUrL,EAASI,GAC7C,IAAKwW,EAAMwV,GACP,OAAOhsB,EAAO,GAAiB0lB,8BAEnC,IAEIyH,EAFc3W,EAAMwV,GAAGM,YAAY,CAAC9V,EAAMiV,WAAY,YAC5Bc,YAAY/V,EAAMiV,WAChB2B,MAAMjvB,GACtCgvB,EAAcrE,iBAAiB,WAAW,SAAUjoB,GAChD,IAAIkrB,EAAQlrB,EACZ2V,EAAMyV,kBACNrsB,EAAgC,IAAxBmsB,EAAMhD,OAAO7nB,WAEzBisB,EAAcrE,iBAAiB,SAAS,SAAUjoB,GAC9C2V,EAAMyV,kBACNjsB,EAAOa,kBAYvCyqB,gBAAgB5sB,UAAU2uB,eAAiB,WACvC,OAAOvf,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAK/B,OAHI9iB,KAAK4rB,IAAM5rB,KAAKsrB,QAChBtrB,KAAK6rB,kBAEF,CAAC,EAAc,IAAIhhB,SAAQ,SAAUrL,EAASI,GAC7C,IAAIstB,EAAkB1F,OAAOiE,UAAUwB,eAAe9U,IACtD+U,EAAgBxE,iBAAiB,WAAW,WAAc,OAAOlpB,GAAQ,MACzE0tB,EAAgBxE,iBAAiB,WAAW,WAAc,OAAOlpB,GAAQ,MACzE0tB,EAAgBxE,iBAAiB,SAAS,WAAc,OAAO9oB,GAAO,iBAKnFsrB,gBApPyB,GCPhCiC,GAA+B,WAC/B,SAASA,gBACLntB,KAAKotB,MAAQ,IAAIC,IAwBrB,OAtBAF,cAAc7uB,UAAU0tB,QAAU,SAAUjuB,GACxC,OAAOiC,KAAKotB,MAAM/vB,IAAIU,IAAQ,MAElCovB,cAAc7uB,UAAU8tB,QAAU,SAAUruB,EAAKN,GAC7CuC,KAAKotB,MAAME,IAAIvvB,EAAKN,IAExB0vB,cAAc7uB,UAAUkuB,WAAa,SAAUzuB,GAC3CiC,KAAKotB,MAAMV,OAAO3uB,IAEtBovB,cAAc7uB,UAAUquB,QAAU,WAC9B,IAAIY,EAAY,GAIhB,OAHAvtB,KAAKotB,MAAMxrB,SAAQ,SAAUnE,EAAOM,GAChCwvB,EAAU1sB,KAAK9C,MAEZwvB,GAEXJ,cAAc7uB,UAAUwuB,YAAc,SAAU/uB,GAC5C,OAAOiC,KAAKotB,MAAMI,IAAIzvB,IAE1BovB,cAAc7uB,UAAUmvB,MAAQ,WAC5BztB,KAAKotB,MAAMK,SAERN,cA1BuB,GCS9B,GAAoC,WACpC,SAASO,mBAAmBzD,EAAQ0D,GAChC3tB,KAAK4tB,cAAgB,IAAIT,GACzBntB,KAAK6tB,eAAiB,IAAI,GAC1B7tB,KAAKiqB,OAASA,EACdjqB,KAAK2tB,UAAYA,EAyLrB,OAvLAD,mBAAmBpvB,UAAUwvB,0BAA4B,SAAUjlB,GAC/D,KAAIA,aAAiB,IAAoBA,EAAMoN,YAAcqN,GAA4CzN,MAIrG,MAAMhN,EAHN7I,KAAKiqB,OAAOphB,MAAM,gJAW1B6kB,mBAAmBpvB,UAAU0tB,QAAU,SAAUjuB,GAC7C,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI+tB,EAAM3G,EACV,OAAOlZ,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,GADAwf,EAAO/tB,KAAK4tB,cAAc5B,QAAQjuB,GACtB,MAAO,CAAC,EAAa,GACjC+kB,EAAGvU,MAAQ,EACf,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBb,KAAKiqB,OAAOI,QAAQ,+EACb,CAAC,EAAarqB,KAAK6tB,eAAe7B,QAAQjuB,IACrD,KAAK,EAAG,MAAO,CAAC,EAAc+kB,EAAGxb,QACjC,KAAK,EAGD,OAFA8f,EAAMtE,EAAGxb,OACTtH,KAAK8tB,0BAA0B1G,GACxB,CAAC,EAAa,GACzB,KAAK,EAAG,MAAO,CAAC,EAAc2G,WAW9CL,mBAAmBpvB,UAAU8tB,QAAU,SAAUruB,EAAKN,GAClD,OAAOiQ,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIguB,EACJ,OAAO9f,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACDvO,KAAK4tB,cAAcxB,QAAQruB,EAAKN,GAChCqlB,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAK6tB,eAAezB,QAAQruB,EAAKN,IAC1D,KAAK,EAED,OADAqlB,EAAGxb,OACI,CAAC,EAAa,GACzB,KAAK,EAGD,OAFA0mB,EAAMlL,EAAGxb,OACTtH,KAAK8tB,0BAA0BE,GACxB,CAAC,EAAa,GACzB,KAAK,EAAG,MAAO,CAAC,WAShCN,mBAAmBpvB,UAAUkuB,WAAa,SAAUzuB,GAChD,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIiuB,EACJ,OAAO/f,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACDvO,KAAK4tB,cAAcpB,WAAWzuB,GAC9B+kB,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAK6tB,eAAerB,WAAWzuB,IACxD,KAAK,EAED,OADA+kB,EAAGxb,OACI,CAAC,EAAa,GACzB,KAAK,EAGD,OAFA2mB,EAAMnL,EAAGxb,OACTtH,KAAK8tB,0BAA0BG,GACxB,CAAC,EAAa,GACzB,KAAK,EAAG,MAAO,CAAC,WAShCP,mBAAmBpvB,UAAUquB,QAAU,WACnC,OAAOjf,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIutB,EAAWW,EACf,OAAOhgB,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,GAA2B,KAD3Bgf,EAAYvtB,KAAK4tB,cAAcjB,WACflqB,OAAe,MAAO,CAAC,EAAa,GACpDqgB,EAAGvU,MAAQ,EACf,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBb,KAAKiqB,OAAOI,QAAQ,8DACb,CAAC,EAAarqB,KAAK6tB,eAAelB,WAC7C,KAAK,EAAG,MAAO,CAAC,EAAc7J,EAAGxb,QACjC,KAAK,EAGD,OAFA4mB,EAAMpL,EAAGxb,OACTtH,KAAK8tB,0BAA0BI,GACxB,CAAC,EAAa,GACzB,KAAK,EAAG,MAAO,CAAC,EAAcX,WAS9CG,mBAAmBpvB,UAAUwuB,YAAc,SAAU/uB,GACjD,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI8sB,EAAaqB,EACjB,OAAOjgB,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,GADAue,EAAc9sB,KAAK4tB,cAAcd,YAAY/uB,GAC1B,MAAO,CAAC,EAAa,GACxC+kB,EAAGvU,MAAQ,EACf,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBb,KAAKiqB,OAAOI,QAAQ,sEACb,CAAC,EAAarqB,KAAK6tB,eAAef,YAAY/uB,IACzD,KAAK,EAAG,MAAO,CAAC,EAAc+kB,EAAGxb,QACjC,KAAK,EAGD,OAFA6mB,EAAMrL,EAAGxb,OACTtH,KAAK8tB,0BAA0BK,GACxB,CAAC,EAAa,GACzB,KAAK,EAAG,MAAO,CAAC,EAAcrB,WAQ9CY,mBAAmBpvB,UAAU8vB,cAAgB,WAEzCpuB,KAAKiqB,OAAOI,QAAQ,+BAAiCrqB,KAAK2tB,WAC1D3tB,KAAK4tB,cAAcH,QACnBztB,KAAKiqB,OAAOI,QAAQ,sBAAwBrqB,KAAK2tB,UAAY,aAMjED,mBAAmBpvB,UAAU+vB,gBAAkB,WAC3C,OAAO3gB,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIsuB,EAAWC,EACf,OAAOrgB,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBb,KAAKiqB,OAAOI,QAAQ,gCACb,CAAC,EAAarqB,KAAK6tB,eAAeZ,kBAC7C,KAAK,EAKD,OAJAqB,EAAYxL,EAAGxb,SAEXtH,KAAKiqB,OAAOI,QAAQ,+BAEjB,CAAC,EAAciE,GAC1B,KAAK,EAGD,OAFAC,EAAMzL,EAAGxb,OACTtH,KAAK8tB,0BAA0BS,GACxB,CAAC,GAAc,GAC1B,KAAK,EAAG,MAAO,CAAC,WAKzBb,mBA9L4B,IlBLvC,SAAWtV,GACPA,EAAoC,eAAI,iBACxCA,EAAmC,cAAI,gBAF3C,CAGGA,KAAwBA,GAAsB,KAIjD,ImBLIoW,GnBKA,GAAgC,WAChC,SAASC,eAAexE,GACpBjqB,KAAKiqB,OAASA,EACdjqB,KAAK0uB,eAAiB,IAAI,GAAmB1uB,KAAKiqB,OAAQ7R,GAAoBsW,gBAC9E1uB,KAAK2uB,cAAgB,IAAI,GAAmB3uB,KAAKiqB,OAAQ7R,GAAoBuW,eAgCjF,OA9BAF,eAAenwB,UAAUmvB,MAAQ,WAC7B,OAAO/f,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIonB,EACJ,OAAOlZ,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAEDvO,KAAK0uB,eAAeN,gBACpBpuB,KAAK2uB,cAAcP,gBACnBtL,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAK0uB,eAAeL,mBAC7C,KAAK,EAED,OADAvL,EAAGxb,OACI,CAAC,GAAc,GAC1B,KAAK,EAQD,OAPA8f,EAAMtE,EAAGxb,kBACUP,MACf/G,KAAKiqB,OAAOphB,MAAM,wCAA0Cue,EAAIwH,SAGhE5uB,KAAKiqB,OAAOphB,MAAM,+CAEf,CAAC,GAAc,GAC1B,KAAK,EAAG,MAAO,CAAC,WAKzB4lB,eApCwB,GoBI/B,GAA2B,WAC3B,SAASI,UAAU5E,EAAQ6E,EAAmBC,GAC1C/uB,KAAKiqB,OAASA,EAEdjqB,KAAKgvB,cAAgB,IAAI,GAAchvB,KAAKiqB,OAAQ8E,GACpD/uB,KAAKivB,UAAY,IAAI,GACrBjvB,KAAKkvB,UAAY,IAAI,GACrBlvB,KAAKmvB,cAAgB,IAAI,GAAcnvB,KAAKgvB,eAC5ChvB,KAAKovB,cAAgB,IAAI,GAAcpvB,KAAKgvB,eAC5ChvB,KAAKotB,MAAQ,IAAI,GAAeptB,KAAKiqB,QACrCjqB,KAAK8uB,kBAAoBA,EA2L7B,OArLAD,UAAUvwB,UAAU+wB,cAAgB,WAChC,OAAOrvB,KAAKmvB,cAAc1V,gBAM9BoV,UAAUvwB,UAAUooB,aAAe,SAAU5K,GACzC,OAAO9b,KAAKivB,UAAUjT,OAAOF,IAMjC+S,UAAUvwB,UAAUgxB,aAAe,SAAUxT,GACzC,OAAO9b,KAAKkvB,UAAUpS,OAAOhB,IAKjC+S,UAAUvwB,UAAUixB,kBAAoB,WACpC,OAAO7hB,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc9iB,KAAKovB,cAAczI,wBAQrDkI,UAAUvwB,UAAUkxB,uBAAyB,SAAUrwB,GACnD,IAAI2jB,EACJ,OAAOpV,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIyvB,EAA2BC,EAASC,EAAcC,EAAoBC,EAAiBC,EAAeC,EAAeC,EACzH,OAAO9hB,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAED,OADAkhB,EAA8D,QAAjC3M,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,OAAgB,EAASA,EAAGmN,iBAAiB/iB,EAAkBgjB,iCAAkC/wB,EAAQqX,eACxK,CAAC,EAAaxW,KAAKgvB,cAAclE,gBAAgB+D,UAAUsB,YAAatB,UAAUuB,iBAC7F,KAAK,EAED,OADAV,EAAUvF,EAAG7iB,OACN,CAAC,EAAatH,KAAKgvB,cAAchE,UAAU0E,EAAQW,YAC9D,KAAK,EAQD,OAPAV,EAAexF,EAAG7iB,OAClBsoB,EAAqB,CACjBnvB,EAAGkvB,EAAalvB,EAChB6vB,IAAKX,EAAaW,IAClBryB,EAAG0xB,EAAa1xB,GAEpB4xB,EAAkB,GAAmBnU,sBAAsBkU,GACpD,CAAC,EAAa5vB,KAAKuwB,WAAWV,IACzC,KAAK,EAED,OADAC,EAAgB3F,EAAG7iB,OACZ,CAAC,EAAatH,KAAKgvB,cAAchE,UAAU0E,EAAQc,aAC9D,KAAK,EAED,OADAT,EAAgB5F,EAAG7iB,OACZ,CAAC,EAAatH,KAAKgvB,cAAc/D,UAAU8E,GAAe,EAAO,CAAC,UAC7E,KAAK,EAGD,OAFAC,EAA0B7F,EAAG7iB,OAEtB,CAAC,EAAatH,KAAKotB,MAAMsB,eAAetC,QAAQ0D,EAAe,CAC9DU,WAAYR,EACZK,UAAWX,EAAQW,UACnBI,cAAetxB,EAAQuxB,sBACvBC,WAAYxxB,EAAQyxB,sBAEhC,KAAK,EAQD,OANAzG,EAAG7iB,OACCmoB,GACAA,EAA0BoB,eAAe,CACrCC,SAAS,IAGV,CAAC,EAAchB,WAS1CjB,UAAUvwB,UAAUyyB,sBAAwB,SAAUnY,GAClD,OAAOlL,UAAU1N,UAAM,OAAQ,GAAQ,WAEnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAKotB,MAAMsB,eAAelC,WAAW5T,IAClE,KAAK,EAED,OADAkK,EAAGxb,OACI,CAAC,EAAatH,KAAKotB,MAAMsB,eAAe5B,YAAYlU,IAC/D,KAAK,EAED,MAAO,CAAC,GADGkK,EAAGxb,gBASlCunB,UAAUvwB,UAAU0yB,cAAgB,WAChC,OAAOtjB,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAKotB,MAAMK,SACxC,KAAK,EAAG,MAAO,CAAC,EAAc3K,EAAGxb,gBAUjDunB,UAAUvwB,UAAU2yB,QAAU,SAAU5E,EAASzT,EAAKpC,GAClD,IAAIsM,EACJ,OAAOpV,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIkxB,EAAoBC,EAAexB,EAAcyB,EAAoBC,EAAwBtY,EAAWuY,EAAkBC,EAAgBC,EAAaC,EAAaC,EAAiBC,EAAkBC,EAC3M,OAAO1jB,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAED,OADA2iB,EAAuD,QAAjCpO,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,OAAgB,EAASA,EAAGmN,iBAAiB/iB,EAAkB2kB,kBAAmBrb,GAC1I,CAAC,EAAaxW,KAAKotB,MAAMsB,eAAe1C,QAAQpT,IAC3D,KAAK,EAED,KADAuY,EAAgBhH,EAAG7iB,QAEf,MAAM,GAAiBue,uCAAuCjN,GAElE,MAAO,CAAC,EAAa5Y,KAAKgvB,cAAchE,UAAUmG,EAAcd,YACpE,KAAK,EAaD,OAZAV,EAAexF,EAAG7iB,OAClB8pB,EAAqB,GAAmB1V,sBAAsBiU,GAC9D0B,EAAyBrxB,KAAKivB,UAAUpT,UAAU5C,KAAKC,UAAU,CAAEN,IAAKA,KACxEG,EAAY,GAAWF,mBAAmB,CAAED,IAAKyY,EAAwB1Y,IAAKgX,EAAahX,MAC3F2Y,EAAmBtxB,KAAKivB,UAAUpT,UAAU9C,GAE5CsT,EAAQyF,IAAM,CACVC,IAAK9Y,KAAKkJ,MAAMiP,IAEpBG,EAAiBvxB,KAAKivB,UAAUpT,UAAU5C,KAAKC,UAAUmT,IACzDmF,EAAcF,EAAmB,IAAMC,EACvCE,EAAc,GAAmB1W,oBAAoByW,GAC9C,CAAC,EAAaxxB,KAAKgvB,cAAc9G,KAAKiJ,EAAcX,WAAYiB,IAC3E,KAAK,EASD,OARAC,EAAkBvH,EAAG7iB,OACrBqqB,EAAmB3xB,KAAKivB,UAAU/S,aAAa,IAAIvC,WAAW+X,IAC9DE,EAAYJ,EAAc,IAAMG,EAC5BT,GACAA,EAAmBL,eAAe,CAC9BC,SAAS,IAGV,CAAC,EAAcc,WAS1C/C,UAAUvwB,UAAUiyB,WAAa,SAAUyB,GACvC,OAAOtkB,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIiyB,EAAYC,EAChB,OAAOhkB,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAKgvB,cAAc3H,aAAa2K,IAC7D,KAAK,EAGD,OAFAC,EAAanP,EAAGxb,OAChB4qB,EAAY,IAAIvY,WAAWsY,GACpB,CAAC,EAAcjyB,KAAKivB,UAAU/S,aAAagW,YAKtErD,UAAUuB,eAAiB,CAAC,OAAQ,UACpCvB,UAAUsB,aAAc,EACjBtB,UArMmB,IDR9B,SAAWL,GACPA,EAASA,EAAgB,MAAI,GAAK,QAClCA,EAASA,EAAkB,QAAI,GAAK,UACpCA,EAASA,EAAe,KAAI,GAAK,OACjCA,EAASA,EAAkB,QAAI,GAAK,UACpCA,EAASA,EAAgB,MAAI,GAAK,QALtC,CAMGA,KAAaA,GAAW,KAI3B,IEdI2D,GFcA,GAAwB,WACxB,SAASC,OAAOC,EAAeC,EAAaC,GAExCvyB,KAAKwyB,MAAQhE,GAASiE,KACtB,IAGIC,EAAmBL,GAAiBD,OAAOO,6BAC/C3yB,KAAK4yB,cAAgBF,EAAiBG,gBAJV,aAK5B7yB,KAAK8yB,kBAAoBJ,EAAiBI,oBAAqB,EAC/D9yB,KAAKwyB,MAA+C,iBAA/BE,EAAyB,SAAiBA,EAAiBK,SAAWvE,GAASiE,KACpGzyB,KAAKwW,cAAgBkc,EAAiBlc,eAAiB1G,EAAU4B,aACjE1R,KAAKsyB,YAAcA,GAAexiB,EAAU4B,aAC5C1R,KAAKuyB,eAAiBA,GAAkBziB,EAAU4B,aA0JtD,OAxJA0gB,OAAOO,2BAA6B,WAChC,MAAO,CACHE,eAAgB,aAGhBC,mBAAmB,EACnBC,SAAUvE,GAASiE,OAM3BL,OAAO9zB,UAAU00B,MAAQ,SAAUV,EAAaC,EAAgB/b,GAC5D,OAAO,IAAI4b,OAAO,CAAES,eAAgB7yB,KAAK4yB,cAAeE,kBAAmB9yB,KAAK8yB,kBAAmBC,SAAU/yB,KAAKwyB,MAAOhc,cAAeA,GAAiBxW,KAAKwW,eAAiB8b,EAAaC,IAKhMH,OAAO9zB,UAAU20B,WAAa,SAAUA,EAAYhxB,GAChD,KAAKA,EAAQ8wB,SAAW/yB,KAAKwyB,QAAYxyB,KAAK8yB,mBAAqB7wB,EAAQixB,aAA3E,CAGA,IAAIjc,GAAY,IAAIkc,MAAOC,cAYvBC,GATC,GAAY3R,QAAQzf,EAAQuU,eAGvB,GAAYkL,QAAQ1hB,KAAKwW,eAInB,IAAMS,EAAY,IAHlB,IAAMA,EAAY,QAAUjX,KAAKwW,cAAgB,IAHjD,IAAMS,EAAY,QAAUhV,EAAQuU,cAAgB,KAQ9C,MAAQxW,KAAKsyB,YAAc,IAAMtyB,KAAKuyB,eAAiB,MAAQ/D,GAASvsB,EAAQ8wB,UAAY,MAAQE,EAE1HjzB,KAAKszB,gBAAgBrxB,EAAQ8wB,SAAUM,EAAKpxB,EAAQixB,cAAe,KAKvEd,OAAO9zB,UAAUg1B,gBAAkB,SAAUd,EAAO5D,EAASsE,GACrDlzB,KAAK4yB,eACL5yB,KAAK4yB,cAAcJ,EAAO5D,EAASsE,IAM3Cd,OAAO9zB,UAAUuK,MAAQ,SAAU+lB,EAASpY,GACxCxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASznB,MACnBmsB,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAUi1B,SAAW,SAAU3E,EAASpY,GAC3CxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASznB,MACnBmsB,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAUk1B,QAAU,SAAU5E,EAASpY,GAC1CxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASiF,QACnBP,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAUo1B,WAAa,SAAU9E,EAASpY,GAC7CxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASiF,QACnBP,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAU4K,KAAO,SAAU0lB,EAASpY,GACvCxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASiE,KACnBS,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAUq1B,QAAU,SAAU/E,EAASpY,GAC1CxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASiE,KACnBS,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAU+rB,QAAU,SAAUuE,EAASpY,GAC1CxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASoF,QACnBV,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAUu1B,WAAa,SAAUjF,EAASpY,GAC7CxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASoF,QACnBV,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAUw1B,MAAQ,SAAUlF,EAASpY,GACxCxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASuF,MACnBb,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAU01B,SAAW,SAAUpF,EAASpY,GAC3CxW,KAAKizB,WAAWrE,EAAS,CACrBmE,SAAUvE,GAASuF,MACnBb,aAAa,EACb1c,cAAeA,GAAiB1G,EAAU4B,gBAMlD0gB,OAAO9zB,UAAU21B,oBAAsB,WACnC,OAAOj0B,KAAK8yB,oBAAqB,GAE9BV,OAvKgB,GGdvB,GAAmC,WAYnC,SAAS8B,kBAAkBC,EAAUC,EAAWnK,EAAQoK,EAAaC,EAAgBC,GACjFv0B,KAAKo0B,UAAYA,EACjBp0B,KAAKq0B,YAAcA,EACnBr0B,KAAKs0B,eAAiBA,EACtBt0B,KAAKu0B,qBAAuBA,EAC5Bv0B,KAAKm0B,SAAWA,EAChBn0B,KAAKiqB,OAASA,EACdjqB,KAAKw0B,UAAY,IAAInH,IACrBrtB,KAAKy0B,sBAAwB,IAAIpH,IACjCrtB,KAAK00B,kBAAoB,IAAIrH,IAC7BrtB,KAAK20B,4BAA8B,IAAItH,IAoX3C,OAzWA6G,kBAAkB51B,UAAUs2B,4BAA8B,SAAUC,EAAare,GAC7E,MAAO,IAWX0d,kBAAkB51B,UAAUw2B,6BAA+B,SAAUD,EAAare,GAC9E,MAAO,IAMX0d,kBAAkB51B,UAAUy2B,aAAe,WACvC,OAAO9lB,GASXilB,kBAAkB51B,UAAU02B,gBAAkB,SAAUC,EAAWze,GAC/D,IAAI0e,EAAgBl1B,KAAK20B,4BAA4Bt3B,IAAImZ,GACzD,GAAK0e,EAAL,CAIK,GAAIA,EAAcn4B,OAASk4B,EAIhC,OAAOC,EAAcC,KAHjBn1B,KAAKiqB,OAAO6J,MAAM,kEAAoEmB,EAAY,0CAJlGj1B,KAAKiqB,OAAO6J,MAAM,kFAAoFtd,EAAgB,sCAiB9H0d,kBAAkB51B,UAAU82B,oBAAsB,SAAUC,EAAcC,GACtE,OAAID,EAAe,GACfr1B,KAAKiqB,OAAO6J,MAAM,wEAA0EuB,GACrF,GAEPC,EAAc,GACdt1B,KAAKiqB,OAAO6J,MAAM,uEAAyEwB,GACpF,GAEPA,EAAcD,GACdr1B,KAAKiqB,OAAO6J,MAAM,+FACX,GAEJwB,EAAcD,GAWzBnB,kBAAkB51B,UAAUi3B,oBAAsB,SAAUN,EAAWze,EAAegf,EAAWC,GAC7F,GAAKjf,EAAL,CAIA,GAAkB,IAAdgf,EAEAx1B,KAAKiqB,OAAO6J,MAAM,kEAAoEmB,EAAY,OAASO,QAE1G,IAAKA,EAEN,YADAx1B,KAAKiqB,OAAO6J,MAAM,qEAAuEmB,GAG7F,IAAIS,EAAmB,CAAET,UAAWA,EAAWO,UAAWA,EAAWC,kBAAmBA,GAEpFE,EAAuB31B,KAAK00B,kBAAkBr3B,IAAImZ,GACtD,GAAImf,EACAA,EAAqB90B,KAAK60B,GAC1B11B,KAAK00B,kBAAkBpH,IAAI9W,EAAemf,OAEzC,CAED31B,KAAKiqB,OAAO6J,MAAM,+DAAiEtd,EAAgB,0BACnG,IAAIof,EAAmB,CAACF,GACxB11B,KAAK00B,kBAAkBpH,IAAI9W,EAAeof,GAG9C51B,KAAK20B,4BAA4BjI,OAAOlW,QAzBpCxW,KAAKiqB,OAAO6J,MAAM,yEAA2EmB,EAAY,mCAkCjHf,kBAAkB51B,UAAU2xB,iBAAmB,SAAU4E,EAAare,GAClE,IACIsM,EAAIqH,EADJ/T,EAAQpW,KAGR61B,EAAqBrf,GAAiBxW,KAAK81B,aAC1Ctf,GACDxW,KAAKiqB,OAAO/gB,KAAK,qDAAuD2rB,EAAc,eAAgBgB,GAG1G71B,KAAKiqB,OAAO6J,MAAM,0DAA4De,EAAagB,GAC3F,IAAIE,EAAyB/1B,KAAK80B,6BAA6BD,EAAagB,GAC5EE,EAAuB9F,mBACvB,IAAI+F,EAAkB,CAClBC,QAASj2B,KAAK81B,aACdI,OAAQ/oB,EAAuBgpB,WAC/B/B,UAAWp0B,KAAKo0B,UAChBC,YAAar0B,KAAKq0B,YAClBC,eAAgBt0B,KAAKs0B,eACrBH,SAAUn0B,KAAKm0B,SACfp3B,KAAM83B,EACNuB,YAAajD,KAAKkD,MAClB7f,cAAeqf,EACfS,QAA8C,QAApCxT,EAAK9iB,KAAKu0B,4BAAyC,IAAPzR,OAAgB,EAASA,EAAGwT,QAClFC,WAAiD,QAApCpM,EAAKnqB,KAAKu0B,4BAAyC,IAAPpK,OAAgB,EAASA,EAAGoM,YAKzF,OAFAv2B,KAAKw2B,0BAA0BR,GAExB,CACHnF,eAAgB,SAAUlF,GACtB,OAAOvV,EAAMya,eAAe,cAAS,cAAS,GAAImF,GAAkBrK,GAAQoK,IAEhFU,mBAAoB,WAChB,OAAOrgB,EAAMsgB,oBAAoBV,EAAgBxf,gBAErDmgB,gBAAiB,SAAUC,GACvB,OAAOxgB,EAAMugB,gBAAgBC,EAAQZ,EAAgBxf,gBAEzDqgB,UAAW,SAAUC,GACjB,OAAO1gB,EAAMygB,UAAUC,EAAUd,EAAgBxf,gBAErDugB,YAAahB,EACbpK,MAAOqK,IAaf9B,kBAAkB51B,UAAUuyB,eAAiB,SAAUlF,EAAOoL,GAC1D,IACIjU,EAAIqH,EADJ/T,EAAQpW,KAERg3B,EAAYh3B,KAAKy0B,sBAAsBp3B,IAAIsuB,EAAMnV,eACrD,IAAKwgB,EAED,OADAh3B,KAAKiqB,OAAO6J,MAAM,gDAAkDnI,EAAMsK,QAAStK,EAAMnV,eAClF,KAEX,IAAIygB,EAAStL,EAAMsK,UAAYe,EAAUf,QACrCiB,EAAY,CACZC,eAAgB,EAChBC,gBAAiB,EACjBC,uBAAwB,GAExBJ,GACAC,EAAYl3B,KAAKs3B,aAAa3L,EAAMnV,eACpCxW,KAAKu3B,aAAaP,EAAUxgB,gBAGmB,QAA9CsM,EAAKkU,EAAUQ,iCAA8C,IAAP1U,GAAyBA,EAAG4J,OAAOf,EAAMsK,SAEpGc,SAA0DA,EAAYlG,iBACtE,IAAI4G,EAAaV,aAAiD,EAASA,EAAYW,mBAEvF,IAAKD,EAED,OADAz3B,KAAKiqB,OAAO6J,MAAM,uDAAwDkD,EAAUxgB,eAC7E,KAIX,GAFAxW,KAAKiqB,OAAO6J,MAAM,wDAA0DnI,EAAM5uB,KAAO,KAAO06B,EAAa,MAAO9L,EAAMnV,gBAErHygB,EAED,OADAD,EAAUrL,EAAM5uB,KAAO,cAAgBgd,KAAK4d,MAAMF,GAC3C,cAAS,GAAIT,GAExB,IAAIY,EAAa,cAAS,cAAS,GAAIZ,GAAYrL,GAC/CkM,EAAsB,EAU1B,OARgD,QAA/C1N,EAAKyN,EAAWJ,iCAA8C,IAAPrN,GAAyBA,EAAGvoB,SAAQ,SAAUk2B,GAClG1hB,EAAM6T,OAAO6J,MAAM,gDAAkDgE,EAAe/6B,KAAO,cAAgB4uB,EAAM5uB,KAAM66B,EAAWphB,eAClIqhB,OAEJD,EAAWJ,+BAA4BryB,EACvCyyB,EAAa,cAAS,cAAS,GAAIA,GAAa,CAAEH,WAAY1d,KAAKge,MAAMN,GAAaO,aAAcd,EAAUC,eAAgBc,YAAaf,EAAUE,gBAAiBc,6BAA8BhB,EAAUG,uBAAwBnB,OAAQ/oB,EAAuBgrB,UAAWN,oBAAqBA,IACrS73B,KAAKo4B,uBAAuBR,EAAY53B,KAAK+0B,gBAC7C/0B,KAAKq4B,WAAW,CAACT,GAAajM,EAAMnV,eAC7BohB,GAOX1D,kBAAkB51B,UAAUq4B,gBAAkB,SAAUC,EAAQpgB,GAC5DxW,KAAKiqB,OAAO6J,MAAM,6CAClB,IAAInI,EAAQ3rB,KAAKy0B,sBAAsBp3B,IAAImZ,GACvCmV,EACA3rB,KAAKy0B,sBAAsBnH,IAAI9W,EAAe,cAAS,cAAS,GAAImV,GAAQiL,IAG5E52B,KAAKiqB,OAAO6J,MAAM,yCAA0Ctd,IAQpE0d,kBAAkB51B,UAAUu4B,UAAY,SAAUC,EAAUtgB,GACxDxW,KAAKiqB,OAAO6J,MAAM,wCAClB,IAAInI,EAAQ3rB,KAAKy0B,sBAAsBp3B,IAAImZ,GAC3C,GAAImV,EACA,IAAK,IAAI2M,KAAWxB,EACXnL,EAAMptB,eAAe+5B,KACtB3M,EAAM2M,GAAW,GAErB3M,EAAM2M,IAAYxB,EAASwB,QAI/Bt4B,KAAKiqB,OAAO6J,MAAM,yCAA0Ctd,IAYpE0d,kBAAkB51B,UAAUk4B,0BAA4B,SAAU7K,GAC9D,IAAIqL,EAAYh3B,KAAKy0B,sBAAsBp3B,IAAIsuB,EAAMnV,eACjDwgB,GACAh3B,KAAKiqB,OAAO6J,MAAM,kDAAoDnI,EAAM5uB,KAAO,iBAAkB4uB,EAAMnV,eAC3GwgB,EAAUQ,0BAA4BR,EAAUQ,2BAA6B,IAAInK,IACjF2J,EAAUQ,0BAA0BlK,IAAI3B,EAAMsK,QAAS,CAAEl5B,KAAM4uB,EAAM5uB,KAAMq5B,YAAazK,EAAMyK,gBAG9Fp2B,KAAKiqB,OAAO6J,MAAM,kDAAoDnI,EAAM5uB,KAAO,WAAY4uB,EAAMnV,eACrGxW,KAAKy0B,sBAAsBnH,IAAI3B,EAAMnV,cAAe,cAAS,GAAImV,MAGzEuI,kBAAkB51B,UAAUg5B,aAAe,SAAU9gB,GACjD,IAAI+hB,EAAmCv4B,KAAK00B,kBAAkBr3B,IAAImZ,GAC7D+hB,GACDv4B,KAAKiqB,OAAO6J,MAAM,yEAA2Etd,GAEjG,IAAI2gB,EAAiB,EACjBC,EAAkB,EAClBC,EAAyB,EAM7B,OALAkB,SAAoGA,EAAiC32B,SAAQ,SAAUm1B,GACnJI,GAAkBJ,EAAYvB,UAC9B4B,IACAC,GAA0BN,EAAYtB,kBAAoB,EAAI,KAE3D,CACH0B,eAAgBA,EAChBC,gBAAiBA,EACjBC,uBAAwBA,IAQhCnD,kBAAkB51B,UAAUo4B,oBAAsB,SAAUlgB,GACxDxW,KAAKiqB,OAAO6J,MAAM,wDAAyDtd,GAC3ExW,KAAKy0B,sBAAsB/H,OAAOlW,IAOtC0d,kBAAkB51B,UAAUi5B,aAAe,SAAU/gB,GACjDxW,KAAK02B,oBAAoBlgB,GACzBxW,KAAKiqB,OAAO6J,MAAM,iDAAkDtd,GACpExW,KAAK00B,kBAAkBhI,OAAOlW,GAC9BxW,KAAKiqB,OAAO6J,MAAM,+CAAgDtd,GAClExW,KAAK20B,4BAA4BjI,OAAOlW,IAQ5C0d,kBAAkB51B,UAAUk6B,uBAAyB,SAAUC,GAC3D,IAAIC,EAAa14B,KAAK81B,aAGtB,OAFA91B,KAAKw0B,UAAUlH,IAAIoL,EAAYD,GAC/Bz4B,KAAKiqB,OAAOI,QAAQ,+DAAiEqO,GAC9EA,GAQXxE,kBAAkB51B,UAAUq6B,0BAA4B,SAAUD,GAC9D,IAAI53B,EAASd,KAAKw0B,UAAU9H,OAAOgM,GAOnC,OANI53B,EACAd,KAAKiqB,OAAOI,QAAQ,2CAA6CqO,EAAa,aAG9E14B,KAAKiqB,OAAOI,QAAQ,2CAA6CqO,EAAa,iBAE3E53B,GAQXozB,kBAAkB51B,UAAU+5B,WAAa,SAAUO,EAAQpiB,GACvD,IAAIJ,EAAQpW,KACZA,KAAKiqB,OAAOI,QAAQ,iDAAkD7T,GACtExW,KAAKw0B,UAAU5yB,SAAQ,SAAU62B,EAAUC,GACvCtiB,EAAM6T,OAAO6J,MAAM,iDAAmD4E,EAAYliB,GAClFiiB,EAAS5rB,MAAM,KAAM,CAAC+rB,QAQ9B1E,kBAAkB51B,UAAU85B,uBAAyB,SAAUzM,EAAOkN,GAClEA,EAAUj3B,SAAQ,SAAU7D,GACpBA,KAAO4tB,GAA+B,iBAAfA,EAAM5tB,KAC7B4tB,EAAM5tB,GAAOgc,KAAK4d,MAAMhM,EAAM5tB,SAInCm2B,kBA1Y2B,GCAlC4E,GAA4C,WAC5C,SAASA,8BAST,OANAA,2BAA2Bx6B,UAAU2xB,iBAAmB,aAExD6I,2BAA2Bx6B,UAAUuyB,eAAiB,aACtDiI,2BAA2Bx6B,UAAUo5B,iBAAmB,WACpD,OAAO,MAEJoB,2BAVoC,GAY3C,GAAuC,SAAU/iB,GAEjD,SAASgjB,wBACL,OAAkB,OAAXhjB,GAAmBA,EAAOlJ,MAAM7M,KAAM4M,YAAc5M,KAuB/D,OAzBA,eAAU+4B,sBAAuBhjB,GAIjCgjB,sBAAsBz6B,UAAUw3B,WAAa,WACzC,MAAO,eAEXiD,sBAAsBz6B,UAAUw2B,6BAA+B,WAC3D,OAAO,IAAIgE,IAEfC,sBAAsBz6B,UAAUs2B,4BAA8B,WAC1D,OAAO,IAAIkE,IAGfC,sBAAsBz6B,UAAU82B,oBAAsB,SAAUC,EAAcC,GAC1E,OAAO,GAGXyD,sBAAsBz6B,UAAUi3B,oBAAsB,SAAUN,EAAWze,EAAegf,KAI1FuD,sBAAsBz6B,UAAU06B,gBAAkB,SAAU/D,EAAWze,KAGhEuiB,sBA1B+B,CA2BxC,ICvCEE,GAAgC,CAChC5J,cAAe,WAEX,MAAM,GAAU5Y,sBADC,gEAGrB6Y,aAAc,WAEV,MAAM,GAAU7Y,sBADC,+DAGrBiQ,aAAc,WAEV,MAAM,GAAUjQ,sBADC,+DAGrB8Y,kBAAmB,WACf,OAAO,eAAUvvB,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,kEACP,GAAUrM,sBADH,0EAKzB+Y,uBAAwB,WACpB,OAAO,eAAUxvB,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,uEACP,GAAUrM,sBADH,+EAKzBsa,sBAAuB,WACnB,OAAO,eAAU/wB,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,sEACP,GAAUrM,sBADH,8EAKzBua,cAAe,WACX,OAAO,eAAUhxB,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,8DACP,GAAUrM,sBADH,sEAKzBwa,QAAS,WACL,OAAO,eAAUjxB,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,wDACP,GAAUrM,sBADH,gEAKzB8Z,WAAY,WACR,OAAO,eAAUvwB,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,2DACP,GAAUrM,sBADH,oECxCzB,GAAkC,WAClC,SAASyiB,oBA0GT,OArGAA,iBAAiB56B,UAAU66B,kBAAoB,WAC3C,OAAOD,iBAAiBE,6BAA6Bp5B,KAAKq5B,cAAer5B,KAAKs5B,cAKlFJ,iBAAiB56B,UAAUi7B,qBAAuB,WAC9C,OAAOL,iBAAiBM,gCAAgCx5B,KAAKy5B,eAAgBz5B,KAAKm0B,SAAUn0B,KAAK05B,MAAO15B,KAAK25B,WAKjHT,iBAAiB56B,UAAUs7B,eAAiB,WACxC,OAAOV,iBAAiBW,0BAA0B75B,KAAK2oB,SAK3DuQ,iBAAiB56B,UAAUw7B,sBAAwB,WAC/C,OAAOZ,iBAAiBa,2BAA2B/5B,KAAKq5B,cAAer5B,KAAKs5B,YAAat5B,KAAKy5B,eAAgBz5B,KAAKm0B,SAAUn0B,KAAK05B,MAAO15B,KAAK2oB,OAAQ3oB,KAAK25B,SAAU35B,KAAKg6B,UAAWh6B,KAAKi6B,sBAK9Lf,iBAAiB56B,UAAU47B,aAAe,WACtC,OAAQl6B,KAAKy5B,gBACT,KAAKnmB,EAAe6mB,SAChB,OAAO5mB,EAAU4mB,SACrB,KAAK7mB,EAAe8mB,aACpB,KAAK9mB,EAAe+mB,8BAChB,OAAO9mB,EAAU6mB,aACrB,KAAK9mB,EAAegnB,cAChB,OAAO/mB,EAAU+mB,cACrB,QACI,MAAM,GAAgB3Z,wCAQlCuY,iBAAiBa,2BAA6B,SAAUV,EAAeC,EAAaG,EAAgBtF,EAAUuF,EAAO/Q,EAAQgR,EAAUK,EAAWC,GAQ9I,MAPoB,CAChBj6B,KAAKo5B,6BAA6BC,EAAeC,GACjDt5B,KAAKw5B,gCAAgCC,EAAgBtF,EAAUuF,EAAOC,GACtE35B,KAAK65B,0BAA0BlR,GAC/B3oB,KAAKu6B,8BAA8BN,GACnCj6B,KAAKw6B,0BAA0BR,IAEd92B,KAAKmQ,EAAWonB,qBAAqBh3B,eAO9Dy1B,iBAAiBE,6BAA+B,SAAUC,EAAeC,GAErE,MADgB,CAACD,EAAeC,GACfp2B,KAAKmQ,EAAWonB,qBAAqBh3B,eAS1Dy1B,iBAAiBM,gCAAkC,SAAUC,EAAgBtF,EAAUuF,EAAOC,GAS1F,MALmB,CACfF,EAJmBA,IAAmBnmB,EAAegnB,eACnDX,GACAxF,EAIFuF,GAAS5pB,EAAU4B,cAEHxO,KAAKmQ,EAAWonB,qBAAqBh3B,eAK7Dy1B,iBAAiBW,0BAA4B,SAAU7hB,GACnD,OAAQA,GAAUlI,EAAU4B,cAAcjO,eAK9Cy1B,iBAAiBqB,8BAAgC,SAAUN,GACvD,OAAQA,GAAuBnqB,EAAU4B,cAAcjO,eAK3Dy1B,iBAAiBsB,0BAA4B,SAAUR,GAKnD,OAAQA,GAAaA,EAAUv2B,gBAAkBsQ,EAAqB2mB,OAAOj3B,cAAiBu2B,EAAUv2B,cAAgBqM,EAAU4B,cAE/HwnB,iBA3G0B,GCJjC,GAA+B,SAAUnjB,GAEzC,SAAS4kB,gBACL,OAAkB,OAAX5kB,GAAmBA,EAAOlJ,MAAM7M,KAAM4M,YAAc5M,KAmC/D,OArCA,eAAU26B,cAAe5kB,GAWzB4kB,cAAcC,oBAAsB,SAAUvB,EAAeC,EAAauB,EAAS1G,EAAU2G,GACzF,IAAIC,EAAgB,IAAIJ,cAOxB,OANAI,EAActB,eAAiBnmB,EAAe6mB,SAC9CY,EAAc1B,cAAgBA,EAC9B0B,EAAczB,YAAcA,EAC5ByB,EAAc5G,SAAWA,EACzB4G,EAAcC,OAASH,EACvBE,EAAcrB,MAAQoB,EACfC,GAMXJ,cAAcM,gBAAkB,SAAUC,GACtC,QAAKA,IAGGA,EAAO38B,eAAe,kBAC1B28B,EAAO38B,eAAe,gBACtB28B,EAAO38B,eAAe,mBACtB28B,EAAO38B,eAAe,UACtB28B,EAAO38B,eAAe,aACtB28B,EAAO38B,eAAe,WACtB28B,EAAuB,iBAAM5nB,EAAe6mB,WAE7CQ,cAtCuB,CAuChC,ICtDEQ,GACmB,CACftlB,KAAM,qBACNC,KAAM,oEAHVqlB,GAKqB,CACjBtlB,KAAM,wBACNC,KAAM,4CAPVqlB,GAS2B,CACvBtlB,KAAM,+BACNC,KAAM,oDAXVqlB,GAasB,CAClBtlB,KAAM,yBACNC,KAAM,6NAfVqlB,GAiBe,CACXtlB,KAAM,kBACNC,KAAM,sDAnBVqlB,GAqBe,CACXtlB,KAAM,kBACNC,KAAM,0BAvBVqlB,GAyBkB,CACdtlB,KAAM,2BACNC,KAAM,kHA3BVqlB,GAiC0B,CACtBtlB,KAAM,8BACNC,KAAM,qDAnCVqlB,GAqCe,CACXtlB,KAAM,uBACNC,KAAM,8RAvCVqlB,GAyCsB,CAClBtlB,KAAM,iBACNC,KAAM,6DA3CVqlB,GA6CwB,CACpBtlB,KAAM,sBACNC,KAAM,mDA/CVqlB,GAiDyB,CACrBtlB,KAAM,uBACNC,KAAM,6CAnDVqlB,GAqD4B,CACxBtlB,KAAM,gCACNC,KAAM,iFAvDVqlB,GAyD4B,CACxBtlB,KAAM,sBACNC,KAAM,uGA3DVqlB,GA6D+B,CAC3BtlB,KAAM,mCACNC,KAAM,uIA/DVqlB,GAiE0B,CACtBtlB,KAAM,6BACNC,KAAM,2IAnEVqlB,GAqEoB,CAChBtlB,KAAM,sBACNC,KAAM,8HAvEVqlB,GAyE2B,CACvBtlB,KAAM,+BACNC,KAAM,uHA3EVqlB,GA6Ee,CACXtlB,KAAM,kBACNC,KAAM,+HA/EVqlB,GAiFe,CACXtlB,KAAM,kBACNC,KAAM,yJAnFVqlB,GAqFkC,CAC9BtlB,KAAM,sCACNC,KAAM,kLAvFVqlB,GAyF6B,CACzBtlB,KAAM,gCACNC,KAAM,0CA3FVqlB,GA6FmB,CACftlB,KAAM,qBACNC,KAAM,oPAMV,GAA0C,SAAUC,GAEpD,SAASqlB,yBAAyBnlB,EAAWC,GACzC,IAAIE,EAAQL,EAAOpZ,KAAKqD,KAAMiW,EAAWC,IAAiBlW,KAG1D,OAFAoW,EAAMrZ,KAAO,2BACbG,OAAOuN,eAAe2L,EAAOglB,yBAAyB98B,WAC/C8X,EAkJX,OAvJA,eAAUglB,yBAA0BrlB,GAUpCqlB,yBAAyB9R,4BAA8B,WACnD,OAAO,IAAI8R,yBAAyBD,GAAkDtlB,KAAMslB,GAAkDrlB,OAKlJslB,yBAAyB7R,sCAAwC,WAC7D,OAAO,IAAI6R,yBAAyBD,GAAoDtlB,KAAMslB,GAAoDrlB,OAKtJslB,yBAAyBC,gCAAkC,SAAUC,GACjE,OAAO,IAAIF,yBAAyBD,GAA0DtlB,KAAMslB,GAA0DrlB,KAAO,iBAAmBwlB,IAM5LF,yBAAyBG,gCAAkC,SAAUC,GACjE,OAAO,IAAIJ,yBAAyBD,GAAqDtlB,KAAMslB,GAAqDrlB,KAAO,eAAiB0lB,IAMhLJ,yBAAyBK,oBAAsB,SAAUC,GACrD,OAAO,IAAIN,yBAAyBD,GAA8CtlB,KAAMslB,GAA8CrlB,KAAO,iBAAmB4lB,IAMpKN,yBAAyBO,oBAAsB,WAC3C,OAAO,IAAIP,yBAAyBD,GAA8CtlB,KAAMslB,GAA8CrlB,OAM1IslB,yBAAyBQ,4BAA8B,WACnD,OAAO,IAAIR,yBAAyBD,GAAiDtlB,KAAM,GAAKslB,GAAiDrlB,OAMrJslB,yBAAyBS,+BAAiC,SAAUC,GAChE,OAAO,IAAIV,yBAAyBD,GAAyDtlB,KAAMslB,GAAyDrlB,KAAO,kBAAoBgmB,IAM3LV,yBAAyBW,yBAA2B,SAAUC,GAC1D,OAAO,IAAIZ,yBAAyBD,GAA8CtlB,KAAMslB,GAA8CrlB,KAAO,iBAAmBkmB,IAKpKZ,yBAAyBa,gCAAkC,WACvD,OAAO,IAAIb,yBAAyBD,GAAqDtlB,KAAMslB,GAAqDrlB,OAKxJslB,yBAAyBc,8BAAgC,WACrD,OAAO,IAAId,yBAAyBD,GAAwDtlB,KAAMslB,GAAwDrlB,OAK9JslB,yBAAyBe,6BAA+B,WACpD,OAAO,IAAIf,yBAAyBD,GAAuDtlB,KAAMslB,GAAuDrlB,OAK5JslB,yBAAyBgB,sCAAwC,WAC7D,OAAO,IAAIhB,yBAAyBD,GAA2DtlB,KAAMslB,GAA2DrlB,OAKpKslB,yBAAyBiB,sCAAwC,WAC7D,OAAO,IAAIjB,yBAAyBD,GAA2DtlB,KAAMslB,GAA2DrlB,OAKpKslB,yBAAyBkB,yCAA2C,WAChE,OAAO,IAAIlB,yBAAyBD,GAA8DtlB,KAAMslB,GAA8DrlB,OAK1KslB,yBAAyBmB,oCAAsC,WAC3D,OAAO,IAAInB,yBAAyBD,GAAyDtlB,KAAMslB,GAAyDrlB,OAKhKslB,yBAAyBoB,8BAAgC,WACrD,OAAO,IAAIpB,yBAAyBD,GAAmDtlB,KAAMslB,GAAmDrlB,OAKpJslB,yBAAyBqB,qCAAuC,WAC5D,OAAO,IAAIrB,yBAAyBD,GAA0DtlB,KAAMslB,GAA0DrlB,OAKlKslB,yBAAyBsB,yBAA2B,WAChD,OAAO,IAAItB,yBAAyBD,GAA8CtlB,KAAMslB,GAA8CrlB,OAK1IslB,yBAAyBuB,yBAA2B,WAChD,OAAO,IAAIvB,yBAAyBD,GAA8CtlB,KAAMslB,GAA8CrlB,OAK1IslB,yBAAyBwB,6CAA+C,WACpE,OAAO,IAAIxB,yBAAyBD,GAAiEtlB,KAAMslB,GAAiErlB,OAKhLslB,yBAAyByB,uCAAyC,SAAUC,EAAmBC,GAC3F,OAAO,IAAI3B,yBAAyBD,GAA4DtlB,KAAMslB,GAA4DrlB,KAAO,qBAAuBgnB,EAAoB,cAAgBC,IAKxO3B,yBAAyB4B,6BAA+B,WACpD,OAAO,IAAI5B,yBAAyBD,GAAkDtlB,KAAMslB,GAAkDrlB,OAE3IslB,yBAxJkC,CAyJ3C,ICzPE,GAA0B,WAC1B,SAAS6B,SAASnB,GACd,IAAI1lB,EAAQpW,KAERk9B,EAAWpB,EAAc,GAAY/Y,iBAAiB5T,eAAe2sB,IAAgB,GACrFqB,EAAgBD,EAAW,GAAYja,4BAA4Bia,GAAY,GAEnFl9B,KAAKo9B,oBAAoBD,GACzBn9B,KAAKgY,OAAS,IAAI9I,IAClBiuB,EAAcv7B,SAAQ,SAAUy7B,GAAS,OAAOjnB,EAAM4B,OAAOslB,IAAID,MAgLrE,OAxKAJ,SAASM,WAAa,SAAUC,GAG5B,OAAO,IAAIP,UAFOO,GAAoB1tB,EAAU4B,cAClBzN,MAAM,OAQxCg5B,SAASQ,mBAAqB,SAAUD,GACpC,IAAIE,EAAW,IAAIT,SAASO,GAO5B,OANKE,EAASC,yBAIVD,EAASE,YAAY9tB,EAAUkB,sBAH/B0sB,EAASG,mBAKNH,GAOXT,SAAS3+B,UAAU8+B,oBAAsB,SAAUtB,GAE/C,IAAKA,GAAeA,EAAYr5B,OAAS,EACrC,MAAM,GAAyBm5B,+BAOvCqB,SAAS3+B,UAAUw/B,cAAgB,SAAUT,GACzC,IACIU,EAAqB,IAAId,SADPj9B,KAAKg+B,uBAAuB/5B,MAAM,MAGxD,OAAQ,GAAYyd,QAAQ2b,IAASU,EAAmB/lB,OAAOwV,IAAI6P,EAAM55B,gBAM7Ew5B,SAAS3+B,UAAU2/B,iBAAmB,SAAUP,GAC5C,IAAItnB,EAAQpW,KACZ,SAAK09B,GAAYA,EAAS1lB,OAAOkmB,MAAQ,KAGjCl+B,KAAKgY,OAAOkmB,MAAQR,EAAS1lB,OAAOkmB,MAAQR,EAASS,UAAUC,OAAM,SAAUf,GAAS,OAAOjnB,EAAM0nB,cAAcT,QAK/HJ,SAAS3+B,UAAUq/B,uBAAyB,WACxC,IAAIvnB,EAAQpW,KACRq+B,EAAoB,EAMxB,OALA5rB,EAAY7Q,SAAQ,SAAU08B,GACtBloB,EAAM0nB,cAAcQ,KACpBD,GAAqB,MAGtBr+B,KAAKgY,OAAOkmB,OAASG,GAMhCpB,SAAS3+B,UAAUigC,YAAc,SAAUC,GAClC,GAAY9c,QAAQ8c,IACrBx+B,KAAKgY,OAAOslB,IAAIkB,EAAS3b,SAOjCoa,SAAS3+B,UAAUmgC,aAAe,SAAUC,GACxC,IAAItoB,EAAQpW,KACZ,IACI0+B,EAAU98B,SAAQ,SAAU48B,GAAY,OAAOpoB,EAAMmoB,YAAYC,MAErE,MAAO/9B,GACH,MAAM,GAAgBmf,0BAA0Bnf,KAOxDw8B,SAAS3+B,UAAUs/B,YAAc,SAAUP,GACvC,GAAI,GAAY3b,QAAQ2b,GACpB,MAAM,GAAgB1d,mCAAmC0d,GAE7Dr9B,KAAKgY,OAAO0U,OAAO2Q,EAAMxa,SAM7Boa,SAAS3+B,UAAUu/B,iBAAmB,WAClC,IAAIznB,EAAQpW,KACZyS,EAAY7Q,SAAQ,SAAU08B,GAC1BloB,EAAM4B,OAAO0U,OAAO4R,OAO5BrB,SAAS3+B,UAAUqgC,eAAiB,SAAUC,GAC1C,IAAKA,EACD,MAAM,GAAgB9e,gCAE1B,IAAI+e,EAAc,IAAI3vB,IAGtB,OAFA0vB,EAAY5mB,OAAOpW,SAAQ,SAAUy7B,GAAS,OAAOwB,EAAYvB,IAAID,EAAM55B,kBAC3EzD,KAAKgY,OAAOpW,SAAQ,SAAUy7B,GAAS,OAAOwB,EAAYvB,IAAID,EAAM55B,kBAC7Do7B,GAMX5B,SAAS3+B,UAAUwgC,sBAAwB,SAAUF,GACjD,IAAKA,EACD,MAAM,GAAgB9e,gCAGrB8e,EAAYjB,0BACbiB,EAAYf,mBAEhB,IAAIgB,EAAc7+B,KAAK2+B,eAAeC,GAClCG,EAAkBH,EAAYI,gBAC9BC,EAAiBj/B,KAAKg/B,gBAE1B,OADsBH,EAAYX,KACRe,EAAiBF,GAK/C9B,SAAS3+B,UAAU0gC,cAAgB,WAC/B,OAAOh/B,KAAKgY,OAAOkmB,MAKvBjB,SAAS3+B,UAAU6/B,QAAU,WACzB,IAAIe,EAAQ,GAEZ,OADAl/B,KAAKgY,OAAOpW,SAAQ,SAAUX,GAAO,OAAOi+B,EAAMr+B,KAAKI,MAChDi+B,GAKXjC,SAAS3+B,UAAU6gC,YAAc,WAC7B,OAAIn/B,KAAKgY,OACUhY,KAAKm+B,UACJj7B,KAAK,KAElB4M,EAAU4B,cAKrBurB,SAAS3+B,UAAU0/B,qBAAuB,WACtC,OAAOh+B,KAAKm/B,cAAc17B,eAEvBw5B,SAzLkB,GCF7B,SAASmC,gBAAgBC,EAAe5X,GACpC,GAAI,GAAY/F,QAAQ2d,GACpB,MAAM,GAAgBthB,6BAE1B,IACI,IAAIuhB,EAAoB7X,EAAO6H,aAAa+P,GAC5C,OAAOpmB,KAAKkJ,MAAMmd,GAEtB,MAAO7+B,GACH,MAAM,GAAgBod,8BAA8Bpd,EAAEmuB,UAO9D,SAAS2Q,iCAAiClG,GACtC,GAAI,GAAY3X,QAAQ2X,GACpB,MAAM,GAAgBxb,8BAA8B,8BAExD,IAAI2hB,EAAkBnG,EAAcp1B,MAAMoP,EAAWosB,sBAAuB,GAC5E,MAAO,CACHC,IAAKF,EAAgB,GACrBG,KAAMH,EAAgB/8B,OAAS,EAAIqN,EAAU4B,aAAe8tB,EAAgB,KR5BpF,SAAWrN,GACPA,EAAcA,EAAuB,QAAI,GAAK,UAC9CA,EAAcA,EAAoB,KAAI,GAAK,OAC3CA,EAAcA,EAAoB,KAAI,GAAK,OAC3CA,EAAcA,EAAoB,KAAI,GAAK,OAJ/C,CAKGA,KAAkBA,GAAgB,KSoBrC,IC7BIyN,GD6BA,GAA+B,WAC/B,SAASC,iBA8MT,OAzMAA,cAAcvhC,UAAU66B,kBAAoB,WAExC,MADgB,CAACn5B,KAAKq5B,cAAer5B,KAAKs5B,aACzBp2B,KAAKmQ,EAAWonB,qBAAqBh3B,eAK1Do8B,cAAcvhC,UAAUwhC,mBAAqB,WACzC,OAAOD,cAAcE,wBAAwB,CACzC1G,cAAer5B,KAAKq5B,cACpBC,YAAat5B,KAAKs5B,YAClBwB,SAAU96B,KAAK05B,MACfsG,SAAUhgC,KAAKggC,SACfC,eAAgBjgC,KAAKigC,kBAM7BJ,cAAcvhC,UAAU47B,aAAe,WACnC,OAAQl6B,KAAKkgC,eACT,KAAK9sB,EAAiB+sB,kBAClB,OAAO5sB,EAAUlD,KACrB,KAAK+C,EAAiBgtB,mBAClB,OAAO7sB,EAAU8sB,IACrB,KAAKjtB,EAAiBktB,mBAClB,OAAO/sB,EAAUgtB,MACrB,KAAKntB,EAAiBotB,qBAClB,OAAOjtB,EAAUktB,QACrB,QACI,MAAM,GAAgB/f,qCAOlCmf,cAAcvhC,UAAUoiC,eAAiB,WACrC,MAAO,CACHrH,cAAer5B,KAAKq5B,cACpBC,YAAat5B,KAAKs5B,YAClBwB,SAAU96B,KAAK05B,MACfsG,SAAUhgC,KAAKggC,SACfC,eAAgBjgC,KAAKigC,eACrBljC,KAAMiD,KAAKjD,KACX4jC,cAAe3gC,KAAK2gC,cACpBC,gBAAiB5gC,KAAK4gC,kBAO9Bf,cAAcE,wBAA0B,SAAUc,GAM9C,MALiB,CACbA,EAAiBxH,cACjBwH,EAAiBvH,aAAexpB,EAAU4B,aAC1CmvB,EAAiB/F,UAAYhrB,EAAU4B,cAEzBxO,KAAKmQ,EAAWonB,qBAAqBh3B,eAS3Do8B,cAAciB,cAAgB,SAAUC,EAAY1H,EAAewB,EAASzG,EAAW4M,EAAoBC,EAAa3H,EAAasH,GACjI,IAAI9d,EAAIqH,EAAI+W,EAAIC,EAAIC,EAAIC,EACpBC,EAAU,IAAIzB,cAClByB,EAAQpB,cAAgB9sB,EAAiBktB,mBACzCgB,EAAQP,WAAaA,EACrBO,EAAQjI,cAAgBA,EACxBiI,EAAQV,gBAAkBA,EAC1B,IAAIW,EAAMjI,GAAgBlF,GAAaA,EAAUoN,oBACjD,IAAKD,EACD,MAAM,GAAgBnhB,qCAK1B,GAHAkhB,EAAQhI,YAAciI,EAEtBD,EAAQ5H,OAAqF,QAA3E5W,EAAK+X,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAP2L,OAAgB,EAASA,EAAG2e,MAAQ3xB,EAAU4B,aAC/ImpB,EAAS,CACTyG,EAAQX,cAAgB9F,EAAQ1jB,OAEhCmqB,EAAQrB,gBAA8F,QAA3E9V,EAAK0Q,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAPgT,OAAgB,EAASA,EAAGuX,OAAqF,QAA3ER,EAAKrG,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAP+pB,OAAgB,EAASA,EAAGS,MAAQ7xB,EAAU4B,aAMrR,IAAIkwB,EAAgG,QAA3ET,EAAKtG,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAPgqB,OAAgB,EAASA,EAAGU,mBACpIC,GAAqF,QAA3EV,EAAKvG,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAPiqB,OAAgB,EAASA,EAAGW,QAAUlH,EAAQ1jB,OAAO4qB,OAAO,GAAK,KAClKT,EAAQtB,SAAW4B,GAAqBE,GAAShyB,EAAU4B,aAC3D4vB,EAAQvkC,KAAmF,QAA3EskC,EAAKxG,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAPkqB,OAAgB,EAASA,EAAGtkC,KAInI,OAFAukC,EAAQN,mBAAqBA,EAC7BM,EAAQL,YAAcA,EACfK,GAOXzB,cAAcmC,qBAAuB,SAAU3I,EAAewB,EAASzG,EAAW4M,EAAoBC,EAAa3H,GAC/G,IAAIxW,EAAIqH,EAAI+W,EAAIC,EACZG,EAAU,IAAIzB,cAClByB,EAAQpB,cAAiB9L,GACrBA,EAAU8L,gBAAkB/N,GAAc8P,KAAQ7uB,EAAiB+sB,kBAAoB/sB,EAAiBotB,qBAC5Gc,EAAQjI,cAAgBA,EAExBiI,EAAQ5H,MAAQ5pB,EAAU4B,aAC1B,IAAI6vB,EAAMjI,GAAelF,GAAaA,EAAUoN,oBAChD,IAAKD,EACD,MAAM,GAAgBnhB,qCAiB1B,OAfIya,IAEAyG,EAAQrB,gBAA8F,QAA3End,EAAK+X,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAP2L,OAAgB,EAASA,EAAG4e,OAAqF,QAA3EvX,EAAK0Q,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAPgT,OAAgB,EAASA,EAAGwX,MAAQ7xB,EAAU4B,aAErR4vB,EAAQtB,UAAwF,QAA3EkB,EAAKrG,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAP+pB,OAAgB,EAASA,EAAGgB,MAAQpyB,EAAU4B,aACtJ4vB,EAAQvkC,MAAoF,QAA3EokC,EAAKtG,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAPgqB,OAAgB,EAASA,EAAGpkC,OAAS+S,EAAU4B,aACnJ4vB,EAAQX,cAAgB9F,aAAyC,EAASA,EAAQ1jB,QAEtFmqB,EAAQhI,YAAciI,EACtBD,EAAQN,mBAAqBA,EAC7BM,EAAQL,YAAcA,EAKfK,GAOXzB,cAAcsC,sBAAwB,SAAUC,EAAkBC,EAAUpY,EAAQzQ,EAAWqhB,GAC3F,IAAI/X,EACAwf,GAAyF,QAA3Exf,EAAK+X,aAAyC,EAASA,EAAQ1jB,cAA2B,IAAP2L,OAAgB,EAASA,EAAG6e,KAAO9G,EAAQ1jB,OAAOwqB,IAAM7xB,EAAU4B,aAEvK,GAAI2wB,IAAalQ,GAAc8P,MAAQI,IAAalQ,GAAcoQ,KAC9D,OAAOD,EAGX,GAAIF,EACA,IACI,IAAIrB,EAAa3B,gBAAgBgD,EAAkB5oB,GACnD,IAAK,GAAYkI,QAAQqf,EAAWrB,OAAS,GAAYhe,QAAQqf,EAAWpB,MACxE,MAAO,GAAKoB,EAAWrB,IAAMrsB,EAAWosB,sBAAwBsB,EAAWpB,KAGnF,MAAOl/B,IAIX,OADAwpB,EAAOI,QAAQ,8BACRiY,GAMXzC,cAAc2C,gBAAkB,SAAUtH,GACtC,QAAKA,IAGGA,EAAO38B,eAAe,kBAC1B28B,EAAO38B,eAAe,gBACtB28B,EAAO38B,eAAe,UACtB28B,EAAO38B,eAAe,mBACtB28B,EAAO38B,eAAe,aACtB28B,EAAO38B,eAAe,mBAQ9BshC,cAAc4C,mBAAqB,SAAUC,EAAUC,EAAUC,GAC7D,IAAKF,IAAaC,EACd,OAAO,EAEX,IAAIE,GAAc,EAClB,GAAID,EAAe,CACf,IAAIE,EAAkBJ,EAAS/B,eAAiB,GAC5CoC,EAAkBJ,EAAShC,eAAiB,GAEhDkC,EAAeC,EAAeE,MAAQD,EAAeC,KAChDF,EAAeG,QAAUF,EAAeE,MAEjD,OAAQP,EAASrJ,gBAAkBsJ,EAAStJ,eACvCqJ,EAASzC,iBAAmB0C,EAAS1C,gBACrCyC,EAAS1C,WAAa2C,EAAS3C,UAC/B0C,EAAS5H,WAAa6H,EAAS7H,UAC/B4H,EAASpJ,cAAgBqJ,EAASrJ,aAClCoJ,EAAS9B,kBAAoB+B,EAAS/B,iBACvCiC,GAEDhD,cA/MuB,GEvB9B,GAA2B,WAC3B,SAASqD,UAAUC,EAAU1b,GACzB,GAAI,GAAY/F,QAAQyhB,GACpB,MAAM,GAAgBjlB,4BAA4BilB,GAEtDnjC,KAAKmjC,SAAWA,EAChBnjC,KAAKmX,OAAS+rB,UAAUE,mBAAmBD,EAAU1b,GAkCzD,OA3BAyb,UAAUE,mBAAqB,SAAUC,EAAc5b,GACnD,IAAI6b,EAAe,GAAY9hB,gBAAgB6hB,GAE/C,IACI,IAAIE,EAAqBD,EAAaxhB,WAElC0hB,EAAgB/b,EAAO6H,aAAaiU,GACxC,OAAOtqB,KAAKkJ,MAAMqhB,GAEtB,MAAO39B,GACH,MAAM,GAAgBmY,wBAAwBnY,KAMtDq9B,UAAUO,YAAc,SAAUC,EAAUC,GAOxC,GAAgB,IAAXA,GAAmBxQ,KAAKkD,MADR,IACmCqN,EAAWC,EAC/D,MAAM,GAAgBzkB,+BAGvBgkB,UAxCmB,GCT1B,GAAO,qBACP,GAAU,SCcV,GAA8B,WAC9B,SAASU,aAAazP,EAAU0P,EAAY5Z,GACxCjqB,KAAKm0B,SAAWA,EAChBn0B,KAAK6jC,WAAaA,EAClB7jC,KAAK8jC,aAAe7Z,EAAO+I,MAAM,GAAM,IAq6B3C,OAh6BA4Q,aAAatlC,UAAUylC,eAAiB,WACpC,IAAI3tB,EAAQpW,KACRgkC,EAAiBhkC,KAAKikC,iBAC1B,GAAID,EAAevhC,OAAS,EACxB,MAAO,GAEX,IAAIyhC,EAAkBF,EAAeG,QAAO,SAAUC,EAAUrmC,GAC5D,IAAIm9B,EAAS9kB,EAAMiuB,WAAWtmC,GAC9B,OAAKm9B,GAGLkJ,EAASvjC,KAAKq6B,GACPkJ,GAHIA,IAIZ,IACH,OAAIF,EAAgBzhC,OAAS,EAClB,GAGWyhC,EAAgBpgC,KAAI,SAAUwgC,GAC5C,OAAOluB,EAAMmuB,yBAAyBD,OAQlDV,aAAatlC,UAAUkmC,yBAA2B,SAAUC,GACxD,IAAIC,EAAc1kC,KAAK2kC,sBAAsBF,GAC7C,OAAIC,EAAYjiC,OAAS,EACdzC,KAAKukC,yBAAyBG,EAAY,IAG1C,MAGfd,aAAatlC,UAAUimC,yBAA2B,SAAUD,GACxD,IAAIM,EAAcN,EAAc5D,iBAC5B7F,EAAU76B,KAAK6kC,WAAWD,GAK9B,OAJI/J,IACA+J,EAAY/J,QAAUA,EAAQG,OAC9B4J,EAAYjE,cAAgB,IAAI,GAAU9F,EAAQG,OAAQh7B,KAAK6jC,YAAY1sB,QAExEytB,GAMXhB,aAAatlC,UAAUwmC,gBAAkB,SAAUC,GAC/C,OAAO,eAAU/kC,UAAM,OAAQ,GAAQ,WACnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACD,IAAKw2B,EACD,MAAM,GAAgB5kB,mCAQ1B,OANM4kB,EAAYzD,SACdthC,KAAKglC,WAAWD,EAAYzD,SAE1ByD,EAAYlK,SACd76B,KAAKilC,qBAAqBF,EAAYlK,SAEnCkK,EAAYG,YACZ,CAAC,EAAallC,KAAKmlC,gBAAgBJ,EAAYG,cADf,CAAC,EAAa,GAEzD,KAAK,EACDpiB,EAAGxb,OACHwb,EAAGvU,MAAQ,EACf,KAAK,EAOD,OANMw2B,EAAYK,cACdplC,KAAKqlC,0BAA0BN,EAAYK,cAEzCL,EAAYO,aACdtlC,KAAKulC,eAAeR,EAAYO,aAE7B,CAAC,WAS5B1B,aAAatlC,UAAU6mC,gBAAkB,SAAUK,GAC/C,OAAO,eAAUxlC,UAAM,OAAQ,GAAQ,WACnC,IAAIylC,EAAmBC,EAAWC,EAAeC,EAC7CxvB,EAAQpW,KACZ,OAAO,iBAAYA,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAyBD,OAxBAk3B,EAAoB,CAChBtR,SAAUqR,EAAWrR,SACrBsF,eAAgB+L,EAAW/L,eAC3BH,YAAakM,EAAWlM,YACxBD,cAAemM,EAAWnM,cAC1BK,MAAO8L,EAAW9L,MAClBM,UAAWwL,EAAWxL,UACtBC,oBAAqBuL,EAAWvL,qBAEpCyL,EAAY1lC,KAAK6lC,eACjBF,EAAgB,GAASpI,WAAWiI,EAAW7c,QAC/Cid,EAAsB,GACtBF,EAAUR,YAAYtjC,SAAQ,SAAU7D,GACpC,GAAKqY,EAAM0vB,4BAA4B/nC,EAAK0nC,GAAmB,GAA/D,CAGA,IAAIM,EAAc3vB,EAAM4vB,yBAAyBjoC,GACjD,GAAIgoC,GAAe3vB,EAAM6vB,wBAAwBF,EAAaN,GACtC,GAASlI,WAAWwI,EAAYpd,QAClCmW,sBAAsB6G,IACpCC,EAAoB/kC,KAAKuV,EAAM8vB,kBAAkBnoC,QAItD,CAAC,EAAa8M,QAAQs7B,IAAIP,IACrC,KAAK,EAGD,OAFA9iB,EAAGxb,OACHtH,KAAKomC,yBAAyBZ,GACvB,CAAC,WAY5B5B,aAAatlC,UAAUqmC,sBAAwB,SAAUF,GACrD,IAAIruB,EAAQpW,KACRgkC,EAAiBhkC,KAAKikC,iBACtBoC,EAAmB,GA8BvB,OA7BArC,EAAepiC,SAAQ,SAAU0kC,GAC7B,GAAKlwB,EAAMmwB,aAAaD,EAAU7B,EAAcpL,cAAeoL,EAAc/K,OAA7E,CAIA,IAAIwB,EAAS9kB,EAAMiuB,WAAWiC,GACzBpL,IAGCuJ,EAAcpL,gBAAkBjjB,EAAMowB,mBAAmBtL,EAAQuJ,EAAcpL,gBAG/EoL,EAAcxE,iBAAmB7pB,EAAMqwB,oBAAoBvL,EAAQuJ,EAAcxE,iBAGjFwE,EAAczE,WAAa5pB,EAAMswB,cAAcxL,EAAQuJ,EAAczE,WAGrEyE,EAAcnL,cAAgBljB,EAAMuwB,iBAAiBzL,EAAQuJ,EAAcnL,cAG3EmL,EAAc/K,QAAUtjB,EAAMwwB,WAAW1L,EAAQuJ,EAAc/K,QAG/D+K,EAAc7D,kBAAoBxqB,EAAMywB,qBAAqB3L,EAAQuJ,EAAc7D,kBAGzFyF,EAAiBxlC,KAAKq6B,QAEnBmL,GASXzC,aAAatlC,UAAUioC,aAAe,SAAUxoC,EAAKs7B,EAAeyB,GAChE,QAAI/8B,EAAIkG,MAAMoP,EAAWonB,qBAAqBh4B,OAAS,OAInD42B,IAAkBt7B,EAAI0F,cAAcqjC,SAASzN,EAAc51B,mBAG3Dq3B,IAAa/8B,EAAI0F,cAAcqjC,SAAShM,EAASr3B,kBAUzDmgC,aAAatlC,UAAUyoC,gBAAkB,SAAUhpC,GAC/C,GAAIA,EAAIkG,MAAMoP,EAAWonB,qBAAqBh4B,OAAS,EAEnD,OAAO,EAEX,IAAIukC,EAAejpC,EAAI0F,cAEvB,IAAqE,IAAjEujC,EAAaz5B,QAAQ+F,EAAe6mB,SAAS12B,iBACwB,IAArEujC,EAAaz5B,QAAQ+F,EAAe8mB,aAAa32B,iBACqC,IAAtFujC,EAAaz5B,QAAQ+F,EAAe+mB,8BAA8B52B,iBACI,IAAtEujC,EAAaz5B,QAAQ+F,EAAegnB,cAAc72B,eAClD,OAAO,EAEX,GAAIujC,EAAaz5B,QAAQ+F,EAAegnB,cAAc72B,gBAAkB,EAAG,CAEvE,IAAIwjC,EAAqB,GAAK3zB,EAAegnB,cAAgBjnB,EAAWonB,oBAAsBz6B,KAAKm0B,SAAW9gB,EAAWonB,oBACrHyM,EAAqB,GAAK5zB,EAAegnB,cAAgBjnB,EAAWonB,oBAAsB5mB,EAAgBR,EAAWonB,oBACzH,IAAgE,IAA5DuM,EAAaz5B,QAAQ05B,EAAmBxjC,iBAAqF,IAA5DujC,EAAaz5B,QAAQ25B,EAAmBzjC,eACzG,OAAO,OAGV,IAA2D,IAAvDujC,EAAaz5B,QAAQvN,KAAKm0B,SAAS1wB,eAExC,OAAO,EAEX,OAAO,GAQXmgC,aAAatlC,UAAU2nC,wBAA0B,SAAU/K,EAAQv3B,GAC/D,GAAMA,EAAOwwB,WAAan0B,KAAKmnC,cAAcjM,EAAQv3B,EAAOwwB,UACxD,OAAO,EAEX,GAAMxwB,EAAOyjC,oBAAsBpnC,KAAKqnC,uBAAuBnM,EAAQv3B,EAAOyjC,mBAC1E,OAAO,EAMX,GAAqC,iBAAzBzjC,EAAO01B,gBAAgCr5B,KAAKwmC,mBAAmBtL,EAAQv3B,EAAO01B,eACtF,OAAO,EAEX,GAAM11B,EAAO21B,cAAgBt5B,KAAK2mC,iBAAiBzL,EAAQv3B,EAAO21B,aAC9D,OAAO,EAEX,GAAM31B,EAAO+1B,QAAU15B,KAAK4mC,WAAW1L,EAAQv3B,EAAO+1B,OAClD,OAAO,EAEX,GAAM/1B,EAAO81B,iBAAmBz5B,KAAKsnC,oBAAoBpM,EAAQv3B,EAAO81B,gBACpE,OAAO,EAEX,GAAM91B,EAAOg2B,WAAa35B,KAAKunC,cAAcrM,EAAQv3B,EAAOg2B,UACxD,OAAO,EAMX,GAAMh2B,EAAOglB,SAAW3oB,KAAKwnC,YAAYtM,EAAQv3B,EAAOglB,QACpD,OAAO,EAGX,IAAIhlB,EAAOs2B,qBAAuBiB,EAAOjB,sBAEjCiB,EAAOjB,sBAAwBt2B,EAAOs2B,oBACtC,OAAO,EAIf,GAAIiB,EAAOzB,iBAAmBnmB,EAAe+mB,8BAA+B,CACxE,GAAM12B,EAAOq2B,YAAch6B,KAAKynC,eAAevM,EAAQv3B,EAAOq2B,WAC1D,OAAO,EAGX,GAAIr2B,EAAOq2B,YAAcjmB,EAAqB2zB,KACtC/jC,EAAOmiB,QAAU9lB,KAAK2nC,WAAWzM,EAAQv3B,EAAOmiB,OAChD,OAAO,EAInB,OAAO,GAMX8d,aAAatlC,UAAUspC,yBAA2B,SAAUjkC,GACxD,OAAO3D,KAAK6nC,iCAAiClkC,EAAO21B,YAAa31B,EAAOwwB,WAO5EyP,aAAatlC,UAAUupC,iCAAmC,SAAUvO,EAAanF,GAC7E,IAAI/d,EAAQpW,KACR8nC,EAAe9nC,KAAK2sB,UACpBob,EAAsB,GAmB1B,OAlBAD,EAAalmC,SAAQ,SAAU0kC,GAE3B,GAAKlwB,EAAM4xB,cAAc1B,GAAzB,CAIA,IAAIpL,EAAS9kB,EAAM6xB,eAAe3B,GAC7BpL,IAGC5B,IAAgBljB,EAAMuwB,iBAAiBzL,EAAQ5B,IAG/CnF,IAAa/d,EAAM+wB,cAAcjM,EAAQ/G,KAG/C4T,EAAoBzB,GAAYpL,QAE7B6M,GAMXnE,aAAatlC,UAAU4pC,4BAA8B,SAAUC,GAC3D,IAAI/xB,EAAQpW,KACR8nC,EAAe9nC,KAAKooC,2BACpBC,EAAgB,KAgBpB,OAfAP,EAAalmC,SAAQ,SAAU0kC,GAE3B,GAAKlwB,EAAMkyB,oBAAoBhC,KAAmD,IAAtCA,EAAS/4B,QAAQ6I,EAAM+d,UAAnE,CAIA,IAAI+G,EAAS9kB,EAAMmyB,qBAAqBjC,GACnCpL,IAGiC,IAAlCA,EAAOsN,QAAQj7B,QAAQ46B,KAG3BE,EAAgBnN,OAEbmN,GAKXzE,aAAatlC,UAAUmqC,kBAAoB,WACvC,OAAO,eAAUzoC,UAAM,OAAQ,GAAQ,WACnC,IAAIgkC,EAAgB0E,EAChBtyB,EAAQpW,KACZ,OAAO,iBAAYA,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAMD,OALAy1B,EAAiBhkC,KAAKikC,iBACtByE,EAAkB,GAClB1E,EAAepiC,SAAQ,SAAU0kC,GAC7BoC,EAAgB7nC,KAAKuV,EAAMuyB,cAAcrC,OAEtC,CAAC,EAAaz7B,QAAQs7B,IAAIuC,IACrC,KAAK,EAED,OADA5lB,EAAGxb,OACI,CAAC,WAS5Bs8B,aAAatlC,UAAUqqC,cAAgB,SAAUC,GAC7C,OAAO,eAAU5oC,UAAM,OAAQ,GAAQ,WACnC,IAAIshC,EACJ,OAAO,iBAAYthC,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,KADA+yB,EAAUthC,KAAKqkC,WAAWuE,IAEtB,MAAM,GAAgBvoB,4BAE1B,MAAO,CAAC,EAAargB,KAAK6oC,qBAAqBvH,IACnD,KAAK,EAGD,OAFAxe,EAAGxb,OACHtH,KAAKwsB,WAAWoc,GACT,CAAC,WAS5BhF,aAAatlC,UAAUuqC,qBAAuB,SAAUvH,GACpD,OAAO,eAAUthC,UAAM,OAAQ,GAAQ,WACnC,IAAI8oC,EAAcxG,EAAWyG,EACzB3yB,EAAQpW,KACZ,OAAO,iBAAYA,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAmBD,OAlBAu6B,EAAe9oC,KAAK6lC,eACpBvD,EAAYhB,EAAQnI,oBACpB4P,EAAqB,GACrBD,EAAajO,QAAQj5B,SAAQ,SAAU7D,GACJ,IAA3BA,EAAIwP,QAAQ+0B,IACZlsB,EAAM4yB,cAAcjrC,MAG5B+qC,EAAa5D,YAAYtjC,SAAQ,SAAU7D,GACR,IAA3BA,EAAIwP,QAAQ+0B,IACZyG,EAAmBloC,KAAKuV,EAAM8vB,kBAAkBnoC,OAGxD+qC,EAAa1D,aAAaxjC,SAAQ,SAAU7D,GACT,IAA3BA,EAAIwP,QAAQ+0B,IACZlsB,EAAM6yB,mBAAmBlrC,MAG1B,CAAC,EAAa8M,QAAQs7B,IAAI4C,IACrC,KAAK,EAED,OADAjmB,EAAGxb,OACI,CAAC,WAS5Bs8B,aAAatlC,UAAU4nC,kBAAoB,SAAUnoC,GACjD,OAAO,eAAUiC,UAAM,OAAQ,GAAQ,WACnC,IAAIwlC,EAA6C5sB,EACjD,OAAO,iBAAY5Y,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,KADAi3B,EAAaxlC,KAAKgmC,yBAAyBjoC,IAEvC,MAAO,CAAC,GAEZ,GAAMynC,EAAW/L,eAAeh2B,gBAAkB6P,EAAe+mB,8BAA8B52B,cAAgB,MAAO,CAAC,EAAa,GACpI,GAAM+hC,EAAWxL,YAAcjmB,EAAqBm1B,IAAM,MAAO,CAAC,EAAa,GAG/E,KADAtwB,EADkC4sB,EACI1f,OAC5B,MAAO,CAAC,EAAa,GAC/BhD,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAK6jC,WAAW9S,sBAAsBnY,IAC/D,KAAK,EAED,OADAkK,EAAGxb,OACI,CAAC,EAAa,GACzB,KAAK,EAED,MADAwb,EAAGxb,OACG,GAAgB4Z,kCAC1B,KAAK,EAAG,MAAO,CAAC,EAAclhB,KAAKwsB,WAAWzuB,YAQ9D6lC,aAAatlC,UAAU6qC,kBAAoB,WACvC,IAAI/yB,EAAQpW,KAOZ,OANmBA,KAAK2sB,UACX/qB,SAAQ,SAAU0kC,GACvBlwB,EAAM4xB,cAAc1B,IACpBlwB,EAAMoW,WAAW8Z,OAGlB,GAUX1C,aAAatlC,UAAU8qC,gBAAkB,SAAU9H,EAASniC,EAASm6B,GACjE,IAAIoM,EAAY1lC,KAAK6lC,eACjBwD,EAAgBrpC,KAAKspC,qBAAqBhI,GAC1CiI,EAAgBvpC,KAAK6kC,WAAWvD,EAASoE,GACzC8D,EAAoBxpC,KAAKypC,eAAenI,EAASniC,EAASumC,GAC1DgE,EAAqB1pC,KAAK2pC,gBAAgBrI,GAAS,EAAOoE,GAC1DkE,EAAoB5pC,KAAK6pC,yBAAyBvQ,GAItD,OAHI+P,GAAiBE,IACjBF,EAAc1I,cAAgB,IAAI,GAAU4I,EAAcvO,OAAQh7B,KAAK6jC,YAAY1sB,QAEhF,CACHmqB,QAAS+H,EACTxO,QAAS0O,EACTrE,YAAasE,EACbpE,aAAcsE,EACdpE,YAAasE,IAOrBhG,aAAatlC,UAAUgrC,qBAAuB,SAAUhI,GACpD,IAAIsH,EAAa,GAAc7I,wBAAwBuB,GACvD,OAAOthC,KAAKqkC,WAAWuE,IAQ3BhF,aAAatlC,UAAUumC,WAAa,SAAUvD,EAASoE,GACnD,IAAItvB,EAAQpW,KACZA,KAAK8jC,aAAahQ,MAAM,oCACxB,IAAIgW,EAAgB,CAChBzQ,cAAeiI,EAAQjI,cACvBC,YAAagI,EAAQhI,YACrBG,eAAgBnmB,EAAe6mB,SAC/BhG,SAAUn0B,KAAKm0B,SACfuF,MAAO4H,EAAQxG,UAEfiP,EAAW/pC,KAAKgqC,oBAAoBF,EAAepE,GACnDuE,EAAcF,EAAStnC,OAC3B,OAAIwnC,EAAc,GACdjqC,KAAK8jC,aAAa56B,KAAK,4CAChB,MAEF+gC,EAAc,GACnBjqC,KAAK8jC,aAAa56B,KAAK,qEACvB6gC,EAASnoC,SAAQ,SAAUi5B,GACvBzkB,EAAM4yB,cAAcnO,EAAQf,4BAEzB,OAEX95B,KAAK8jC,aAAa56B,KAAK,gDAChB6gC,EAAS,KAOpBnG,aAAatlC,UAAU0rC,oBAAsB,SAAUrmC,EAAQ+hC,GAC3D,IAAItvB,EAAQpW,KACRkqC,EAAcxE,GAAaA,EAAU7K,SAAW76B,KAAK6lC,eAAehL,QACpEkP,EAAW,GAUf,OATAG,EAAYtoC,SAAQ,SAAU7D,GAC1B,GAAKqY,EAAM+zB,wBAAwBpsC,EAAK,cAAS,CAAEo2B,SAAU/d,EAAM+d,UAAYxwB,IAA/E,CAGA,IAAIk3B,EAAUzkB,EAAMg0B,qBAAqBrsC,GACrC88B,GAAWzkB,EAAM6vB,wBAAwBpL,EAASl3B,IAClDomC,EAASlpC,KAAKg6B,OAGfkP,GAQXnG,aAAatlC,UAAU6rC,wBAA0B,SAAUE,EAAU1mC,GACjE,IAAI5F,EAAMssC,EAAS5mC,cACnB,QAAIE,EAAOwwB,WAA4D,IAAhDp2B,EAAIwP,QAAQ5J,EAAOwwB,SAAS1wB,mBAG/CE,EAAO01B,gBAAsE,IAArDt7B,EAAIwP,QAAQ5J,EAAO01B,cAAc51B,iBASjEmgC,aAAatlC,UAAU0qC,cAAgB,SAAUjrC,GAC7CiC,KAAKwsB,WAAWzuB,IAMpB6lC,aAAatlC,UAAU2qC,mBAAqB,SAAUlrC,GAClDiC,KAAKwsB,WAAWzuB,IASpB6lC,aAAatlC,UAAUmrC,eAAiB,SAAUnI,EAASniC,EAASumC,GAChE,IAAItvB,EAAQpW,KACZA,KAAK8jC,aAAahQ,MAAM,wCACxB,IAAI9b,EAAS,GAASylB,mBAAmBt+B,EAAQ6Y,QAC7CsyB,EAAanrC,EAAQorC,sBAAwBx2B,EAAqB2mB,OAKlEjB,EAAkB6Q,GAAcA,EAAW7mC,gBAAkBsQ,EAAqB2mB,OAAOj3B,cAAiB6P,EAAe+mB,8BAAgC/mB,EAAe8mB,aACxKqL,EAAoB,CACpBpM,cAAeiI,EAAQjI,cACvBC,YAAagI,EAAQhI,YACrBG,eAAgBA,EAChBtF,SAAUn0B,KAAKm0B,SACfuF,MAAO4H,EAAQxG,SACfnS,OAAQ3Q,EACRgiB,UAAWsQ,EACXxkB,MAAO3mB,EAAQqrC,OACfvQ,oBAAqB96B,EAAQ86B,qBAE7BwQ,EAAkB/E,GAAaA,EAAUR,aAAellC,KAAK6lC,eAAeX,YAC5EwF,EAAe,GACnBD,EAAgB7oC,SAAQ,SAAU7D,GAE9B,GAAIqY,EAAM0vB,4BAA4B/nC,EAAK0nC,GAAmB,GAAO,CACjE,IAAIP,EAAc9uB,EAAM4vB,yBAAyBjoC,GAE7CmnC,GAAe9uB,EAAM6vB,wBAAwBf,EAAaO,IAC1DiF,EAAa7pC,KAAKqkC,OAI9B,IAAIyF,EAAkBD,EAAajoC,OACnC,OAAIkoC,EAAkB,GAClB3qC,KAAK8jC,aAAa56B,KAAK,gDAChB,MAEFyhC,EAAkB,GACvB3qC,KAAK8jC,aAAa56B,KAAK,6EACvBwhC,EAAa9oC,SAAQ,SAAUsjC,GAC3B9uB,EAAM8vB,kBAAkBhB,EAAYpL,4BAEjC,OAEX95B,KAAK8jC,aAAa56B,KAAK,wDAChBwhC,EAAa,KASxB9G,aAAatlC,UAAUwnC,4BAA8B,SAAUuE,EAAU1mC,EAAQinC,GAC7E,IAAI7sC,EAAMssC,EAAS5mC,cACnB,GAAIE,EAAOwwB,WAA4D,IAAhDp2B,EAAIwP,QAAQ5J,EAAOwwB,SAAS1wB,eAC/C,OAAO,EAEX,GAAIE,EAAO01B,gBAAsE,IAArDt7B,EAAIwP,QAAQ5J,EAAO01B,cAAc51B,eACzD,OAAO,EAEX,GAAIE,EAAO+1B,QAAsD,IAA7C37B,EAAIwP,QAAQ5J,EAAO+1B,MAAMj2B,eACzC,OAAO,EAEX,GAAIE,EAAOs2B,sBAAkF,IAA3Dl8B,EAAIwP,QAAQ5J,EAAOs2B,oBAAoBx2B,eACrE,OAAO,EAEX,GAAIE,EAAOglB,OAEP,IADA,IAAI3Q,EAASrU,EAAOglB,OAAOwV,UAClB3hC,EAAI,EAAGA,EAAIwb,EAAOvV,OAAQjG,IAAK,CACpC,GAAIouC,IAA4B7sC,EAAI+oC,SAAS9uB,EAAOxb,GAAGiH,eAEnD,OAAO,EAEN,IAAKmnC,GAA2B7sC,EAAI+oC,SAAS9uB,EAAOxb,GAAGiH,eAExD,OAAO,EAInB,OAAO,GAOXmgC,aAAatlC,UAAUusC,wBAA0B,SAAUlnC,GACvD,IAAIyS,EAAQpW,KACR0lC,EAAY1lC,KAAK6lC,eACjB6E,EAAe,GAUnB,OATAhF,EAAUR,YAAYtjC,SAAQ,SAAU7D,GACpC,GAAKqY,EAAM0vB,4BAA4B/nC,EAAK4F,GAAQ,GAApD,CAGA,IAAIuhC,EAAc9uB,EAAM4vB,yBAAyBjoC,GAC7CmnC,GAAe9uB,EAAM6vB,wBAAwBf,EAAavhC,IAC1D+mC,EAAa7pC,KAAKqkC,OAGnBwF,GAQX9G,aAAatlC,UAAUqrC,gBAAkB,SAAUrI,EAASwJ,EAAUpF,GAClE,IAAItvB,EAAQpW,KACZA,KAAK8jC,aAAahQ,MAAM,yCACxB,IAAI9vB,EAAK8mC,EAAWj3B,OAAgB1O,EAChC4lC,EAAqB,CACrB1R,cAAeiI,EAAQjI,cACvBC,YAAagI,EAAQhI,YACrBG,eAAgBnmB,EAAegnB,cAC/BnG,SAAUn0B,KAAKm0B,SACfwF,SAAU31B,GAEVgnC,EAAmBtF,GAAaA,EAAUN,cAAgBplC,KAAK6lC,eAAeT,aAC9E6F,EAAgB,GAYpB,OAXAD,EAAiBppC,SAAQ,SAAU7D,GAE/B,GAAIqY,EAAM80B,6BAA6BntC,EAAKgtC,GAAqB,CAC7D,IAAI3F,EAAehvB,EAAM+0B,0BAA0BptC,GAE/CqnC,GAAgBhvB,EAAM6vB,wBAAwBb,EAAc2F,IAC5DE,EAAcpqC,KAAKukC,OAIR6F,EAAcxoC,OACd,GACnBzC,KAAK8jC,aAAa56B,KAAK,0DAChB,OAGXlJ,KAAK8jC,aAAa56B,KAAK,0DAChB+hC,EAAc,KAOzBrH,aAAatlC,UAAU4sC,6BAA+B,SAAUb,EAAU1mC,GACtE,IAAI5F,EAAMssC,EAAS5mC,cACnB,QAAIE,EAAOg2B,WAA4D,IAAhD57B,EAAIwP,QAAQ5J,EAAOg2B,SAASl2B,qBAI9CE,EAAOg2B,UAAYh2B,EAAOwwB,WAA4D,IAAhDp2B,EAAIwP,QAAQ5J,EAAOwwB,SAAS1wB,mBAGnEE,EAAO01B,gBAAsE,IAArDt7B,EAAIwP,QAAQ5J,EAAO01B,cAAc51B,kBAQjEmgC,aAAatlC,UAAUurC,yBAA2B,SAAUvQ,GACxD,IAAI8R,EAAoB,CACpB9R,YAAaA,EACbnF,SAAUn0B,KAAKm0B,UAEfmR,EAActlC,KAAK4nC,yBAAyBwD,GAC5CC,EAAqBnuC,OAAO6N,KAAKu6B,GAAaxhC,KAAI,SAAU/F,GAAO,OAAOunC,EAAYvnC,MACtFutC,EAAiBD,EAAmB5oC,OACxC,GAAI6oC,EAAiB,EACjB,OAAO,KAEN,GAAIA,EAAiB,EACtB,MAAM,GAAgB/rB,gDAE1B,OAAO8rB,EAAmB,IAO9BzH,aAAatlC,UAAUitC,kBAAoB,SAAUjS,GACjD,IAAIgM,EAActlC,KAAK6pC,yBAAyBvQ,GAChD,SAAUgM,GAAeA,EAAY3L,WAAa9lB,IAOtD+vB,aAAatlC,UAAUkoC,mBAAqB,SAAUtL,EAAQ7B,GAC1D,QAA2C,iBAAzB6B,EAAO7B,eAAgCA,IAAkB6B,EAAO7B,gBAQtFuK,aAAatlC,UAAUmoC,oBAAsB,SAAUvL,EAAQ+E,GAC3D,QAA4C,iBAA1B/E,EAAO+E,gBAAiCA,IAAmB/E,EAAO+E,iBAQxF2D,aAAatlC,UAAUooC,cAAgB,SAAUxL,EAAQ8E,GACrD,QAAsC,iBAApB9E,EAAO8E,UAA2BA,EAASv8B,gBAAkBy3B,EAAO8E,SAASv8B,gBAOnGmgC,aAAatlC,UAAU+oC,uBAAyB,SAAUnM,EAAQkM,GAC9D,SAAUlM,EAAOkM,mBAAqBA,IAAsBlM,EAAOkM,oBAOvExD,aAAatlC,UAAUqoC,iBAAmB,SAAUzL,EAAQ5B,GACxD,IAAIkS,EAAgBxrC,KAAKkoC,4BAA4B5O,GACrD,SAAIkS,GAAiBA,EAAchD,QAAQj7B,QAAQ2tB,EAAO5B,cAAgB,IAU9EsK,aAAatlC,UAAUgpC,oBAAsB,SAAUpM,EAAQzB,GAC3D,OAAQyB,EAAOzB,gBAAkBA,EAAeh2B,gBAAkBy3B,EAAOzB,eAAeh2B,eAO5FmgC,aAAatlC,UAAU6oC,cAAgB,SAAUjM,EAAQ/G,GACrD,SAAU+G,EAAO/G,UAAYA,IAAa+G,EAAO/G,WAOrDyP,aAAatlC,UAAUipC,cAAgB,SAAUrM,EAAQvB,GACrD,SAAUuB,EAAOvB,UAAYA,IAAauB,EAAOvB,WAOrDiK,aAAatlC,UAAUsoC,WAAa,SAAU1L,EAAQxB,GAClD,SAAUwB,EAAOxB,OAASA,IAAUwB,EAAOxB,QAQ/CkK,aAAatlC,UAAUuoC,qBAAuB,SAAU3L,EAAQ0F,GAC5D,SAAU1F,EAAO0F,iBAAmBA,IAAoB1F,EAAO0F,kBAOnEgD,aAAatlC,UAAUkpC,YAAc,SAAUtM,EAAQvS,GAEnD,QADkCuS,EAAOzB,iBAAmBnmB,EAAe8mB,cAAgBc,EAAOzB,iBAAmBnmB,EAAe+mB,gCACjGa,EAAOvS,SAGrB,GAAS4U,WAAWrC,EAAOvS,QAC1BsV,iBAAiBtV,IAO3Cib,aAAatlC,UAAUmpC,eAAiB,SAAUvM,EAAQlB,GACtD,SAAUkB,EAAOlB,WAAakB,EAAOlB,YAAcA,IAOvD4J,aAAatlC,UAAUqpC,WAAa,SAAUzM,EAAQpV,GAClD,SAAUoV,EAAOpV,OAASoV,EAAOpV,QAAUA,IAM/C8d,aAAatlC,UAAU0pC,cAAgB,SAAUjqC,GAC7C,OAAsC,IAA/BA,EAAIwP,QAAQqG,IAMvBgwB,aAAatlC,UAAUgqC,oBAAsB,SAAUvqC,GACnD,OAAgE,IAAzDA,EAAIwP,QAAQuG,IAKvB8vB,aAAatlC,UAAUmtC,kCAAoC,SAAUrX,GACjE,OAAOtgB,EAAyC,IAAM9T,KAAKm0B,SAAW,IAAMC,GAOhFwP,aAAa8H,SAAW,SAAU9mC,EAAK+mC,GACnC,IAAK,IAAIC,KAAgBD,EACrB/mC,EAAIgnC,GAAgBD,EAAKC,GAE7B,OAAOhnC,GAEJg/B,aAz6BsB,GA26B7B,GAAqC,SAAU7tB,GAE/C,SAAS81B,sBACL,OAAkB,OAAX91B,GAAmBA,EAAOlJ,MAAM7M,KAAM4M,YAAc5M,KAuG/D,OAzGA,eAAU6rC,oBAAqB91B,GAI/B81B,oBAAoBvtC,UAAU0mC,WAAa,WAEvC,MAAM,GAAUvuB,sBADC,8FAGrBo1B,oBAAoBvtC,UAAU+lC,WAAa,WAEvC,MAAM,GAAU5tB,sBADC,8FAGrBo1B,oBAAoBvtC,UAAU2mC,qBAAuB,WAEjD,MAAM,GAAUxuB,sBADC,wGAGrBo1B,oBAAoBvtC,UAAU8rC,qBAAuB,WAEjD,MAAM,GAAU3zB,sBADC,wGAGrBo1B,oBAAoBvtC,UAAU8nC,yBAA2B,WAErD,MAAM,GAAU3vB,sBADC,4GAGrBo1B,oBAAoBvtC,UAAU0nC,yBAA2B,WAErD,MAAM,GAAUvvB,sBADC,4GAGrBo1B,oBAAoBvtC,UAAU+mC,0BAA4B,WAEtD,MAAM,GAAU5uB,sBADC,6GAGrBo1B,oBAAoBvtC,UAAU6sC,0BAA4B,WAEtD,MAAM,GAAU10B,sBADC,6GAGrBo1B,oBAAoBvtC,UAAUinC,eAAiB,WAE3C,MAAM,GAAU9uB,sBADC,kGAGrBo1B,oBAAoBvtC,UAAU2pC,eAAiB,WAE3C,MAAM,GAAUxxB,sBADC,kGAGrBo1B,oBAAoBvtC,UAAUwtC,mBAAqB,WAE/C,MAAM,GAAUr1B,sBADC,sGAGrBo1B,oBAAoBvtC,UAAUytC,mBAAqB,WAE/C,MAAM,GAAUt1B,sBADC,sGAGrBo1B,oBAAoBvtC,UAAU0tC,qBAAuB,WAEjD,MAAM,GAAUv1B,sBADC,wGAGrBo1B,oBAAoBvtC,UAAUiqC,qBAAuB,WAEjD,MAAM,GAAU9xB,sBADC,wGAGrBo1B,oBAAoBvtC,UAAU8pC,yBAA2B,WAErD,MAAM,GAAU3xB,sBADC,4GAGrBo1B,oBAAoBvtC,UAAU2tC,mBAAqB,WAE/C,MAAM,GAAUx1B,sBADC,sGAGrBo1B,oBAAoBvtC,UAAU4tC,mBAAqB,WAE/C,MAAM,GAAUz1B,sBADC,sGAGrBo1B,oBAAoBvtC,UAAUkuB,WAAa,WAEvC,MAAM,GAAU/V,sBADC,8FAGrBo1B,oBAAoBvtC,UAAUwuB,YAAc,WAExC,MAAM,GAAUrW,sBADC,+FAGrBo1B,oBAAoBvtC,UAAUquB,QAAU,WAEpC,MAAM,GAAUlW,sBADC,2FAGrBo1B,oBAAoBvtC,UAAU2lC,eAAiB,WAE3C,MAAM,GAAUxtB,sBADC,kGAGrBo1B,oBAAoBvtC,UAAUunC,aAAe,WAEzC,MAAM,GAAUpvB,sBADC,gGAGrBo1B,oBAAoBvtC,UAAUmvB,MAAQ,WAClC,OAAO,eAAUztB,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,uFACP,GAAUrM,sBADH,+FAKzBo1B,oBAAoBvtC,UAAU6tC,yBAA2B,WAErD,MAAM,GAAU11B,sBADC,4GAGdo1B,oBA1G6B,CA2GtC,IC/hCEO,GAA2B,WAC3B,SAASA,aAsCT,OAjCAA,UAAUC,WAAa,WAEnB,OAAOtyB,KAAKge,OAAM,IAAI5E,MAAOmZ,UAAY,MAM7CF,UAAUG,eAAiB,SAAUC,EAAWC,GAE5C,IAAIC,EAAgBC,OAAOH,IAAc,EAGzC,OAF2BJ,UAAUC,aAAeI,EAErBC,GAQnCN,UAAUQ,mBAAqB,SAAUC,GAErC,OADkBF,OAAOE,GACJT,UAAUC,cAOnCD,UAAUU,MAAQ,SAAUpvC,EAAGD,GAC3B,OAAO,IAAIoN,SAAQ,SAAUrL,GAAW,OAAOutC,YAAW,WAAc,OAAOvtC,EAAQ/B,KAAWC,OAE/F0uC,UAvCmB,GC6B1B,GAAmC,SAAUr2B,GAE7C,SAASi3B,oBACL,OAAkB,OAAXj3B,GAAmBA,EAAOlJ,MAAM7M,KAAM4M,YAAc5M,KA8E/D,OAhFA,eAAUgtC,kBAAmBj3B,GAe7Bi3B,kBAAkBC,wBAA0B,SAAU5T,EAAeC,EAAa4L,EAAa/Q,EAAU2G,EAAU9iB,EAAQw0B,EAAWU,EAAcC,EAAaC,EAAWpT,EAAWoN,EAAmBthB,EAAOunB,EAAiBpT,GAC9N,IAAInX,EAAIqH,EACJmjB,EAAW,IAAIN,kBACnBM,EAASjU,cAAgBA,EACzBiU,EAAS7T,eAAiBnmB,EAAe8mB,aACzCkT,EAAStS,OAASkK,EAClB,IAAI5P,EAAc8W,GAAUC,aAyB5B,GAxBAiB,EAAST,SAAWvX,EAAYv2B,WAKhCuuC,EAASd,UAAYA,EAAUztC,WAC/BuuC,EAASC,kBAAoBL,EAAanuC,WACtCquC,IACAE,EAASF,UAAYA,EAAUruC,YAEnCuuC,EAAShU,YAAcA,EACvBgU,EAASnZ,SAAWA,EACpBmZ,EAAS5T,MAAQoB,EACjBwS,EAAS3kB,OAAS3Q,EAClBs1B,EAASlG,kBAAoBA,EAC7BkG,EAAStT,UAAY,GAAYtY,QAAQsY,GAAajmB,EAAqB2mB,OAASV,EAChFqT,IACAC,EAASD,gBAAkBA,EAC3BC,EAASrT,oBAAsBA,IAMA,QAA7BnX,EAAKwqB,EAAStT,iBAA8B,IAAPlX,OAAgB,EAASA,EAAGrf,iBAAmBsQ,EAAqB2mB,OAAOj3B,cAElH,OADA6pC,EAAS7T,eAAiBnmB,EAAe+mB,8BACjCiT,EAAStT,WACb,KAAKjmB,EAAqBm1B,IAEtB,IAAIsE,EAAc,GAAUpK,mBAAmB8B,EAAaiI,GAC5D,KAA2F,QAApFhjB,EAAKqjB,aAAiD,EAASA,EAAY1b,WAAwB,IAAP3H,OAAgB,EAASA,EAAGvR,KAC3H,MAAM,GAAgBoI,iCAE1BssB,EAASxnB,MAAQ0nB,EAAY1b,IAAIlZ,IACjC,MACJ,KAAK7E,EAAqB2zB,IACtB4F,EAASxnB,MAAQA,EAG7B,OAAOwnB,GAMXN,kBAAkBS,oBAAsB,SAAUvS,GAC9C,QAAKA,IAGGA,EAAO38B,eAAe,kBAC1B28B,EAAO38B,eAAe,gBACtB28B,EAAO38B,eAAe,mBACtB28B,EAAO38B,eAAe,UACtB28B,EAAO38B,eAAe,aACtB28B,EAAO38B,eAAe,WACtB28B,EAAO38B,eAAe,YACrB28B,EAAuB,iBAAM5nB,EAAe8mB,cAAgBc,EAAuB,iBAAM5nB,EAAe+mB,iCAE1G2S,kBAjF2B,CAkFpC,IC3FE,GAAoC,SAAUj3B,GAE9C,SAAS23B,qBACL,OAAkB,OAAX33B,GAAmBA,EAAOlJ,MAAM7M,KAAM4M,YAAc5M,KAoC/D,OAtCA,eAAU0tC,mBAAoB33B,GAW9B23B,mBAAmBC,yBAA2B,SAAUtU,EAAeC,EAAa8L,EAAcjR,EAAUwF,EAAUyN,GAClH,IAAIwG,EAAW,IAAIF,mBASnB,OARAE,EAASzZ,SAAWA,EACpByZ,EAASnU,eAAiBnmB,EAAegnB,cACzCsT,EAAStU,YAAcA,EACvBsU,EAASvU,cAAgBA,EACzBuU,EAAS5S,OAASoK,EAClBwI,EAASxG,kBAAoBA,EACzBzN,IACAiU,EAASjU,SAAWA,GACjBiU,GAMXF,mBAAmBG,qBAAuB,SAAU3S,GAChD,QAAKA,IAGGA,EAAO38B,eAAe,kBAC1B28B,EAAO38B,eAAe,gBACtB28B,EAAO38B,eAAe,mBACtB28B,EAAO38B,eAAe,aACtB28B,EAAO38B,eAAe,WACtB28B,EAAuB,iBAAM5nB,EAAegnB,gBAE7CoT,mBAvC4B,CAwCrC,IC/CE,GAAmC,WACnC,SAASI,qBA8CT,OAzCAA,kBAAkBxvC,UAAUyvC,uBAAyB,WACjD,OAAOD,kBAAkBE,4BAA4BhuC,KAAKs5B,YAAat5B,KAAKm0B,WAKhF2Z,kBAAkBE,4BAA8B,SAAU1U,EAAanF,GAMnE,MAL0B,CACtBvgB,EACA0lB,EACAnF,GAEuBjxB,KAAKmQ,EAAWonB,qBAAqBh3B,eAQpEqqC,kBAAkBG,wBAA0B,SAAU9Z,EAAUmF,EAAaK,GACzE,IAAI2L,EAAc,IAAIwI,kBAMtB,OALAxI,EAAYnR,SAAWA,EACvBmR,EAAYhM,YAAcA,EACtBK,IACA2L,EAAY3L,SAAWA,GAEpB2L,GAMXwI,kBAAkBI,oBAAsB,SAAUnwC,EAAKm9B,GACnD,QAAKA,IAGiC,IAA9Bn9B,EAAIwP,QAAQqG,IAChBsnB,EAAO38B,eAAe,aACtB28B,EAAO38B,eAAe,iBAEvBuvC,kBA/C2B,GCdlC,GAAuC,WACvC,SAASK,wBACLnuC,KAAKouC,eAAiB,GACtBpuC,KAAKquC,OAAS,GACdruC,KAAKsuC,UAAY,EAkBrB,OAXAH,sBAAsBI,wBAA0B,SAAUxwC,EAAKm9B,GAC3D,IAAIsT,EAAgE,IAAlDzwC,EAAIwP,QAAQyG,EAAuBK,WACjDo6B,GAAiB,EAOrB,OANIvT,IACAuT,EACIvT,EAAO38B,eAAe,mBAClB28B,EAAO38B,eAAe,WACtB28B,EAAO38B,eAAe,cAE3BiwC,GAAeC,GAEnBN,sBAtB+B,GCCtC,GAAyC,WACzC,SAASO,0BACL1uC,KAAK2uC,UAAYvC,GAAUC,aAAev4B,EAkE9C,OA3DA46B,wBAAwBpwC,UAAUswC,6BAA+B,SAAUC,EAAUC,GACjF9uC,KAAKwoC,QAAUqG,EAASrG,QACxBxoC,KAAK+uC,gBAAkBF,EAASE,gBAChC/uC,KAAKgvC,kBAAoBH,EAASG,kBAClChvC,KAAKivC,mBAAqBH,GAO9BJ,wBAAwBpwC,UAAU4wC,uBAAyB,SAAUL,EAAUC,GAC3E9uC,KAAKmvC,uBAAyBN,EAASM,uBACvCnvC,KAAKovC,eAAiBP,EAASO,eAC/BpvC,KAAKqvC,qBAAuBR,EAASQ,qBACrCrvC,KAAKsvC,OAAST,EAASS,OACvBtvC,KAAKuvC,qBAAuBT,EAC5B9uC,KAAKwvC,SAAWX,EAASW,UAM7Bd,wBAAwBpwC,UAAUmxC,yBAA2B,SAAUrb,GACnEp0B,KAAK0vC,oBAAsBtb,GAK/Bsa,wBAAwBpwC,UAAUqxC,eAAiB,WAC/C3vC,KAAK2uC,UAAYvC,GAAUC,aAAev4B,GAK9C46B,wBAAwBpwC,UAAUsxC,UAAY,WAC1C,OAAO5vC,KAAK2uC,WAAavC,GAAUC,cAMvCqC,wBAAwBmB,0BAA4B,SAAU9xC,EAAKm9B,GAC/D,QAAKA,IAG2D,IAAxDn9B,EAAIwP,QAAQuG,IAChBonB,EAAO38B,eAAe,YACtB28B,EAAO38B,eAAe,oBACtB28B,EAAO38B,eAAe,sBACtB28B,EAAO38B,eAAe,wBACtB28B,EAAO38B,eAAe,2BACtB28B,EAAO38B,eAAe,mBACtB28B,EAAO38B,eAAe,WACtB28B,EAAO38B,eAAe,uBACtB28B,EAAO38B,eAAe,yBACtB28B,EAAO38B,eAAe,cACtB28B,EAAO38B,eAAe,cAEvBmwC,wBApEiC,GCDxC,GAAkC,WAClC,SAASoB,oBAkBT,OAXAA,iBAAiBC,mBAAqB,SAAUhyC,EAAKm9B,GACjD,IAAIsT,GAAc,EACdzwC,IACAywC,EAAqE,IAAvDzwC,EAAIwP,QAAQ0H,IAE9B,IAAIw5B,GAAiB,EAIrB,OAHIvT,IACAuT,EAAiBvT,EAAO38B,eAAe,iBAEpCiwC,GAAeC,GAEnBqB,iBAnB0B,GCKjC,GAA+B,WAC/B,SAASE,iBA0DT,OAnDAA,cAAcC,gBAAkB,SAAUz2B,EAAW02B,EAAWC,GAC5D,IAAIC,EAAeJ,cAAcK,qBAAqB72B,EAAW22B,GACjE,OAAQ,GAAYzuB,QAAQwuB,GAAwEE,EAA3D,GAAKA,EAAetgC,EAAUY,eAAiBw/B,GAO5FF,cAAcK,qBAAuB,SAAU72B,EAAW22B,GACtD,IAAK32B,EACD,MAAM,GAAgB+G,0BAA0B,wBAGpD,IAAI+vB,EAAW,CACXtsC,GAAIwV,EAAU6V,iBAEd8gB,IACAG,EAASH,KAAOA,GAEpB,IAAII,EAAct3B,KAAKC,UAAUo3B,GACjC,OAAO92B,EAAUkN,aAAa6pB,IAOlCP,cAAcQ,kBAAoB,SAAUh3B,EAAWhY,GACnD,IAAKgY,EACD,MAAM,GAAgB+G,0BAA0B,qBAEpD,GAAI,GAAYmB,QAAQlgB,GACpB,MAAM,GAAgBmd,wBAAwBnd,EAAO,kCAEzD,IAEI,IAAIivC,EAAajvC,EAAMyC,MAAM6L,EAAUY,gBACnC0/B,EAAeK,EAAW,GAC1BP,EAAYO,EAAWhuC,OAAS,EAAIguC,EAAW9uC,MAAM,GAAGuB,KAAK4M,EAAUY,gBAAkBZ,EAAU4B,aACnGg/B,EAAqBl3B,EAAU8V,aAAa8gB,GAC5CO,EAAkB13B,KAAKkJ,MAAMuuB,GACjC,MAAO,CACHE,iBAAmB,GAAYlvB,QAAQwuB,GAAyBpgC,EAAU4B,aAAtBw+B,EACpDE,aAAcO,GAGtB,MAAOlwC,GACH,MAAM,GAAgBke,wBAAwBnd,EAAOf,KAGtDuvC,cA3DuB,IXNlC,SAAWpQ,GACPA,EAAmC,gBAAI,kBACvCA,EAAuB,IAAI,MAF/B,CAGGA,KAAsBA,GAAoB,KYD7C,ICAIiR,GCHAC,GFGA,GAAgC,WAChC,SAASC,eAAeC,GACpBhxC,KAAKixC,sBAAsBD,GAC3BhxC,KAAKkxC,cAAgB1pB,OAAOwpB,GA0BhC,OAxBAD,eAAezyC,UAAU2yC,sBAAwB,SAAUD,GACvD,GAAIA,IAAkB57B,EAAqB+7B,cAAgBH,IAAkB57B,EAAqBg8B,eAC9F,MAAM,GAA8B5nB,+BAA+BwnB,GAGvE,MADyBxpB,OAAOwpB,GAE5B,MAAM,GAA8BxnB,+BAA+BwnB,IAG3ED,eAAezyC,UAAU0tB,QAAU,SAAUjuB,GACzC,OAAOiC,KAAKkxC,cAAcllB,QAAQjuB,IAEtCgzC,eAAezyC,UAAU8tB,QAAU,SAAUruB,EAAKN,GAC9CuC,KAAKkxC,cAAc9kB,QAAQruB,EAAKN,IAEpCszC,eAAezyC,UAAUkuB,WAAa,SAAUzuB,GAC5CiC,KAAKkxC,cAAc1kB,WAAWzuB,IAElCgzC,eAAezyC,UAAUquB,QAAU,WAC/B,OAAOzvB,OAAO6N,KAAK/K,KAAKkxC,gBAE5BH,eAAezyC,UAAUwuB,YAAc,SAAU/uB,GAC7C,OAAOiC,KAAKkxC,cAAc3yC,eAAeR,IAEtCgzC,eA7BwB,GGK/B,GAA2B,WAC3B,SAASM,UAAUC,GAEf,GADAtxC,KAAKuxC,WAAaD,EACd,GAAY5vB,QAAQ1hB,KAAKuxC,YAEzB,MAAM,GAAyB5V,sBAE/B,GAAYja,QAAQ1hB,KAAKwxC,aACzBxxC,KAAKuxC,WAAaF,UAAUI,gBAAgBH,IAsNpD,OAnNAp0C,OAAOC,eAAek0C,UAAU/yC,UAAW,YAAa,CACpDjB,IAAK,WACD,OAAO2C,KAAKuxC,YAEhBn0C,YAAY,EACZyH,cAAc,IAMlBwsC,UAAUI,gBAAkB,SAAUH,GAClC,GAAIA,EAAK,CACL,IAAII,EAAeJ,EAAI7tC,cAUvB,OATI,GAAY6e,SAASovB,EAAc,KACnCA,EAAeA,EAAa/vC,MAAM,GAAI,GAEjC,GAAY2gB,SAASovB,EAAc,QACxCA,EAAeA,EAAa/vC,MAAM,GAAI,IAErC,GAAY2gB,SAASovB,EAAc,OACpCA,GAAgB,KAEbA,EAEX,OAAOJ,GAKXD,UAAU/yC,UAAUqzC,cAAgB,WAEhC,IAAIC,EACJ,IACIA,EAAa5xC,KAAK6xC,mBAEtB,MAAOpxC,GACH,MAAM,GAAyBg7B,oBAAoBh7B,GAGvD,IAAKmxC,EAAWE,kBAAoBF,EAAWG,aAC3C,MAAM,GAAyBtW,oBAAoB,qBAAuBz7B,KAAKw7B,WAGnF,IAAKoW,EAAWI,UAAkD,WAAtCJ,EAAWI,SAASvuC,cAC5C,MAAM,GAAyB83B,gCAAgCv7B,KAAKw7B,YAQ5E6V,UAAUY,kBAAoB,SAAUX,EAAKY,GACzC,OAAI,GAAYxwB,QAAQwwB,GACbZ,EAEJA,EAAI/jC,QAAQ,KAAO,EAAI+jC,EAAM,IAAMY,EAAcZ,EAAM,IAAMY,GAMxEb,UAAUc,kBAAoB,SAAUb,GACpC,OAAOD,UAAUI,gBAAgBH,EAAIrtC,MAAM,KAAK,KAOpDotC,UAAU/yC,UAAU8zC,kBAAoB,SAAUtX,GAC9C,IAAIuX,EAAYryC,KAAK6xC,mBACjBS,EAAYD,EAAUN,aAI1B,OAHIjX,GAAkC,IAArBwX,EAAU7vC,QAAiB6vC,EAAU,KAAO3iC,EAAsB4iC,QAAUD,EAAU,KAAO3iC,EAAsB6iC,gBAChIF,EAAU,GAAKxX,GAEZuW,UAAUoB,gCAAgCJ,IAKrDhB,UAAU/yC,UAAUkzC,QAAU,WAC1B,OAAOH,UAAUqB,UAAU1yC,KAAKw7B,YAMpC6V,UAAU/yC,UAAUuzC,iBAAmB,WAEnC,IAAIc,EAAQtvB,OAAO,8DAEfuvB,EAAQ5yC,KAAKw7B,UAAUoX,MAAMD,GACjC,IAAKC,EACD,MAAM,GAAyBnX,oBAAoB,qBAAuBz7B,KAAKw7B,WAGnF,IAAIqX,EAAgB,CAChBb,SAAUY,EAAM,GAChBd,gBAAiBc,EAAM,GACvBE,aAAcF,EAAM,GACpBG,YAAaH,EAAM,IAEnBI,EAAeH,EAAcC,aAAa7uC,MAAM,KAMpD,OALA+uC,EAAeA,EAAarvC,QAAO,SAAU1C,GAAO,OAAOA,GAAOA,EAAIwB,OAAS,KAC/EowC,EAAcd,aAAeiB,GACxB,GAAYtxB,QAAQmxB,EAAcE,cAAgBF,EAAcE,YAAYzwB,SAAS,OACtFuwB,EAAcE,YAAcF,EAAcE,YAAYp2B,UAAU,EAAGk2B,EAAcE,YAAYtwC,OAAS,IAEnGowC,GAEXxB,UAAU4B,iBAAmB,SAAU3B,GACnC,IAAIqB,EAAQtvB,OAAO,4BACfuvB,EAAQtB,EAAIsB,MAAMD,GACtB,IAAKC,EACD,MAAM,GAAyBnX,oBAAoB,qBAAuB6V,GAE9E,OAAOsB,EAAM,IAEjBvB,UAAU6B,eAAiB,SAAUC,EAAaC,GAC9C,GAAID,EAAY,KAAOrjC,EAAU8B,cAAe,CAC5C,IACIyhC,EADM,IAAIhC,UAAU+B,GACCvB,mBACzB,OAAOwB,EAAerB,SAAW,KAAOqB,EAAevB,gBAAkBqB,EAE7E,OAAOA,GAMX9B,UAAUqB,UAAY,SAAUniB,GAC5B,IAAI+iB,EAAa/iB,EAAWhjB,QAAQ,KAChCgmC,EAAahjB,EAAWhjB,QAAQ,MACpC,OAAIgmC,GAAc,EACPhjB,EAAW5T,UAAU42B,EAAa,GAEpCD,GAAc,EACZ/iB,EAAW5T,UAAU22B,EAAa,GAEtCxjC,EAAU4B,cAMrB2/B,UAAUmC,iBAAmB,SAAUtB,GACnC,IAAIuB,EAAcvB,EAAY3kC,QAAQ,KAClCmmC,EAAcxB,EAAY3kC,QAAQ,MACtC,OAAImmC,GAAe,EACRxB,EAAYv1B,UAAU+2B,EAAc,GAEtCD,GAAe,EACbvB,EAAYv1B,UAAU82B,EAAc,GAExC3jC,EAAU4B,cAErB2/B,UAAUoB,gCAAkC,SAAUJ,GAClD,OAAO,IAAIhB,UAAUgB,EAAUL,SAAW,KAAOK,EAAUP,gBAAkB,IAAMO,EAAUN,aAAa7uC,KAAK,OAKnHmuC,UAAUsC,oBAAsB,SAAUhpB,GAEtC,GAAI,GAAYjJ,QAAQiJ,GACpB,MAAO,GAGX,IAAIipB,EAAavC,UAAUqB,UAAU/nB,GAEjCkpB,EAAmB,GAAYrxB,oBAAoB,GAAYd,QAAQkyB,GAAcjpB,EAAOipB,GAEhG,IAAKC,EACD,MAAM,GAAgBp1B,+BAA+BxF,KAAKC,UAAU26B,IAExE,OAAOA,GAKXxC,UAAUyC,2BAA6B,SAAUrxB,GAE7C,GAAI,GAAYf,QAAQe,GACpB,MAAO,GAGX,IAAIsxB,EAAoB1C,UAAUmC,iBAAiB/wB,GAE/CuxB,EAA0B,GAAYxxB,oBAAoB,GAAYd,QAAQqyB,GAAqBtxB,EAAQsxB,GAE/G,IAAKC,EACD,MAAM,GAAgBv1B,+BAA+BxF,KAAKC,UAAU86B,IAExE,OAAOA,GAKX3C,UAAU4C,4BAA8B,SAAUtpB,GAC9C,GAAI,GAAYjJ,QAAQiJ,IAASA,EAAKpd,QAAQ,KAAO,EAEjD,OAAO,EAEX,IAAI2mC,EAAa7C,UAAUsC,oBAAoBhpB,GAC/C,SAAUupB,EAAWr+B,MACjBq+B,EAAWC,mBACXD,EAAWrrC,OACXqrC,EAAW1yC,QAEZ6vC,UA9NmB,GCN1B,GAAsC,WACtC,SAAS+C,wBA8BT,OAvBAA,qBAAqBC,2BAA6B,SAAUrlB,EAAextB,GACvE,GAAI,GAAYkgB,QAAQlgB,GACpB,OAAO,KAEX,IAEI,OADsB,GAAcgvC,kBAAkBxhB,EAAextB,GAC9C4uC,aAAaD,KAExC,MAAO1vC,GACH,MAAM,GAAgBke,wBAAwBnd,EAAOf,KAO7D2zC,qBAAqBE,4BAA8B,SAAUC,GACzD,IAAKA,EACD,MAAO,GAEX,IAAIC,EAAgB,IAAI,GAAUD,GAClC,OAAO,GAAUZ,oBAAoBa,EAAchD,YAEhD4C,qBA/B8B,GCWrC,GAAqC,SAAUr+B,GAE/C,SAAS0+B,oBAAoBtgB,EAAUugB,EAAa7Q,EAAY5Z,GAC5D,IAAI7T,EAAQL,EAAOpZ,KAAKqD,KAAMm0B,EAAU0P,EAAY5Z,IAAWjqB,KAa/D,OAXAoW,EAAMu+B,uBAAyB,MAC/Bv+B,EAAMs+B,YAAcA,EACpBt+B,EAAM6T,OAASA,EACf7T,EAAMw+B,gBAAkB,IAAIznB,GAC5B/W,EAAMy+B,eAAiBz+B,EAAM0+B,oBAAoB1+B,EAAMs+B,YAAY1D,eACnE56B,EAAM2+B,sBAAwB3+B,EAAM4+B,2BAA2B5+B,EAAMs+B,YAAYO,uBAAwB7+B,EAAMs+B,YAAY1D,eAEvH0D,EAAYQ,wBACZ9+B,EAAM++B,sBACN/+B,EAAMg/B,iBAEHh/B,EAgvCX,OA/vCApJ,UAAUynC,oBAAqB1+B,GAqB/B0+B,oBAAoBn2C,UAAUw2C,oBAAsB,SAAU9D,GAC1D,OAAQA,GACJ,KAAK57B,EAAqB+7B,aAC1B,KAAK/7B,EAAqBg8B,eACtB,IACI,OAAO,IAAI,GAAeJ,GAE9B,MAAOvwC,GACHT,KAAKiqB,OAAOI,QAAQ5pB,GACpB,OAIZ,OADAT,KAAK00C,YAAY1D,cAAgB57B,EAAqB+X,cAC/C,IAAIA,IAOfsnB,oBAAoBn2C,UAAU02C,2BAA6B,SAAUC,EAAwBjE,GACzF,OAAQA,GACJ,KAAK57B,EAAqB+7B,aAC1B,KAAK/7B,EAAqBg8B,eACtB,IAKI,OAAO,IAAI,GAAe6D,GAA0B7/B,EAAqBg8B,gBAE7E,MAAO3wC,GAEH,OADAT,KAAKiqB,OAAOI,QAAQ5pB,GACbT,KAAK40C,gBAEpB,KAAKx/B,EAAqB+X,cAC1B,QACI,OAAOntB,KAAK40C,kBAOxBH,oBAAoBn2C,UAAU62C,oBAAsB,WAChD,IAAI/+B,EAAQpW,KACRq1C,EAAavlC,EAAUG,aAAe,IAAMP,EAAoByqB,SAChEmb,EAAgBxlC,EAAUG,aAAe,IAAMP,EAAoB6lC,YACnEC,EAAW1lC,EAAUG,aAAe,IAAMP,EAAoB+lC,MAC9DC,EAAe5lC,EAAUG,aAAe,IAAMP,EAAoBimC,WAKlErtC,EAAS,CAJMtI,KAAK60C,eAAe7oB,QAAQqpB,GACzBr1C,KAAK60C,eAAe7oB,QAAQspB,GACjCt1C,KAAK60C,eAAe7oB,QAAQwpB,GACxBx1C,KAAK60C,eAAe7oB,QAAQ0pB,IAE7B,CAAChmC,EAAoByqB,SAAUzqB,EAAoB6lC,YAAa7lC,EAAoB+lC,MAAO/lC,EAAoBimC,YACrH/zC,SAAQ,SAAU0kC,EAAUsP,GAAS,OAAOx/B,EAAMy/B,kBAAkBvP,EAAUh+B,EAAOstC,QAQvGnB,oBAAoBn2C,UAAUu3C,kBAAoB,SAAUC,EAAQr4C,GAC5DA,GACAuC,KAAK+1C,kBAAkBD,EAAQr4C,GAAO,IAQ9Cg3C,oBAAoBn2C,UAAU82C,cAAgB,WAC1C,IAAIh/B,EAAQpW,KACZA,KAAKiqB,OAAO6J,MAAM,+CAClB,IAAIkiB,EAAch2C,KAAKgsB,QAAQzW,EAAgB0gC,cAC3CvQ,EAAY1lC,KAAKgsB,QAAQzW,EAAgB2gC,WAAa,IAAMl2C,KAAKm0B,UACjE6hB,GAAetQ,EACf1lC,KAAKiqB,OAAOI,QAAQ,qGAIVrqB,KAAK60C,eAAeloB,UAC1B/qB,SAAQ,SAAU7D,GAGlB,IAsDIN,EAxDR,GAAI2Y,EAAM2wB,gBAAgBhpC,KAElBN,EAAQ2Y,EAAM4V,QAAQjuB,IACf,CACP,IAAIo4C,EAAU//B,EAAMggC,qBAAqB34C,GACzC,GAAI04C,GAAWA,EAAQ53C,eAAe,kBAClC,OAAQ43C,EAAwB,gBAC5B,KAAK7iC,EAAe6mB,SAChB,GAAI,GAAcc,gBAAgBkb,GAAU,CACxC//B,EAAM6T,OAAO6J,MAAM,kFACnB1d,EAAM6T,OAAO+J,SAAS,yDAA2Dj2B,EAAM,uCACvF,IAAIg9B,EAAgB,GAAa2Q,SAAS,IAAI,GAAiByK,GAC3DL,EAAS1/B,EAAM+1B,yBAAyBpuC,EAAKg9B,GAEjD,YADA3kB,EAAMigC,YAAYP,EAAQxiC,EAAe6mB,UAIzC/jB,EAAM6T,OAAO6J,MAAM,iLACnB1d,EAAM6T,OAAO+J,SAAS,yEAA2Ej2B,GAErG,MACJ,KAAKuV,EAAe8mB,aACpB,KAAK9mB,EAAe+mB,8BAChB,GAAI,GAAkBoT,oBAAoB0I,GAAU,CAChD//B,EAAM6T,OAAO6J,MAAM,sFACnB1d,EAAM6T,OAAO+J,SAAS,6DAA+Dj2B,EAAM,uCAC3F,IAAIu4C,EAAoB,GAAa5K,SAAS,IAAI,GAAqByK,GACnEL,EAAS1/B,EAAM+1B,yBAAyBpuC,EAAKu4C,GAEjD,YADAlgC,EAAMigC,YAAYP,EAAQxiC,EAAe8mB,cAIzChkB,EAAM6T,OAAO6J,MAAM,6LACnB1d,EAAM6T,OAAO+J,SAAS,6EAA+Ej2B,GAEzG,MACJ,KAAKuV,EAAegnB,cAChB,GAAI,GAAmBuT,qBAAqBsI,GAAU,CAClD//B,EAAM6T,OAAO6J,MAAM,uFACnB1d,EAAM6T,OAAO+J,SAAS,8DAAgEj2B,EAAM,uCAC5F,IAAIw4C,EAAqB,GAAa7K,SAAS,IAAI,GAAsByK,GACrEL,EAAS1/B,EAAM+1B,yBAAyBpuC,EAAKw4C,GAEjD,YADAngC,EAAMigC,YAAYP,EAAQxiC,EAAegnB,eAIzClkB,EAAM6T,OAAO6J,MAAM,gMACnB1d,EAAM6T,OAAO+J,SAAS,8EAAgFj2B,IAQ9H,GAAIqY,EAAMmwB,aAAaxoC,KACfN,EAAQ2Y,EAAM4V,QAAQjuB,IACf,CACP,IAAIy4C,EAAapgC,EAAMggC,qBAAqB34C,GACxC+4C,GAAc,GAAchU,gBAAgBgU,KAC5CpgC,EAAM6T,OAAO6J,MAAM,oFACnB1d,EAAM6T,OAAO+J,SAAS,yDAA2Dj2B,EAAM,yCACvFqY,EAAMqgC,mBAAmB14C,SAU7C02C,oBAAoBn2C,UAAU83C,qBAAuB,SAAUM,GAC3D,IACI,IAAIC,EAAa19B,KAAKkJ,MAAMu0B,GAO5B,OAAQC,GAAoC,iBAAfA,EAA2BA,EAAa,KAEzE,MAAO9tC,GACH,OAAO,OAOf4rC,oBAAoBn2C,UAAU0tB,QAAU,SAAUjuB,GAC9C,OAAOiC,KAAK60C,eAAe7oB,QAAQjuB,IAOvC02C,oBAAoBn2C,UAAU8tB,QAAU,SAAUruB,EAAKN,GACnDuC,KAAK60C,eAAezoB,QAAQruB,EAAKN,IAMrCg3C,oBAAoBn2C,UAAU+lC,WAAa,SAAUuE,GACjD5oC,KAAKiqB,OAAO6J,MAAM,yCAClB,IAAIwN,EAAUthC,KAAKgsB,QAAQ4c,GAC3B,IAAKtH,EAED,OADAthC,KAAK42C,wBAAwBhO,GACtB,KAEX,IAAIiO,EAAgB72C,KAAKo2C,qBAAqB9U,GAC9C,OAAKuV,GAAkB,GAAcrU,gBAAgBqU,GAI9C,GAAanL,SAAS,IAAI,GAAiBmL,IAH9C72C,KAAK42C,wBAAwBhO,GACtB,OASf6L,oBAAoBn2C,UAAU0mC,WAAa,SAAU1D,GACjDthC,KAAKiqB,OAAO6J,MAAM,yCAClB,IAAI/1B,EAAMujC,EAAQxB,qBAClB9/B,KAAKosB,QAAQruB,EAAKkb,KAAKC,UAAUooB,IACjCthC,KAAKy2C,mBAAmB14C,IAM5B02C,oBAAoBn2C,UAAU2lC,eAAiB,WAC3CjkC,KAAKiqB,OAAO6J,MAAM,6CAClB,IAAIkiB,EAAch2C,KAAKgsB,QAAQzW,EAAgB0gC,cAC/C,OAAID,EACO/8B,KAAKkJ,MAAM6zB,IAEtBh2C,KAAKiqB,OAAOI,QAAQ,8DACb,KAMXoqB,oBAAoBn2C,UAAUm4C,mBAAqB,SAAU14C,GACzDiC,KAAKiqB,OAAO6J,MAAM,iDAClB9zB,KAAKiqB,OAAO+J,SAAS,2DAA6Dj2B,GAClF,IAAIi4C,EAAch2C,KAAKikC,kBACW,IAA9B+R,EAAYzoC,QAAQxP,IAEpBi4C,EAAYn1C,KAAK9C,GACjBiC,KAAKosB,QAAQ7W,EAAgB0gC,aAAch9B,KAAKC,UAAU88B,IAC1Dh2C,KAAKiqB,OAAOI,QAAQ,6DAGpBrqB,KAAKiqB,OAAOI,QAAQ,6EAO5BoqB,oBAAoBn2C,UAAUs4C,wBAA0B,SAAU74C,GAC9DiC,KAAKiqB,OAAO6J,MAAM,sDAClB9zB,KAAKiqB,OAAO+J,SAAS,gEAAkEj2B,GACvF,IAAIi4C,EAAch2C,KAAKikC,iBACnB6S,EAAed,EAAYzoC,QAAQxP,GACnC+4C,GAAgB,GAChBd,EAAYe,OAAOD,EAAc,GACjC92C,KAAKosB,QAAQ7W,EAAgB0gC,aAAch9B,KAAKC,UAAU88B,IAC1Dh2C,KAAKiqB,OAAO6J,MAAM,oEAGlB9zB,KAAKiqB,OAAO6J,MAAM,8EAO1B2gB,oBAAoBn2C,UAAUqqC,cAAgB,SAAU5qC,GACpD,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAG/B,OAFA/M,EAAOzX,UAAUqqC,cAAchsC,KAAKqD,KAAMjC,GAC1CiC,KAAK42C,wBAAwB74C,GACtB,CAAC,UAQpB02C,oBAAoBn2C,UAAU0qC,cAAgB,SAAUjrC,GACpDgY,EAAOzX,UAAU0qC,cAAcrsC,KAAKqD,KAAMjC,GAC1CiC,KAAKg3C,eAAej5C,EAAKuV,EAAe6mB,WAM5Csa,oBAAoBn2C,UAAU4nC,kBAAoB,SAAUnoC,GACxD,OAAO2P,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAG/B,OAFA/M,EAAOzX,UAAU4nC,kBAAkBvpC,KAAKqD,KAAMjC,GAC9CiC,KAAKg3C,eAAej5C,EAAKuV,EAAe8mB,cACjC,CAAC,UAQpBqa,oBAAoBn2C,UAAU2qC,mBAAqB,SAAUlrC,GACzDgY,EAAOzX,UAAU2qC,mBAAmBtsC,KAAKqD,KAAMjC,GAC/CiC,KAAKg3C,eAAej5C,EAAKuV,EAAegnB,gBAM5Cma,oBAAoBn2C,UAAUunC,aAAe,WACzC7lC,KAAKiqB,OAAO6J,MAAM,2CAClB,IAAI/F,EAAO/tB,KAAKgsB,QAAQzW,EAAgB2gC,WAAa,IAAMl2C,KAAKm0B,UAChE,GAAIpG,EAAM,CACN,IAAI2X,EAAY1lC,KAAKo2C,qBAAqBroB,GAC1C,GAAI2X,GACAA,EAAUnnC,eAAe,YACzBmnC,EAAUnnC,eAAe,gBACzBmnC,EAAUnnC,eAAe,gBACzB,OAAOmnC,EAGP1lC,KAAKiqB,OAAOphB,MAAM,+GAItB7I,KAAKiqB,OAAOI,QAAQ,0DAExB,MAAO,CACHwQ,QAAS,GACTqK,YAAa,GACbE,aAAc,KAQtBqP,oBAAoBn2C,UAAU+3C,YAAc,SAAUt4C,EAAK6J,GACvD5H,KAAKiqB,OAAO6J,MAAM,0CAClB,IAAI4R,EAAY1lC,KAAK6lC,eACrB,OAAQj+B,GACJ,KAAK0L,EAAe6mB,UACwB,IAApCuL,EAAU7K,QAAQttB,QAAQxP,KAC1BiC,KAAKiqB,OAAO/gB,KAAK,2DACjBw8B,EAAU7K,QAAQh6B,KAAK9C,IAE3B,MACJ,KAAKuV,EAAe8mB,cAC4B,IAAxCsL,EAAUR,YAAY33B,QAAQxP,KAC9BiC,KAAKiqB,OAAO/gB,KAAK,+DACjBw8B,EAAUR,YAAYrkC,KAAK9C,IAE/B,MACJ,KAAKuV,EAAegnB,eAC6B,IAAzCoL,EAAUN,aAAa73B,QAAQxP,KAC/BiC,KAAKiqB,OAAO/gB,KAAK,gEACjBw8B,EAAUN,aAAavkC,KAAK9C,IAEhC,MACJ,QACIiC,KAAKiqB,OAAOphB,MAAM,sFAAwFjB,GAC1G,GAAgB+Y,sCAExB3gB,KAAKosB,QAAQ7W,EAAgB2gC,WAAa,IAAMl2C,KAAKm0B,SAAUlb,KAAKC,UAAUwsB,KAOlF+O,oBAAoBn2C,UAAU04C,eAAiB,SAAUj5C,EAAK6J,GAC1D5H,KAAKiqB,OAAO6J,MAAM,6CAClB,IAAI4R,EAAY1lC,KAAK6lC,eACrB,OAAQj+B,GACJ,KAAK0L,EAAe6mB,SAChBn6B,KAAKiqB,OAAO0J,QAAQ,gFAAkF51B,EAAM,aAC5G,IAAIk5C,EAAYvR,EAAU7K,QAAQttB,QAAQxP,GACtCk5C,GAAa,GACbj3C,KAAKiqB,OAAO/gB,KAAK,kEACjBw8B,EAAU7K,QAAQkc,OAAOE,EAAW,IAGpCj3C,KAAKiqB,OAAO/gB,KAAK,gIAErB,MACJ,KAAKoK,EAAe8mB,aAChBp6B,KAAKiqB,OAAO0J,QAAQ,oFAAsF51B,EAAM,aAChH,IAAIm5C,EAAgBxR,EAAUR,YAAY33B,QAAQxP,GAC9Cm5C,GAAiB,GACjBl3C,KAAKiqB,OAAO/gB,KAAK,sEACjBw8B,EAAUR,YAAY6R,OAAOG,EAAe,IAG5Cl3C,KAAKiqB,OAAO/gB,KAAK,oIAErB,MACJ,KAAKoK,EAAegnB,cAChBt6B,KAAKiqB,OAAO0J,QAAQ,qFAAuF51B,EAAM,aACjH,IAAIo5C,EAAiBzR,EAAUN,aAAa73B,QAAQxP,GAChDo5C,GAAkB,GAClBn3C,KAAKiqB,OAAO/gB,KAAK,uEACjBw8B,EAAUN,aAAa2R,OAAOI,EAAgB,IAG9Cn3C,KAAKiqB,OAAO/gB,KAAK,qIAErB,MACJ,QACIlJ,KAAKiqB,OAAOphB,MAAM,yFAA2FjB,GAC7G,GAAgB+Y,sCAExB3gB,KAAKosB,QAAQ7W,EAAgB2gC,WAAa,IAAMl2C,KAAKm0B,SAAUlb,KAAKC,UAAUwsB,KAMlF+O,oBAAoBn2C,UAAU8rC,qBAAuB,SAAUiL,GAC3D,IAAI53C,EAAQuC,KAAKgsB,QAAQqpB,GACzB,IAAK53C,EAGD,OAFAuC,KAAKiqB,OAAO6J,MAAM,kEAClB9zB,KAAKg3C,eAAe3B,EAAY/hC,EAAe6mB,UACxC,KAEX,IAAIid,EAAgBp3C,KAAKo2C,qBAAqB34C,GAC9C,OAAK25C,GAAkB,GAAcnc,gBAAgBmc,IAKrDp3C,KAAKiqB,OAAO6J,MAAM,uDACX,GAAa4X,SAAS,IAAI,GAAiB0L,KAL9Cp3C,KAAKiqB,OAAO6J,MAAM,kEAClB9zB,KAAKg3C,eAAe3B,EAAY/hC,EAAe6mB,UACxC,OASfsa,oBAAoBn2C,UAAU2mC,qBAAuB,SAAUpK,GAC3D76B,KAAKiqB,OAAO6J,MAAM,mDAClB,IAAIuhB,EAAaxa,EAAQf,wBACzB95B,KAAKosB,QAAQipB,EAAYp8B,KAAKC,UAAU2hB,IACxC76B,KAAKq2C,YAAYhB,EAAY/hC,EAAe6mB,WAMhDsa,oBAAoBn2C,UAAU0nC,yBAA2B,SAAUqR,GAC/D,IAAI55C,EAAQuC,KAAKgsB,QAAQqrB,GACzB,IAAK55C,EAGD,OAFAuC,KAAKiqB,OAAO6J,MAAM,sEAClB9zB,KAAKg3C,eAAeK,EAAgB/jC,EAAe8mB,cAC5C,KAEX,IAAIkd,EAAoBt3C,KAAKo2C,qBAAqB34C,GAClD,OAAK65C,GAAsB,GAAkB7J,oBAAoB6J,IAKjEt3C,KAAKiqB,OAAO6J,MAAM,2DACX,GAAa4X,SAAS,IAAI,GAAqB4L,KALlDt3C,KAAKiqB,OAAO6J,MAAM,sEAClB9zB,KAAKg3C,eAAeK,EAAgB/jC,EAAe8mB,cAC5C,OASfqa,oBAAoBn2C,UAAU8nC,yBAA2B,SAAUlB,GAC/DllC,KAAKiqB,OAAO6J,MAAM,uDAClB,IAAIujB,EAAiBnS,EAAYpL,wBACjC95B,KAAKosB,QAAQirB,EAAgBp+B,KAAKC,UAAUgsB,IAC5CllC,KAAKq2C,YAAYgB,EAAgB/jC,EAAe8mB,eAMpDqa,oBAAoBn2C,UAAU6sC,0BAA4B,SAAUoM,GAChE,IAAI95C,EAAQuC,KAAKgsB,QAAQurB,GACzB,IAAK95C,EAGD,OAFAuC,KAAKiqB,OAAO6J,MAAM,uEAClB9zB,KAAKg3C,eAAeO,EAAiBjkC,EAAegnB,eAC7C,KAEX,IAAIkd,EAAqBx3C,KAAKo2C,qBAAqB34C,GACnD,OAAK+5C,GAAuB,GAAmB3J,qBAAqB2J,IAKpEx3C,KAAKiqB,OAAO6J,MAAM,4DACX,GAAa4X,SAAS,IAAI,GAAsB8L,KALnDx3C,KAAKiqB,OAAO6J,MAAM,uEAClB9zB,KAAKg3C,eAAeO,EAAiBjkC,EAAegnB,eAC7C,OASfma,oBAAoBn2C,UAAU+mC,0BAA4B,SAAUD,GAChEplC,KAAKiqB,OAAO6J,MAAM,wDAClB,IAAIyjB,EAAkBnS,EAAatL,wBACnC95B,KAAKosB,QAAQmrB,EAAiBt+B,KAAKC,UAAUksB,IAC7CplC,KAAKq2C,YAAYkB,EAAiBjkC,EAAegnB,gBAMrDma,oBAAoBn2C,UAAU2pC,eAAiB,SAAUwP,GACrD,IAAIh6C,EAAQuC,KAAKgsB,QAAQyrB,GACzB,IAAKh6C,EAED,OADAuC,KAAKiqB,OAAO6J,MAAM,4DACX,KAEX,IAAI4jB,EAAiB13C,KAAKo2C,qBAAqB34C,GAC/C,OAAKi6C,GAAmB,GAAkBxJ,oBAAoBuJ,EAAgBC,IAI9E13C,KAAKiqB,OAAO6J,MAAM,iDACX,GAAa4X,SAAS,IAAI,GAAqBgM,KAJlD13C,KAAKiqB,OAAO6J,MAAM,4DACX,OASf2gB,oBAAoBn2C,UAAUinC,eAAiB,SAAUD,GACrDtlC,KAAKiqB,OAAO6J,MAAM,6CAClB,IAAI2jB,EAAiBnS,EAAYyI,yBACjC/tC,KAAKosB,QAAQqrB,EAAgBx+B,KAAKC,UAAUosB,KAMhDmP,oBAAoBn2C,UAAUytC,mBAAqB,SAAU4L,GACzD,IAAIl6C,EAAQuC,KAAKgsB,QAAQ2rB,GACzB,IAAKl6C,EAED,OADAuC,KAAKiqB,OAAO6J,MAAM,gEACX,KAEX,IAAI4jB,EAAiB13C,KAAKo2C,qBAAqB34C,GAC/C,OAAKi6C,GAAmB,GAAsBnJ,wBAAwBoJ,EAAoBD,IAI1F13C,KAAKiqB,OAAO6J,MAAM,qDACX,GAAa4X,SAAS,IAAI,GAAyBgM,KAJtD13C,KAAKiqB,OAAO6J,MAAM,gEACX,OAUf2gB,oBAAoBn2C,UAAUwtC,mBAAqB,SAAU6L,EAAoBC,GAC7E53C,KAAKiqB,OAAO6J,MAAM,iDAClB9zB,KAAKosB,QAAQurB,EAAoB1+B,KAAKC,UAAU0+B,KAKpDnD,oBAAoBn2C,UAAUiqC,qBAAuB,SAAUxqC,GAC3D,IAAIN,EAAQuC,KAAK40C,gBAAgB5oB,QAAQjuB,GACzC,IAAKN,EAED,OADAuC,KAAKiqB,OAAO6J,MAAM,kEACX,KAEX,IAAI4jB,EAAiB13C,KAAKo2C,qBAAqB34C,GAC/C,OAAIi6C,GAAkB,GAAwB7H,0BAA0B9xC,EAAK25C,IACzE13C,KAAKiqB,OAAO6J,MAAM,uDACX,GAAa4X,SAAS,IAAI,GAA2BgM,IAEzD,MAKXjD,oBAAoBn2C,UAAU8pC,yBAA2B,WACrD,IAAIhyB,EAAQpW,KAEZ,OADcA,KAAK40C,gBAAgBjoB,UACpBhpB,QAAO,SAAU5F,GAC5B,OAAOqY,EAAMkyB,oBAAoBvqC,OAQzC02C,oBAAoBn2C,UAAUu5C,mBAAqB,SAAUC,EAAYC,GACrE/3C,KAAK40C,gBAAgBxoB,QAAQ5W,GAAkBwiC,YAAaF,GAC5D93C,KAAK40C,gBAAgBxoB,QAAQ5W,GAAkByiC,YAAaF,IAKhEtD,oBAAoBn2C,UAAU45C,mBAAqB,WAG/C,MAAO,CAFGl4C,KAAK40C,gBAAgB5oB,QAAQxW,GAAkBwiC,cAAgBloC,EAAU4B,aACrE1R,KAAK40C,gBAAgB5oB,QAAQxW,GAAkByiC,cAAgBnoC,EAAU4B,eAO3F+iC,oBAAoBn2C,UAAU0tC,qBAAuB,SAAUjuC,EAAKm9B,GAChEl7B,KAAKiqB,OAAO6J,MAAM,mDAClB9zB,KAAK40C,gBAAgBxoB,QAAQruB,EAAKkb,KAAKC,UAAUgiB,KAKrDuZ,oBAAoBn2C,UAAU65C,iBAAmB,WAC7C,IAAIC,EAA0Bp4C,KAAKq4C,iBAAiB3oC,EAAoB4oC,wBACpEC,EAA4Bv4C,KAAKgsB,QAAQosB,GAC7C,IAAKG,EAA2B,CAE5Bv4C,KAAKiqB,OAAO6J,MAAM,iHAClB,IAAI0kB,EAAwBx4C,KAAKq4C,iBAAiB3oC,EAAoB+oC,gBAClEC,EAA0B14C,KAAKgsB,QAAQwsB,GAC3C,IAAKE,EAED,OADA14C,KAAKiqB,OAAO6J,MAAM,iEACX,KAEX,IAAI6kB,EAAgB34C,KAAK44C,uBAAuB,CAAE3Y,eAAgByY,IAA2B,IAAM,KACnG,OAAIC,GACA34C,KAAKiqB,OAAO6J,MAAM,kFAClB9zB,KAAKiqB,OAAO6J,MAAM,oFAClB9zB,KAAK64C,iBAAiBF,GACfA,GAEJ,KAEX,IAAIG,EAAwB94C,KAAKo2C,qBAAqBmC,GACtD,OAAIO,GACA94C,KAAKiqB,OAAO6J,MAAM,6EACX9zB,KAAK44C,uBAAuB,CAC/Bvf,cAAeyf,EAAsBzf,cACrC4G,eAAgB6Y,EAAsB7Y,iBACvC,IAAM,OAEbjgC,KAAKiqB,OAAO6J,MAAM,iEACX,OAMX2gB,oBAAoBn2C,UAAUu6C,iBAAmB,SAAUvX,GACvD,IAAIyX,EAAmB/4C,KAAKq4C,iBAAiB3oC,EAAoB4oC,wBAC7DE,EAAwBx4C,KAAKq4C,iBAAiB3oC,EAAoB+oC,gBACtE,GAAInX,EAAS,CACTthC,KAAKiqB,OAAOI,QAAQ,wCACpB,IAAI2uB,EAAqB,CACrB3f,cAAeiI,EAAQjI,cACvB4G,eAAgBqB,EAAQrB,gBAE5BjgC,KAAK60C,eAAezoB,QAAQ2sB,EAAkB9/B,KAAKC,UAAU8/B,IAC7Dh5C,KAAK60C,eAAezoB,QAAQosB,EAAuBlX,EAAQrB,qBAG3DjgC,KAAKiqB,OAAOI,QAAQ,+DACpBrqB,KAAK60C,eAAeroB,WAAWusB,GAC/B/4C,KAAK60C,eAAeroB,WAAWgsB,IAOvC/D,oBAAoBn2C,UAAUs6C,uBAAyB,SAAUnU,GAC7D,IAAIC,EAAc1kC,KAAK+jC,iBAEvB,OADA/jC,KAAKiqB,OAAO6J,MAAM,qDAAuD4Q,EAAYjiC,OAAS,mBACvFiiC,EAAY/gC,QAAO,SAAU6yC,GAChC,QAAI/R,EAAczE,UAAYyE,EAAczE,SAASv8B,gBAAkB+yC,EAAWxW,SAASv8B,mBAGvFghC,EAAcpL,eAAiBoL,EAAcpL,gBAAkBmd,EAAWnd,mBAG1EoL,EAAcxE,gBAAkBwE,EAAcxE,iBAAmBuW,EAAWvW,oBAG5EwE,EAAc3J,UAAY2J,EAAc3J,WAAa0b,EAAW1b,aAGhE2J,EAAcnL,aAAemL,EAAcnL,cAAgBkd,EAAWld,oBAWlFmb,oBAAoBn2C,UAAU26C,sBAAwB,SAAUC,EAAWC,GACvE,IAAI9S,EAAmBrmC,KAAK+jC,iBAAiBpgC,QAAO,SAAUihC,GAC1D,GAAIuU,EAAK,CACL,IAAIC,EAAaxU,EAAYjE,eAAiBiE,EAAYjE,cAAmB,IAC7E,OAAOwY,IAAQC,EAEnB,QAAIF,GACOA,IAActU,EAAY5E,YAIzC,GAAgC,IAA5BqG,EAAiB5jC,OACjB,OAAO4jC,EAAiB,GAEvB,GAAIA,EAAiB5jC,OAAS,EAC/B,MAAM,GAAgB6c,6CAE1B,OAAO,MAMXm1B,oBAAoBn2C,UAAU4tC,mBAAqB,SAAUmN,GACzD,IAAI57C,EAAQuC,KAAKgsB,QAAQqtB,GACzB,IAAK57C,EAED,OADAuC,KAAKiqB,OAAO6J,MAAM,gEACX,KAEX,IAAIwlB,EAAwBt5C,KAAKo2C,qBAAqB34C,GACtD,OAAK67C,GAA0B,GAAiBvJ,mBAAmBsJ,EAAoBC,IAIvFt5C,KAAKiqB,OAAO6J,MAAM,qDACX,GAAa4X,SAAS,IAAI,GAAoB4N,KAJjDt5C,KAAKiqB,OAAO6J,MAAM,gEACX,OAUf2gB,oBAAoBn2C,UAAU2tC,mBAAqB,SAAUoN,EAAoBE,GAC7Ev5C,KAAKiqB,OAAO6J,MAAM,iDAClB9zB,KAAKosB,QAAQitB,EAAoBpgC,KAAKC,UAAUqgC,KAOpD9E,oBAAoBn2C,UAAUk7C,kBAAoB,SAAUlT,EAAU5e,GAClE,IAAI3pB,EAAM2pB,EAAc1nB,KAAKq4C,iBAAiB/R,GAAYA,EAC1D,GAAItmC,KAAK00C,YAAY+E,uBAAwB,CACzC,IAAIC,EAAa15C,KAAK25C,cAAc57C,GACpC,GAAI27C,EAEA,OADA15C,KAAKiqB,OAAO6J,MAAM,uGACX4lB,EAGf,IAAIj8C,EAAQuC,KAAK+0C,sBAAsB/oB,QAAQjuB,GAC/C,IAAKN,EAAO,CAER,GAAIuC,KAAK00C,YAAY1D,gBAAkB57B,EAAqB+7B,aAAc,CACtE,IAAIpjB,EAAO/tB,KAAK60C,eAAe7oB,QAAQjuB,GACvC,GAAIgwB,EAEA,OADA/tB,KAAKiqB,OAAO6J,MAAM,sFACX/F,EAIf,OADA/tB,KAAKiqB,OAAO6J,MAAM,+EACX,KAGX,OADA9zB,KAAKiqB,OAAO6J,MAAM,wEACXr2B,GASXg3C,oBAAoBn2C,UAAUy3C,kBAAoB,SAAUzP,EAAU7oC,EAAOiqB,GACzE,IAAI3pB,EAAM2pB,EAAc1nB,KAAKq4C,iBAAiB/R,GAAYA,EAC1DtmC,KAAK+0C,sBAAsB3oB,QAAQruB,EAAKN,GACpCuC,KAAK00C,YAAY+E,yBACjBz5C,KAAKiqB,OAAO6J,MAAM,kGAClB9zB,KAAK45C,cAAc77C,EAAKN,KAQhCg3C,oBAAoBn2C,UAAUkuB,WAAa,SAAUzuB,GACjDiC,KAAK60C,eAAeroB,WAAWzuB,GAC/BiC,KAAK+0C,sBAAsBvoB,WAAWzuB,GAClCiC,KAAK00C,YAAY+E,yBACjBz5C,KAAKiqB,OAAO6J,MAAM,wFAClB9zB,KAAK65C,gBAAgB97C,KAO7B02C,oBAAoBn2C,UAAUwuB,YAAc,SAAU/uB,GAClD,OAAOiC,KAAK60C,eAAe/nB,YAAY/uB,IAAQiC,KAAK+0C,sBAAsBjoB,YAAY/uB,IAK1F02C,oBAAoBn2C,UAAUquB,QAAU,WACpC,OAAO5d,SAAS/O,KAAK60C,eAAeloB,UAAW3sB,KAAK+0C,sBAAsBpoB,YAK9E8nB,oBAAoBn2C,UAAUmvB,MAAQ,WAClC,OAAO/f,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIoW,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAEL,MAAO,CAAC,EAAavO,KAAKyoC,qBAC1B,KAAK,EAYD,OAVA3lB,EAAGxb,OACHtH,KAAKmpC,oBAELnpC,KAAK2sB,UAAU/qB,SAAQ,SAAU0kC,IAExBlwB,EAAMy+B,eAAe/nB,YAAYwZ,KAAalwB,EAAM2+B,sBAAsBjoB,YAAYwZ,KAA8D,IAA9CA,EAAS/4B,QAAQuC,EAAUG,gBAAgE,IAAtCq2B,EAAS/4B,QAAQ6I,EAAM+d,WACnL/d,EAAMoW,WAAW8Z,MAGzBtmC,KAAK40C,gBAAgBnnB,QACd,CAAC,WAU5BgnB,oBAAoBn2C,UAAUw7C,6BAA+B,WACzD,OAAOpsC,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI0lC,EAAWE,EACXxvB,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAWD,OAVAvO,KAAKiqB,OAAO6J,MAAM,2DAClB4R,EAAY1lC,KAAK6lC,eACjBD,EAAsB,GACtBF,EAAUR,YAAYtjC,SAAQ,SAAU7D,GAEpC,IAAIynC,EAAapvB,EAAM4vB,yBAAyBjoC,IAC3CynC,aAA+C,EAASA,EAAWvL,sBAAwBl8B,EAAI+oC,SAAStB,EAAWvL,oBAAoBx2B,gBACxImiC,EAAoB/kC,KAAKuV,EAAM8vB,kBAAkBnoC,OAGlD,CAAC,EAAa8M,QAAQs7B,IAAIP,IACrC,KAAK,EAMD,OALA9iB,EAAGxb,OAECs+B,EAAoBnjC,OAAS,GAC7BzC,KAAKiqB,OAAOuJ,QAAQoS,EAAoBnjC,OAAS,kFAE9C,CAAC,WAW5BgyC,oBAAoBn2C,UAAUs7C,cAAgB,SAAUG,EAAYC,EAAaC,GAC7E,IAAIC,EAAYn+B,mBAAmBg+B,GAAc,IAAMh+B,mBAAmBi+B,GAAe,wBACrFC,IAEAC,GAAa,WADIl6C,KAAKm6C,wBAAwBF,GACP,KAEvCj6C,KAAK00C,YAAY0F,gBACjBF,GAAa,WAEjB91C,SAASi2C,OAASH,GAMtBzF,oBAAoBn2C,UAAUq7C,cAAgB,SAAUI,GAGpD,IAFA,IAAIh9C,EAAOgf,mBAAmBg+B,GAAc,IACxCO,EAAal2C,SAASi2C,OAAOp2C,MAAM,KAC9BzH,EAAI,EAAGA,EAAI89C,EAAW73C,OAAQjG,IAAK,CAExC,IADA,IAAI69C,EAASC,EAAW99C,GACI,MAArB69C,EAAOlvC,OAAO,IACjBkvC,EAASA,EAAO19B,UAAU,GAE9B,GAA6B,IAAzB09B,EAAO9sC,QAAQxQ,GACf,OAAO4lB,mBAAmB03B,EAAO19B,UAAU5f,EAAK0F,OAAQ43C,EAAO53C,SAGvE,OAAOqN,EAAU4B,cAKrB+iC,oBAAoBn2C,UAAUi8C,iBAAmB,WAC7C,IAAInkC,EAAQpW,KACRw6C,EAAe1qC,EAAUG,aAAe,IAAMjQ,KAAKm0B,SACtC/vB,SAASi2C,OAAOp2C,MAAM,KAC5BrC,SAAQ,SAAUy4C,GACzB,KAA4B,MAArBA,EAAOlvC,OAAO,IAEjBkvC,EAASA,EAAO19B,UAAU,GAE9B,GAAqC,IAAjC09B,EAAO9sC,QAAQitC,GAAqB,CACpC,IAAIC,EAAYJ,EAAOp2C,MAAM,KAAK,GAClCmS,EAAMyjC,gBAAgBY,QAQlChG,oBAAoBn2C,UAAUu7C,gBAAkB,SAAUE,GACtD/5C,KAAK45C,cAAcG,EAAYjqC,EAAU4B,cAAe,IAM5D+iC,oBAAoBn2C,UAAU67C,wBAA0B,SAAUO,GAC9D,IAAIC,EAAQ,IAAIxnB,KAEhB,OADW,IAAIA,KAAKwnB,EAAMrO,UAAYoO,EAAiB16C,KAAK20C,wBAChDvhB,eAKhBqhB,oBAAoBn2C,UAAUs8C,SAAW,WACrC,OAAO56C,KAAK60C,gBAKhBJ,oBAAoBn2C,UAAUu8C,SAAW,aAQzCpG,oBAAoBn2C,UAAU+5C,iBAAmB,SAAUt6C,GAEvD,OADmBiC,KAAKo2C,qBAAqBr4C,GAOtCkb,KAAKC,UAAUnb,GALd,GAAYqkB,WAAWrkB,EAAK+R,EAAUG,eAAiB,GAAYmS,WAAWrkB,EAAK2R,EAAoBorC,eAChG/8C,EAEJ+R,EAAUG,aAAe,IAAMjQ,KAAKm0B,SAAW,IAAMp2B,GAQpE02C,oBAAoBn2C,UAAUy8C,qBAAuB,SAAUxK,GAC3D,IAAIyK,EAAU,GAAcxK,kBAAkBxwC,KAAK6jC,WAAY0M,GAAaH,aAAapsC,GACzF,OAAOhE,KAAKq4C,iBAAiB/iC,EAAmB2lC,UAAY,IAAMD,IAMtEvG,oBAAoBn2C,UAAU48C,iBAAmB,SAAU3K,GACvD,IAAIyK,EAAU,GAAcxK,kBAAkBxwC,KAAK6jC,WAAY0M,GAAaH,aAAapsC,GACzF,OAAOhE,KAAKq4C,iBAAiB/iC,EAAmB6lC,cAAgB,IAAMH,IAM1EvG,oBAAoBn2C,UAAU88C,iBAAmB,SAAU7K,GAEvD,IAAIyK,EAAU,GAAcxK,kBAAkBxwC,KAAK6jC,WAAY0M,GAAaH,aAAapsC,GACzF,OAAOhE,KAAKq4C,iBAAiB/iC,EAAmB+lC,cAAgB,IAAML,IAK1EvG,oBAAoBn2C,UAAUg9C,mBAAqB,SAAUC,GACzD,IAAIC,EAAgBx7C,KAAKo7C,iBAAiBG,GACtC/5C,EAAQxB,KAAKw5C,kBAAkBgC,GACnC,IAAKh6C,EACD,OAAO,KAEX,IAAIi6C,EAAoBz7C,KAAK+6C,qBAAqBv5C,GAClD,OAAOxB,KAAKw5C,kBAAkBiC,IAOlChH,oBAAoBn2C,UAAUo9C,mBAAqB,SAAUl6C,EAAOyhC,EAAO0Y,EAAmBzC,EAAW5X,GACrGthC,KAAKiqB,OAAO6J,MAAM,iDAElB,IAAI0nB,EAAgBx7C,KAAKo7C,iBAAiB55C,GAC1CxB,KAAK+1C,kBAAkByF,EAAeh6C,GAAO,GAE7C,IAAIo6C,EAAgB57C,KAAKk7C,iBAAiB15C,GAC1CxB,KAAK+1C,kBAAkB6F,EAAe3Y,GAAO,GAE7C,IAAIwY,EAAoBz7C,KAAK+6C,qBAAqBv5C,GAElD,GADAxB,KAAK+1C,kBAAkB0F,EAAmBE,GAAmB,GACzDra,EAAS,CACT,IAAIua,EAAgB,CAChBrW,WAAYlE,EAAQjI,cACpBzxB,KAAMg4B,GAAkBkc,iBAE5B97C,KAAK+1C,kBAAkBzgC,EAAmBymC,eAAgB9iC,KAAKC,UAAU2iC,IAAgB,QAExF,IAAK,GAAYn6B,QAAQw3B,GAAY,CAClC2C,EAAgB,CAChBrW,WAAY0T,EACZtxC,KAAMg4B,GAAkBoc,KAE5Bh8C,KAAK+1C,kBAAkBzgC,EAAmBymC,eAAgB9iC,KAAKC,UAAU2iC,IAAgB,KAOjGpH,oBAAoBn2C,UAAU29C,kBAAoB,SAAUz6C,GACxD,IAAI4U,EAAQpW,KACZA,KAAKiqB,OAAO6J,MAAM,gDAEb,GAAYpS,QAAQlgB,IACrBxB,KAAK2sB,UAAU/qB,SAAQ,SAAU7D,IACD,IAAxBA,EAAIwP,QAAQ/L,IACZ4U,EAAMoW,WAAWzuB,MAKzByD,IACAxB,KAAKwsB,WAAWxsB,KAAKo7C,iBAAiB55C,IACtCxB,KAAKwsB,WAAWxsB,KAAKk7C,iBAAiB15C,IACtCxB,KAAKwsB,WAAWxsB,KAAK+6C,qBAAqBv5C,KAE9CxB,KAAKwsB,WAAWxsB,KAAKq4C,iBAAiB/iC,EAAmB4mC,iBACzDl8C,KAAKwsB,WAAWxsB,KAAKq4C,iBAAiB/iC,EAAmB6mC,aACzDn8C,KAAKwsB,WAAWxsB,KAAKq4C,iBAAiB/iC,EAAmB8mC,WACzDp8C,KAAKwsB,WAAWxsB,KAAKq4C,iBAAiB/iC,EAAmB+mC,iBACzDr8C,KAAKwsB,WAAWxsB,KAAKq4C,iBAAiB/iC,EAAmBymC,iBACzD/7C,KAAKwsB,WAAWxsB,KAAKq4C,iBAAiB/iC,EAAmBgnC,iBACzDt8C,KAAKu8C,0BAAyB,IAMlC9H,oBAAoBn2C,UAAUk+C,oBAAsB,SAAUjM,GAG1D,GAFAvwC,KAAKiqB,OAAO6J,MAAM,kDAEdyc,EAAa,CACb,IAAIkM,EAAWz8C,KAAKo7C,iBAAiB7K,GACjCgL,EAAcv7C,KAAK+0C,sBAAsB/oB,QAAQywB,GACrDz8C,KAAKiqB,OAAO0J,QAAQ,sFAAwF4nB,GAC5Gv7C,KAAKi8C,kBAAkBV,GAAezrC,EAAU4B,cAEpD1R,KAAKu6C,oBAOT9F,oBAAoBn2C,UAAUo+C,8BAAgC,SAAUC,GACpE,IAAIvmC,EAAQpW,KACZA,KAAKiqB,OAAO6J,MAAM,4DAElB9zB,KAAK2sB,UAAU/qB,SAAQ,SAAU7D,GAE7B,IAAuD,IAAnDA,EAAIwP,QAAQ+H,EAAmB+lC,eAAnC,CAIA,IAAIuB,EAAaxmC,EAAM2+B,sBAAsB/oB,QAAQjuB,GACrD,GAAK6+C,EAAL,CAIA,IAAIC,EAAc,GAAqBxI,2BAA2Bj+B,EAAMytB,WAAY+Y,GAChFC,GAAeA,EAAYF,kBAAoBA,IAC/CvmC,EAAM6T,OAAO0J,QAAQ,gGAAkGipB,GACvHxmC,EAAM6lC,kBAAkBW,SAGhC58C,KAAKu6C,mBACLv6C,KAAKu8C,0BAAyB,IAElC9H,oBAAoBn2C,UAAUw+C,iBAAmB,SAAUC,EAAiB/tB,GACxEhvB,KAAKiqB,OAAO6J,MAAM,+CAClB,IAAIkpB,EAAehuB,EAActI,aAAazN,KAAKC,UAAU6jC,IAC7D/8C,KAAK+1C,kBAAkBzgC,EAAmB4mC,eAAgBc,GAAc,IAK5EvI,oBAAoBn2C,UAAU2+C,iBAAmB,SAAUz7C,EAAOwtB,GAC9DhvB,KAAKiqB,OAAO6J,MAAM,+CAElB,IAAIopB,EAAsBl9C,KAAKw5C,kBAAkBlkC,EAAmB4mC,gBAAgB,GACpF,IAAKgB,EACD,MAAM,GAAiBh4B,iCAE3B,IAAIi4B,EAAgBn9C,KAAKo2C,qBAAqBpnB,EAAcM,aAAa4tB,IACzE,IAAKC,EACD,MAAM,GAAiBl4B,4CAI3B,GAFAjlB,KAAKwsB,WAAWxsB,KAAKq4C,iBAAiB/iC,EAAmB4mC,iBAErD,GAAYx6B,QAAQy7B,EAAc/oB,WAAY,CAC9C,IAAIqnB,EAAoBz7C,KAAK+6C,qBAAqBv5C,GAC9C47C,EAAkBp9C,KAAKw5C,kBAAkBiC,GAC7C,IAAK2B,EACD,MAAM,GAAiBh4B,+BAE3B+3B,EAAc/oB,UAAYgpB,EAE9B,OAAOD,GAKX1I,oBAAoBn2C,UAAU++C,uBAAyB,WACnDr9C,KAAKiqB,OAAO6J,MAAM,qDAClB,IAAIwpB,EAAgBt9C,KAAKw5C,kBAAkBlkC,EAAmBgnC,gBAAgB,GAC9E,IAAKgB,EAED,OADAt9C,KAAKiqB,OAAO6J,MAAM,8EACX,KAEX,IAAIqpB,EAAgBn9C,KAAKo2C,qBAAqBkH,GAC9C,OAAKH,IACDn9C,KAAKiqB,OAAOphB,MAAM,8EACX,OAIf4rC,oBAAoBn2C,UAAUi/C,wBAA0B,SAAUpW,GAC9D,IAAIhT,EAAWn0B,KAAKw9C,2BACpB,OAAIrW,EACOhT,IAAan0B,KAAKm0B,WAGhBA,GAGjBsgB,oBAAoBn2C,UAAUk/C,yBAA2B,WACrD,IAAIz/C,EAAM+R,EAAUG,aAAe,IAAMqF,EAAmBmoC,uBAC5D,OAAOz9C,KAAKw5C,kBAAkBz7C,GAAK,IAEvC02C,oBAAoBn2C,UAAUi+C,yBAA2B,SAAUmB,GAE/D,IAAI3/C,EAAM+R,EAAUG,aAAe,IAAMqF,EAAmBmoC,uBAC5D,GAAIC,EAAY,CACZ,GAAI19C,KAAKw9C,2BACL,MAAM,GAAiBt5B,mCAIvBlkB,KAAK+1C,kBAAkBh4C,EAAKiC,KAAKm0B,UAAU,QAGzCupB,GAAc19C,KAAKw9C,6BAA+Bx9C,KAAKm0B,UAC7Dn0B,KAAKwsB,WAAWzuB,IAMxB02C,oBAAoBn2C,UAAUq/C,mBAAqB,WAE/C,IAAIC,EAAoB59C,KAAKw5C,kBAAkB9pC,EAAoBorC,eAC/D8C,IACA59C,KAAK60C,eAAeroB,WAAW9c,EAAoBorC,eACnD96C,KAAKiqB,OAAOI,QAAQ,oCAGxB,IAAIwzB,EAAoB79C,KAAKw5C,kBAAkB9pC,EAAoByqB,UAAU,GACzE0jB,IACA79C,KAAKwsB,WAAWxsB,KAAKq4C,iBAAiB3oC,EAAoByqB,WAC1Dn6B,KAAKiqB,OAAOI,QAAQ,yCAExB,IAAIyzB,EAAsBD,GAAqBD,EAC/C,GAAIE,EAAqB,CACrB,IAAIvU,EAAgB,IAAI,GAAQuU,EAAqB99C,KAAK6jC,YAC1D,GAAI0F,EAAcpyB,QAAUoyB,EAAcpyB,OAAO0qB,mBAE7C,OADA7hC,KAAKiqB,OAAOI,QAAQ,6GACbkf,EAAcpyB,OAAO0qB,mBAE3B,GAAI0H,EAAcpyB,QAAUoyB,EAAcpyB,OAAO+qB,IAElD,OADAliC,KAAKiqB,OAAOI,QAAQ,8FACbkf,EAAcpyB,OAAO+qB,IAG5BliC,KAAKiqB,OAAOI,QAAQ,0JAG5B,OAAO,MAKXoqB,oBAAoBn2C,UAAU6tC,yBAA2B,SAAU4R,EAAiBvY,GAChF,IAAIwY,EAAkBxY,EAAW1L,wBACjC,GAAIikB,IAAoBC,EAAiB,CACrC,IAAIC,EAAYj+C,KAAKgsB,QAAQ+xB,GAC7B,GAAIE,EAIA,OAHAj+C,KAAKwsB,WAAWuxB,GAChB/9C,KAAKosB,QAAQ4xB,EAAiBC,GAC9Bj+C,KAAKiqB,OAAOI,QAAQ,uBAAyBmb,EAAW/L,eAAiB,cAClEukB,EAGPh+C,KAAKiqB,OAAOphB,MAAM,mCAAqC28B,EAAW/L,eAAiB,yEAG3F,OAAOskB,GAKXtJ,oBAAoBn2C,UAAU4/C,0BAA4B,WACtD,OAAOl+C,KAAKw5C,kBAAkBlkC,EAAmB6oC,kBAAkB,IAMvE1J,oBAAoBn2C,UAAU8/C,0BAA4B,SAAU3gD,GAChEuC,KAAK+1C,kBAAkBzgC,EAAmB6oC,iBAAkB1gD,GAAO,IAEhEg3C,oBAhwC6B,CAiwCtC,KJ1wCF,SAAW5D,GACPA,EAAkB,IAAI,MACtBA,EAAmB,KAAI,OAF3B,CAGGA,KAAiBA,GAAe,KCNnC,SAAWC,GAEPA,EAAmBA,EAAyB,KAAI,GAAK,OAErDA,EAAgC,YAAI,oCAEpCA,EAA6B,SAAI,gCAEjCA,EAA+B,WAAI,iCAEnCA,EAAiC,aAAI,mCAErCA,EAAsC,kBAAI,mCAZ9C,CAaGA,KAAuBA,GAAqB,KIJ/C,IACIuN,GAAyB,CACzBC,0BAFmC,IAGnCC,sBAAsB,GAEtBC,GAAgC,CAChC3rB,eAAgB,aAGhBC,mBAAmB,EACnBC,SAAUvE,GAASiE,KACnBjc,cAAe1G,EAAU4B,cAEzB,GAAwB,CACxB+sC,2BAA2B,GAE3BC,GAAiC,CACjCC,oBAAqB,WACjB,OAAO,eAAU3+C,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,qEACP,GAAUrM,sBADH,6EAKzBmoC,qBAAsB,WAClB,OAAO,eAAU5+C,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAE/B,KADa,sEACP,GAAUrM,sBADH,+EAMzBooC,GAAuB,CACvBC,IAAKhvC,EAAUE,IACfob,QAAS,GACT2zB,IAAKjvC,EAAU4B,aACfstC,GAAIlvC,EAAU4B,cAEdutC,GAA6B,CAC7BC,aAAcpvC,EAAU4B,aACxBytC,qBAAiBh6C,GAEjBi6C,GAA8B,CAC9BC,mBAAoBvO,GAAmBwO,KACvCC,OAAQ,GAAKzvC,EAAUM,uBAEvB,GAA4B,CAC5BovC,YAAa,CACTlpB,QAAS,GACTC,WAAY,KC7DpB,IAAIkpB,GAAuB,CACvBd,oBAAqB,WAEjB,OAAO9zC,QAAQjL,OAAO,GAAU6W,sBADf,mGAGrBmoC,qBAAsB,WAElB,OAAO/zC,QAAQjL,OAAO,GAAU6W,sBADf,qGCArB,GAA6B,WAC7B,SAASipC,eAsHT,OA9GAA,YAAYphD,UAAUqgD,oBAAsB,SAAUrN,EAAKrvC,GACvD,OAAOyL,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI2/C,EAAUv4B,EAAKtE,EACnB,OAAO5U,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAED,OADA4b,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAa++C,MAAMtO,EAAK,CACxB1qC,OAAQyO,EAAkBwqC,IAC1BC,QAAS9/C,KAAK+/C,gBAAgB99C,MAE1C,KAAK,EAED,OADA09C,EAAWx1B,EAAG7iB,OACP,CAAC,EAAa,GACzB,KAAK,EAED,MADA8f,EAAM+C,EAAG7iB,OACLkgB,OAAOw4B,UAAUC,OACX,GAAiBx6B,4BAA4B2B,EAAKkqB,GAGlD,GAAiBjwB,mCAE/B,KAAK,EAKD,OAJA8I,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBiiB,EAAK,CACDg9B,QAAS9/C,KAAKkgD,cAAcP,EAASG,UAElC,CAAC,EAAaH,EAAShU,QAClC,KAAK,EAAG,MAAO,CAAC,GAAe7oB,EAAG3U,KAAQgc,EAAG7iB,OACrCwb,EAAGoT,OAASypB,EAASzpB,OACrBpT,IACR,KAAK,EAED,MADAqH,EAAG7iB,OACG,GAAiBoe,wCAAwC4rB,GACnE,KAAK,EAAG,MAAO,CAAC,WAWhCoO,YAAYphD,UAAUsgD,qBAAuB,SAAUtN,EAAKrvC,GACxD,OAAOyL,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAImgD,EAASR,EAAU1xB,EAAKnL,EAC5B,OAAO5U,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EACD4xC,EAAWl+C,GAAWA,EAAQkM,MAAS2B,EAAU4B,aACjDyY,EAAG5b,MAAQ,EACf,KAAK,EAED,OADA4b,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAa++C,MAAMtO,EAAK,CACxB1qC,OAAQyO,EAAkB+qC,KAC1BN,QAAS9/C,KAAK+/C,gBAAgB99C,GAC9BkM,KAAMgyC,KAElB,KAAK,EAED,OADAR,EAAWx1B,EAAG7iB,OACP,CAAC,EAAa,GACzB,KAAK,EAED,MADA2mB,EAAM9D,EAAG7iB,OACLkgB,OAAOw4B,UAAUC,OACX,GAAiB16B,6BAA6B0I,EAAKqjB,GAGnD,GAAiBjwB,mCAE/B,KAAK,EAKD,OAJA8I,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBiiB,EAAK,CACDg9B,QAAS9/C,KAAKkgD,cAAcP,EAASG,UAElC,CAAC,EAAaH,EAAShU,QAClC,KAAK,EAAG,MAAO,CAAC,GAAe7oB,EAAG3U,KAAQgc,EAAG7iB,OACrCwb,EAAGoT,OAASypB,EAASzpB,OACrBpT,IACR,KAAK,EAED,MADAqH,EAAG7iB,OACG,GAAiBoe,wCAAwC4rB,GACnE,KAAK,EAAG,MAAO,CAAC,WAShCoO,YAAYphD,UAAUyhD,gBAAkB,SAAU99C,GAC9C,IAAI69C,EAAU,IAAIO,QAClB,IAAMp+C,IAAWA,EAAQ69C,QACrB,OAAOA,EAEX,IAAIQ,EAAiBr+C,EAAQ69C,QAI7B,OAHA5iD,OAAO6N,KAAKu1C,GAAgB1+C,SAAQ,SAAU7D,GAC1C+hD,EAAQS,OAAOxiD,EAAKuiD,EAAeviD,OAEhC+hD,GAEXJ,YAAYphD,UAAU4hD,cAAgB,SAAUJ,GAC5C,IAAIU,EAAa,GAIjB,OAHAV,EAAQl+C,SAAQ,SAAUnE,EAAOM,GAC7ByiD,EAAWziD,GAAON,KAEf+iD,GAEJd,YAvHqB,GCD5B,GAA2B,WAC3B,SAASe,aAuHT,OA/GAA,UAAUniD,UAAUqgD,oBAAsB,SAAUrN,EAAKrvC,GACrD,OAAOyL,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc9iB,KAAK0gD,iBAAiBpP,EAAKj8B,EAAkBwqC,IAAK59C,WAUpFw+C,UAAUniD,UAAUsgD,qBAAuB,SAAUtN,EAAKrvC,GACtD,OAAOyL,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc9iB,KAAK0gD,iBAAiBpP,EAAKj8B,EAAkB+qC,KAAMn+C,WAUrFw+C,UAAUniD,UAAUoiD,iBAAmB,SAAUpP,EAAK1qC,EAAQ3E,GAC1D,IAAImU,EAAQpW,KACZ,OAAO,IAAI6K,SAAQ,SAAUrL,EAASI,GAClC,IAAI+gD,EAAM,IAAIC,eAsCd,GArCAD,EAAIp1B,KAAK3kB,EAAQ0qC,GAAkB,GACnCl7B,EAAMyqC,cAAcF,EAAK1+C,GACzB0+C,EAAIG,OAAS,YACLH,EAAIzqB,OAAS,KAAOyqB,EAAIzqB,QAAU,OAC9BtvB,IAAWyO,EAAkB+qC,KAC7BxgD,EAAO,GAAiB2lB,6BAA6B,sBAAwBo7B,EAAIzqB,OAAQob,IAGzF1xC,EAAO,GAAiB6lB,4BAA4B,sBAAwBk7B,EAAIzqB,OAAQob,KAGhG,IACI,IAAIyP,EAAe9nC,KAAKkJ,MAAMw+B,EAAIK,cAC9BC,EAAkB,CAClBnB,QAAS1pC,EAAM8pC,cAAcS,GAC7BxyC,KAAM4yC,EACN7qB,OAAQyqB,EAAIzqB,QAEhB12B,EAAQyhD,GAEZ,MAAOxgD,GACHb,EAAO,GAAiB8lB,wCAAwC4rB,MAGxEqP,EAAIO,QAAU,WACN15B,OAAOw4B,UAAUC,OACbr5C,IAAWyO,EAAkB+qC,KAC7BxgD,EAAO,GAAiB2lB,6BAA6B,sBAAwBo7B,EAAIzqB,OAAQob,IAGzF1xC,EAAO,GAAiB6lB,4BAA4B,sBAAwBk7B,EAAIzqB,OAAQob,IAI5F1xC,EAAO,GAAiByhB,qCAG5Bza,IAAWyO,EAAkB+qC,MAAQn+C,GAAWA,EAAQkM,KACxDwyC,EAAIQ,KAAKl/C,EAAQkM,UAEhB,IAAIvH,IAAWyO,EAAkBwqC,IAIlC,MAAM,GAAiBn8B,oCAAoC9c,GAH3D+5C,EAAIQ,YAYhBV,UAAUniD,UAAUuiD,cAAgB,SAAUF,EAAK1+C,GAC/C,GAAIA,GAAWA,EAAQ69C,QAAS,CAC5B,IAAIsB,EAAYn/C,EAAQ69C,QACxB5iD,OAAO6N,KAAKq2C,GAAWx/C,SAAQ,SAAU7D,GACrC4iD,EAAIU,iBAAiBtjD,EAAKqjD,EAAUrjD,SAUhD0iD,UAAUniD,UAAU4hD,cAAgB,SAAUS,GAC1C,IACIW,EADeX,EAAIY,wBACM1+B,OAAO5e,MAAM,WACtCu8C,EAAa,GASjB,OARAc,EAAU1/C,SAAQ,SAAUnE,GACxB,IAAI+jD,EAAQ/jD,EAAMwG,MAAM,MACpBw9C,EAAaD,EAAME,QACnBC,EAAYH,EAAMt+C,KAAK,MACvBu+C,GAAcE,IACdnB,EAAWiB,GAAcE,MAG1BnB,GAEJC,UAxHmB,GCE1B,GAA8B,WAC9B,SAASmB,gBA8HT,OAxHAA,aAAaC,UAAY,SAAUC,GAE/BA,EAAcz9C,SAASsmB,KAAO7a,EAAU4B,aACU,mBAAvCowC,EAAcC,QAAQC,cAE7BF,EAAcC,QAAQC,aAAa,KAAMlyC,EAAU4B,aAAc,GAAKowC,EAAcz9C,SAAS49C,OAASH,EAAcz9C,SAAS69C,SAAWJ,EAAcz9C,SAASge,SAMvKu/B,aAAaO,YAAc,SAAU7Q,GACjC,IAAI8Q,EAAW9Q,EAAIrtC,MAAM,KACzBm+C,EAASV,QACTl6B,OAAOnjB,SAASsmB,KAAOy3B,EAAS3/C,OAAS,EAAI2/C,EAASl/C,KAAK,KAAO4M,EAAU4B,cAKhFkwC,aAAaS,WAAa,WACtB,OAAO76B,OAAO86B,SAAW96B,QAK7Bo6B,aAAaW,UAAY,WACrB,MAAyB,oBAAX/6B,UAA4BA,OAAOg7B,QAC7Ch7B,OAAOg7B,SAAWh7B,QACK,iBAAhBA,OAAOzqB,MACoD,IAAlEyqB,OAAOzqB,KAAKwQ,QAAQqK,GAAqC,MAMjEgqC,aAAaa,cAAgB,WACzB,OAAOj7B,OAAOnjB,SAASC,KAAKL,MAAM,KAAK,GAAGA,MAAM,KAAK,IAKzD29C,aAAac,YAAc,WACvB,IACI7P,EADa,IAAI,GAAUrrB,OAAOnjB,SAASC,MAChButC,mBAC/B,OAAOgB,EAAcb,SAAW,KAAOa,EAAcf,gBAAkB,KAK3E8P,aAAae,wBAA0B,WACnC,OAAIn7B,OAAOo4B,OAASp4B,OAAO64B,QAChB,IAAI,GAGJ,IAAI,IAOnBuB,aAAagB,2BAA6B,WAGtC,GAFqB,GAAU3O,4BAA4BzsB,OAAOnjB,SAASsmB,OAErDi3B,aAAaS,aAC/B,MAAM,GAAiB39B,wCAQ/Bk9B,aAAaiB,sBAAwB,SAAUlG,EAAiBmG,GAC5D,IAAIC,EAAenB,aAAaS,aAChC,GAAI1F,IAAoBjnC,GAAgBstC,UAAYD,IAAiBD,EAEjE,MAAM,GAAiBt+B,4BAA4Bu+B,IAM3DnB,aAAaqB,0BAA4B,WAErC,GAAIrB,aAAaW,YACb,MAAM,GAAiB59B,wCAO/Bi9B,aAAasB,2BAA6B,SAAUC,GAChD,IAAKA,EACD,MAAM,GAAiB99B,oCAQ/Bu8B,aAAawB,yCAA2C,SAAUC,EAAmBC,GACjF,GAAID,IAAsBC,EACtB,MAAM,GAAiB/8B,4CAM/Bq7B,aAAa2B,eAAiB,WAC1B,IAAIC,EAAKh8B,OAAOw4B,UAAUyD,UACtBC,EAAOF,EAAGj2C,QAAQ,SAClBo2C,EAASH,EAAGj2C,QAAQ,YACpBq2C,EAASJ,EAAGj2C,QAAQ,SAGxB,OAFWm2C,EAAO,GAAKC,EAAS,GACnBC,EAAS,GAGnBhC,aA/HsB,GCT7BiC,GAAkC,WAClC,SAASA,oBAoCT,OA7BAA,iBAAiBvlD,UAAUwlD,iBAAmB,SAAUxS,EAAKrvC,GACzD,OAAO4hD,iBAAiBE,sBAAsBzS,EAAKrvC,IAOvD4hD,iBAAiBvlD,UAAU0lD,iBAAmB,SAAU1S,EAAKrvC,GACzD,OAAO4hD,iBAAiBE,sBAAsBzS,EAAKrvC,IAOvD4hD,iBAAiBE,sBAAwB,SAAUzS,EAAKrvC,GAOpD,OANIA,EAAQgiD,UACRz8B,OAAOnjB,SAAS4X,QAAQq1B,GAGxB9pB,OAAOnjB,SAASgJ,OAAOikC,GAEpB,IAAIzmC,SAAQ,SAAUrL,GACzButC,YAAW,WACPvtC,GAAQ,KACTyC,EAAQiiD,aAGZL,iBArC0B,GCQjCM,GAA4B,ICXhC,ICGIC,GDHA,GAAO,sBACP,GAAU,UCGd,SAAWA,GACPA,EAA4B,iBAAI,uBAChCA,EAA0B,eAAI,qBAC9BA,EAAyB,cAAI,oBAC7BA,EAA2B,gBAAI,sBAC/BA,EAAuB,YAAI,kBAC3BA,EAAyB,cAAI,oBAC7BA,EAAyB,cAAI,oBAC7BA,EAA+B,oBAAI,yBACnCA,EAAiC,sBAAI,2BACrCA,EAAiC,sBAAI,2BACrCA,EAAuC,4BAAI,oCAC3CA,EAA4B,iBAAI,sBAChCA,EAA8B,mBAAI,wBAClCA,EAA8B,mBAAI,wBAClCA,EAAuC,4BAAI,+BAC3CA,EAAyC,8BAAI,iCAC7CA,EAAyC,8BAAI,iCAC7CA,EAAiC,sBAAI,2BACrCA,EAA+B,oBAAI,yBACnCA,EAAwB,aAAI,mBAC5BA,EAAwB,aAAI,mBAC5BA,EAA0B,eAAI,qBAC9BA,EAA0B,eAAI,qBAC9BA,EAAsB,WAAI,iBAC1BA,EAAgC,qBAAI,0BAzBxC,CA0BGA,KAAcA,GAAY,KCxB7B,ICEIC,GDFA,GAA8B,WAC9B,SAASC,aAAar6B,EAAQ+E,GAC1BhvB,KAAKukD,eAAiB,IAAIl3B,IAC1BrtB,KAAKiqB,OAASA,EACdjqB,KAAKgvB,cAAgBA,EACrBhvB,KAAKwkD,0BAA2B,EAChCxkD,KAAKykD,yBAA2BzkD,KAAKykD,yBAAyBzmD,KAAKgC,MA2GvE,OArGAskD,aAAahmD,UAAUomD,iBAAmB,SAAUjsB,GAChD,GAAsB,oBAAXjR,OAAwB,CAC/B,IAAIkR,EAAa14B,KAAKgvB,cAAcK,gBAGpC,OAFArvB,KAAKukD,eAAej3B,IAAIoL,EAAYD,GACpCz4B,KAAKiqB,OAAOI,QAAQ,sCAAwCqO,GACrDA,EAEX,OAAO,MAMX4rB,aAAahmD,UAAUqmD,oBAAsB,SAAUjsB,GACnD14B,KAAKukD,eAAe73B,OAAOgM,GAC3B14B,KAAKiqB,OAAOI,QAAQ,kBAAoBqO,EAAa,cAKzD4rB,aAAahmD,UAAUsmD,2BAA6B,WAC1B,oBAAXp9B,SAGNxnB,KAAKwkD,yBAMNxkD,KAAKiqB,OAAOI,QAAQ,iDALpBrqB,KAAKiqB,OAAOI,QAAQ,oCACpBrqB,KAAKwkD,0BAA2B,EAChCh9B,OAAOkB,iBAAiB,UAAW1oB,KAAKykD,6BAShDH,aAAahmD,UAAUumD,4BAA8B,WAC3B,oBAAXr9B,SAGPxnB,KAAKwkD,0BACLxkD,KAAKiqB,OAAOI,QAAQ,sCACpB7C,OAAOs9B,oBAAoB,UAAW9kD,KAAKykD,0BAC3CzkD,KAAKwkD,0BAA2B,GAGhCxkD,KAAKiqB,OAAOI,QAAQ,6CAU5Bi6B,aAAahmD,UAAUymD,UAAY,SAAUC,EAAWrI,EAAiBtwB,EAASxjB,GAC9E,IAAIuN,EAAQpW,KACZ,GAAsB,oBAAXwnB,OAAwB,CAC/B,IAAIy9B,EAAY,CACZD,UAAWA,EACXrI,gBAAiBA,GAAmB,KACpCtwB,QAASA,GAAW,KACpBxjB,MAAOA,GAAS,KAChBoO,UAAWkc,KAAKkD,OAEpBr2B,KAAKiqB,OAAO/gB,KAAK,mBAAqB87C,GACtChlD,KAAKukD,eAAe3iD,SAAQ,SAAU62B,EAAUC,GAC5CtiB,EAAM6T,OAAOI,QAAQ,8BAAgCqO,EAAa,KAAOssB,GACzEvsB,EAAS5rB,MAAM,KAAM,CAACo4C,SAOlCX,aAAahmD,UAAUmmD,yBAA2B,SAAUhkD,GACxD,IACI,IAAIykD,EAAazkD,EAAE0kD,UAAY1kD,EAAE2kD,SACjC,IAAKF,EACD,OAEJ,IAAIG,EAAcpsC,KAAKkJ,MAAM+iC,GAC7B,GAA2B,iBAAhBG,IAA6B,GAAc7iB,gBAAgB6iB,GAClE,OAEJ,IACIzgB,EADgB,GAAa8G,SAAS,IAAI,GAAiB2Z,GAC/B3kB,kBAC3BjgC,EAAE2kD,UAAY3kD,EAAE0kD,UACjBnlD,KAAKiqB,OAAO/gB,KAAK,oDACjBlJ,KAAK+kD,UAAUX,GAAUkB,mBAAengD,EAAWy/B,KAE7CnkC,EAAE0kD,UAAY1kD,EAAE2kD,WACtBplD,KAAKiqB,OAAO/gB,KAAK,wDACjBlJ,KAAK+kD,UAAUX,GAAUmB,qBAAiBpgD,EAAWy/B,IAG7D,MAAOnkC,GACH,SAGD6jD,aAjHsB,GEA7B,GAAiC,WACjC,SAASkB,mBAsFT,OAhFAA,gBAAgBC,6BAA+B,SAAUC,GACrD,OAAOzwC,EAAwC,IAAMgE,KAAKC,UAAUwsC,IAOxEF,gBAAgBG,WAAa,SAAUC,EAAcF,GACjD,IAAI5iC,EACA/kB,EAAMynD,gBAAgBC,6BAA6BC,GACnDjoD,EAAQmoD,EAAa1Z,mBAAmBnuC,GAC5C,GAAIN,EAAO,CACP,GAAIA,EAAMooD,aAAe1yB,KAAKkD,MAE1B,YADAuvB,EAAap5B,WAAWzuB,GAG5B,MAAM,IAAI,IAAyC,QAA3B+kB,EAAKrlB,EAAMqoD,kBAA+B,IAAPhjC,OAAgB,EAASA,EAAG5f,KAAK,OAAS4M,EAAU4B,aAAcjU,EAAMyY,aAAczY,EAAM6Y,YAS/JkvC,gBAAgBO,YAAc,SAAUH,EAAcF,EAAY/F,GAC9D,GAAI6F,gBAAgBQ,oBAAoBrG,IAAa6F,gBAAgBS,2BAA2BtG,GAAW,CACvG,IAAIuG,EAAkB,CAClBL,aAAcL,gBAAgBW,sBAAsBC,SAASzG,EAASG,QAAQrwC,EAAY42C,eAC1Fx9C,MAAO82C,EAASxxC,KAAKtF,MACrBi9C,WAAYnG,EAASxxC,KAAKm4C,YAC1BpwC,aAAcypC,EAASxxC,KAAKgmC,kBAC5B79B,SAAUqpC,EAASxxC,KAAKgI,UAE5ByvC,EAAa3Z,mBAAmBuZ,gBAAgBC,6BAA6BC,GAAaQ,KAOlGV,gBAAgBQ,oBAAsB,SAAUrG,GAC5C,OAA2B,MAApBA,EAASzpB,QAAkBypB,EAASzpB,QAAU,KAAOypB,EAASzpB,OAAS,KAMlFsvB,gBAAgBS,2BAA6B,SAAUtG,GACnD,QAAIA,EAASG,UACFH,EAASG,QAAQvhD,eAAekR,EAAY42C,eAAiB1G,EAASzpB,OAAS,KAAOypB,EAASzpB,QAAU,OAQxHsvB,gBAAgBW,sBAAwB,SAAUN,GAC9C,IAAI1wB,EAAO0wB,GAAgB,EAAI,EAAIA,EAC/BU,EAAiBpzB,KAAKkD,MAAQ,IAClC,OAAOtc,KAAK4d,MAAuK,IAAjK5d,KAAKysC,IAAID,GAAkBpxB,GAAQlgB,GAAoDsxC,EAAiBtxC,KAE9HuwC,gBAAgBiB,eAAiB,SAAUb,EAAczxB,EAAUh1B,EAASunD,GACxE,IAAIhB,EAAa,CACbvxB,SAAUA,EACVC,UAAWj1B,EAAQi1B,UACnBpc,OAAQ7Y,EAAQ6Y,OAChB0uC,sBAAuBA,EACvBvvC,OAAQhY,EAAQgY,OAChBozB,qBAAsBprC,EAAQorC,qBAC9B7Z,sBAAuBvxB,EAAQuxB,sBAC/BE,mBAAoBzxB,EAAQyxB,mBAC5B+1B,UAAWxnD,EAAQwnD,UACnBnc,OAAQrrC,EAAQqrC,QAEhBzsC,EAAMiC,KAAKylD,6BAA6BC,GAC5CE,EAAap5B,WAAWzuB,IAErBynD,gBAvFyB,GCEhC,GAAgC,WAChC,SAASoB,eAAeC,EAAejB,GACnC5lD,KAAK6mD,cAAgBA,EACrB7mD,KAAK4lD,aAAeA,EAqCxB,OA7BAgB,eAAetoD,UAAUwoD,gBAAkB,SAAUpB,EAAYqB,EAAe9kD,GAC5E,OAAO,eAAUjC,UAAM,OAAQ,GAAQ,WACnC,IAAI2/C,EAAUv4B,EACd,OAAO,iBAAYpnB,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACD,GAAgBo3C,WAAW3lD,KAAK4lD,aAAcF,GAC9C5iC,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAK6mD,cAAcjI,qBAAqBmI,EAAe9kD,IAChF,KAAK,EAED,OADA09C,EAAW78B,EAAGxb,OACP,CAAC,EAAa,GACzB,KAAK,EAED,MADA8f,EAAMtE,EAAGxb,kBACU,GACT8f,EAGA,GAAgB9I,mBAAmByoC,EAAe3/B,GAEhE,KAAK,EAED,OADA,GAAgB2+B,YAAY/lD,KAAK4lD,aAAcF,EAAY/F,GACpD,CAAC,EAAcA,WAKnCiH,eAxCwB,GCE/B,GAAkC,WAClC,SAASI,oBA8ET,OAxEAA,iBAAiBC,oBAAsB,SAAUC,GAC7C,GAAI,GAAYxlC,QAAQwlC,GACpB,MAAM,GAAyB59B,+BAOvC09B,iBAAiBG,eAAiB,SAAUC,GACxC,IAAIC,EAAe,GACnB,IAAK,IAAI5pD,KAASkV,EACd00C,EAAaxmD,KAAK8R,EAAYlV,IAElC,GAAI4pD,EAAa95C,QAAQ65C,GAAU,EAC/B,MAAM,GAAyBrrB,yBAAyBqrB,IAGhEJ,iBAAiBM,eAAiB,SAAUnwC,GACxC,IACI8B,KAAKkJ,MAAMhL,GAEf,MAAO1W,GACH,MAAM,GAAyBw7B,oCAQvC+qB,iBAAiBO,4BAA8B,SAAU1gC,EAAe2gC,GACpE,GAAI,GAAY9lC,QAAQmF,IAAkB,GAAYnF,QAAQ8lC,GAC1D,MAAM,GAAyBnrB,wCAG/Br8B,KAAKynD,4BAA4BD,IAOzCR,iBAAiBS,4BAA8B,SAAUD,GACrD,GAAI,CACAh0C,EAA0BC,MAC1BD,EAA0BE,MAC5BnG,QAAQi6C,GAAuB,EAC7B,MAAM,GAAyBprB,yCAOvC4qB,iBAAiBU,iBAAmB,SAAUC,EAAUC,GACpD,OAAKD,GAILC,EAAYhmD,SAAQ,SAAUnE,EAAOM,GAC7B4pD,EAAS5pD,WACF4pD,EAAS5pD,MAKjBb,OAAO2qD,YAAY3qD,OAAO4qD,QAAQH,GAAUhkD,QAAO,SAAUmf,GAEhE,MAAiB,KADLA,EAAG,QAXR,IAeRkkC,iBA/E0B,GCAjC,GAAyC,WACzC,SAASe,0BACL/nD,KAAKk0C,WAAa,IAAI7mB,IA+W1B,OA1WA06B,wBAAwBzpD,UAAU0pD,oBAAsB,WACpDhoD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBq4C,cAAelsC,mBAAmBjM,EAAUoB,sBAKvF62C,wBAAwBzpD,UAAU4pD,kCAAoC,WAClEloD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBq4C,cAAelsC,mBAAmBjM,EAAUsC,oBAAsB,IAAMtC,EAAUuC,0BAM7H01C,wBAAwBzpD,UAAU6pD,gBAAkB,SAAUC,GAC1DpoD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBy4C,cAAetsC,mBAAmB,GAAgC7I,EAAao1C,SAK1HP,wBAAwBzpD,UAAUiqD,gBAAkB,WAChDvoD,KAAKk0C,WAAW5mB,IAAI1d,EAAmB44C,cAAezsC,mBAAmB,OAO7EgsC,wBAAwBzpD,UAAUmqD,UAAY,SAAUzwC,EAAQ0wC,QACtC,IAAlBA,IAA4BA,GAAgB,GAChD,IAAIC,EAAgBD,EAAgBv5C,eAAe6I,GAAU,GAAIxF,GAAuBwF,GAAU,GAC9F0lB,EAAW,IAAI,GAASirB,GAC5B3oD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBg5C,MAAO7sC,mBAAmB2hB,EAASyB,iBAM9E4oB,wBAAwBzpD,UAAUuqD,YAAc,SAAU10B,GACtDn0B,KAAKk0C,WAAW5mB,IAAI1d,EAAmBk5C,UAAW/sC,mBAAmBoY,KAMzE4zB,wBAAwBzpD,UAAUyqD,eAAiB,SAAU7B,GACzD,GAAiBD,oBAAoBC,GACrClnD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBo5C,aAAcjtC,mBAAmBmrC,KAM5Ea,wBAAwBzpD,UAAU2qD,yBAA2B,SAAU/B,GACnE,GAAiBD,oBAAoBC,GACrClnD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBs5C,gBAAiBntC,mBAAmBmrC,KAM/Ea,wBAAwBzpD,UAAU6qD,eAAiB,SAAUC,GACzDppD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBy5C,cAAettC,mBAAmBqtC,KAM7ErB,wBAAwBzpD,UAAUgrD,cAAgB,SAAUC,GACxDvpD,KAAKk0C,WAAW5mB,IAAI5a,EAAS82C,YAAaztC,mBAAmBwtC,KAMjExB,wBAAwBzpD,UAAUmrD,aAAe,SAAUvQ,GACvDl5C,KAAKk0C,WAAW5mB,IAAI5a,EAASg3C,WAAY3tC,mBAAmBm9B,KAMhE6O,wBAAwBzpD,UAAUqrD,UAAY,SAAUzQ,GACpDl5C,KAAKk0C,WAAW5mB,IAAI7d,EAAYm6C,WAAY7tC,mBAAmB,OAASm9B,KAM5E6O,wBAAwBzpD,UAAUurD,UAAY,SAAU9oB,GACpD/gC,KAAKk0C,WAAW5mB,IAAI7d,EAAYm6C,WAAY7tC,mBAAmB,OAASglB,EAAWrB,IAAM,IAAMqB,EAAWpB,QAM9GooB,wBAAwBzpD,UAAUwrD,OAAS,SAAU3Q,GACjDn5C,KAAKk0C,WAAW5mB,IAAI5a,EAASq3C,IAAKhuC,mBAAmBo9B,KAMzD4O,wBAAwBzpD,UAAU0rD,UAAY,SAAU7yC,EAAQ8yC,GAC5D,IAAIC,EAAelqD,KAAKmqD,8BAA8BhzC,EAAQ8yC,GAC9D,GAAiB3C,eAAe4C,GAChClqD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBgB,OAAQmL,mBAAmBmuC,KAMtEnC,wBAAwBzpD,UAAU8rD,iBAAmB,SAAU5zC,GAC3DxW,KAAKk0C,WAAW5mB,IAAI1d,EAAmBy6C,kBAAmBtuC,mBAAmBvF,KAMjFuxC,wBAAwBzpD,UAAUgsD,eAAiB,SAAUC,GAEzDvqD,KAAKk0C,WAAW5mB,IAAI1d,EAAmB46C,aAAcD,EAAYzL,KACjE9+C,KAAKk0C,WAAW5mB,IAAI1d,EAAmB66C,aAAcF,EAAYn/B,SAC7Dm/B,EAAYvL,IACZh/C,KAAKk0C,WAAW5mB,IAAI1d,EAAmB86C,YAAaH,EAAYvL,IAEhEuL,EAAYxL,KACZ/+C,KAAKk0C,WAAW5mB,IAAI1d,EAAmB+6C,aAAcJ,EAAYxL,MAOzEgJ,wBAAwBzpD,UAAUssD,wBAA0B,SAAUC,IAC9DA,aAAmD,EAASA,EAAav0B,UACzEt2B,KAAKk0C,WAAW5mB,IAAI1d,EAAmBk7C,WAAYD,EAAav0B,UAEhEu0B,aAAmD,EAASA,EAAat0B,aACzEv2B,KAAKk0C,WAAW5mB,IAAI1d,EAAmBm7C,UAAWF,EAAat0B,aAOvEwxB,wBAAwBzpD,UAAU0sD,UAAY,SAAU5D,GACpD,GAAiBD,eAAeC,GAChCpnD,KAAKk0C,WAAW5mB,IAAI,GAAK1d,EAAmBq7C,OAAQlvC,mBAAmBqrC,KAM3EW,wBAAwBzpD,UAAU4sD,SAAW,SAAU1pD,GAC9C,GAAYkgB,QAAQlgB,IACrBxB,KAAKk0C,WAAW5mB,IAAI1d,EAAmBu7C,MAAOpvC,mBAAmBva,KAOzEumD,wBAAwBzpD,UAAU8sD,SAAW,SAAUnoB,GACnDjjC,KAAKk0C,WAAW5mB,IAAI1d,EAAmBy7C,MAAOtvC,mBAAmBknB,KAQrE8kB,wBAAwBzpD,UAAUgtD,uBAAyB,SAAUzkC,EAAe2gC,GAEhF,GADA,GAAiBD,4BAA4B1gC,EAAe2gC,IACxD3gC,IAAiB2gC,EAKjB,MAAM,GAAyBnrB,wCAJ/Br8B,KAAKk0C,WAAW5mB,IAAI1d,EAAmB27C,eAAgBxvC,mBAAmB8K,IAC1E7mB,KAAKk0C,WAAW5mB,IAAI1d,EAAmB47C,sBAAuBzvC,mBAAmByrC,KAUzFO,wBAAwBzpD,UAAUmtD,qBAAuB,SAAU51C,GAC/D7V,KAAKk0C,WAAW5mB,IAAI1d,EAAmB87C,KAAM3vC,mBAAmBlG,KAMpEkyC,wBAAwBzpD,UAAUqtD,cAAgB,SAAU91C,GACxD7V,KAAKk0C,WAAW5mB,IAAI1d,EAAmBg8C,YAAa7vC,mBAAmBlG,KAM3EkyC,wBAAwBzpD,UAAUutD,gBAAkB,SAAUzmB,GAC1DplC,KAAKk0C,WAAW5mB,IAAI1d,EAAmB0qB,cAAeve,mBAAmBqpB,KAM7E2iB,wBAAwBzpD,UAAUwtD,gBAAkB,SAAUllC,GAC1D5mB,KAAKk0C,WAAW5mB,IAAI1d,EAAmBm8C,cAAehwC,mBAAmB6K,KAM7EmhC,wBAAwBzpD,UAAU0tD,gBAAkB,SAAU9M,GAC1Dl/C,KAAKk0C,WAAW5mB,IAAI1d,EAAmBq8C,cAAelwC,mBAAmBmjC,KAM7E6I,wBAAwBzpD,UAAU4tD,mBAAqB,SAAU/M,GACxD,GAAYz9B,QAAQy9B,IACrBn/C,KAAKk0C,WAAW5mB,IAAI1d,EAAmBu8C,iBAAkBpwC,mBAAmBojC,KAOpF4I,wBAAwBzpD,UAAU8tD,uBAAyB,SAAUC,GAC5D,GAAY3qC,QAAQ2qC,IACrBrsD,KAAKk0C,WAAW5mB,IAAI1d,EAAmB08C,sBAAuBvwC,mBAAmBswC,KAOzFtE,wBAAwBzpD,UAAUiuD,gBAAkB,SAAUC,GAC1DxsD,KAAKk0C,WAAW5mB,IAAI1d,EAAmB68C,cAAe1wC,mBAAmBywC,KAM7EzE,wBAAwBzpD,UAAUouD,mBAAqB,SAAUC,GAC7D3sD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBg9C,oBAAqB7wC,mBAAmB4wC,KAMnF5E,wBAAwBzpD,UAAUuuD,aAAe,SAAUC,GACvD9sD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBm9C,WAAYhxC,mBAAmB+wC,KAM1E/E,wBAAwBzpD,UAAU0uD,cAAgB,WAC9ChtD,KAAKk0C,WAAW5mB,IrETN,cqESuB,MAMrCy6B,wBAAwBzpD,UAAU2uD,wBAA0B,SAAUtF,GAClE,IAAIvxC,EAAQpW,KACRktD,EAAoB,GAAiBxF,iBAAiBC,EAAU3nD,KAAKk0C,YACzEh3C,OAAO6N,KAAKmiD,GAAmBtrD,SAAQ,SAAU7D,GAC7CqY,EAAM89B,WAAW5mB,IAAIvvB,EAAK4pD,EAAS5pD,QAG3CgqD,wBAAwBzpD,UAAU6rD,8BAAgC,SAAUhzC,EAAQ8yC,GAChF,IAAIC,EAEJ,GAAK/yC,EAID,IACI+yC,EAAejxC,KAAKkJ,MAAMhL,GAE9B,MAAO1W,GACH,MAAM,GAAyBw7B,uCAPnCiuB,EAAe,GAoBnB,OAVID,GAAsBA,EAAmBxnD,OAAS,IAC7CynD,EAAa3rD,eAAesR,EAAkBuqB,gBAE/C8vB,EAAar6C,EAAkBuqB,cAAgB,IAGnD8vB,EAAar6C,EAAkBuqB,cAAcvqB,EAAkBs9C,QAAU,CACrE7kD,OAAQ2hD,IAGThxC,KAAKC,UAAUgxC,IAM1BnC,wBAAwBzpD,UAAU8uD,YAAc,SAAUptB,GACtDhgC,KAAKk0C,WAAW5mB,IAAI3Y,EAAuBqrB,SAAUjkB,mBAAmBikB,KAM5E+nB,wBAAwBzpD,UAAU+uD,YAAc,SAAUC,GACtDttD,KAAKk0C,WAAW5mB,IAAI3Y,EAAuB24C,SAAUvxC,mBAAmBuxC,KAM5EvF,wBAAwBzpD,UAAUivD,YAAc,SAAUC,GACjD,GAAY9rC,QAAQ8rC,KACrBxtD,KAAKk0C,WAAW5mB,IAAI1d,EAAmB69C,WAAY15C,EAAqBm1B,KACxElpC,KAAKk0C,WAAW5mB,IAAI1d,EAAmB89C,QAAS3xC,mBAAmByxC,MAM3EzF,wBAAwBzpD,UAAUqvD,UAAY,SAAUC,GAC/C,GAAYlsC,QAAQksC,KACrB5tD,KAAKk0C,WAAW5mB,IAAI1d,EAAmB69C,WAAY15C,EAAqB2zB,KACxE1nC,KAAKk0C,WAAW5mB,IAAI1d,EAAmB89C,QAAS3xC,mBAAmB6xC,MAO3E7F,wBAAwBzpD,UAAUuvD,mBAAqB,SAAUC,GAC7D9tD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBm+C,oBAAqBD,EAAuBE,qCACnFhuD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBq+C,oBAAqBH,EAAuBI,mCAKvFnG,wBAAwBzpD,UAAU6vD,cAAgB,WAC9CnuD,KAAKk0C,WAAW5mB,IAAI1d,EAAmBw+C,oBAAqBn5C,IAKhE8yC,wBAAwBzpD,UAAU+vD,cAAgB,SAAUC,GACxDtuD,KAAKk0C,WAAW5mB,IAAI1d,EAAmB2+C,YAAaxyC,mBAAmBuyC,KAK3EvG,wBAAwBzpD,UAAUkwD,kBAAoB,WAClD,IAAIC,EAAsB,IAAI7rD,MAI9B,OAHA5C,KAAKk0C,WAAWtyC,SAAQ,SAAUnE,EAAOM,GACrC0wD,EAAoB5tD,KAAK9C,EAAM,IAAMN,MAElCgxD,EAAoBvrD,KAAK,MAE7B6kD,wBAjXiC,GCOxC,GAA4B,WAC5B,SAAS2G,WAAWC,EAAe7/B,GAE/B9uB,KAAK4uD,OfwDb,SAASC,yBAAyB/rC,GAC9B,IAsBsBgsC,EAtBlBC,EAAkBjsC,EAAGgsC,YAAaE,EAAoBlsC,EAAGmsC,cAAeC,EAAmBpsC,EAAGuP,cAAe88B,EAAmBrsC,EAAGssC,aAAcC,EAAwBvsC,EAAGwsC,iBAAkBC,EAAwBzsC,EAAG0sC,iBAAkBC,EAAuB3sC,EAAG4sC,gBAAiBC,EAAoB7sC,EAAG6sC,kBAAmBpF,EAAcznC,EAAGynC,YAAaqF,EAAY9sC,EAAG8sC,UAAW9B,EAAyBhrC,EAAGgrC,uBAAwB+B,EAAoB/sC,EAAG+sC,kBAAmBC,EAAoBhtC,EAAGgtC,kBAC7ez9B,EAAgB,cAAS,cAAS,GAAImsB,IAAgC0Q,GAC1E,MAAO,CACHJ,aAmBkBA,EAnBYC,EAoB3B,cAAS,CAAE9E,mBAAoB,GAAI8F,kBAAmB3Q,GAA6B4Q,4BAA4B,GAASlB,IAnB3HG,cAAe,cAAS,cAAS,GAAI5Q,IAAyB2Q,GAC9D38B,cAAeA,EACf+8B,aAAc,cAAS,cAAS,GAAI,IAAwBD,GAC5DG,iBAAkBD,GAAyB,IAAI,GAAoBN,EAAgB56B,SAAU8E,GAA+B,IAAI,GAAO5G,IACvIm9B,iBAAkBD,GAAyB7Q,GAC3CgR,gBAAiBD,GAAwBx2B,GACzC02B,kBAAmBA,GAAqB1Q,GACxCsL,YAAa,cAAS,cAAS,GAAI1L,IAAuB0L,GAC1DqF,UAAW,cAAS,cAAS,GAAI,IAA4BA,GAC7D9B,uBAAwBA,GAA0B,KAClD+B,kBAAmBA,GAAqB,KACxCC,kBAAmBA,GAAqB,MexE1BjB,CAAyBF,GAEvC3uD,KAAKiqB,OAAS,IAAI,GAAOjqB,KAAK4uD,OAAOv8B,cAAe,GAAM,IAE1DryB,KAAKmtC,YAAcntC,KAAK4uD,OAAOc,gBAE/B1vD,KAAK4lD,aAAe5lD,KAAK4uD,OAAOU,iBAEhCtvD,KAAK6mD,cAAgB7mD,KAAK4uD,OAAOY,iBAEjCxvD,KAAKiwD,eAAiB,IAAI,GAAejwD,KAAK6mD,cAAe7mD,KAAK4lD,cAElE5lD,KAAK8tD,uBAAyB9tD,KAAK4uD,OAAOd,uBAE1C9tD,KAAKo0B,UAAYp0B,KAAK4uD,OAAOE,YAAY16B,UAEzCp0B,KAAK8uB,kBAAoBA,EAuE7B,OAlEA4/B,WAAWpwD,UAAU4xD,0BAA4B,SAAUC,GACvD,IAAIrQ,EAAU,GAEd,GADAA,EAAQrwC,EAAY2gD,cAAgBtgD,EAAUyB,uBACzCvR,KAAK4uD,OAAOK,cAAc1Q,sBAAwB4R,EACnD,OAAQA,EAAQvoD,MACZ,KAAKg4B,GAAkBkc,gBACnB,IACI,IAAI/a,EAAaxB,iCAAiC4wB,EAAQ3qB,YAC1Dsa,EAAQrwC,EAAYm6C,YAAc,OAAS7oB,EAAWrB,IAAM,IAAMqB,EAAWpB,KAEjF,MAAOl/B,GACHT,KAAKiqB,OAAOI,QAAQ,mDAAqD5pB,GAE7E,MACJ,KAAKm/B,GAAkBoc,IACnB8D,EAAQrwC,EAAYm6C,YAAc,QAAUuG,EAAQ3qB,WAIhE,OAAOsa,GASX4O,WAAWpwD,UAAU+xD,2BAA6B,SAAUtJ,EAAe7U,EAAa4N,EAAS4F,GAC7F,OAAO,eAAU1lD,UAAM,OAAQ,GAAQ,WACnC,IAAI2/C,EACJ,OAAO,iBAAY3/C,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAKiwD,eAAenJ,gBAAgBpB,EAAYqB,EAAe,CAAE54C,KAAM+jC,EAAa4N,QAASA,KAC1H,KAAK,EAMD,OALAH,EAAW78B,EAAGxb,OACVtH,KAAK4uD,OAAOd,wBAA0BnO,EAASzpB,OAAS,KAA2B,MAApBypB,EAASzpB,QAExEl2B,KAAK4uD,OAAOd,uBAAuBwC,sBAEhC,CAAC,EAAc3Q,WAS1C+O,WAAWpwD,UAAUiyD,gBAAkB,SAAUC,GAC7C,IAAKA,EAAiBC,oBAClB,MAAM,GAAgBryC,uCAAuC,2DAEjEpe,KAAKo0B,UAAYo8B,GAMrB9B,WAAWpwD,UAAUoyD,2BAA6B,SAAUvxD,GACxD,IAAIwxD,EAAmB,IAAI,GAI3B,OAHIxxD,EAAQyxD,sBACRD,EAAiB1D,wBAAwB9tD,EAAQyxD,sBAE9CD,EAAiBnC,qBAErBE,WA1FoB,GCd3BmC,GACA,SAASA,GAAYvsB,EAAevJ,EAAeub,EAAmBC,EAAoBua,GACtF9wD,KAAKshC,QAAUgD,GAAiB,KAChCtkC,KAAK66B,QAAUE,GAAiB,KAChC/6B,KAAKklC,YAAcoR,GAAqB,KACxCt2C,KAAKolC,aAAemR,GAAsB,KAC1Cv2C,KAAKslC,YAAcwrB,GAAqB,ONAhD,SAAWzM,GACPA,EAAgB,GAAI,KACpBA,EAAiB,IAAI,MAFzB,CAGGA,KAAgBA,GAAc,KACjC,IAAI,GAAmC,WACnC,SAAS0M,kBAAkB5jB,EAAare,GACpC9uB,KAAKmtC,YAAcA,EACnBntC,KAAK8uB,kBAAoBA,EA4F7B,OApFAiiC,kBAAkBzyD,UAAU0yD,YAAc,SAAU7xD,GAChD,IAAI2jB,EAAIqH,EACR,OAAO,eAAUnqB,UAAM,OAAQ,GAAQ,WACnC,IAAIixD,EAAQC,EAAchwB,EAC1B,OAAO,iBAAYlhC,MAAM,SAAUmhC,GAC/B,OAAQA,EAAG5yB,OACP,KAAK,EAGD,OAFkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBikD,oBAAqBhyD,EAAQqX,eACvG,QAAjC2T,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkBkkD,oBAAqBjyD,EAAQqX,eAC9H,CAAC,EAAaxW,KAAKqxD,YAAYlyD,IAC1C,KAAK,EAOD,OANA8xD,EAAS9vB,EAAG75B,OACZ4pD,EAAelxD,KAAKmtC,YAAYzmB,aAAazN,KAAKC,UAAU+3C,IAC5D/vB,EAAK,CACDtoB,IAAKq4C,EAAOr4C,IACZs4C,aAAcA,GAEX,CAAC,EAAalxD,KAAKmtC,YAAY5c,WAAW2gC,IACrD,KAAK,EAAG,MAAO,CAAC,GAAehwB,EAAGowB,WAAanwB,EAAG75B,OAC1C45B,YAUxB6vB,kBAAkBzyD,UAAU+yD,YAAc,SAAUlyD,GAChD,IAAI2jB,EACJ,OAAO,eAAU9iB,UAAM,OAAQ,GAAQ,WAEnC,OAAO,iBAAYA,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAED,OADkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBkkD,oBAAqBjyD,EAAQqX,eAClI,CAAC,EAAaxW,KAAKmtC,YAAY3d,uBAAuBrwB,IACjE,KAAK,EAED,MAAO,CAAC,EAAc,CACdyZ,IAFQuR,EAAG7iB,OAGXiqD,QAASlN,GAAYmN,aAYjDT,kBAAkBzyD,UAAUmzD,aAAe,SAAUvsB,EAAapf,EAAO3mB,GACrE,OAAO,eAAUa,UAAM,OAAQ,GAAQ,WACnC,OAAO,iBAAYA,MAAM,SAAU8iB,GAC/B,MAAO,CAAC,EAAc9iB,KAAK0xD,YAAYxsB,EAAapf,EAAO3mB,WAYvE4xD,kBAAkBzyD,UAAUozD,YAAc,SAAUrlC,EAASvG,EAAO3mB,EAASgY,GACzE,OAAO,eAAUnX,UAAM,OAAQ,GAAQ,WACnC,IAAI0wB,EAAuBE,EAAoB+1B,EAAWgL,EAAUC,EAAmBC,EACvF,OAAO,iBAAY7xD,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAID,OAHAmiB,EAAwBvxB,EAAQuxB,sBAAuBE,EAAqBzxB,EAAQyxB,mBAAoB+1B,EAAYxnD,EAAQwnD,UAAWgL,EAAWxyD,EAAQwyD,SAC1JC,EAAoB,EAAuB,IAAI,GAAUhhC,QAAsBzrB,EAC/E0sD,EAAwBD,aAA6D,EAASA,EAAkB/f,mBACzG,CAAC,EAAa7xC,KAAKmtC,YAAYlc,QAAQ,cAAS,CAAE6gC,GAAIzlC,EAAS0lC,GAAI3lB,GAAUC,aAAczvC,EAAG8zB,aAAqE,EAASA,EAAsBshC,cAAeC,EAAGJ,aAAqE,EAASA,EAAsB/f,gBAAiB7O,MAAO0uB,GAAY3xD,KAAKmtC,YAAY9d,gBAAiB7wB,EAAGqzD,aAAqE,EAASA,EAAsB/e,aAAcof,GAAIL,aAAqE,EAASA,EAAsB9e,aAAe,CAAC,GAAI8e,EAAsB9e,kBAAe5tC,EAAWgtD,cAAexL,QAAaxhD,GAAagS,GAAS2O,EAAO3mB,EAAQqX,gBAC3uB,KAAK,EAAG,MAAO,CAAC,EAAcsM,EAAGxb,gBAK1CypD,kBA/F2B,GOP9BqB,GAAmC,WACvC,SAASA,kBAAkBC,EAAYC,GACnCtyD,KAAKotB,MAAQilC,EACbryD,KAAKsyD,WAAaA,EAsBtB,OApBAp1D,OAAOC,eAAei1D,kBAAkB9zD,UAAW,kBAAmB,CAIlEjB,IAAK,WACD,OAAO2C,KAAKsyD,YAEhBl1D,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAei1D,kBAAkB9zD,UAAW,aAAc,CAI7DjB,IAAK,WACD,OAAO2C,KAAKotB,OAEhBhwB,YAAY,EACZyH,cAAc,IAEXutD,kBAzB+B,GCqBtC,GAAiC,WACjC,SAASG,gBAAgBp+B,EAAUq+B,EAAch5C,EAAWyQ,EAAQ6lC,EAAmBD,EAAmB/gC,GACtG9uB,KAAKm0B,SAAWA,EAChBn0B,KAAKwyD,aAAeA,EACpBxyD,KAAKwZ,UAAYA,EACjBxZ,KAAKiqB,OAASA,EACdjqB,KAAK8vD,kBAAoBA,EACzB9vD,KAAK6vD,kBAAoBA,EACzB7vD,KAAK8uB,kBAAoBA,EA2Q7B,OAnQAyjC,gBAAgBj0D,UAAUm0D,wCAA0C,SAAUC,EAAoBnX,EAAa/hC,GAC3G,IAAKk5C,EAAmBlxD,QAAU+5C,EAC9B,MAAOmX,EAAmBlxD,MAAmE,GAAgBsd,yBAAyB,gBAApG,GAAgBA,yBAAyB,gBAE/E,GAAI6D,mBAAmB+vC,EAAmBlxD,SAAWmhB,mBAAmB44B,GACpE,MAAM,GAAgB18B,2BAG1B,GAAI6zC,EAAmB7pD,OAAS6pD,EAAmBve,mBAAqBue,EAAmBv8C,SAAU,CACjG,GAAI,GAA6BiB,2BAA2Bs7C,EAAmB7pD,MAAO6pD,EAAmBve,kBAAmBue,EAAmBv8C,UAC3I,MAAM,IAAI,GAA6Bu8C,EAAmB7pD,OAASiH,EAAU4B,aAAcghD,EAAmBve,kBAAmBue,EAAmBv8C,SAAUu8C,EAAmBz7C,WAAanH,EAAU4B,aAAcghD,EAAmBC,UAAY7iD,EAAU4B,aAAcghD,EAAmBE,gBAAkB9iD,EAAU4B,aAAcghD,EAAmBv7C,QAAUrH,EAAU4B,cAErX,MAAM,IAAI,GAAYghD,EAAmB7pD,OAASiH,EAAU4B,aAAcghD,EAAmBve,kBAAmBue,EAAmBv8C,UAEnIu8C,EAAmBG,aACnBzzB,gBAAgBszB,EAAmBG,YAAar5C,IAOxD+4C,gBAAgBj0D,UAAUw0D,sBAAwB,SAAUC,GAExD,GAAIA,EAAelqD,OAASkqD,EAAe5e,mBAAqB4e,EAAe58C,SAAU,CACrF,GAAI,GAA6BiB,2BAA2B27C,EAAelqD,MAAOkqD,EAAe5e,kBAAmB4e,EAAe58C,UAC/H,MAAM,IAAI,GAA6B48C,EAAelqD,MAAOkqD,EAAe5e,kBAAmB4e,EAAe58C,SAAU48C,EAAe97C,WAAanH,EAAU4B,aAAcqhD,EAAeJ,UAAY7iD,EAAU4B,aAAcqhD,EAAeH,gBAAkB9iD,EAAU4B,aAAcqhD,EAAe57C,QAAUrH,EAAU4B,cAE/T,IAAIshD,EAAYD,EAAezM,YAAc,OAASyM,EAAe97C,UAAY,MAAQ87C,EAAe5e,kBAAoB,sBAAwB4e,EAAeH,eAAiB,gBAAkBG,EAAeJ,SACrN,MAAM,IAAI,GAAYI,EAAelqD,MAAOmqD,EAAWD,EAAe58C,YAQ9Eo8C,gBAAgBj0D,UAAU20D,0BAA4B,SAAUC,EAAqB9+B,EAAW++B,EAAch0D,EAASi0D,EAAiBhsB,EAAmBisB,EAA8BC,EAAgCC,GACrN,IAAIzwC,EACJ,OAAO,eAAU9iB,UAAM,OAAQ,GAAQ,WACnC,IAAIwzD,EAAY9vB,EAAU+vB,EAAiB1uB,EAAa2uB,EAAc31D,EACtE,OAAO,iBAAYiC,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAED,GADkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBymD,0BAA2BT,EAAoBN,gBACvJM,EAAoBU,SAAU,CAG9B,GAFAJ,EAAa,IAAI,GAAUN,EAAoBU,UAAY9jD,EAAU4B,aAAc1R,KAAKwZ,WAEpF45C,IAAoB,GAAY1xC,QAAQ0xC,EAAgBnwB,QACpDuwB,EAAWr8C,OAAO8rB,QAAUmwB,EAAgBnwB,MAC5C,MAAM,GAAgBjkB,2BAI9B,GAAI7f,EAAQwkC,QAA8B,IAAnBxkC,EAAQwkC,OAAe,CAE1C,KADAD,EAAW8vB,EAAWr8C,OAAO08C,WAEzB,MAAM,GAAgB50C,8BAE1B,GAAUwkB,YAAYC,EAAUvkC,EAAQwkC,SAIhD3jC,KAAK0mD,sBAAwB,GAAcvkB,sBAAsB+wB,EAAoBL,aAAe/iD,EAAU4B,aAAc0iB,EAAU8L,cAAelgC,KAAKiqB,OAAQjqB,KAAKwZ,UAAWg6C,GAC5KJ,GAAqBA,EAAgB5xD,QACvCiyD,EAAkB,GAAcjjB,kBAAkBxwC,KAAKwZ,UAAW45C,EAAgB5xD,QAGtF0xD,EAAoBY,OAASZ,EAAoBY,QAAU30D,EAAQqrC,aAAUrlC,EAC7E4/B,EAAc/kC,KAAK+zD,oBAAoBb,EAAqB9+B,EAAW++B,EAAch0D,EAASq0D,EAAYpsB,EAAmBgsB,GAC7HjpC,EAAG5b,MAAQ,EACf,KAAK,EAED,OADA4b,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,CAAE,EAAG,IAChBb,KAAK6vD,mBAAqB7vD,KAAK8vD,mBACrC9vD,KAAKiqB,OAAOI,QAAQ,kDACpBqpC,EAAe,IAAItB,GAAkBpyD,KAAK8vD,mBAAmB,GACtD,CAAC,EAAa9vD,KAAK6vD,kBAAkBmE,kBAAkBN,KAHE,CAAC,EAAa,GAIlF,KAAK,EACDvpC,EAAG7iB,OACH6iB,EAAG5b,MAAQ,EACf,KAAK,EAOD,OAAI8kD,GAAiCC,IAAkCvuB,EAAYzD,UAC/EvjC,EAAMgnC,EAAYzD,QAAQxB,qBAChB9/B,KAAKwyD,aAAanuB,WAAWtmC,IAMpC,CAAC,EAAaiC,KAAKwyD,aAAa1tB,gBAAgBC,KAJ/C/kC,KAAKiqB,OAAOuJ,QAAQ,uGACb,CAAC,EAAc++B,gBAAgB0B,6BAA6Bj0D,KAAKwZ,UAAW4a,EAAW2Q,GAAa,EAAO5lC,EAASq0D,EAAYC,OAAiBtuD,EAAWouD,KAI/K,KAAK,EAED,OADAppC,EAAG7iB,OACI,CAAC,EAAa,GACzB,KAAK,EACD,OAAMtH,KAAK6vD,mBAAqB7vD,KAAK8vD,mBAAqB4D,GAC1D1zD,KAAKiqB,OAAOI,QAAQ,iDACb,CAAC,EAAarqB,KAAK6vD,kBAAkBqE,iBAAiBR,KAFmB,CAAC,EAAa,GAGlG,KAAK,EACDvpC,EAAG7iB,OACH6iB,EAAG5b,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,GAChB,KAAK,EAAG,MAAO,CAAC,EAAcgkD,gBAAgB0B,6BAA6Bj0D,KAAKwZ,UAAW4a,EAAW2Q,GAAa,EAAO5lC,EAASq0D,EAAYC,EAAiBP,EAAqBK,YAWrMhB,gBAAgBj0D,UAAUy1D,oBAAsB,SAAUb,EAAqB9+B,EAAW++B,EAAch0D,EAASq0D,EAAYpsB,EAAmBgsB,GAC5I,IAKI7pB,EACAF,EANA9H,EAAMnN,EAAUoN,oBACpB,GAAI,GAAY9f,QAAQ6f,GACpB,MAAM,GAAgBnhB,sCAKrB,GAAYsB,QAAQwxC,EAAoBU,WAAeJ,IACxDjqB,EAAgB,GAAc3O,oBAAoB56B,KAAK0mD,sBAAuBnlB,EAAK2xB,EAAoBU,UAAY9jD,EAAU4B,aAAc1R,KAAKm0B,SAAUq/B,EAAWr8C,OAAOsqB,KAAO3xB,EAAU4B,cAC7L23B,EAAgBrpC,KAAKm0D,sBAAsBjB,EAAqBM,EAAYp/B,EAAWg/B,IAG3F,IAAI5pB,EAAoB,KACxB,IAAK,GAAY9nB,QAAQwxC,EAAoBkB,cAAe,CAExD,IAAIC,EAAiBnB,EAAoB71B,MAAQ,GAASE,WAAW21B,EAAoB71B,OAAS,IAAI,GAASl+B,EAAQ6Y,QAAU,IAK7Hs8C,GAAuD,iBAAnCpB,EAAoBqB,WAA0BnO,SAAS8M,EAAoBqB,WAAY,IAAMrB,EAAoBqB,aAAe,EACpJC,GAA8D,iBAAvCtB,EAAoBuB,eAA8BrO,SAAS8M,EAAoBuB,eAAgB,IAAMvB,EAAoBuB,iBAAmB,EACnKC,GAAuD,iBAAnCxB,EAAoByB,WAA0BvO,SAAS8M,EAAoByB,WAAY,IAAMzB,EAAoByB,kBAAexvD,EACpJyvD,EAAyBzB,EAAemB,EACxCO,EAAiCD,EAAyBJ,EAC1DM,EAAmBJ,GAAaA,EAAY,EAAIvB,EAAeuB,OAAYvvD,EAE/EqkC,EAAoB,GAAkByD,wBAAwBjtC,KAAK0mD,sBAAuBnlB,EAAK2xB,EAAoBkB,cAAgBtkD,EAAU4B,aAAc1R,KAAKm0B,SAAUq/B,EAAaA,EAAWr8C,OAAOsqB,KAAO3xB,EAAU4B,aAAe0iB,EAAUmrB,OAAQ8U,EAAel1B,cAAey1B,EAAwBC,EAAgC70D,KAAKwZ,UAAWs7C,EAAkB5B,EAAoB6B,WAAY3tB,EAAmB8rB,EAAoBY,OAAQ30D,EAAQgY,OAAQhY,EAAQ86B,qBAG9d,IAAIyP,EAAqB,KACpB,GAAYhoB,QAAQwxC,EAAoB8B,iBACzCtrB,EAAqB,GAAmBiE,yBAAyB3tC,KAAK0mD,sBAAuBnlB,EAAK2xB,EAAoB8B,eAAiBllD,EAAU4B,aAAc1R,KAAKm0B,SAAU++B,EAAoB+B,KAAM7tB,IAG5M,IAAIwC,EAAoB,KAIxB,OAHK,GAAYloB,QAAQwxC,EAAoB+B,QACzCrrB,EAAoB,GAAkBqE,wBAAwBjuC,KAAKm0B,SAAUoN,EAAK2xB,EAAoB+B,OAEnG,IAAIpE,GAAYxnB,EAAeE,EAAeC,EAAmBE,EAAoBE,IAQhG2oB,gBAAgBj0D,UAAU61D,sBAAwB,SAAUjB,EAAqBr4B,EAASzG,EAAWg/B,GACjG,IAAIlzB,EAAgB9L,EAAU8L,cAC1Bc,EAAqBoyB,EAAkBA,EAAgB8B,sBAAwBplD,EAAU4B,aACzFyjD,EAAc/B,EAAkBA,EAAgBgC,aAAetlD,EAAU4B,aAE7E,GAAIwuB,IAAkB/N,GAAc8P,KAEhC,OADAjiC,KAAKiqB,OAAOI,QAAQ,iDACb,GAAc2X,qBAAqBhiC,KAAK0mD,sBAAuB7rB,EAASzG,EAAW4M,EAAoBm0B,GAGlH,GAAI,GAAYzzC,QAAQwxC,EAAoBL,cAA2C,QAA3Bz+B,EAAUihC,aAClE,MAAM,GAAgBt3C,6BAE1B,OAAOm1C,EAAoBL,YACvB,GAAc/xB,cAAcoyB,EAAoBL,YAAa7yD,KAAK0mD,sBAAuB7rB,EAASzG,EAAW4M,EAAoBm0B,GACjI,GAAcnzB,qBAAqBhiC,KAAK0mD,sBAAuB7rB,EAASzG,EAAW4M,EAAoBm0B,IAY/G5C,gBAAgB0B,6BAA+B,SAAUz6C,EAAW4a,EAAW2Q,EAAauwB,EAAgBn2D,EAASq0D,EAAY+B,EAAcrC,EAAqBsC,GAChK,IAAI1yC,EAAIqH,EAAI+W,EACZ,OAAO,eAAUlhC,UAAM,OAAQ,GAAQ,WACnC,IAAIklC,EAAamvB,EAAgB7nB,EAAWU,EAAcvT,EAAU87B,EAAmBt0B,EAAInG,EAAQlV,EAAO4Z,EAAK+B,EAC/G,OAAO,iBAAYzhC,MAAM,SAAUohC,GAC/B,OAAQA,EAAG7yB,OACP,KAAK,EAKD,GAJA22B,EAAcp1B,EAAU4B,aACxB2iD,EAAiB,GACjB7nB,EAAY,KACZ7S,EAAW7pB,EAAU4B,cAChBqzB,EAAYG,YAAa,MAAO,CAAC,EAAa,GACnD,GAAMH,EAAYG,YAAYlL,YAAcjmB,EAAqBm1B,IAAM,MAAO,CAAC,EAAa,GAG5F,GAFAusB,EAAoB,IAAI,GAAkBj8C,GAC1C2nB,EAAK4D,EAAYG,YAAalK,EAASmG,EAAGnG,SAAQlV,EAAQqb,EAAGrb,OAEzD,MAAM,GAAgB1E,0BAE1B,MAAO,CAAC,EAAaq0C,EAAkBhE,aAAaz2B,EAAQlV,EAAO3mB,IACvE,KAAK,EAED,OADA+lC,EAAc9D,EAAG95B,OACV,CAAC,EAAa,GACzB,KAAK,EACD49B,EAAcH,EAAYG,YAAYlK,OACtCoG,EAAG7yB,MAAQ,EACf,KAAK,EACD8lD,EAAiB,GAAS92B,WAAWwH,EAAYG,YAAYvc,QAAQwV,UACrEqO,EAAY,IAAIrZ,KAAiD,IAA5CwZ,OAAO5H,EAAYG,YAAYsH,YACpDU,EAAe,IAAI/Z,KAAyD,IAApDwZ,OAAO5H,EAAYG,YAAYqI,oBACvDnM,EAAG7yB,MAAQ,EACf,KAAK,EAUD,OATIw2B,EAAYO,cACZ3L,EAAWoL,EAAYO,YAAY3L,WAAa9lB,EAAgBA,EAAgB/D,EAAU4B,cAE9FguB,GAAO8zB,aAA+C,EAASA,EAAWr8C,OAAOuqB,OAAS8xB,aAA+C,EAASA,EAAWr8C,OAAOwqB,MAAQ7xB,EAAU4B,aACtL+vB,GAAO+xB,aAA+C,EAASA,EAAWr8C,OAAOsqB,MAAQ3xB,EAAU4B,cAE9FwhD,aAAiE,EAASA,EAAoBwC,gBAAoB3wB,EAAYzD,UAC/HyD,EAAYzD,QAAQV,gBAAkBsyB,aAAiE,EAASA,EAAoBwC,eAEjI,CAAC,EAAc,CACdthC,UAAWA,EAAUuhC,mBACrBC,SAAUl2B,EACV5E,SAAU2G,EACVzpB,OAAQq8C,EACR/yB,QAASyD,EAAYzD,QAAUyD,EAAYzD,QAAQZ,iBAAmB,KACtE7F,QAAS24B,EAAaA,EAAWrwB,SAAWrzB,EAAU4B,aACtDivB,cAAe6yB,EAAaA,EAAWr8C,OAAS,GAChD+tB,YAAaA,EACb2wB,UAAWP,EACX9oB,UAAWA,EACXh2B,cAAerX,EAAQqX,cACvBg/C,UAAWA,GAAa1lD,EAAU4B,aAClCw7B,aAAcA,EACdvT,SAAUA,EACVK,WAA+C,QAAlClX,EAAKiiB,EAAYG,mBAAgC,IAAPpiB,OAAgB,EAASA,EAAGkX,YAAclqB,EAAU4B,aAC3GlQ,MAAO+zD,EAAeA,EAAa3kB,iBAAmB9gC,EAAU4B,aAChEsvB,oBAAoD,QAA9B7W,EAAK4a,EAAYzD,eAA4B,IAAPnX,OAAgB,EAASA,EAAG6W,qBAAuBlxB,EAAU4B,aACzHuvB,aAA6C,QAA9BC,EAAK6D,EAAYzD,eAA4B,IAAPJ,OAAgB,EAASA,EAAGD,cAAgBnxB,EAAU4B,aAC3GmE,KAAMq9C,aAAiE,EAASA,EAAoB4C,SACpGC,kBAAkB,YAMvCxD,gBAnRyB,GCLhC,GAAyC,SAAUx8C,GAEnD,SAASigD,wBAAwBrH,EAAe7/B,GAC5C,IAAI1Y,EAAQL,EAAOpZ,KAAKqD,KAAM2uD,EAAe7/B,IAAsB9uB,KAGnE,OADAoW,EAAM6/C,oBAAqB,EACpB7/C,EA4cX,OAjdA,eAAU4/C,wBAAyBjgD,GAiBnCigD,wBAAwB13D,UAAU43D,eAAiB,SAAU/2D,GACzD,IAAI2jB,EAAIqH,EACR,OAAO,eAAUnqB,UAAM,OAAQ,GAAQ,WACnC,IAAIkyC,EACJ,OAAO,iBAAYlyC,MAAM,SAAUkhC,GAC/B,OAAQA,EAAG3yB,OACP,KAAK,EAGD,OAFkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBipD,eAAgBh3D,EAAQqX,eAClG,QAAjC2T,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkBkpD,4BAA6Bj3D,EAAQqX,eACtI,CAAC,EAAaxW,KAAKq2D,6BAA6Bl3D,IAC3D,KAAK,EAED,OADA+yC,EAAchR,EAAG55B,OACV,CAAC,EAAc,GAAU2qC,kBAAkBjyC,KAAKo0B,UAAUkiC,sBAAuBpkB,YAU5G8jB,wBAAwB13D,UAAUi4D,aAAe,SAAUp3D,EAASi0D,GAChE,IAAItwC,EAAIqH,EAAI+W,EAAIC,EAAIC,EAAIC,EACxB,OAAO,eAAUrhC,UAAM,OAAQ,GAAQ,WACnC,IAAIw2D,EAAgBrD,EAAcxT,EAAU6V,EAAWiB,EAAkBC,EACrEtgD,EAAQpW,KACZ,OAAO,iBAAYA,MAAM,SAAU22D,GAC/B,OAAQA,EAAGpoD,OACP,KAAK,EACD,IAAKpP,IAAYA,EAAQ0W,KACrB,MAAM,GAAgB2J,sCAO1B,OALkC,QAAjCsD,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkB0pD,uBAAwBz3D,EAAQqX,eAC5IggD,EAAmD,QAAjCrsC,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,OAAgB,EAASA,EAAG8F,iBAAiB,6BAA8B9wB,EAAQqX,eAC9IxW,KAAKiqB,OAAO/gB,KAAK,4CACjBiqD,EAAe/mB,GAAUC,aACS,QAAjCnL,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkB2pD,8BAA+B13D,EAAQqX,eACxI,CAAC,EAAaxW,KAAK82D,oBAAoB92D,KAAKo0B,UAAWj1B,IAClE,KAAK,EAaD,OAZAwgD,EAAWgX,EAAGrvD,OACdkuD,EAAwC,QAA3Br0B,EAAKwe,EAASG,eAA4B,IAAP3e,OAAgB,EAASA,EAAG1xB,EAAYsnD,kBACxFN,EAA+C,QAA3Br1B,EAAKue,EAASG,eAA4B,IAAP1e,OAAgB,EAASA,EAAG3xB,EAAYunD,sBAE3FR,SAAgEA,EAAe7/B,gBAAgB,CAC3F8/B,iBAAkBA,MAG1BC,EAAkB,IAAI,GAAgB12D,KAAK4uD,OAAOE,YAAY36B,SAAUn0B,KAAK4lD,aAAc5lD,KAAKmtC,YAAantC,KAAKiqB,OAAQjqB,KAAK4uD,OAAOkB,kBAAmB9vD,KAAK4uD,OAAOiB,kBAAmB7vD,KAAK8uB,oBAE7KgkC,sBAAsBnT,EAASxxC,MACb,QAAjCkzB,EAAKrhC,KAAK8uB,yBAAsC,IAAPuS,GAAyBA,EAAGrI,gBAAgB9rB,EAAkBymD,0BAA2Bx0D,EAAQqX,eACpI,CAAC,EAAckgD,EAAgBzD,0BAA0BtT,EAASxxC,KAAMnO,KAAKo0B,UAAW++B,EAAch0D,EAASi0D,OAAiBjuD,OAAWA,OAAWA,EAAWqwD,GAAW90D,MAAK,SAAUI,GAI1L,OAHA01D,SAAgEA,EAAe3lC,eAAe,CAC1FC,SAAS,IAENhwB,KAENE,OAAM,SAAU6H,GAOjB,MANAuN,EAAM6T,OAAOI,QAAQ,iCAAkClrB,EAAQqX,eAC/DggD,SAAgEA,EAAe3lC,eAAe,CAC1F5a,UAAWpN,EAAMoN,UACjBghD,aAAcpuD,EAAMyN,SACpBwa,SAAS,IAEPjoB,cAWlCmtD,wBAAwB13D,UAAU44D,uBAAyB,SAAUC,EAAc5b,GAE/E,IAAImb,EAAkB,IAAI,GAAgB12D,KAAK4uD,OAAOE,YAAY36B,SAAUn0B,KAAK4lD,aAAc5lD,KAAKmtC,YAAantC,KAAKiqB,OAAQ,KAAM,MAEhIuqB,EAAgB,IAAI,GAAU2iB,GAE9BC,EAAe,GAAUzjB,oBAAoBa,EAAchD,WAI/D,GAFAklB,EAAgBjE,wCAAwC2E,EAAc7b,EAAav7C,KAAKmtC,cAEnFiqB,EAAavhD,KACd,MAAM,GAAgBoL,wCAE1B,OAAO,cAAS,cAAS,GAAIm2C,GAAe,CAExCvhD,KAAMuhD,EAAavhD,QAO3BmgD,wBAAwB13D,UAAU+4D,aAAe,SAAUC,GAEvD,IAAKA,EACD,MAAM,GAAyBp7B,gCAEnC,IAAIgW,EAAclyC,KAAKu3D,2BAA2BD,GAElD,OAAO,GAAUrlB,kBAAkBjyC,KAAKo0B,UAAUojC,mBAAoBtlB,IAO1E8jB,wBAAwB13D,UAAUw4D,oBAAsB,SAAU1iC,EAAWj1B,GACzE,IAAI2jB,EAAIqH,EACR,OAAO,eAAUnqB,UAAM,OAAQ,GAAQ,WACnC,IAAIy3D,EAAuBl5C,EAAUm5C,EAAa7b,EAAe9a,EAAY+e,EAAS4F,EACtF,OAAO,iBAAY1lD,MAAM,SAAUkhC,GAC/B,OAAQA,EAAG3yB,OACP,KAAK,EAKD,OAJkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkB2pD,8BAA+B13D,EAAQqX,eACjH,QAAjC2T,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkByqD,iCAAkCx4D,EAAQqX,eAClJihD,EAAwBz3D,KAAK0wD,2BAA2BvxD,GACxDof,EAAW,GAAU0zB,kBAAkB7d,EAAU2yB,cAAe0Q,GACzD,CAAC,EAAaz3D,KAAK43D,uBAAuBz4D,IACrD,KAAK,EAGD,GAFAu4D,EAAcx2B,EAAG55B,OACjBu0C,OAAgB12C,EACZhG,EAAQ4hC,WACR,IACIA,EAAa3B,gBAAgBjgC,EAAQ4hC,WAAY/gC,KAAKmtC,aACtD0O,EAAgB,CACZrW,WAAY,GAAKzE,EAAWrB,IAAMrsB,EAAWosB,sBAAwBsB,EAAWpB,KAChF/3B,KAAMg4B,GAAkBkc,iBAGhC,MAAOr7C,GACHT,KAAKiqB,OAAOI,QAAQ,+CAAiD5pB,GAe7E,OAZAq/C,EAAU9/C,KAAKkwD,0BAA0BrU,GAAiB18C,EAAQ08C,eAClE6J,EAAa,CACTvxB,SAAUn0B,KAAK4uD,OAAOE,YAAY36B,SAClCC,UAAWA,EAAUuhC,mBACrB39C,OAAQ7Y,EAAQ6Y,OAChBb,OAAQhY,EAAQgY,OAChBozB,qBAAsBprC,EAAQorC,qBAC9B7Z,sBAAuBvxB,EAAQuxB,sBAC/BE,mBAAoBzxB,EAAQyxB,mBAC5B+1B,UAAWxnD,EAAQwnD,UACnBnc,OAAQrrC,EAAQqrC,QAEb,CAAC,EAAcxqC,KAAKqwD,2BAA2B9xC,EAAUm5C,EAAa5X,EAAS4F,YAS1GsQ,wBAAwB13D,UAAUs5D,uBAAyB,SAAUz4D,GACjE,IAAI2jB,EAAIqH,EACR,OAAO,eAAUnqB,UAAM,OAAQ,GAAQ,WACnC,IAAI2wD,EAAkBxR,EAAiBsW,EAAmBoC,EAAYrhD,EAAe25C,EAAqBpvB,EACtGG,EACJ,OAAO,iBAAYlhC,MAAM,SAAUmhC,GAC/B,OAAQA,EAAG5yB,OACP,KAAK,EAyCD,OAxCkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkByqD,iCAAkCx4D,EAAQqX,gBACtJm6C,EAAmB,IAAI,IACN9H,YAAY7oD,KAAK4uD,OAAOE,YAAY36B,UAKhDn0B,KAAKi2D,mBAMNtF,EAAiB5H,eAAe5pD,EAAQ+nD,aAJxC,GAAiBD,oBAAoB9nD,EAAQ+nD,aAOjDyJ,EAAiBlI,UAAUtpD,EAAQ6Y,QAEnC24C,EAAiBlF,qBAAqBtsD,EAAQ0W,MAE9C86C,EAAiBrG,eAAetqD,KAAK4uD,OAAOrE,aAC5CoG,EAAiB/F,wBAAwB5qD,KAAK4uD,OAAOgB,UAAUpQ,aAC/DmR,EAAiBxC,gBACbnuD,KAAK8tD,wBACL6C,EAAiB9C,mBAAmB7tD,KAAK8tD,wBAGzC3uD,EAAQynB,cACR+pC,EAAiB7E,gBAAgB3sD,EAAQynB,cAEzC5mB,KAAK4uD,OAAOe,kBAAkBzQ,cAC9ByR,EAAiB3E,gBAAgBhsD,KAAK4uD,OAAOe,kBAAkBzQ,cAE/Dl/C,KAAK4uD,OAAOe,kBAAkBxQ,kBAC9BA,EAAkBn/C,KAAK4uD,OAAOe,kBAAkBxQ,gBAChDwR,EAAiBzE,mBAAmB/M,EAAgB2Y,WACpDnH,EAAiBvE,uBAAuBjN,EAAgB4Y,gBAE5DpH,EAAiB9D,aAAa15C,EAAU6kD,0BACxCrH,EAAiB3D,gBACX7tD,EAAQorC,uBAAyBx2B,EAAqBm1B,IAAa,CAAC,EAAa,IACvFusB,EAAoB,IAAI,GAAkBz1D,KAAKmtC,YAAantC,KAAK8uB,mBAC/B,QAAjC3E,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkBikD,oBAAqBhyD,EAAQqX,eAC9H,CAAC,EAAai/C,EAAkBzE,YAAY7xD,KACvD,KAAK,EAID,OAHA04D,EAAa12B,EAAG75B,OAEhBqpD,EAAiBpD,YAAYsK,EAAW3G,cACjC,CAAC,EAAa,GACzB,KAAK,EACD,GAAI/xD,EAAQorC,uBAAyBx2B,EAAqB2zB,IAAK,CAC3D,IAAIvoC,EAAQ84D,OAIR,MAAM,GAAyBv7B,2BAH/Bi0B,EAAiBhD,UAAUxuD,EAAQ84D,QAM3C92B,EAAG5yB,MAAQ,EACf,KAAK,EAOD,GANAiI,EAAgBrX,EAAQqX,eAAiBxW,KAAK4uD,OAAOc,gBAAgBrgC,gBACrEshC,EAAiBvG,iBAAiB5zC,KAC7B,GAAYyL,WAAW9iB,EAAQgY,SAAWnX,KAAK4uD,OAAOE,YAAY7E,oBAAsBjqD,KAAK4uD,OAAOE,YAAY7E,mBAAmBxnD,OAAS,IAC7IkuD,EAAiB3G,UAAU7qD,EAAQgY,OAAQnX,KAAK4uD,OAAOE,YAAY7E,oBAEvEkG,OAAUhrD,EACNhG,EAAQ4hC,WACR,IACIA,EAAa3B,gBAAgBjgC,EAAQ4hC,WAAY/gC,KAAKmtC,aACtDgjB,EAAU,CACN3qB,WAAY,GAAKzE,EAAWrB,IAAMrsB,EAAWosB,sBAAwBsB,EAAWpB,KAChF/3B,KAAMg4B,GAAkBkc,iBAGhC,MAAOr7C,GACHT,KAAKiqB,OAAOI,QAAQ,+CAAiD5pB,QAIzE0vD,EAAUhxD,EAAQ08C,cAGtB,GAAI77C,KAAK4uD,OAAOK,cAAc1Q,sBAAwB4R,EAClD,OAAQA,EAAQvoD,MACZ,KAAKg4B,GAAkBkc,gBACnB,IACI/a,EAAaxB,iCAAiC4wB,EAAQ3qB,YACtDmrB,EAAiB9G,UAAU9oB,GAE/B,MAAOtgC,GACHT,KAAKiqB,OAAOI,QAAQ,mDAAqD5pB,GAE7E,MACJ,KAAKm/B,GAAkBoc,IACnB2U,EAAiBhH,UAAUwG,EAAQ3qB,YAa/C,OATIrmC,EAAQ+4D,qBACRvH,EAAiB1D,wBAAwB9tD,EAAQ+4D,sBAGjD/4D,EAAQg5D,4BAAgCh5D,EAAQ+4D,qBAAwB/4D,EAAQ+4D,oBAAoBtoD,EAAmBwoD,kBACvHzH,EAAiB1D,0BAAyB/rB,EAAK,IACxCtxB,EAAmBwoD,iBAAmB,IACzCl3B,IAED,CAAC,EAAcyvB,EAAiBnC,6BAS3DwH,wBAAwB13D,UAAU+3D,6BAA+B,SAAUl3D,GACvE,IAAI2jB,EACJ,OAAO,eAAU9iB,UAAM,OAAQ,GAAQ,WACnC,IAAI2wD,EAAkBhI,EAAenyC,EAAe4iC,EAAYif,EAA+Ct3B,EAA+B82B,EAC9I,OAAO,iBAAY73D,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EA6BD,GA5BkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBkpD,4BAA6Bj3D,EAAQqX,gBACjJm6C,EAAmB,IAAI,IACN9H,YAAY7oD,KAAK4uD,OAAOE,YAAY36B,UACrDw0B,EAAgBx5C,eAAehQ,EAAQ6Y,QAAU,GAAI7Y,EAAQm5D,sBAAwB,IACrF3H,EAAiBlI,UAAUE,GAE3BgI,EAAiB5H,eAAe5pD,EAAQ+nD,aACxC1wC,EAAgBrX,EAAQqX,eAAiBxW,KAAK4uD,OAAOc,gBAAgBrgC,gBACrEshC,EAAiBvG,iBAAiB5zC,GAElCm6C,EAAiBxI,gBAAgBhpD,EAAQipD,cAEzCuI,EAAiB3I,sBAEjB2I,EAAiBrG,eAAetqD,KAAK4uD,OAAOrE,aAC5CoG,EAAiB/F,wBAAwB5qD,KAAK4uD,OAAOgB,UAAUpQ,aAE/DmR,EAAiB3D,gBACb7tD,EAAQ0nB,eAAiB1nB,EAAQqoD,qBACjCmJ,EAAiBrF,uBAAuBnsD,EAAQ0nB,cAAe1nB,EAAQqoD,qBAEvEroD,EAAQioD,QACRuJ,EAAiB3F,UAAU7rD,EAAQioD,QAEnCjoD,EAAQoqD,YACRoH,EAAiBrH,cAAcnqD,EAAQoqD,YAGvCpqD,EAAQioD,SAAWz0C,EAAYE,eAE/B,GAAI1T,EAAQg6C,KAAOh6C,EAAQioD,SAAWz0C,EAAYI,KAE9C/S,KAAKiqB,OAAOI,QAAQ,yEACpBsmC,EAAiB7G,OAAO3qD,EAAQg6C,UAE/B,GAAIh6C,EAAQmiC,SAIb,GAHA8X,EAAap5C,KAAKu4D,kBAAkBp5D,EAAQmiC,SAC5C+2B,EAAwBr4D,KAAKw4D,iBAAiBr5D,EAAQmiC,SAE3B,CACvBthC,KAAKiqB,OAAOI,QAAQ,qEACpBsmC,EAAiBlH,aAAa4O,GAC9B,IACIt3B,EAAaxB,iCAAiCpgC,EAAQmiC,QAAQjI,eAC9Ds3B,EAAiB9G,UAAU9oB,GAE/B,MAAOtgC,GACHT,KAAKiqB,OAAOI,QAAQ,sFAGvB,GAAI+uB,GAAcj6C,EAAQioD,SAAWz0C,EAAYI,KAAM,CAKxD/S,KAAKiqB,OAAOI,QAAQ,yEACpBsmC,EAAiB7G,OAAO1Q,GACxB,IACIrY,EAAaxB,iCAAiCpgC,EAAQmiC,QAAQjI,eAC9Ds3B,EAAiB9G,UAAU9oB,GAE/B,MAAOtgC,GACHT,KAAKiqB,OAAOI,QAAQ,sFAGvB,GAAIlrB,EAAQ+5C,UACbl5C,KAAKiqB,OAAOI,QAAQ,gEACpBsmC,EAAiBlH,aAAatqD,EAAQ+5C,WACtCyX,EAAiBhH,UAAUxqD,EAAQ+5C,gBAElC,GAAI/5C,EAAQmiC,QAAQtB,SAAU,CAE/BhgC,KAAKiqB,OAAOI,QAAQ,gEACpBsmC,EAAiBlH,aAAatqD,EAAQmiC,QAAQtB,UAC9C,IACIe,EAAaxB,iCAAiCpgC,EAAQmiC,QAAQjI,eAC9Ds3B,EAAiB9G,UAAU9oB,GAE/B,MAAOtgC,GACHT,KAAKiqB,OAAOI,QAAQ,uFAIvBlrB,EAAQ+5C,YACbl5C,KAAKiqB,OAAOI,QAAQ,4EACpBsmC,EAAiBlH,aAAatqD,EAAQ+5C,WACtCyX,EAAiBhH,UAAUxqD,EAAQ+5C,iBAIvCl5C,KAAKiqB,OAAOI,QAAQ,kFAcxB,OAZIlrB,EAAQ8jC,OACR0tB,EAAiBvF,SAASjsD,EAAQ8jC,OAElC9jC,EAAQqC,OACRmvD,EAAiBzF,SAAS/rD,EAAQqC,SAEjC,GAAYkgB,QAAQviB,EAAQgY,SAAWnX,KAAK4uD,OAAOE,YAAY7E,oBAAsBjqD,KAAK4uD,OAAOE,YAAY7E,mBAAmBxnD,OAAS,IAC1IkuD,EAAiB3G,UAAU7qD,EAAQgY,OAAQnX,KAAK4uD,OAAOE,YAAY7E,oBAEnE9qD,EAAQs5D,sBACR9H,EAAiB1D,wBAAwB9tD,EAAQs5D,sBAEhDt5D,EAAQu5D,cAEb/H,EAAiBpI,kBACXppD,EAAQorC,uBAAyBx2B,EAAqBm1B,IAAa,CAAC,EAAa,GAEhF,CAAC,EADY,IAAI,GAAkBlpC,KAAKmtC,aACR6jB,YAAY7xD,KALjB,CAAC,EAAa,GAMpD,KAAK,EACD04D,EAAa1tC,EAAG7iB,OAChBqpD,EAAiBpD,YAAYsK,EAAW3G,cACxC/mC,EAAG5b,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,EAAcoiD,EAAiBnC,6BAS/DwH,wBAAwB13D,UAAUi5D,2BAA6B,SAAUp4D,GACrE,IAAIwxD,EAAmB,IAAI,GAmB3B,OAlBIxxD,EAAQw5D,uBACRhI,EAAiB1H,yBAAyB9pD,EAAQw5D,uBAElDx5D,EAAQqX,eACRm6C,EAAiBvG,iBAAiBjrD,EAAQqX,eAE1CrX,EAAQiqD,aACRuH,EAAiBxH,eAAehqD,EAAQiqD,aAExCjqD,EAAQqC,OACRmvD,EAAiBzF,SAAS/rD,EAAQqC,OAElCrC,EAAQmvD,YACRqC,EAAiBtC,cAAclvD,EAAQmvD,YAEvCnvD,EAAQs5D,sBACR9H,EAAiB1D,wBAAwB9tD,EAAQs5D,sBAE9C9H,EAAiBnC,qBAM5BwH,wBAAwB13D,UAAUi6D,kBAAoB,SAAUj3B,GAC5D,IAAIxe,EACJ,OAAyC,QAAhCA,EAAKwe,EAAQX,qBAAkC,IAAP7d,OAAgB,EAASA,EAAGq2B,MAAQ,MAEzF6c,wBAAwB13D,UAAUk6D,iBAAmB,SAAUl3B,GAC3D,IAAIxe,EACJ,OAAyC,QAAhCA,EAAKwe,EAAQX,qBAAkC,IAAP7d,OAAgB,EAASA,EAAG81C,aAAe,MAEzF5C,wBAldiC,CAmd1C,ICteF,SAAS6C,uBAAuBlZ,GAC5B,OAAQA,EAASphD,eAAe,2BAC5BohD,EAASphD,eAAe,mBACxBohD,EAASphD,eAAe,WACxBohD,EAASphD,eAAe,YCJhC,IACIu6D,GADuC,CAAE,4CAA6C,CAAE,eAAkB,6DAA8D,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,+DAAgE,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,oDAAqD,iCAAmC,EAAO,kBAAqB,4CAA6C,uBAA0B,iEAAkE,8BAAiC,kEAAmE,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,8DAA+D,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,oDAAqD,oBAAuB,KAAM,oBAAuB,sBAAuB,sBAAyB,oBAAqB,aAAgB,sBAAuB,SAAY,2BAA6B,yCAA0C,CAAE,eAAkB,0DAA2D,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,4DAA6D,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,2DAA4D,iCAAmC,EAAO,kBAAqB,wDAAyD,uBAA0B,8DAA+D,8BAAiC,+DAAgE,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,2DAA4D,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,iDAAkD,oBAAuB,KAAM,oBAAuB,6BAA8B,sBAAyB,yBAA0B,aAAgB,kCAAmC,SAAY,gCAAkC,2CAA4C,CAAE,eAAkB,4DAA6D,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,8DAA+D,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,mDAAoD,iCAAmC,EAAO,kBAAqB,4CAA6C,uBAA0B,gEAAiE,8BAAiC,iEAAkE,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,6DAA8D,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,mDAAoD,oBAAuB,KAAM,oBAAuB,qBAAsB,sBAAyB,oBAAqB,aAAgB,sBAAuB,SAAY,mCAAqC,+CAAgD,CAAE,eAAkB,gEAAiE,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,kEAAmE,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,8EAA+E,iCAAmC,EAAO,kBAAqB,4CAA6C,uBAA0B,oEAAqE,8BAAiC,qEAAsE,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,iEAAkE,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,uDAAwD,oBAAuB,KAAM,oBAAuB,sBAAuB,sBAAyB,oBAAqB,aAAgB,sBAAuB,SAAY,2BAA6B,4CAA6C,CAAE,eAAkB,6DAA8D,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,+DAAgE,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,qFAAsF,iCAAmC,EAAO,kBAAqB,wDAAyD,uBAA0B,iEAAkE,8BAAiC,kEAAmE,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,8DAA+D,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,oDAAqD,oBAAuB,KAAM,oBAAuB,6BAA8B,sBAAyB,yBAA0B,aAAgB,kCAAmC,SAAY,gCAAkC,8CAA+C,CAAE,eAAkB,+DAAgE,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,iEAAkE,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,6EAA8E,iCAAmC,EAAO,kBAAqB,4CAA6C,uBAA0B,mEAAoE,8BAAiC,oEAAqE,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,gEAAiE,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,sDAAuD,oBAAuB,KAAM,oBAAuB,qBAAsB,sBAAyB,oBAAqB,aAAgB,sBAAuB,SAAY,mCAAqC,mDAAoD,CAAE,eAAkB,oEAAqE,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,sEAAuE,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,oDAAqD,iCAAmC,EAAO,kBAAqB,4CAA6C,uBAA0B,wEAAyE,8BAAiC,yEAA0E,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,qEAAsE,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,2DAA4D,oBAAuB,KAAM,oBAAuB,sBAAuB,sBAAyB,oBAAqB,aAAgB,sBAAuB,SAAY,2BAA6B,gDAAiD,CAAE,eAAkB,iEAAkE,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,mEAAoE,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,2DAA4D,iCAAmC,EAAO,kBAAqB,wDAAyD,uBAA0B,qEAAsE,8BAAiC,sEAAuE,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,kEAAmE,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,wDAAyD,oBAAuB,KAAM,oBAAuB,6BAA8B,sBAAyB,yBAA0B,aAAgB,kCAAmC,SAAY,gCAAkC,kDAAmD,CAAE,eAAkB,mEAAoE,sCAAyC,CAAC,qBAAsB,kBAAmB,uBAAwB,SAAY,qEAAsE,yBAA4B,CAAC,QAAS,WAAY,aAAc,wBAA2B,CAAC,YAAa,sCAAyC,CAAC,SAAU,yBAA4B,CAAC,OAAQ,WAAY,gBAAiB,kBAAmB,iBAAoB,CAAC,SAAU,UAAW,QAAS,kBAAmB,OAAU,mDAAoD,iCAAmC,EAAO,kBAAqB,4CAA6C,uBAA0B,uEAAwE,8BAAiC,wEAAyE,uBAAyB,EAAM,+BAAiC,EAAM,qBAAwB,oEAAqE,iBAAoB,CAAC,MAAO,MAAO,sBAAuB,2BAA4B,wBAAyB,eAAgB,MAAO,MAAO,MAAO,YAAa,MAAO,QAAS,qBAAsB,OAAQ,MAAO,MAAO,UAAW,SAAU,SAAU,kBAAqB,0DAA2D,oBAAuB,KAAM,oBAAuB,qBAAsB,sBAAyB,oBAAqB,aAAgB,sBAAuB,SAAY,oCAE/heC,GAFmme,CAAE,4CAA6C,CAAE,0BAA6B,iFAAkF,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,mCAAsC,yCAA0C,CAAE,0BAA6B,8EAA+E,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,mCAAsC,2CAA4C,CAAE,0BAA6B,gFAAiF,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,mCAAsC,+CAAgD,CAAE,0BAA6B,oFAAqF,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,mCAAsC,4CAA6C,CAAE,0BAA6B,iFAAkF,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,mCAAsC,8CAA+C,CAAE,0BAA6B,mFAAoF,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,mCAAsC,mDAAoD,CAAE,0BAA6B,wFAAyF,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,mCAAsC,gDAAiD,CAAE,0BAA6B,qFAAsF,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,mCAAsC,kDAAmD,CAAE,0BAA6B,uFAAwF,cAAe,MAAO,SAAY,CAAC,CAAE,kBAAqB,4BAA6B,gBAAmB,oBAAqB,QAAW,CAAC,4BAA6B,oBAAqB,sBAAuB,oBAAsB,CAAE,kBAAqB,mCAAoC,gBAAmB,mCAAoC,QAAW,CAAC,mCAAoC,2BAA6B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,6BAA+B,CAAE,kBAAqB,2BAA4B,gBAAmB,2BAA4B,QAAW,CAAC,2BAA4B,4BAA8B,CAAE,kBAAqB,+BAAgC,gBAAmB,+BAAgC,QAAW,CAAC,oCCI/zwB,ICAIC,GDAA,GAAiC,WACjC,SAASC,gBAAgBzJ,EAAkB1gC,EAAmBtY,GAC1DxW,KAAKwvD,iBAAmBA,EACxBxvD,KAAK8uB,kBAAoBA,EACzB9uB,KAAKwW,cAAgBA,EAuHzB,OAhHAyiD,gBAAgB36D,UAAU46D,aAAe,SAAUC,EAAmBC,GAClE,IAAIt2C,EAAIqH,EAAI+W,EAAIC,EAChB,OAAO,eAAUnhC,UAAM,OAAQ,GAAQ,WACnC,IAAIq5D,EAAwBp3D,EAASq3D,EAA0BC,EAAoBC,EACnF,OAAO,iBAAYx5D,MAAM,SAAUohC,GAC/B,OAAQA,EAAG7yB,OACP,KAAK,EAGD,GAFkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBusD,4BAA6Bz5D,KAAKwW,eAC9I6iD,EAAyBF,EACK,MAAO,CAAC,EAAa,GACnDl3D,EAAUg3D,gBAAgBS,aAC1Bt4B,EAAG7yB,MAAQ,EACf,KAAK,EAGD,OAFA6yB,EAAG5yB,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACY,QAAjCspB,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkBysD,iCAAkC35D,KAAKwW,eACxI,CAAC,EAAaxW,KAAK45D,kBAAkB9pD,EAAUgC,aAAc7P,IACxE,KAAK,EAMD,OALAq3D,EAA2Bl4B,EAAG95B,QACD4uB,SAAWthB,EAAcilD,cAClDR,EAAyBC,EAAyBnrD,KAClDirD,EAAwBU,cAAgBjlD,EAAuBklD,MAE7DT,EAAyBpjC,SAAWthB,EAAcolD,eAAwB,CAAC,EAAa,IAC5D,QAAjC94B,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkB+sD,iCAAkCj6D,KAAKwW,eACxI,CAAC,EAAaxW,KAAKk6D,kBAAkBj4D,KAChD,KAAK,EAED,OADAs3D,EAAqBn4B,EAAG95B,SAKU,QAAjC65B,EAAKnhC,KAAK8uB,yBAAsC,IAAPqS,GAAyBA,EAAGnI,gBAAgB9rB,EAAkBysD,iCAAkC35D,KAAKwW,eACxI,CAAC,EAAaxW,KAAK45D,kBAAkBL,EAAoBt3D,MAJ5Dm3D,EAAwBU,cAAgBjlD,EAAuBslD,sBACxD,CAAC,EAAc,OAI9B,KAAK,GACDX,EAA6Bp4B,EAAG95B,QACD4uB,SAAWthB,EAAcilD,cACpDR,EAAyBG,EAA2BrrD,KACpDirD,EAAwBU,cAAgBjlD,EAAuBklD,MAEnE34B,EAAG7yB,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,EAAa,GAC7B,KAAK,EAGD,OAFA6yB,EAAG95B,OACH8xD,EAAwBU,cAAgBjlD,EAAuBslD,sBACxD,CAAC,EAAc,MAC1B,KAAK,EAAG,MAAO,CAAC,EAAa,GAC7B,KAAK,EACDf,EAAwBU,cAAgBjlD,EAAuBulD,qBAC/Dh5B,EAAG7yB,MAAQ,EACf,KAAK,EAKD,OAHK8qD,IACDD,EAAwBU,cAAgBjlD,EAAuBslD,uBAE5D,CAAC,EAAcd,GAA0B,cAWpEJ,gBAAgB36D,UAAUs7D,kBAAoB,SAAUxuC,EAASnpB,GAC7D,IAAI6gB,EACJ,OAAO,eAAU9iB,UAAM,OAAQ,GAAQ,WACnC,OAAO,iBAAYA,MAAM,SAAUmqB,GAE/B,OADkC,QAAjCrH,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBysD,iCAAkC35D,KAAKwW,eAC5I,CAAC,EAAcxW,KAAKwvD,iBAAiB7Q,oBAAoB7uC,EAAU+B,cAAgB,gBAAkBuZ,EAAU,eAAgBnpB,EAAS6N,EAAUiC,sBASrKknD,gBAAgB36D,UAAU47D,kBAAoB,SAAUj4D,GACpD,IAAI6gB,EACJ,OAAO,eAAU9iB,UAAM,OAAQ,GAAQ,WACnC,IAAI2/C,EACJ,OAAO,iBAAY3/C,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EACiC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkB+sD,iCAAkCj6D,KAAKwW,eACnJ2T,EAAG5b,MAAQ,EACf,KAAK,EAED,OADA4b,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAKwvD,iBAAiB7Q,oBAAoB7uC,EAAU+B,cAAgB,eAAgB5P,IAC7G,KAAK,EAGD,OAFA09C,EAAWx1B,EAAG7iB,QAED4uB,SAAWthB,EAAcolD,gBAAkBra,EAASxxC,MAAQwxC,EAASxxC,KAAK,oBAAsBwxC,EAASxxC,KAAK,mBAAmB1L,OAAS,EAC5I,CAAC,EAAck9C,EAASxxC,KAAK,mBAAmB,IAEpD,CAAC,EAAc,MAC1B,KAAK,EAED,OADAgc,EAAG7iB,OACI,CAAC,EAAc,MAC1B,KAAK,EAAG,MAAO,CAAC,WAMhC2xD,gBAAgBS,aAAe,CAC3B5Z,QAAS,CACLua,SAAU,SAGXpB,gBA3HyB,GEiBhC,GAA2B,WAC3B,SAASqB,UAAUlmC,EAAWo7B,EAAkB5J,EAAc2U,EAAkBtwC,EAAQ6E,EAAmBtY,GACvGxW,KAAK21D,mBAAqBvhC,EAC1Bp0B,KAAKw6D,oBAAoB7oB,gBACzB3xC,KAAKwvD,iBAAmBA,EACxBxvD,KAAK4lD,aAAeA,EACpB5lD,KAAKu6D,iBAAmBA,EACxBv6D,KAAKo5D,wBAA0B,CAAEqB,iBAAat1D,EAAW20D,mBAAe30D,EAAWu1D,oBAAgBv1D,GACnGnF,KAAKiqB,OAASA,EACdjqB,KAAK8uB,kBAAoBA,EACzB9uB,KAAKwW,cAAgBA,EACrBxW,KAAK26D,gBAAkB,IAAI,GAAgBnL,EAAkBxvD,KAAK8uB,kBAAmB9uB,KAAKwW,eAiwB9F,OA1vBA8jD,UAAUh8D,UAAUs8D,iBAAmB,SAAUC,GAE7C,GAAIA,EAAa/oB,gBAAgBxvB,SAASxS,EAAUU,eAChD,OAAO2hB,GAAc2oC,KAEzB,IAAI9nB,EAAe6nB,EAAa9oB,aAChC,GAAIiB,EAAavwC,OACb,OAAQuwC,EAAa,GAAGvvC,eACpB,KAAKqM,EAAUO,KACX,OAAO8hB,GAAc8P,KACzB,KAAKnyB,EAAUQ,KACX,OAAO6hB,GAAcoQ,KAGjC,OAAOpQ,GAAc4oC,SAEzB79D,OAAOC,eAAem9D,UAAUh8D,UAAW,gBAAiB,CAExDjB,IAAK,WACD,OAAO2C,KAAK46D,iBAAiB56D,KAAKg7D,kCAEtC59D,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,eAAgB,CAIvDjB,IAAK,WACD,OAAO2C,KAAKu6D,iBAAiBlF,cAEjCj4D,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,UAAW,CAIlDjB,IAAK,WACD,OAAO2C,KAAKu6D,kBAEhBn9D,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,qBAAsB,CAI7DjB,IAAK,WACD,OAAO2C,KAAKw6D,oBAAoBh/B,WAKpClO,IAAK,SAAUgkB,GACXtxC,KAAKw6D,oBAAsB,IAAI,GAAUlpB,GACzCtxC,KAAKw6D,oBAAoB7oB,gBACzB3xC,KAAKi7D,iCAAmC,MAE5C79D,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,kCAAmC,CAI1EjB,IAAK,WAID,OAHK2C,KAAKi7D,mCACNj7D,KAAKi7D,iCAAmCj7D,KAAKw6D,oBAAoB3oB,oBAE9D7xC,KAAKi7D,kCAEhB79D,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,kBAAmB,CAI1DjB,IAAK,WACD,OAAO2C,KAAKg7D,gCAAgClpB,gBAAgBruC,eAEhErG,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,SAAU,CAIjDjB,IAAK,WACD,OAAO2C,KAAKg7D,gCAAgCjpB,aAAa,IAE7D30C,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,wBAAyB,CAIhEjB,IAAK,WACD,GAAI2C,KAAKywD,oBACL,OAAOzwD,KAAKk7D,YAAYl7D,KAAK6uC,SAASM,wBAGtC,MAAM,GAAgB/wB,uCAAuC,0BAGrEhhB,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,gBAAiB,CAIxDjB,IAAK,WACD,GAAI2C,KAAKywD,oBACL,OAAOzwD,KAAKk7D,YAAYl7D,KAAK6uC,SAASO,gBAGtC,MAAM,GAAgBhxB,uCAAuC,0BAGrEhhB,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,qBAAsB,CAC7DjB,IAAK,WACD,GAAI2C,KAAKywD,oBACL,OAAOzwD,KAAKk7D,YAAYl7D,KAAK6uC,SAASO,eAAenzB,QAAQ,SAAU,gBAGvE,MAAM,GAAgBmC,uCAAuC,0BAGrEhhB,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,qBAAsB,CAI7DjB,IAAK,WACD,GAAI2C,KAAKywD,oBAAqB,CAE1B,IAAKzwD,KAAK6uC,SAASQ,qBACf,MAAM,GAAgBluB,gCAE1B,OAAOnhB,KAAKk7D,YAAYl7D,KAAK6uC,SAASQ,sBAGtC,MAAM,GAAgBjxB,uCAAuC,0BAGrEhhB,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,wBAAyB,CAIhEjB,IAAK,WACD,GAAI2C,KAAKywD,oBACL,OAAOzwD,KAAKk7D,YAAYl7D,KAAK6uC,SAASS,QAGtC,MAAM,GAAgBlxB,uCAAuC,0BAGrEhhB,YAAY,EACZyH,cAAc,IAElB3H,OAAOC,eAAem9D,UAAUh8D,UAAW,UAAW,CAIlDjB,IAAK,WACD,GAAI2C,KAAKywD,oBACL,OAAOzwD,KAAKk7D,YAAYl7D,KAAK6uC,SAASW,UAGtC,MAAM,GAAgBpxB,uCAAuC,0BAGrEhhB,YAAY,EACZyH,cAAc,IAOlBy1D,UAAUh8D,UAAU68D,iBAAmB,SAAUN,GAC7C,OAA4C,IAArCA,EAAa9oB,aAAatvC,SACzB63D,UAAUc,sBAAsB5tC,IAAIqtC,EAAa9oB,aAAa,KAC/D/xC,KAAK46D,iBAAiBC,KAAkB1oC,GAAc4oC,SACtD/6D,KAAKq1D,eAAiBxkB,GAAawqB,KAM9Cf,UAAUh8D,UAAUg9D,cAAgB,SAAU9/B,GAC1C,OAAOA,EAAUvf,QAAQ,uBAAwBjc,KAAKu/C,SAM1D+a,UAAUh8D,UAAU48D,YAAc,SAAU1/B,GACxC,IAAIplB,EAAQpW,KACRue,EAAWid,EAEX+/B,EADqB,IAAI,GAAUv7D,KAAK6uC,SAASa,qBACCmC,mBAClD2pB,EAAuBD,EAA6BxpB,aAoBxD,OAnB4B/xC,KAAKg7D,gCAAgCjpB,aAC3CnwC,SAAQ,SAAU65D,EAAa7lB,GACjD,IAAI8lB,EAAaF,EAAqB5lB,GACtC,GAAc,IAAVA,GAAex/B,EAAM+kD,iBAAiBI,GAA+B,CACrE,IAAIzgC,EAAW,IAAK,GAAU1kB,EAAMy4B,SAASM,wBAAyB0C,mBAAmBE,aAAa,GAMlG2pB,IAAe5gC,IACf1kB,EAAM6T,OAAOI,QAAQ,gCAAkCqxC,EAAa,YAAc5gC,GAClF4gC,EAAa5gC,GAGjB2gC,IAAgBC,IAChBn9C,EAAWA,EAAStC,QAAQ,IAAMy/C,EAAa,IAAK,IAAMD,EAAc,SAGzEz7D,KAAKs7D,cAAc/8C,IAE9BrhB,OAAOC,eAAem9D,UAAUh8D,UAAW,qCAAsC,CAI7EjB,IAAK,WACD,OAAI2C,KAAKkgC,gBAAkB/N,GAAc8P,MACrCjiC,KAAKkgC,gBAAkB/N,GAAcoQ,MACrCviC,KAAKq1D,eAAiBxkB,GAAa8qB,KAC5B37D,KAAK21D,mBAAqB,mCAE9B31D,KAAK21D,mBAAqB,yCAErCv4D,YAAY,EACZyH,cAAc,IAKlBy1D,UAAUh8D,UAAUmyD,kBAAoB,WACpC,QAASzwD,KAAK6uC,UAMlByrB,UAAUh8D,UAAUs9D,sBAAwB,WACxC,IAAI94C,EAAIqH,EAAI+W,EACZ,OAAO,eAAUlhC,UAAM,OAAQ,GAAQ,WACnC,IAAI67D,EAAgBC,EAAsBC,EAAgBz1B,EAC1D,OAAO,iBAAYtmC,MAAM,SAAUmhC,GAC/B,OAAQA,EAAG5yB,OACP,KAAK,EAQD,OAPkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkB8uD,+BAAgCh8D,KAAKwW,gBACjJqlD,EAAiB77D,KAAK4lD,aAAa1d,4BAA4BloC,KAAKi8D,oBAEhEJ,EAAiB,IAAI,IACNpsB,yBAAyBzvC,KAAK21D,oBAEf,QAAjCxrC,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkBgvD,sCAAuCl8D,KAAKwW,eAC7I,CAAC,EAAaxW,KAAK4uC,6BAA6BitB,IAC3D,KAAK,EAID,OAHAC,EAAuB36B,EAAG75B,OAC1BtH,KAAK21D,mBAAqB31D,KAAK21D,mBAAmB15C,QAAQjc,KAAKi8D,gBAAiBJ,EAAe7sB,mBAC7D,QAAjC9N,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkBivD,gCAAiCn8D,KAAKwW,eACvI,CAAC,EAAaxW,KAAKkvC,uBAAuB2sB,IACrD,KAAK,EAUD,OATAE,EAAiB56B,EAAG75B,OAChBw0D,IAAyBnoD,EAAwByoD,OAASL,IAAmBpoD,EAAwByoD,QAErGP,EAAelsB,iBACfksB,EAAepsB,yBAAyBzvC,KAAK21D,qBAEjDrvB,EAAWtmC,KAAK4lD,aAAana,kCAAkCowB,EAAe9sB,iBAC9E/uC,KAAK4lD,aAAa5Z,qBAAqB1F,EAAUu1B,GACjD77D,KAAK6uC,SAAWgtB,EACT,CAAC,WAS5BvB,UAAUh8D,UAAU4wC,uBAAyB,SAAU2sB,GACnD,IAAI/4C,EAAIqH,EAAI+W,EAAIC,EAAIC,EAAIC,EACxB,OAAO,eAAUrhC,UAAM,OAAQ,GAAQ,WACnC,IAAI6uC,EAAUwtB,EACd,OAAO,iBAAYr8D,MAAM,SAAU22D,GAC/B,OAAQA,EAAGpoD,OACP,KAAK,EAGD,OAFkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBivD,gCAAiCn8D,KAAKwW,gBAClJq4B,EAAW7uC,KAAKs8D,kCAEZT,EAAe3sB,uBAAuBL,GAAU,GACzC,CAAC,EAAcl7B,EAAwB4oD,SAE9Cv8D,KAAKw8D,oBAAoBX,IAAmBA,EAAetsB,uBAAyBssB,EAAejsB,YAE5F,CAAC,EAAcj8B,EAAwByoD,QAEhB,QAAjCjyC,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkBuvD,wCAAyCz8D,KAAKwW,eAC/I,CAAC,EAAaxW,KAAK08D,mCAC9B,KAAK,EAED,OADA7tB,EAAW8nB,EAAGrvD,SAEkD,QAAzD45B,EAAKlhC,KAAKu6D,iBAAiBoC,gCAA6C,IAAPz7B,OAAgB,EAASA,EAAG07B,cAClE,QAAjCz7B,EAAKnhC,KAAK8uB,yBAAsC,IAAPqS,GAAyBA,EAAGnI,gBAAgB9rB,EAAkB2vD,+CAAgD78D,KAAKwW,eACtJ,CAAC,EAAaxW,KAAK88D,sCAAsCjuB,KAFyD,CAAC,EAAa,GADjH,CAAC,EAAa,GAIxC,KAAK,EACDA,EAAW8nB,EAAGrvD,OACdqvD,EAAGpoD,MAAQ,EACf,KAAK,EAED,OADAstD,EAAe3sB,uBAAuBL,GAAU,GACzC,CAAC,EAAcl7B,EAAwBopD,SAClD,KAAK,EAED,QADAV,EAAmBr8D,KAAKg9D,2CACGh9D,KAAKu6D,iBAAiBvK,2BAAoC,CAAC,EAAa,IACnC,QAAzD5uB,EAAKphC,KAAKu6D,iBAAiBoC,gCAA6C,IAAPv7B,OAAgB,EAASA,EAAGw7B,cAClE,QAAjCv7B,EAAKrhC,KAAK8uB,yBAAsC,IAAPuS,GAAyBA,EAAGrI,gBAAgB9rB,EAAkB2vD,+CAAgD78D,KAAKwW,eACtJ,CAAC,EAAaxW,KAAK88D,sCAAsCT,KAFyD,CAAC,EAAa,GAG3I,KAAK,EACDA,EAAmB1F,EAAGrvD,OACtBqvD,EAAGpoD,MAAQ,EACf,KAAK,EAED,OADAstD,EAAe3sB,uBAAuBmtB,GAAkB,GACjD,CAAC,EAAc1oD,EAAwBspD,kBAClD,KAAK,EAAG,MAAM,GAAgBz+C,mCAAmCxe,KAAKk9D,4CAWtF5C,UAAUh8D,UAAUk+D,oBAAsB,SAAUX,GAGhD,OAFyB,IAAI,GAAUA,EAAensB,qBACjBmC,mBAAmBE,aACrCtvC,SAAWzC,KAAKg7D,gCAAgCjpB,aAAatvC,QAKpF63D,UAAUh8D,UAAUg+D,8BAAgC,WAChD,GAAIt8D,KAAKu6D,iBAAiB4C,kBACtB,IACI,OAAOlkD,KAAKkJ,MAAMniB,KAAKu6D,iBAAiB4C,mBAE5C,MAAO18D,GACH,MAAM,GAAyB87B,sCAGvC,OAAO,MAOX+9B,UAAUh8D,UAAUo+D,+BAAiC,WACjD,IAAI55C,EACJ,OAAO,eAAU9iB,UAAM,OAAQ,GAAQ,WACnC,IAAIiC,EAAS09C,EACb,OAAO,iBAAY3/C,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EACiC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBuvD,wCAAyCz8D,KAAKwW,eAC1JvU,EAAU,GACVkoB,EAAG5b,MAAQ,EACf,KAAK,EAED,OADA4b,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAKwvD,iBAClB7Q,oBAAoB3+C,KAAKk9D,mCAAoCj7D,IACzE,KAAK,EAED,MAAO,CAAC,EAAc42D,wBADtBlZ,EAAWx1B,EAAG7iB,QACwC6G,MAAQwxC,EAASxxC,KAAO,MAClF,KAAK,EAED,OADAgc,EAAG7iB,OACI,CAAC,EAAc,MAC1B,KAAK,EAAG,MAAO,CAAC,WAQhCgzD,UAAUh8D,UAAU0+D,uCAAyC,WACzD,OAAIh9D,KAAK21D,sBAAsBmD,GACpBA,GAAiB94D,KAAK21D,oBAE1B,MAMX2E,UAAUh8D,UAAUw+D,sCAAwC,SAAUjuB,GAClE,IAAI/rB,EAAIqH,EAAI+W,EAAIC,EAChB,OAAO,eAAUnhC,UAAM,OAAQ,GAAQ,WACnC,IAAIo9D,EAA2B/D,EAC/B,OAAO,iBAAYr5D,MAAM,SAAUohC,GAC/B,OAAQA,EAAG7yB,OACP,KAAK,EAGD,OAFkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkB2vD,+CAAgD78D,KAAKwW,gBACjK4mD,EAAsF,QAAzDjzC,EAAKnqB,KAAKu6D,iBAAiBoC,gCAA6C,IAAPxyC,OAAgB,EAASA,EAAGyyC,aAEtHQ,IAA8BttD,EAAUkC,iCACxChS,KAAKo5D,wBAAwBsB,eAAiB5lD,EAAwBuoD,6BACtEr9D,KAAKo5D,wBAAwBqB,YAAc2C,EACpC,CAAC,EAAc9C,UAAUgD,+BAA+BzuB,EAAUuuB,MAE3C,QAAjCl8B,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkBusD,4BAA6Bz5D,KAAKwW,eACnI,CAAC,EAAaxW,KAAK26D,gBAAgBzB,aAAuE,QAAzD/3B,EAAKnhC,KAAKu6D,iBAAiBoC,gCAA6C,IAAPx7B,OAAgB,EAASA,EAAGg4B,kBAAmBn5D,KAAKo5D,2BAPtI,CAAC,EAAa,GAQzD,KAAK,EAED,GADAC,EAAyBj4B,EAAG95B,OAIxB,OAFAtH,KAAKo5D,wBAAwBsB,eAAiB5lD,EAAwByoD,oCACtEv9D,KAAKo5D,wBAAwBqB,YAAcpB,EACpC,CAAC,EAAciB,UAAUgD,+BAA+BzuB,EAAUwqB,IAE7Er5D,KAAKo5D,wBAAwBsB,eAAiB5lD,EAAwB0oD,gCACtEp8B,EAAG7yB,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,EAAcsgC,WAW9CyrB,UAAUh8D,UAAUswC,6BAA+B,SAAUitB,GACzD,IAAI/4C,EAAIqH,EACR,OAAO,eAAUnqB,UAAM,OAAQ,GAAQ,WACnC,IAAI6uC,EAAU4uB,EAAuBpB,EACrC,OAAO,iBAAYr8D,MAAM,SAAUkhC,GAC/B,OAAQA,EAAG3yB,OACP,KAAK,EAQD,OAPkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBgvD,sCAAuCl8D,KAAKwW,eAExJxW,KAAKiqB,OAAOI,QAAQ,4DACpBrqB,KAAKiqB,OAAO4J,WAAW,uBAAyB7zB,KAAKu6D,iBAAiBmD,kBAAoB5tD,EAAU6B,iBACpG3R,KAAKiqB,OAAO4J,WAAW,wBAA0B7zB,KAAKu6D,iBAAiB4C,mBAAqBrtD,EAAU6B,iBACtG3R,KAAKiqB,OAAO4J,WAAW,yBAA2BgoC,EAAensB,qBAAuB5/B,EAAU6B,kBAClGk9B,EAAW7uC,KAAK29D,wCAEZ39D,KAAKiqB,OAAOI,QAAQ,iDACpBwxC,EAAejtB,6BAA6BC,GAAU,GAC/C,CAAC,EAAcl7B,EAAwB4oD,UAGlDv8D,KAAKiqB,OAAOI,QAAQ,qHACpBozC,EAAwB5B,EAAejsB,YACnC5vC,KAAKw8D,oBAAoBX,IAAmBA,EAAe5sB,qBAAuBwuB,GAClFz9D,KAAKiqB,OAAOI,QAAQ,gCAEb,CAAC,EAAc1W,EAAwByoD,SAEzCqB,GACLz9D,KAAKiqB,OAAOI,QAAQ,mCAExBrqB,KAAKiqB,OAAOI,QAAQ,sHACc,QAAjCF,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkB0wD,8CAA+C59D,KAAKwW,eACrJ,CAAC,EAAaxW,KAAK69D,0CAC9B,KAAK,EAED,GADAhvB,EAAW3N,EAAG55B,OAIV,OAFAtH,KAAKiqB,OAAOI,QAAQ,kGACpBwxC,EAAejtB,6BAA6BC,GAAU,GAC/C,CAAC,EAAcl7B,EAAwBopD,SAIlD,GAFA/8D,KAAKiqB,OAAOI,QAAQ,gIACpBgyC,EAAmBr8D,KAAK89D,iDACC99D,KAAKiC,QAAQ+tD,2BAGlC,OAFAhwD,KAAKiqB,OAAOI,QAAQ,yDACpBwxC,EAAejtB,6BAA6BytB,GAAkB,GACvD,CAAC,EAAc1oD,EAAwBspD,kBAIlD,MADAj9D,KAAKiqB,OAAOphB,MAAM,sLACZ,GAAyB2zB,wCAQnD89B,UAAUh8D,UAAUq/D,oCAAsC,WAEtD,GAAI39D,KAAKkgC,gBAAkB/N,GAAc2oC,KAErC,OADA96D,KAAKiqB,OAAOI,QAAQ,uGACbiwC,UAAUyD,qCAAqC/9D,KAAKi8D,iBAG/D,GAAIj8D,KAAKu6D,iBAAiByD,uBAAwB,CAC9Ch+D,KAAKiqB,OAAOI,QAAQ,wFACpB,IACIrqB,KAAKiqB,OAAOI,QAAQ,qDACpB,IAAI4zC,EAAiBhlD,KAAKkJ,MAAMniB,KAAKu6D,iBAAiByD,wBAClDnvB,EAAWyrB,UAAU4D,6CAA6CD,EAAepvB,SAAU7uC,KAAKi8D,iBAEpG,GADAj8D,KAAKiqB,OAAOI,QAAQ,wCAChBwkB,EAEA,OADA7uC,KAAKiqB,OAAOI,QAAQ,iFACbwkB,EAGP7uC,KAAKiqB,OAAOI,QAAQ,yEAG5B,MAAO5pB,GAEH,MADAT,KAAKiqB,OAAOI,QAAQ,kGACd,GAAyBiS,4CAIvC,OAAIt8B,KAAKm+D,wBACLn+D,KAAKiqB,OAAOI,QAAQ,kGACbiwC,UAAUyD,qCAAqC/9D,KAAKi8D,kBAExD,MAOX3B,UAAUh8D,UAAUu/D,qCAAuC,WACvD,IAAI/6C,EACJ,OAAO,eAAU9iB,UAAM,OAAQ,GAAQ,WACnC,IAAIo+D,EAA2Bn8D,EAAS2wC,EAAO+M,EAAU0e,EAAmBxvB,EAAUyvB,EAASC,EAC/F,OAAO,iBAAYv+D,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EACiC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkB0wD,8CAA+C59D,KAAKwW,eAChK4nD,EAA4B,GAAKtuD,EAAUS,6BAA+BvQ,KAAK21D,mBAAqB,wBACpG1zD,EAAU,GACV2wC,EAAQ,KACRzoB,EAAG5b,MAAQ,EACf,KAAK,EAED,OADA4b,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAKwvD,iBAAiB7Q,oBAAoByf,EAA2Bn8D,IAC9F,KAAK,EAID,GAHA09C,EAAWx1B,EAAG7iB,OACd+2D,OAAoB,EACpBxvB,OAAW,EC7lBnC,SAAS2vB,iCAAiC7e,GACtC,OAAQA,EAASphD,eAAe,8BAC5BohD,EAASphD,eAAe,YD4lBJigE,CAAiC7e,EAASxxC,MAC1CkwD,EAAoB1e,EAASxxC,KAC7B0gC,EAAWwvB,EAAkBxvB,SAC7B7uC,KAAKiqB,OAAO4J,WAAW,iCAAmCwqC,EAAkBI,+BAE3E,KEnmB7B,SAASC,sCAAsC/e,GAC3C,OAAQA,EAASphD,eAAe,UAC5BohD,EAASphD,eAAe,qBFimBCmgE,CAAsC/e,EAASxxC,MAcpD,OADAnO,KAAKiqB,OAAOphB,MAAM,8FACX,CAAC,EAAc,MAXtB,GAFA7I,KAAKiqB,OAAOuJ,QAAQ,sHAAwHmsB,EAASzpB,SACrJmoC,EAAoB1e,EAASxxC,MACPtF,QAAUiH,EAAUyC,iBAEtC,OADAvS,KAAKiqB,OAAOphB,MAAM,sEACX,CAAC,EAAc,MAE1B7I,KAAKiqB,OAAOuJ,QAAQ,oDAAsD6qC,EAAkBx1D,OAC5F7I,KAAKiqB,OAAOuJ,QAAQ,gEAAkE6qC,EAAkBlqB,mBACxGn0C,KAAKiqB,OAAOuJ,QAAQ,6FACpBqb,EAAW,GAQf,OAFA7uC,KAAKiqB,OAAOI,QAAQ,0IACpBuoB,EAAQ0nB,UAAU4D,6CAA6CrvB,EAAU7uC,KAAKi8D,iBACvE,CAAC,EAAa,GACzB,KAAK,EASD,OARAqC,EAAUn0C,EAAG7iB,kBACU,GACnBtH,KAAKiqB,OAAOphB,MAAM,oGAAsGy1D,EAAQroD,UAAY,wBAA0BqoD,EAAQpoD,eAG9KqoD,EAAaD,EACbt+D,KAAKiqB,OAAOphB,MAAM,wGAA0G01D,EAAWxhE,KAAO,wBAA0BwhE,EAAW3vC,UAEhL,CAAC,EAAc,MAC1B,KAAK,EAOD,OALKgkB,IACD5yC,KAAKiqB,OAAOuJ,QAAQ,wHACpBxzB,KAAKiqB,OAAOI,QAAQ,yDACpBuoB,EAAQ0nB,UAAUyD,qCAAqC/9D,KAAKi8D,kBAEzD,CAAC,EAAcrpB,WAQ1C0nB,UAAUh8D,UAAUw/D,4CAA8C,WAC9D,OAAI99D,KAAK21D,sBAAsBoD,GACpBA,GAA0B/4D,KAAK21D,oBAEnC,MAKX2E,UAAUh8D,UAAU6/D,qBAAuB,WACvC,IAAI/nD,EAAQpW,KAIZ,OAHcA,KAAKu6D,iBAAiBmD,iBAAiB/5D,QAAO,SAAUywB,GAClE,OAAO,GAAU6e,iBAAiB7e,GAAW3wB,gBAAkB2S,EAAM6lD,mBAE1Dx5D,OAAS,GAO5B63D,UAAUqE,kBAAoB,SAAUC,EAAiB7O,GACrD,IAAI8O,EACJ,GAAI9O,GAAqBA,EAAkB1Q,qBAAuBvO,GAAmBwO,KAAM,CACvF,IAAIC,EAASwQ,EAAkBxQ,OAASwQ,EAAkBxQ,OAASzvC,EAAUM,sBAC7EyuD,EAA8B9O,EAAkB1Q,mBAAqB,IAAME,EAAS,IAExF,OAAOsf,GAA4DD,GAMvEtE,UAAUyD,qCAAuC,SAAU51B,GACvD,MAAO,CACH6G,kBAAmB7G,EACnB4G,gBAAiB5G,EACjBK,QAAS,CAACL,KAQlBmyB,UAAU4D,6CAA+C,SAAUve,EAAUvrB,GACzE,IAAK,IAAI53B,EAAI,EAAGA,EAAImjD,EAASl9C,OAAQjG,IAAK,CACtC,IAAIqyC,EAAW8Q,EAASnjD,GACxB,GAAIqyC,EAASrG,QAAQj7B,QAAQ6mB,IAAc,EACvC,OAAOya,EAGf,OAAO,MAKXyrB,UAAUh8D,UAAUkjC,kBAAoB,WACpC,GAAIxhC,KAAKywD,oBACL,OAAOzwD,KAAK6uC,SAASE,gBAGrB,MAAM,GAAgB3wB,uCAAuC,0BAOrEk8C,UAAUh8D,UAAUwgE,QAAU,SAAU32B,GACpC,OAAOnoC,KAAK6uC,SAASrG,QAAQj7B,QAAQ46B,IAAS,GAQlDmyB,UAAUyE,uBAAyB,SAAU52B,GACzC,OAAOr4B,EAAUqC,oBAAoB5E,QAAQ46B,IAAS,GAQ1DmyB,UAAU0E,6BAA+B,SAAU72B,EAAM82B,EAAQ/sB,GAE7D,IAAIgtB,EAAuB,IAAI,GAAU/2B,GACzC+2B,EAAqBvtB,gBACrB,IAAIwtB,EAAoBD,EAAqBrtB,mBACzCutB,EAAkBH,EAAS,IAAME,EAAkBrtB,gBACnD9xC,KAAK++D,uBAAuBI,EAAkBrtB,mBAC9CstB,EAAkBH,EAAS,IAAMnvD,EAAUmC,mCAG/C,IAAIq/B,EAAM,GAAUmB,gCAAgC,cAAS,cAAS,GAAIysB,EAAqBrtB,oBAAqB,CAAEC,gBAAiBstB,KAAoB5jC,UAE3J,OAAI0W,EACOZ,EAAM,IAAMY,EAChBZ,GAQXgpB,UAAUgD,+BAAiC,SAAUzuB,EAAU+tB,GAO3D,OANA/tB,EAASM,uBAAyBmrB,UAAU0E,6BAA6BnwB,EAASM,uBAAwBytB,GAE1G/tB,EAASO,eAAiBkrB,UAAU0E,6BAA6BnwB,EAASO,eAAgBwtB,EAAa9sD,EAAUoC,oCAC7G28B,EAASQ,uBACTR,EAASQ,qBAAuBirB,UAAU0E,6BAA6BnwB,EAASQ,qBAAsButB,IAEnG/tB,GAWXyrB,UAAU+E,uBAAyB,SAAUjrC,GACzC,IAAIkrC,EAAgBlrC,EAAU9R,SAASxS,EAAU8B,eAAiBwiB,EAAY,GAAKA,EAAYtkB,EAAU8B,cAErG2tD,EADe,IAAI,GAAUnrC,GACSyd,mBAES,IAA/C0tB,EAAuBxtB,aAAatvC,QAAiB88D,EAAuBztB,gBAAgBxvB,SAASxS,EAAUU,iBAE/G8uD,EAAgB,GAAKA,EADEC,EAAuBztB,gBAAgB7tC,MAAM,KAAK,GACjB6L,EAAUW,0BAEtE,OAAO6uD,GAGXhF,UAAUc,sBAAwB,IAAKlsD,IAAI,CACvC,WACA,aACAS,EAAsB4iC,OACtB5iC,EAAsB6vD,UACtB7vD,EAAsB6iC,gBAEnB8nB,UA5wBmB,GGd1B,GAAkC,WAClC,SAASmF,oBAsDT,OA1CAA,iBAAiBC,yBAA2B,SAAU7E,EAAchU,EAAejB,EAAc2U,EAAkBtwC,EAAQ6E,EAAmBtY,GAC1I,OAAO,eAAUxW,UAAM,OAAQ,GAAQ,WACnC,IAAI2/D,EAAmBC,EAAuBx4C,EAC9C,OAAO,iBAAYpnB,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACDugB,SAAsEA,EAAkByG,oBAAoBroB,EAAkB2yD,yCAA0CrpD,GACxKmpD,EAAoB,GAAUN,uBAAuBxE,GACrD+E,EAAwBH,iBAAiBK,eAAeH,EAAmB9Y,EAAejB,EAAc2U,EAAkBtwC,EAAQ6E,EAAmBtY,GACrJsM,EAAGvU,MAAQ,EACf,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBiuB,SAAsEA,EAAkBkK,gBAAgB9rB,EAAkB8uD,+BAAgCxlD,GACnJ,CAAC,EAAaopD,EAAsBhE,yBAC/C,KAAK,EAED,OADA94C,EAAGxb,OACI,CAAC,EAAcs4D,GAC1B,KAAK,EAED,MADAx4C,EAAMtE,EAAGxb,OACH,GAAgB8W,uCAAuCgJ,GACjE,KAAK,EAAG,MAAO,CAAC,WAehCq4C,iBAAiBK,eAAiB,SAAUC,EAAcvQ,EAAkB5J,EAAc2U,EAAkBtwC,EAAQ6E,EAAmBtY,GAEnI,GAAI,GAAYkL,QAAQq+C,GACpB,MAAM,GAAyBpkC,sBAEnC,OAAO,IAAI,GAAUokC,EAAcvQ,EAAkB5J,EAAc2U,EAAkBtwC,EAAQ6E,EAAmBtY,IAE7GipD,iBAvD0B,GCHjC,GAAwC,WACxC,SAASO,uBAAuBC,EAAkBra,GAC9C5lD,KAAKkgE,aAAenrD,EAAaorD,aACjCngE,KAAK4lD,aAAeA,EACpB5lD,KAAKogE,MAAQH,EAAiBG,MAC9BpgE,KAAKwW,cAAgBypD,EAAiBzpD,cACtCxW,KAAK83C,WAAamoB,EAAiBnoB,YAAchoC,EAAU4B,aAC3D1R,KAAKqgE,WAAaJ,EAAiBI,YAAcvwD,EAAU4B,aAC3D1R,KAAKsgE,kBAAoBtsD,EAAuBK,UAAYhB,EAAWonB,oBAAsBwlC,EAAiB9rC,SAiJlH,OA5IA6rC,uBAAuB1hE,UAAU0vD,kCAAoC,WACjE,IAAI7uD,EAAU,GAAKa,KAAKogE,MAAQpsD,EAAuBO,gBAAkBvU,KAAKkgE,aAC1EK,EAAiB,CAACvgE,KAAK83C,WAAY93C,KAAKqgE,YAAYn9D,KAAK8Q,EAAuBO,iBAEhFisD,EAAmC,CAACrhE,EADZa,KAAKygE,4BACuCv9D,KAAK8Q,EAAuBO,iBACpG,MAAO,CAACP,EAAuBC,eAAgBusD,EAAkCD,GAAgBr9D,KAAK8Q,EAAuBM,qBAKjI0rD,uBAAuB1hE,UAAU4vD,+BAAiC,WAC9D,IAAIwS,EAAe1gE,KAAK2gE,kBACpBC,EAAYZ,uBAAuBa,gBAAgBH,GACnDtyB,EAAiBsyB,EAAatyB,eAAezsC,MAAM,EAAG,EAAIi/D,GAAW19D,KAAK8Q,EAAuBO,iBACjG85B,EAASqyB,EAAaryB,OAAO1sC,MAAM,EAAGi/D,GAAW19D,KAAK8Q,EAAuBO,iBAC7EusD,EAAaJ,EAAaryB,OAAO5rC,OAGjC89D,EAAiB,CAACO,EADPF,EAAYE,EAAa9sD,EAAuBQ,cAAgBR,EAAuBS,gBAC1DvR,KAAK8Q,EAAuBO,iBACxE,MAAO,CAACP,EAAuBC,eAAgBysD,EAAapyB,UAAWF,EAAgBC,EAAQkyB,GAAgBr9D,KAAK8Q,EAAuBM,qBAM/I0rD,uBAAuB1hE,UAAUyiE,mBAAqB,SAAUl4D,GAC5D,IAAI63D,EAAe1gE,KAAK2gE,kBACpBD,EAAaryB,OAAO5rC,QAAUuR,EAAuBI,oBAErDssD,EAAatyB,eAAesT,QAC5Bgf,EAAatyB,eAAesT,QAC5Bgf,EAAaryB,OAAOqT,SAExBgf,EAAatyB,eAAevtC,KAAKb,KAAKogE,MAAOpgE,KAAKwW,eAC7C,GAAYkL,QAAQ7Y,EAAMyN,UAGrB,GAAYoL,QAAQ7Y,EAAMoN,WAGzBpN,GAASA,EAAM9J,WACtB2hE,EAAaryB,OAAOxtC,KAAKgI,EAAM9J,YAG/B2hE,EAAaryB,OAAOxtC,KAAKmT,EAAuBU,eANhDgsD,EAAaryB,OAAOxtC,KAAKgI,EAAMoN,WAH/ByqD,EAAaryB,OAAOxtC,KAAKgI,EAAMyN,UAWnCtW,KAAK4lD,aAAa9Z,mBAAmB9rC,KAAKsgE,kBAAmBI,IAMjEV,uBAAuB1hE,UAAU0iE,mBAAqB,WAClD,IAAIN,EAAe1gE,KAAK2gE,kBAGxB,OAFAD,EAAapyB,WAAa,EAC1BtuC,KAAK4lD,aAAa9Z,mBAAmB9rC,KAAKsgE,kBAAmBI,GACtDA,EAAapyB,WAKxB0xB,uBAAuB1hE,UAAUqiE,gBAAkB,WAC/C,IAAIM,EAAe,IAAI,GAEvB,OADmBjhE,KAAK4lD,aAAa7Z,mBAAmB/rC,KAAKsgE,oBACtCW,GAK3BjB,uBAAuB1hE,UAAUgyD,oBAAsB,WACnD,IAAIoQ,EAAe1gE,KAAK2gE,kBACpBO,EAAmBlB,uBAAuBa,gBAAgBH,GAE9D,GAAIQ,IADaR,EAAaryB,OAAO5rC,OAGjCzC,KAAK4lD,aAAap5B,WAAWxsB,KAAKsgE,uBAEjC,CAED,IAAIa,EAAoB,IAAI,GAC5BA,EAAkB/yB,eAAiBsyB,EAAatyB,eAAezsC,MAAyB,EAAnBu/D,GACrEC,EAAkB9yB,OAASqyB,EAAaryB,OAAO1sC,MAAMu/D,GACrDlhE,KAAK4lD,aAAa9Z,mBAAmB9rC,KAAKsgE,kBAAmBa,KAOrEnB,uBAAuBa,gBAAkB,SAAUO,GAC/C,IAAI5kE,EACAokE,EAAY,EACZS,EAAW,EACXP,EAAaM,EAAsB/yB,OAAO5rC,OAC9C,IAAKjG,EAAI,EAAGA,EAAIskE,EAAYtkE,IAAK,CAE7B,IAAI4jE,EAAQgB,EAAsBhzB,eAAe,EAAI5xC,IAAMsT,EAAU4B,aACjE8E,EAAgB4qD,EAAsBhzB,eAAe,EAAI5xC,EAAI,IAAMsT,EAAU4B,aAC7EuE,EAAYmrD,EAAsB/yB,OAAO7xC,IAAMsT,EAAU4B,aAG7D,MADA2vD,GAAYjB,EAAMrhE,WAAW0D,OAAS+T,EAAczX,WAAW0D,OAASwT,EAAUxT,OAAS,GAC5EuR,EAAuBG,uBAKlC,MAHAysD,GAAa,EAMrB,OAAOA,GAOXZ,uBAAuB1hE,UAAUmiE,yBAA2B,WACxD,IAAIa,EAAwB,GAI5B,OAHAA,EAAsBzgE,KAAKb,KAAKuhE,YAAczxD,EAAU4B,cACxD4vD,EAAsBzgE,KAAKb,KAAKwhE,cAAgB1xD,EAAU4B,cAC1D4vD,EAAsBzgE,KAAKb,KAAKyhE,eAAiB3xD,EAAU4B,cACpD4vD,EAAsBp+D,KAAK,MAQtC88D,uBAAuB1hE,UAAUojE,8BAAgC,SAAUtI,GACvEp5D,KAAKuhE,WAAanI,EAAwBqB,YAC1Cz6D,KAAKwhE,aAAepI,EAAwBU,cAC5C95D,KAAKyhE,cAAgBrI,EAAwBsB,gBAKjDsF,uBAAuB1hE,UAAUqjE,gBAAkB,SAAUzB,GACzDlgE,KAAKkgE,aAAeA,GAEjBF,uBAzJgC,GCEvC,GAAuC,WACvC,SAAS4B,sBAAsBhT,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmBkzC,EAAsBxrD,GAChJxW,KAAK4uD,OAASA,EACd5uD,KAAK60C,eAAiBgtB,EACtB7hE,KAAKgvB,cAAgBA,EACrBhvB,KAAK6mD,cAAgB7mD,KAAK4uD,OAAOqT,OAAOpb,cACxC7mD,KAAK8hE,aAAeA,EACpB9hE,KAAK+hE,iBAAmBA,EACxB/hE,KAAKgiE,qBAAuBA,EAC5BhiE,KAAKwW,cAAgBA,GAAiBxW,KAAKgvB,cAAcK,gBACzDrvB,KAAKiqB,OAASA,EAAO+I,MAAMpb,GAA2B,GAAS5X,KAAKwW,eACpExW,KAAK8uB,kBAAoBA,EAiL7B,OA/KA8yC,sBAAsBtjE,UAAU4jE,mBAAqB,SAAU5gC,GAC3D,OAAO5zB,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACD,IAAK+yB,EAAS,MAAO,CAAC,EAAa,GAC/B,GAAcmB,mBAAmBnB,EAASthC,KAAK60C,eAAesD,oBAAoB,KAClFn4C,KAAKiqB,OAAOI,QAAQ,kCACpBrqB,KAAK60C,eAAegE,iBAAiB,OAEzC/1B,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAK60C,eAAelM,cAAc,GAAc5I,wBAAwBuB,KACjG,KAAK,EAGD,OAFAxe,EAAGxb,OACHtH,KAAKiqB,OAAOI,QAAQ,gFACb,CAAC,EAAa,GACzB,KAAK,EAGD,OAFAvH,EAAGxb,OACHtH,KAAKiqB,OAAOphB,MAAM,4EACX,CAAC,EAAa,GACzB,KAAK,EAAG,MAAO,CAAC,EAAa,GAC7B,KAAK,EAID,OAHAia,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBb,KAAKiqB,OAAOI,QAAQ,mEAAoErqB,KAAKwW,eAEtF,CAAC,EAAaxW,KAAK60C,eAAepnB,SAC7C,KAAK,EAID,OAFA3K,EAAGxb,OAEI,CAAC,EAAatH,KAAKgvB,cAAcgC,iBAC5C,KAAK,EAGD,OADAlO,EAAGxb,OACI,CAAC,EAAa,GACzB,KAAK,EAGD,OAFAwb,EAAGxb,OACHtH,KAAKiqB,OAAOphB,MAAM,8EACX,CAAC,EAAa,GACzB,KAAK,EAAG,MAAO,CAAC,WAShC+4D,sBAAsBtjE,UAAU6jE,sBAAwB,SAAUhjE,EAASmiC,GACvE,OAAO5zB,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIo0B,EAAWpc,EAAQoqD,EAAkBt/C,EACzC,OAAO5U,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAID,OAHAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBm1D,sBAAuBljE,EAAQqX,eAC5FxW,KAAKiqB,OAAOI,QAAQ,gCACpB+J,EAAYj1B,EAAQi1B,WAAap0B,KAAK4uD,OAAO0T,KAAKluC,UAC7CkN,EACE,CAAC,EAAathC,KAAKuiE,yBAAyBnuC,EAAWkN,IADzC,CAAC,EAAa,GAEvC,KAAK,EACDnX,EAAG7iB,OACH6iB,EAAG5b,MAAQ,EACf,KAAK,EAKD,GAJAyJ,EAASjJ,SAAW5P,GAAWA,EAAQ6Y,QAAW,KAClDoqD,EAAmBh1D,SAASA,SAAS,GAAIjO,GAAU,CAAEqX,cAAexW,KAAKwW,cAAe4d,UAAWA,EAC/Fpc,OAAQA,KAEUuyB,qBAIjB,CACD,GAAI63B,EAAiB73B,uBAAyBx2B,EAAqB2zB,IAAK,CACpE,IAAKvoC,EAAQ84D,OACT,MAAM,GAAyBv7B,2BAEnC,IAAKv9B,EAAQqrC,OACT,MAAM,GAAyB7N,2BAGvC38B,KAAKiqB,OAAOI,QAAQ,iCAAoC+3C,EAAiB73B,qBAAuB,wCAZhG63B,EAAiB73B,qBAAuBx2B,EAAqB2mB,OAC7D16B,KAAKiqB,OAAOI,QAAQ,2FAaxB,OAAMrqB,KAAK4uD,OAAOxhC,MAAMqxB,2BAA6Bt/C,EAAQgY,SAAW,GAAY8K,WAAW9iB,EAAQgY,SACvG2L,EAAKs/C,EACE,CAAC,EAAapiE,KAAKgvB,cAAcuB,WAAWpxB,EAAQgY,UAF6D,CAAC,EAAa,GAG1I,KAAK,EACD2L,EAAGmX,oBAAsB9P,EAAG7iB,OAC5B6iB,EAAG5b,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,EAAc6zD,WAY9CR,sBAAsBtjE,UAAUkkE,eAAiB,SAAUC,GACvDziE,KAAKiqB,OAAOI,QAAQ,yBACpB,IAAI68B,EAAcub,GAAsBziE,KAAK4uD,OAAO0T,KAAKpb,aAAe,GAAazE,gBACrF,OAAO,GAAUvP,eAAegU,EAAa,GAAazE,kBAM9Dmf,sBAAsBtjE,UAAUikE,yBAA2B,SAAUnuC,EAAWkN,GAC5E,OAAO5zB,UAAU1N,UAAM,OAAQ,GAAQ,WAEnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAAG,MAAO,CAAC,EAAavO,KAAK0iE,uBAAuBtuC,IACzD,KAAK,EAED,IADsBtR,EAAGxb,OACAw3D,QAAQx9B,EAAQhI,aACrC,MAAM,GAAyB0D,+BAEnC,MAAO,CAAC,WAW5B4kC,sBAAsBtjE,UAAUqkE,iCAAmC,SAAUvC,EAAOwC,GAChF5iE,KAAKiqB,OAAOI,QAAQ,2CACpB,IAAIw4C,EAAmB,CACnB1uC,SAAUn0B,KAAK4uD,OAAO0T,KAAKnuC,SAC3B3d,cAAexW,KAAKwW,cACpB4pD,MAAOA,EACPwC,aAAcA,IAAgB,EAC9B9qB,WAAY93C,KAAK60C,eAAeqD,qBAAqB,GACrDmoB,WAAYrgE,KAAK60C,eAAeqD,qBAAqB,IAEzD,OAAO,IAAI,GAAuB2qB,EAAkB7iE,KAAK60C,iBAO7D+sB,sBAAsBtjE,UAAUokE,uBAAyB,SAAUI,GAC/D,OAAOp1D,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIu6D,EACJ,OAAOrsD,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAQD,OAPAvO,KAAKiqB,OAAOI,QAAQ,iCACpBkwC,EAAmB,CACflF,aAAcr1D,KAAK4uD,OAAO0T,KAAKjN,aAC/BqI,iBAAkB19D,KAAK4uD,OAAO0T,KAAK5E,iBACnCM,uBAAwBh+D,KAAK4uD,OAAO0T,KAAKtE,uBACzCb,kBAAmBn9D,KAAK4uD,OAAO0T,KAAKnF,mBAEnC2F,GACL9iE,KAAKiqB,OAAOI,QAAQ,wDACb,CAAC,EAAa,GAAiBq1C,yBAAyBoD,EAAkB9iE,KAAK4uD,OAAOqT,OAAOpb,cAAe7mD,KAAK60C,eAAgB0lB,EAAkBv6D,KAAKiqB,UAFjI,CAAC,EAAa,GAGhD,KAAK,EAIL,KAAK,EAAG,MAAO,CAAC,EAAcnH,EAAGxb,QAHjC,KAAK,EAED,OADAtH,KAAKiqB,OAAOI,QAAQ,2DACb,CAAC,EAAa,GAAiBq1C,yBAAyB1/D,KAAK4uD,OAAO0T,KAAKluC,UAAWp0B,KAAK4uD,OAAOqT,OAAOpb,cAAe7mD,KAAK60C,eAAgB0lB,EAAkBv6D,KAAKiqB,iBAMtL23C,sBA5L+B,GCMtC,GAA2C,SAAU7rD,GAErD,SAASgtD,4BACL,OAAkB,OAAXhtD,GAAmBA,EAAOlJ,MAAM7M,KAAM4M,YAAc5M,KA6R/D,OA/RAgN,UAAU+1D,0BAA2BhtD,GAQrCgtD,0BAA0BzkE,UAAU0kE,mCAAqC,SAAU7jE,GAC/E,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIijE,EAAqBlmB,EACzB,OAAO7uC,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,OAFAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBg2D,4DAA6D/jE,EAAQqX,eAClIxW,KAAKiqB,OAAOI,QAAQ,wCAAyClrB,EAAQqX,eAC9D,CAAC,EAAaxW,KAAKgvB,cAAcO,qBAC5C,KAAK,EAKD,OAJA0zC,EAAsBngD,EAAGxb,OACzBy1C,EAAkB3vC,SAASA,SAAS,GAAIjO,GAAU,CAAE+nD,YAAa/nD,EAAQ+nD,YAAarxC,KAAM/F,EAAU4B,aAAckV,aAAcq8C,EAAoBj8C,WACtJ7nB,EAAQ0nB,cAAgBo8C,EAAoBh8C,UAC5C9nB,EAAQqoD,oBAAsB13C,EAAUwB,2BACjC,CAAC,EAAcyrC,WAS1CgmB,0BAA0BzkE,UAAU6kE,wBAA0B,SAAU7L,GACpEt3D,KAAKiqB,OAAOI,QAAQ,iCAAkCitC,aAAqD,EAASA,EAAc9gD,eAClI,IAAI4sD,EAAqBh2D,SAAS,CAAEoJ,cAAexW,KAAKwW,eAAiBxW,KAAKgvB,cAAcK,iBAAmBioC,GAK/G,GAAIA,EAEA,GAAKA,EAAchJ,WAaftuD,KAAKiqB,OAAOI,QAAQ,yDAZpB,GAAIitC,EAAch2B,QAAS,CACvB,IAAIgtB,EAAatuD,KAAKqjE,+BAA+B/L,EAAch2B,SAC/DgtB,IACAtuD,KAAKiqB,OAAOI,QAAQ,kFACpB+4C,EAAmB9U,WAAaA,QAIpCtuD,KAAKiqB,OAAOI,QAAQ,0GAQ5BrqB,KAAKiqB,OAAOI,QAAQ,qEA0BxB,OApBKitC,GAAyD,OAAxCA,EAAcqB,sBAkBhC34D,KAAKiqB,OAAOI,QAAQ,6EAA8E+4C,EAAmB5sD,eAjBjH8gD,GAAiBA,EAAcqB,uBAC/B34D,KAAKiqB,OAAOI,QAAQ,6DAA8D+4C,EAAmB5sD,eACrG4sD,EAAmBzK,sBAAwB,GAAUzlB,eAAeokB,EAAcqB,sBAAuB,GAAalW,kBAEtE,OAA3CziD,KAAK4uD,OAAO0T,KAAK3J,sBACtB34D,KAAKiqB,OAAOI,QAAQ,uGAAwG+4C,EAAmB5sD,eAE1IxW,KAAK4uD,OAAO0T,KAAK3J,uBACtB34D,KAAKiqB,OAAOI,QAAQ,kDAAmD+4C,EAAmB5sD,eAC1F4sD,EAAmBzK,sBAAwB,GAAUzlB,eAAelzC,KAAK4uD,OAAO0T,KAAK3J,sBAAuB,GAAalW,mBAGzHziD,KAAKiqB,OAAOI,QAAQ,gDAAiD+4C,EAAmB5sD,eACxF4sD,EAAmBzK,sBAAwB,GAAUzlB,eAAe,GAAauP,gBAAiB,GAAaA,kBAMhH2gB,GAOXL,0BAA0BzkE,UAAU+kE,+BAAiC,SAAU/hC,GAC3E,IAAIX,EAAgBW,EAAQX,cAC5B,GAAIA,EAAe,CACf,GAAIA,EAAci4B,WACd,OAAOj4B,EAAci4B,WAGrB54D,KAAKiqB,OAAOI,QAAQ,2IAIxBrqB,KAAKiqB,OAAOI,QAAQ,yGAExB,OAAO,MAOX04C,0BAA0BzkE,UAAUglE,qBAAuB,SAAUxV,EAAwBiS,EAAcwD,GACvG,OAAO71D,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwjE,EACJ,OAAOt1D,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAID,OAHAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBu2D,8CAA+CzjE,KAAKwW,eAEjHxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBw2D,gDAAiD1jE,KAAKwW,eACxG,CAAC,EAAaxW,KAAK2jE,uBAAuB7V,EAAwBiS,EAAcwD,IAC3F,KAAK,EAED,OADAC,EAAe1gD,EAAGxb,OACX,CAAC,EAAc,IAAI,GAAwBk8D,EAAcxjE,KAAK8uB,4BAWzFi0C,0BAA0BzkE,UAAUqlE,uBAAyB,SAAU7V,EAAwBgV,EAAkBS,GAC7G,OAAO71D,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI4jE,EAAqB35C,EACzB,OAAO/b,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAID,OAHAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBw2D,gDAAiD1jE,KAAKwW,eACnHxW,KAAKiqB,OAAOI,QAAQ,gCAAiCrqB,KAAKwW,eAC1DxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkB22D,gDAAiD7jE,KAAKwW,eACxG,CAAC,EAAaxW,KAAK0iE,uBAAuBI,EAAkBS,IACvE,KAAK,EAGD,OAFAK,EAAsB9gD,EAAGxb,OACzB2iB,EAASjqB,KAAK4uD,OAAOqT,OAAO5vC,cACrB,CAAC,EAAc,CACdy8B,YAAa,CACT36B,SAAUn0B,KAAK4uD,OAAO0T,KAAKnuC,SAC3BC,UAAWwvC,EACX3Z,mBAAoBjqD,KAAK4uD,OAAO0T,KAAKrY,oBAEzCgF,cAAe,CACX3Q,0BAA2Bt+C,KAAK4uD,OAAOqT,OAAO3jB,0BAC9CC,sBAAsB,GAE1BlsB,cAAe,CACXQ,eAAgB5I,EAAO4I,eACvBC,kBAAmB7I,EAAO6I,kBAC1BC,SAAU9I,EAAO8I,SACjBvc,cAAexW,KAAKwW,eAExB44C,aAAc,CACV3Q,0BAA2Bz+C,KAAK4uD,OAAOxhC,MAAMqxB,2BAEjDiR,gBAAiB1vD,KAAKgvB,cACtBwgC,iBAAkBxvD,KAAK6mD,cACvByI,iBAAkBtvD,KAAK60C,eACvBiZ,uBAAwBA,EACxBvD,YAAa,CACTzL,IAAKlnC,GACLwT,QAAS,GACT2zB,IAAKjvC,EAAU4B,aACfstC,GAAIlvC,EAAU4B,cAElBk+C,UAAW5vD,KAAK4uD,OAAOgB,oBAUnDmT,0BAA0BzkE,UAAUwlE,gCAAkC,SAAU1M,EAAcza,EAAiBonB,GAE3G,GADA/jE,KAAKiqB,OAAOI,QAAQ,yCAA0C05C,IACzD3M,EAAa51D,MACd,MAAM,GAAiBsiB,qCAE3B,IAAIkgD,EAAmB,GAAqB3vB,2BAA2Br0C,KAAKgvB,cAAeooC,EAAa51D,OACxG,IAAKwiE,EACD,MAAM,GAAiBhgD,gCAE3B,GAAIggD,EAAiBrnB,kBAAoBA,EACrC,MAAM,GAAiB14B,0CAG3B,OADAjkB,KAAKiqB,OAAOI,QAAQ,4BAA6B05C,GAC1C3M,EAAa51D,OAOxBuhE,0BAA0BzkE,UAAUokE,uBAAyB,SAAUI,EAAkBS,GACrF,IAAIzgD,EACJ,OAAOpV,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIikE,EAAyB1J,EAAkB2J,EAAeC,EAC9D,OAAOj2D,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAeD,OAdAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkB22D,gDAAiD7jE,KAAKwW,eACnHxW,KAAKiqB,OAAOI,QAAQ,gCAAiCrqB,KAAKwW,eAC1DytD,EAA4D,QAAjCnhD,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,OAAgB,EAASA,EAAGmN,iBAAiB/iB,EAAkB22D,gDAAiD7jE,KAAKwW,eACzL+jD,EAAmB,CACflF,aAAcr1D,KAAK4uD,OAAO0T,KAAKjN,aAC/BqI,iBAAkB19D,KAAK4uD,OAAO0T,KAAK5E,iBACnCM,uBAAwBh+D,KAAK4uD,OAAO0T,KAAKtE,uBACzCb,kBAAmBn9D,KAAK4uD,OAAO0T,KAAKnF,kBACpCnN,2BAA4BhwD,KAAK4uD,OAAO0T,KAAKtS,4BAEjDkU,EAAgBpB,GAAsC9iE,KAAK4uD,OAAO0T,KAAKluC,UACvE+vC,EAAiB,GAAUxF,kBAAkBuF,EAAeX,GAA4BvjE,KAAK4uD,OAAO0T,KAAKvS,mBACzG/vD,KAAKiqB,OAAOI,QAAQ,0DAA2DrqB,KAAKwW,eACpFxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkB2yD,yCAA0C7/D,KAAKwW,eACjG,CAAC,EAAa,GAAiBkpD,yBAAyByE,EAAgBnkE,KAAK4uD,OAAOqT,OAAOpb,cAAe7mD,KAAK60C,eAAgB0lB,EAAkBv6D,KAAKiqB,OAAQjqB,KAAK8uB,kBAAmB9uB,KAAKwW,eACzL9V,MAAK,SAAUI,GAIhB,OAHAmjE,EAAwBpzC,eAAe,CACnCC,SAAS,IAENhwB,KAENE,OAAM,SAAU6H,GAMjB,MALAo7D,EAAwBpzC,eAAe,CACnC5a,UAAWpN,EAAMoN,UACjBghD,aAAcpuD,EAAMyN,SACpBwa,SAAS,IAEPjoB,MAElB,KAAK,EAAG,MAAO,CAAC,EAAcshB,EAAG7iB,gBAUjDy7D,0BAA0BzkE,UAAU8lE,+BAAiC,SAAUjlE,EAASw9C,GACpF,OAAOjvC,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIknD,EAAamd,EAAc7iE,EAAO4gE,EAAkBt/C,EAAIwe,EAASgjC,EACrE,OAAOp2D,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAUD,OATAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBq3D,wDAAyDvkE,KAAKwW,eAC3HxW,KAAKiqB,OAAOI,QAAQ,wCAAyCrqB,KAAKwW,eAClE0wC,EAAclnD,KAAKwiE,eAAerjE,EAAQ+nD,aAC1Cmd,EAAe,CACX1nB,gBAAiBA,GAErBn7C,EAAQ,GAAcyuC,gBAAgBjwC,KAAKgvB,cAAgB7vB,GAAWA,EAAQqC,OAAUsO,EAAU4B,aAAc2yD,GAChHrkE,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBm1D,sBAAuBriE,KAAKwW,eACrFsM,EAAK,CAAC,IACC,CAAC,EAAa9iB,KAAKmiE,sBAAsBhjE,IACpD,KAAK,EAeD,OAdAijE,EAAmBh1D,SAASP,WAAM,EAAQ,CAACO,SAASP,WAAM,EAAQiW,EAAG9T,OAAO,CAACmb,EAAG7iB,UAAW,CAAE4/C,YAAaA,EAAa1lD,MAAOA,EAAOyhC,MAAO9jC,EAAQ8jC,OAASjjC,KAAKgvB,cAAcK,gBAAiB+4B,aAAcl1C,EAAasxD,aAC5NljC,EAAUniC,EAAQmiC,SAAWthC,KAAK60C,eAAesD,sBAE7Cn4C,KAAKiqB,OAAOI,QAAQ,oCAAqCrqB,KAAKwW,eAC9DxW,KAAKiqB,OAAO4J,WAAW,sCAAwCyN,EAAQjI,cAAer5B,KAAKwW,eAC3F4rD,EAAiB9gC,QAAUA,GAG3B,GAAY5f,QAAQ0gD,EAAiBlpB,aAAe5X,IACpDgjC,EAAkBtkE,KAAK60C,eAAe8I,wBAElCykB,EAAiBlpB,UAAYorB,GAG9B,CAAC,EAAclC,WAKnCW,0BAhSmC,CAiS5C,KPxSF,SAAW/J,GACPA,EAA4C,0BAAI,4BAChDA,EAA8B,YAAI,cAClCA,EAA6B,WAAI,aACjCA,EAAkC,gBAAI,kBACtCA,EAAmC,iBAAI,mBACvCA,EAA2B,SAAI,WAC/BA,EAAsC,oBAAI,sBAP9C,CAQGA,KAAqBA,GAAmB,KAC3C,IAAIyL,GACgB,CACZ5uD,KAAM,gBAFV4uD,GAIY,CACR5uD,KAAM,cACNC,KAAM,sKANV2uD,GAQuB,CACnB5uD,KAAM,4CACNC,KAAM,6EAGV,GAAiC,SAAUC,GAE3C,SAAS2uD,gBAAgBzuD,EAAW0uD,EAAaC,GAC7C,IAAIxuD,EAAQL,EAAOpZ,KAAKqD,KAAMiW,EAAW0uD,IAAgB3kE,KAIzD,OAHA9C,OAAOuN,eAAe2L,EAAOsuD,gBAAgBpmE,WAC7C8X,EAAMrZ,KAAO,kBACbqZ,EAAMwuD,IAAMA,EACLxuD,EAoDX,OA1DApJ,UAAU03D,gBAAiB3uD,GAW3B2uD,gBAAgBpmE,UAAUumE,QAAU,WAChC,SAAI7kE,KAAK4kE,MAAO5kE,KAAK4kE,IAAI1uC,QAAWl2B,KAAK4kE,IAAI1uC,SAAW8iC,GAAiB8L,kBAAoB9kE,KAAK4kE,IAAI1uC,SAAW8iC,GAAiB+L,WAG1H/kE,KAAKiW,YACJwuD,GAAsC5uD,MAanD6uD,gBAAgBM,YAAc,SAAUnvD,EAAM8uD,EAAaC,GACvD,GAAIA,GAAOA,EAAI1uC,OACX,OAAQ0uC,EAAI1uC,QACR,KAAK8iC,GAAiBiM,oBAClB,OAAO,GAA6BttD,sCACxC,KAAKqhD,GAAiBkM,0BAClB,OAAO,IAAI,GAA6BrvD,EAAM8uD,GAClD,KAAK3L,GAAiBmM,YAClB,OAAO,GAAiB9gD,2BAC5B,KAAK20C,GAAiBoM,WAClB,OAAO,GAAiB/jD,mCAGpC,OAAO,IAAIqjD,gBAAgB7uD,EAAM8uD,EAAaC,IAMlDF,gBAAgBW,sBAAwB,WACpC,OAAO,IAAIX,gBAAgBD,GAAkC5uD,KAAM4uD,GAAkC3uD,OAMzG4uD,gBAAgBY,iCAAmC,WAC/C,OAAO,IAAIZ,gBAAgBD,GAA6C5uD,KAAM4uD,GAA6C3uD,OAExH4uD,gBA3DyB,CA4DlC,IQnEE,GAAoC,SAAU3uD,GAE9C,SAASwvD,mBAAmB5W,EAAe7/B,GACvC,OAAO/Y,EAAOpZ,KAAKqD,KAAM2uD,EAAe7/B,IAAsB9uB,KAmQlE,OArQA,eAAUulE,mBAAoBxvD,GAI9BwvD,mBAAmBjnE,UAAUi4D,aAAe,SAAUp3D,GAClD,IAAI2jB,EAAIqH,EAAI+W,EAAIC,EAAIC,EAAIC,EAAIs1B,EAC5B,OAAO,eAAU32D,UAAM,OAAQ,GAAQ,WACnC,IAAIw2D,EAAgBrD,EAAcxT,EAAU6lB,EAAchQ,EAAWkB,EACjEtgD,EAAQpW,KACZ,OAAO,iBAAYA,MAAM,SAAUylE,GAC/B,OAAQA,EAAGl3D,OACP,KAAK,EAMD,OALkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBw4D,+BAAgCvmE,EAAQqX,eACpJggD,EAAmD,QAAjCrsC,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,OAAgB,EAASA,EAAG8F,iBAAiB/iB,EAAkBw4D,+BAAgCvmE,EAAQqX,eAClKxW,KAAKiqB,OAAOI,QAAQ,wCAAyClrB,EAAQqX,eACrE28C,EAAe/mB,GAAUC,aACS,QAAjCnL,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkBy4D,sCAAuCxmE,EAAQqX,eAChJ,CAAC,EAAaxW,KAAK82D,oBAAoB33D,EAASa,KAAKo0B,YAChE,KAAK,EAeD,OAdAurB,EAAW8lB,EAAGn+D,OACdk+D,EAA2C,QAA3BrkC,EAAKwe,EAASG,eAA4B,IAAP3e,OAAgB,EAASA,EAAG1xB,EAAYunD,mBAC3FR,SAAgEA,EAAe7/B,gBAAgB,CAC3FivC,kBAA0D,QAAtCxkC,EAAKue,EAASxxC,KAAK6mD,qBAAkC,IAAP5zB,OAAgB,EAASA,EAAG3+B,SAAW,IAEzG+iE,IACAhP,SAAgEA,EAAe7/B,gBAAgB,CAC3F6uC,aAAcA,KAGtBhQ,EAAwC,QAA3Bn0B,EAAKse,EAASG,eAA4B,IAAPze,OAAgB,EAASA,EAAG5xB,EAAYsnD,kBACxFL,EAAkB,IAAI,GAAgB12D,KAAK4uD,OAAOE,YAAY36B,SAAUn0B,KAAK4lD,aAAc5lD,KAAKmtC,YAAantC,KAAKiqB,OAAQjqB,KAAK4uD,OAAOkB,kBAAmB9vD,KAAK4uD,OAAOiB,oBACrJiD,sBAAsBnT,EAASxxC,MACb,QAAjCwoD,EAAK32D,KAAK8uB,yBAAsC,IAAP6nC,GAAyBA,EAAG39B,gBAAgB9rB,EAAkBymD,0BAA2Bx0D,EAAQqX,eACpI,CAAC,EAAckgD,EAAgBzD,0BAA0BtT,EAASxxC,KAAMnO,KAAKo0B,UAAW++B,EAAch0D,OAASgG,OAAWA,GAAW,EAAMhG,EAAQ0mE,WAAYrQ,GAAW90D,MAAK,SAAUI,GAIxL,OAHA01D,SAAgEA,EAAe3lC,eAAe,CAC1FC,SAAS,IAENhwB,KAENE,OAAM,SAAU6H,GAOjB,MANAuN,EAAM6T,OAAOI,QAAQ,kCAAmClrB,EAAQqX,eAChEggD,SAAgEA,EAAe3lC,eAAe,CAC1F5a,UAAWpN,EAAMoN,UACjBghD,aAAcpuD,EAAMyN,SACpBwa,SAAS,IAEPjoB,cAUlC08D,mBAAmBjnE,UAAUwnE,2BAA6B,SAAU3mE,GAChE,IAAI2jB,EAAIqH,EAAI+W,EAAIC,EAChB,OAAO,eAAUnhC,UAAM,OAAQ,GAAQ,WACnC,IAAY+lE,EAAmBC,EAC/B,OAAO,iBAAYhmE,MAAM,SAAUohC,GAE/B,IAAKjiC,EACD,MAAM,GAAyBg9B,+BAInC,GAFkC,QAAjCrZ,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkB+4D,6CAA8C9mE,EAAQqX,gBAE7JrX,EAAQmiC,QACT,MAAM,GAAgBphB,sCAI1B,GAFSlgB,KAAK4lD,aAAara,kBAAkBpsC,EAAQmiC,QAAQhI,aAGzD,IAEI,OADkC,QAAjCnP,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,GAAyBA,EAAG6O,gBAAgB9rB,EAAkBg5D,qDAAsD/mE,EAAQqX,eAC/J,CAAC,EAAcxW,KAAKmmE,mCAAmChnE,GAAS,IAE3E,MAAOsB,GAIH,GAHAslE,EAAoBtlE,aAAa,IAAgCA,EAAEwV,YAAcc,GAAuDlB,KACxImwD,EAAkCvlE,aAAa,IAAeA,EAAEwV,YAAcf,GAA8BzU,EAAE6V,WAAapB,EAEvH6wD,GAAqBC,EAErB,OADkC,QAAjC9kC,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkBg5D,qDAAsD/mE,EAAQqX,eAC/J,CAAC,EAAcxW,KAAKmmE,mCAAmChnE,GAAS,IAIvE,MAAMsB,EAMlB,OADkC,QAAjC0gC,EAAKnhC,KAAK8uB,yBAAsC,IAAPqS,GAAyBA,EAAGnI,gBAAgB9rB,EAAkBg5D,qDAAsD/mE,EAAQqX,eAC/J,CAAC,EAAcxW,KAAKmmE,mCAAmChnE,GAAS,WAQnFomE,mBAAmBjnE,UAAU6nE,mCAAqC,SAAUhnE,EAAS81D,GACjF,IAAInyC,EAAIqH,EAAI+W,EACZ,OAAO,eAAUlhC,UAAM,OAAQ,GAAQ,WACnC,IAAIw2D,EAAgBpxB,EAAcghC,EAClC,OAAO,iBAAYpmE,MAAM,SAAUmhC,GAK/B,GAJkC,QAAjCre,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBg5D,qDAAsD/mE,EAAQqX,eAC1KggD,EAAmD,QAAjCrsC,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,OAAgB,EAASA,EAAG8F,iBAAiB/iB,EAAkBg5D,qDAAsD/mE,EAAQqX,eACxLxW,KAAKiqB,OAAOI,QAAQ,8DAA+DlrB,EAAQqX,iBAC3F4uB,EAAeplC,KAAK4lD,aAAajc,gBAAgBxqC,EAAQmiC,QAAS2zB,IAG9D,MADAuB,SAAgEA,EAAe//B,qBACzE,GAA6B/e,2BAWvC,OARA8+C,SAAgEA,EAAe3lC,eAAe,CAC1FC,SAAS,IAEbs1C,EAAsB,cAAS,cAAS,GAAIjnE,GAAU,CAAEimC,aAAcA,EAAapK,OAAQuP,qBAAsBprC,EAAQorC,sBAAwBx2B,EAAqB2mB,OAAQmhB,cAAe,CACrLrW,WAAYrmC,EAAQmiC,QAAQjI,cAC5BzxB,KAAMg4B,GAAkBkc,mBAEE,QAAjC5a,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkBw4D,+BAAgCvmE,EAAQqX,eACzI,CAAC,EAAcxW,KAAKu2D,aAAa6P,WASpDb,mBAAmBjnE,UAAUw4D,oBAAsB,SAAU33D,EAASi1B,GAClE,IAAItR,EAAIqH,EAAI+W,EACZ,OAAO,eAAUlhC,UAAM,OAAQ,GAAQ,WACnC,IAAIqmE,EAAyB5O,EAAuBl5C,EAAUm5C,EAAa5X,EAAS4F,EACpF,OAAO,iBAAY1lD,MAAM,SAAUmhC,GAC/B,OAAQA,EAAG5yB,OACP,KAAK,EAMD,OALkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBy4D,sCAAuCxmE,EAAQqX,eAC3J6vD,EAA4D,QAAjCl8C,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,OAAgB,EAASA,EAAG8F,iBAAiB/iB,EAAkBy4D,sCAAuCxmE,EAAQqX,eAChJ,QAAjC0qB,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkBo5D,yCAA0CnnE,EAAQqX,eAC1JihD,EAAwBz3D,KAAK0wD,2BAA2BvxD,GACxDof,EAAW,GAAU0zB,kBAAkB7d,EAAU2yB,cAAe0Q,GACzD,CAAC,EAAaz3D,KAAK43D,uBAAuBz4D,IACrD,KAAK,EAcD,OAbAu4D,EAAcv2B,EAAG75B,OACjBw4C,EAAU9/C,KAAKkwD,0BAA0B/wD,EAAQ08C,eACjD6J,EAAa,CACTvxB,SAAUn0B,KAAK4uD,OAAOE,YAAY36B,SAClCC,UAAWA,EAAUuhC,mBACrB39C,OAAQ7Y,EAAQ6Y,OAChBb,OAAQhY,EAAQgY,OAChBozB,qBAAsBprC,EAAQorC,qBAC9B7Z,sBAAuBvxB,EAAQuxB,sBAC/BE,mBAAoBzxB,EAAQyxB,mBAC5B+1B,UAAWxnD,EAAQwnD,UACnBnc,OAAQrrC,EAAQqrC,QAEb,CAAC,EAAcxqC,KAAKqwD,2BAA2B9xC,EAAUm5C,EAAa5X,EAAS4F,GAC7EhlD,MAAK,SAAUI,GAIhB,OAHAulE,SAAkFA,EAAwBx1C,eAAe,CACrHC,SAAS,IAENhwB,KAENE,OAAM,SAAU6H,GAIjB,MAHAw9D,SAAkFA,EAAwBx1C,eAAe,CACrHC,SAAS,IAEPjoB,cAUlC08D,mBAAmBjnE,UAAUs5D,uBAAyB,SAAUz4D,GAC5D,IAAI2jB,EAAIqH,EAAI+W,EACZ,OAAO,eAAUlhC,UAAM,OAAQ,GAAQ,WACnC,IAAIwW,EAAe6vD,EAAyB1V,EAAkBxR,EAAiBsW,EAAmBoC,EAAY92B,EAC9G,OAAO,iBAAY/gC,MAAM,SAAUmhC,GAC/B,OAAQA,EAAG5yB,OACP,KAAK,EAyBD,OAxBkC,QAAjCuU,EAAK9iB,KAAK8uB,yBAAsC,IAAPhM,GAAyBA,EAAGyS,oBAAoBroB,EAAkBo5D,yCAA0CnnE,EAAQqX,eAC9JA,EAAgBrX,EAAQqX,cACxB6vD,EAA4D,QAAjCl8C,EAAKnqB,KAAK8uB,yBAAsC,IAAP3E,OAAgB,EAASA,EAAG8F,iBAAiB/iB,EAAkBq5D,oCAAqC/vD,IACxKm6C,EAAmB,IAAI,IACN9H,YAAY7oD,KAAK4uD,OAAOE,YAAY36B,UACrDw8B,EAAiBlI,UAAUtpD,EAAQ6Y,QACnC24C,EAAiB9D,aAAa15C,EAAUqzD,qBACxC7V,EAAiB3D,gBACjB2D,EAAiBrG,eAAetqD,KAAK4uD,OAAOrE,aAC5CoG,EAAiB/F,wBAAwB5qD,KAAK4uD,OAAOgB,UAAUpQ,aAC/DmR,EAAiBxC,gBACbnuD,KAAK8tD,wBACL6C,EAAiB9C,mBAAmB7tD,KAAK8tD,wBAE7C6C,EAAiBvG,iBAAiB5zC,GAClCm6C,EAAiB9E,gBAAgB1sD,EAAQimC,cACrCplC,KAAK4uD,OAAOe,kBAAkBzQ,cAC9ByR,EAAiB3E,gBAAgBhsD,KAAK4uD,OAAOe,kBAAkBzQ,cAE/Dl/C,KAAK4uD,OAAOe,kBAAkBxQ,kBAC9BA,EAAkBn/C,KAAK4uD,OAAOe,kBAAkBxQ,gBAChDwR,EAAiBzE,mBAAmB/M,EAAgB2Y,WACpDnH,EAAiBvE,uBAAuBjN,EAAgB4Y,gBAEtD54D,EAAQorC,uBAAyBx2B,EAAqBm1B,IAAa,CAAC,EAAa,IACvFusB,EAAoB,IAAI,GAAkBz1D,KAAKmtC,YAAantC,KAAK8uB,mBAC/B,QAAjCoS,EAAKlhC,KAAK8uB,yBAAsC,IAAPoS,GAAyBA,EAAGlI,gBAAgB9rB,EAAkBikD,oBAAqBhyD,EAAQqX,eAC9H,CAAC,EAAai/C,EAAkBzE,YAAY7xD,KACvD,KAAK,EAID,OAHA04D,EAAa12B,EAAG75B,OAEhBqpD,EAAiBpD,YAAYsK,EAAW3G,cACjC,CAAC,EAAa,GACzB,KAAK,EACD,GAAI/xD,EAAQorC,uBAAyBx2B,EAAqB2zB,IAAK,CAC3D,IAAIvoC,EAAQ84D,OAOR,MAHAoO,SAAkFA,EAAwBx1C,eAAe,CACrHC,SAAS,IAEP,GAAyB4L,2BAN/Bi0B,EAAiBhD,UAAUxuD,EAAQ84D,QAS3C92B,EAAG5yB,MAAQ,EACf,KAAK,EAID,KAHK,GAAY0T,WAAW9iB,EAAQgY,SAAWnX,KAAK4uD,OAAOE,YAAY7E,oBAAsBjqD,KAAK4uD,OAAOE,YAAY7E,mBAAmBxnD,OAAS,IAC7IkuD,EAAiB3G,UAAU7qD,EAAQgY,OAAQnX,KAAK4uD,OAAOE,YAAY7E,oBAEnEjqD,KAAK4uD,OAAOK,cAAc1Q,sBAAwBp/C,EAAQ08C,cAC1D,OAAQ18C,EAAQ08C,cAAcj0C,MAC1B,KAAKg4B,GAAkBkc,gBACnB,IACI/a,EAAaxB,iCAAiCpgC,EAAQ08C,cAAcrW,YACpEmrB,EAAiB9G,UAAU9oB,GAE/B,MAAOtgC,GACHT,KAAKiqB,OAAOI,QAAQ,mDAAqD5pB,GAE7E,MACJ,KAAKm/B,GAAkBoc,IACnB2U,EAAiBhH,UAAUxqD,EAAQ08C,cAAcrW,YAO7D,OAHA6gC,SAAkFA,EAAwBx1C,eAAe,CACrHC,SAAS,IAEN,CAAC,EAAc6/B,EAAiBnC,6BAKpD+W,mBAtQ4B,CAuQrC,IChRE,GAAkC,SAAUxvD,GAE5C,SAAS0wD,iBAAiB9X,EAAe7/B,GACrC,OAAO/Y,EAAOpZ,KAAKqD,KAAM2uD,EAAe7/B,IAAsB9uB,KAsHlE,OAxHA,eAAUymE,iBAAkB1wD,GAS5B0wD,iBAAiBnoE,UAAUi4D,aAAe,SAAUp3D,GAChD,OAAO,eAAUa,UAAM,OAAQ,GAAQ,WACnC,IAAIonB,EACJ,OAAO,iBAAYpnB,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAK0mE,mBAAmBvnE,IACjD,KAAK,EAAG,MAAO,CAAC,EAAc2jB,EAAGxb,QACjC,KAAK,EAED,IADA8f,EAAMtE,EAAGxb,kBACU,IAAmB8f,EAAInR,YAAc0H,GAA4C9H,KAEhG,MAAO,CAAC,EADa,IAAI,GAAmB7V,KAAK4uD,OAAQ5uD,KAAK8uB,mBACrBg3C,2BAA2B3mE,IAGpE,MAAMioB,EAEd,KAAK,EAAG,MAAO,CAAC,WAShCq/C,iBAAiBnoE,UAAUooE,mBAAqB,SAAUvnE,GACtD,IAAI2jB,EAAIqH,EAAI+W,EAAIC,EAAIC,EACpB,OAAO,eAAUphC,UAAM,OAAQ,GAAQ,WACnC,IAAIs5B,EAAayL,EACjB,OAAO,iBAAY/kC,MAAM,SAAUqhC,GAC/B,OAAQA,EAAG9yB,OACP,KAAK,EAED,IAAKpP,EACD,MAAM,GAAyBg9B,+BAEnC,GAAIh9B,EAAQyjE,aAIR,MAFuC,QAAtC9/C,EAAK9iB,KAAK8tD,8BAA2C,IAAPhrC,GAAyBA,EAAG6+C,gBAAgB5sD,EAAa4xD,eACxG3mE,KAAKiqB,OAAO/gB,KAAK,sFACX,GAAgB4X,6BAErB,IAAK9gB,KAAK4uD,OAAOQ,aAAa3Q,4BAA8B,GAAYx8B,WAAW9iB,EAAQgY,QAI5F,MAFuC,QAAtCgT,EAAKnqB,KAAK8tD,8BAA2C,IAAP3jC,GAAyBA,EAAGw3C,gBAAgB5sD,EAAa6xD,gCACxG5mE,KAAKiqB,OAAO/gB,KAAK,4HACX,GAAgB4X,6BAG1B,IAAK3hB,EAAQmiC,QACT,MAAM,GAAgBphB,sCAI1B,GAFAoZ,EAAcn6B,EAAQi1B,WAAap0B,KAAKo0B,UAAUoN,sBAClDuD,EAAc/kC,KAAK4lD,aAAaxc,gBAAgBjqC,EAAQmiC,QAASniC,EAASm6B,IACzD4L,YAIb,MAFuC,QAAtChE,EAAKlhC,KAAK8tD,8BAA2C,IAAP5sB,GAAyBA,EAAGygC,gBAAgB5sD,EAAa8xD,wBACxG7mE,KAAKiqB,OAAO/gB,KAAK,kGACX,GAAgB4X,6BAErB,GAAIsrB,GAAUQ,mBAAmB7H,EAAYG,YAAY2H,WAC1DT,GAAUG,eAAexH,EAAYG,YAAYsH,UAAWxsC,KAAK4uD,OAAOK,cAAc3Q,2BAItF,MAFuC,QAAtCnd,EAAKnhC,KAAK8tD,8BAA2C,IAAP3sB,GAAyBA,EAAGwgC,gBAAgB5sD,EAAa+xD,6BACxG9mE,KAAKiqB,OAAO/gB,KAAK,8FAAgGlJ,KAAK4uD,OAAOK,cAAc3Q,0BAA4B,aACjK,GAAgBx9B,6BAErB,GAAIikB,EAAYG,YAAYkI,WAAahB,GAAUG,eAAexH,EAAYG,YAAYkI,UAAW,GAItG,MAFuC,QAAtChM,EAAKphC,KAAK8tD,8BAA2C,IAAP1sB,GAAyBA,EAAGugC,gBAAgB5sD,EAAagyD,6BACxG/mE,KAAKiqB,OAAO/gB,KAAK,sGACX,GAAgB4X,6BAK1B,OAHI9gB,KAAK4uD,OAAOd,wBACZ9tD,KAAK4uD,OAAOd,uBAAuBkT,qBAEhC,CAAC,EAAahhE,KAAKgnE,8BAA8BjiC,EAAa5lC,IACzE,KAAK,EAAG,MAAO,CAAC,EAAckiC,EAAG/5B,gBASjDm/D,iBAAiBnoE,UAAU0oE,8BAAgC,SAAUjiC,EAAa5lC,GAC9E,OAAO,eAAUa,UAAM,OAAQ,GAAQ,WACnC,IAAIwzD,EAAY9vB,EAChB,OAAO,iBAAY1jC,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAKD,GAJIw2B,EAAYlK,UACZ24B,EAAa,IAAI,GAAUzuB,EAAYlK,QAAQG,OAAQh7B,KAAK4uD,OAAOc,kBAGnEvwD,EAAQwkC,QAA8B,IAAnBxkC,EAAQwkC,OAAe,CAE1C,KADAD,EAAW8vB,aAA+C,EAASA,EAAWr8C,OAAO08C,WAEjF,MAAM,GAAgB50C,8BAE1B,GAAUwkB,YAAYC,EAAUvkC,EAAQwkC,QAE5C,MAAO,CAAC,EAAa,GAAgBswB,6BAA6Bj0D,KAAKmtC,YAAantC,KAAKo0B,UAAW2Q,GAAa,EAAM5lC,EAASq0D,IACpI,KAAK,EAAG,MAAO,CAAC,EAAc1wC,EAAGxb,gBAK1Cm/D,iBAzH0B,CA0HnC,IC/HE,GAAmC,SAAU1wD,GAE7C,SAASkxD,oBACL,OAAkB,OAAXlxD,GAAmBA,EAAOlJ,MAAM7M,KAAM4M,YAAc5M,KAwF/D,OA1FAgN,UAAUi6D,kBAAmBlxD,GAQ7BkxD,kBAAkB3oE,UAAUi4D,aAAe,SAAU2Q,GACjD,OAAOx5D,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIqmE,EAAyBvY,EAAwBqZ,EAAkBC,EAAa9I,EACpF,OAAOpwD,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,OAFA83D,EAA0BrmE,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBm6D,8BAA+BH,EAAc1wD,eACjIs3C,EAAyB9tD,KAAK2iE,iCAAiCltD,GAAM6xD,+BAC9D,CAAC,EAAatnE,KAAKunE,uBAAuBzZ,EAAwBoZ,EAAc9yC,UAAW8yC,EAAcnX,oBACpH,KAAK,EACDoX,EAAmBrkD,EAAGxb,OACtBtH,KAAKiqB,OAAOI,QAAQ,8BACpBvH,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAasmE,EAAiBT,mBAAmBQ,IAC7D,KAAK,EAMD,OALAE,EAActkD,EAAGxb,OACjB++D,EAAwBx1C,eAAe,CACnCC,SAAS,EACT+kC,WAAW,IAER,CAAC,EAAcuR,GAC1B,KAAK,EAUD,MATA9I,EAAUx7C,EAAGxb,kBACU,IAAoBg3D,EAAQroD,YAAcqN,GAAoDzN,MACjH7V,KAAKiqB,OAAOI,QAAQ,wHAExBg8C,EAAwBx1C,eAAe,CACnC5a,UAAWqoD,aAAmB,IAAaA,EAAQroD,gBAAa9Q,EAChE8xD,aAAcqH,aAAmB,IAAaA,EAAQhoD,eAAYnR,EAClE2rB,SAAS,IAEPwtC,EACV,KAAK,EAAG,MAAO,CAAC,WAQhC2I,kBAAkB3oE,UAAUkpE,OAAS,WAEjC,OAAO38D,QAAQjL,OAAO,GAAiBilB,uCAO3CoiD,kBAAkB3oE,UAAUipE,uBAAyB,SAAUzZ,EAAwBiS,EAAchQ,GACjG,OAAOriD,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwjE,EACJ,OAAOt1D,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,OADAvO,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBw2D,gDAAiD1jE,KAAKwW,eACxG,CAAC,EAAaxW,KAAK2jE,uBAAuB7V,EAAwBiS,EAAchQ,IAC3F,KAAK,EAED,OADAyT,EAAe1gD,EAAGxb,OACX,CAAC,EAAc,IAAI,GAAiBk8D,EAAcxjE,KAAK8uB,4BAKlFm4C,kBAAkB3oE,UAAUmpE,wBAA0B,SAAUtoE,EAASmiC,GACrE,OAAO5zB,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI8iB,EACJ,OAAO5U,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAID,OAHAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBw6D,wBAAyB1nE,KAAKwW,eAC3FxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBm1D,sBAAuBriE,KAAKwW,eACrFsM,EAAK,CAAC1V,SAAS,GAAIjO,IACZ,CAAC,EAAaa,KAAKmiE,sBAAsBhjE,EAASmiC,IAC7D,KAAK,EAAG,MAAO,CAAC,EAAcl0B,SAASP,WAAM,EAAQ,CAACO,SAASP,WAAM,EAAQiW,EAAG9T,OAAO,CAACmb,EAAG7iB,UAAW,CAAEg6B,QAASA,EAASshC,aAAczjE,EAAQyjE,eAAgB,cAKzKqE,kBA3F2B,CA4FpC,IC1FE,GAAyC,SAAUlxD,GAEnD,SAAS4xD,wBAAwB/Y,EAAQ/Z,EAAgB7lB,EAAe/E,EAAQ63C,EAAcC,EAAkB3B,EAAOtxC,EAAmB84C,EAAUtlC,EAAWulC,EAAmBrxD,GAC9K,IAAIJ,EAAQL,EAAOpZ,KAAKqD,KAAM4uD,EAAQ/Z,EAAgB7lB,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmB84C,EAAUpxD,IAAkBxW,KAM5J,OALAoW,EAAMgqD,MAAQA,EACdhqD,EAAMksB,UAAYA,EAClBlsB,EAAM4rD,qBAAuB4F,EAC7BxxD,EAAM0xD,qBAAuBD,EAC7BzxD,EAAM2xD,kBAAoB,IAAI,GAAkBnZ,EAAQx4C,EAAM0xD,qBAAsB94C,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmB84C,EAAUpxD,GACjKJ,EAojBX,OA5jBApJ,UAAU26D,wBAAyB5xD,GAcnC4xD,wBAAwBrpE,UAAUi4D,aAAe,SAAUp3D,GACvD,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIgoE,EAAqB7U,EAAc8U,EAAennE,EAAQonE,EAAavoB,EAAUwoB,EACrF,OAAOj6D,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAID,OAHAvO,KAAKiqB,OAAO6J,MAAM,kDAClBk0C,EAAsBhoE,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBk7D,oCAAqCjpE,EAAQqX,eAC7H28C,EAAe/mB,GAAUC,aAClB,CAAC,EAAarsC,KAAKqoE,wBAAwBlpE,IACtD,KAAK,EACD8oE,EAAgBnlD,EAAGxb,OACnBwb,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAKsoE,uBAAuBtoE,KAAKsiC,UAAW2lC,IACrE,KAAK,EAOD,OANAnnE,EAASgiB,EAAGxb,OACZ0gE,EAAoBn3C,eAAe,CAC/BC,SAAS,EACTy3C,gBAAgB,EAChB1S,WAAW,IAER,CAAC,EAAc/0D,GAC1B,KAAK,EAID,OAHAgiB,EAAGxb,OAEHtH,KAAKiqB,OAAO/gB,KAAK,8EACV,CAAC,EAAa,GACzB,KAAK,EAKD,OAJAg/D,EAAc,CACVthE,OAAQuO,EAAsBqzD,SAC9BrpE,QAAS8oE,GAEN,CAAC,EAAajoE,KAAKgiE,qBAAqByG,YAAYP,IAC/D,KAAK,EAGD,OAFAvoB,EAAW78B,EAAGxb,OACd6gE,EAAoBnoE,KAAK0oE,uBAAuB/oB,GACzC,CAAC,EAAc3/C,KAAK2oE,qBAAqBR,EAAmBF,EAAe9U,GACzEzyD,MAAK,SAAUI,GAMhB,OALAknE,EAAoBn3C,eAAe,CAC/BC,SAAS,EACTy3C,gBAAgB,EAChB/S,UAAW10D,EAAO00D,YAEf10D,KAENE,OAAM,SAAU6H,GAOjB,MANAm/D,EAAoBn3C,eAAe,CAC/BC,SAAS,EACT7a,UAAWpN,EAAMoN,UACjBghD,aAAcpuD,EAAMyN,SACpBiyD,gBAAgB,IAEd1/D,cAYlC8+D,wBAAwBrpE,UAAUsqE,yBAA2B,SAAUzpE,EAASkqC,GAC5E,MAAO,CACHjV,UAAWj1B,EAAQi1B,UACnB5d,cAAexW,KAAKwW,cACpBwB,OAAQ,GAASulB,WAAWp+B,EAAQk+B,OAAOc,UAC3CmD,QAAS+H,EACTu5B,cAAc,IAStB+E,wBAAwBrpE,UAAUgqE,uBAAyB,SAAU1nC,EAAiBzhC,GAClF,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIshC,EAAS4lC,EACb,OAAOh5D,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACD,IAAKqyB,EAED,MADA5gC,KAAKiqB,OAAOuJ,QAAQ,gFACd,GAAgBnT,4BAG1B,KADAihB,EAAUthC,KAAK60C,eAAerQ,yBAAyB,CAAE5D,gBAAiBA,KAEtE,MAAM,GAAgBvgB,4BAE1ByC,EAAGvU,MAAQ,EACf,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBqmE,EAAgBlnE,KAAK4oE,yBAAyBzpE,EAASmiC,GAChD,CAAC,EAAathC,KAAK+nE,kBAAkBxR,aAAa2Q,IAC7D,KAAK,EAED,MAAO,CAAC,EADCpkD,EAAGxb,QAEhB,KAAK,EAED,MADMwb,EAAGxb,OAEb,KAAK,EAAG,MAAO,CAAC,WAShCqgE,wBAAwBrpE,UAAUuqE,qBAAuB,SAAU1pE,GAC/D,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIioE,EAAeC,EAAavoB,EAAU1xB,EAAK66C,EAAmB5hB,EAClE,OAAOh5C,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,OADAvO,KAAKiqB,OAAO6J,MAAM,0DACX,CAAC,EAAa9zB,KAAKqoE,wBAAwBlpE,IACtD,KAAK,EACD8oE,EAAgBnlD,EAAGxb,OACnB4gE,EAAc,CACVthE,OAAQuO,EAAsBqzD,SAC9BrpE,QAAS8oE,GAEbnlD,EAAGvU,MAAQ,EACf,KAAK,EAED,OADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACf,CAAC,EAAab,KAAKgiE,qBAAqByG,YAAYP,IAC/D,KAAK,EAGD,OAFAvoB,EAAW78B,EAAGxb,OACdtH,KAAK0oE,uBAAuB/oB,GACrB,CAAC,EAAa,GACzB,KAAK,EAGD,IAFA1xB,EAAMnL,EAAGxb,kBAEU,IAAmB2mB,EAAI42C,UACtC,MAAM52C,EAEV,MAAO,CAAC,EAAa,GACzB,KAAK,EAQD,OAPAjuB,KAAK60C,eAAekB,kBAAkBzgC,EAAmBgnC,eAAgBrjC,KAAKC,UAAU+uD,IAAgB,GACxGa,EAAoB,CAChB1I,MAAO3qD,GAAMozD,qBACb3kB,QAASlkD,KAAK4uD,OAAOqT,OAAO8G,0BAC5B9kB,WAAW,GAEfiD,EAAclnD,KAAK4uD,OAAO0T,KAAK0G,0BAA4BxhD,OAAOnjB,SAASC,KAAOtE,KAAKwiE,eAAerjE,EAAQ+nD,aACvG,CAAC,EAAalnD,KAAK+hE,iBAAiB/d,iBAAiBkD,EAAa4hB,IAC7E,KAAK,EAED,OADAhmD,EAAGxb,OACI,CAAC,WAQ5BqgE,wBAAwBrpE,UAAU2qE,sBAAwB,WACtD,OAAOv7D,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIs9C,EAAe8J,EAAQjoD,EAAS+oE,EAAa/U,EAAcxT,EAAU7+C,EAAQotB,EACjF,OAAOhgB,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,GADAvO,KAAKiqB,OAAO6J,MAAM,4DACb9zB,KAAK60C,eAAe0I,yBAAwB,GAE7C,OADAv9C,KAAKiqB,OAAO/gB,KAAK,yFACV,CAAC,EAAc,MAG1B,KADAo0C,EAAgBt9C,KAAK60C,eAAewI,0BAGhC,OADAr9C,KAAKiqB,OAAOI,QAAQ,0GACb,CAAC,EAAc,MAE1B+8B,EAAS9J,EAAc8J,OAAQjoD,EAAUmO,OAAOgwC,EAAe,CAAC,WAC5D8J,GACApnD,KAAKiqB,OAAOI,QAAQ,wMAExBrqB,KAAK60C,eAAeroB,WAAWxsB,KAAK60C,eAAewD,iBAAiB/iC,EAAmBgnC,iBACvF4rB,EAAc,CACVthE,OAAQuO,EAAsBqzD,SAC9BrpE,QAASA,GAEbg0D,EAAe/mB,GAAUC,aACzBvpB,EAAGvU,MAAQ,EACf,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBb,KAAKiqB,OAAOI,QAAQ,qFACb,CAAC,EAAarqB,KAAKgiE,qBAAqByG,YAAYP,IAC/D,KAAK,EAKD,OAJAvoB,EAAW78B,EAAGxb,OACdtH,KAAK0oE,uBAAuB/oB,GAC5B7+C,EAASd,KAAK2oE,qBAAqBhpB,EAAUxgD,EAASg0D,GACtDnzD,KAAK60C,eAAe0H,0BAAyB,GACtC,CAAC,EAAcz7C,GAC1B,KAAK,EAGD,MAFAotB,EAAMpL,EAAGxb,OACTtH,KAAK60C,eAAe0H,0BAAyB,GACvCruB,EACV,KAAK,EAAG,MAAO,CAAC,WAShCy5C,wBAAwBrpE,UAAUkpE,OAAS,WAEvC,OADAxnE,KAAKiqB,OAAO6J,MAAM,4CACXjpB,QAAQjL,OAAO,+BAQ1B+nE,wBAAwBrpE,UAAUqqE,qBAAuB,SAAUhpB,EAAUxgD,EAASg0D,GAClF,OAAOzlD,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIo0B,EAAW80C,EAAyB1V,EAAY9M,EAAuBpiB,EAAexjC,EAC1F,OAAOoN,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,GADAvO,KAAKiqB,OAAO6J,MAAM,0DACd6rB,EAASre,QAAQt9B,KAAO7E,EAAQmjC,UAEhC,MAAM,GAAgB+iC,wBAE1B,MAAO,CAAC,EAAarlE,KAAK0iE,uBAAuBvjE,EAAQi1B,YAC7D,KAAK,EAMD,OALAA,EAAYtR,EAAGxb,OACf4hE,EAA0B90C,EAAUoN,oBACpCgyB,EAAaxzD,KAAKmpE,iBAAiBxpB,GACnC+G,EAAwB1mD,KAAKopE,4BAA4BzpB,EAAU6T,GACnElvB,EAAgBtkC,KAAKqpE,oBAAoB1pB,EAAU+G,EAAuB8M,EAAY0V,GAC/E,CAAC,EAAalpE,KAAKi0D,6BAA6BtU,EAAUxgD,EAASq0D,EAAYlvB,EAAelQ,EAAUuhC,mBAAoBxC,IACvI,KAAK,EAKD,OAJAryD,EAASgiB,EAAGxb,OAEZtH,KAAKspE,aAAahlC,GAClBtkC,KAAKupE,kBAAkB5pB,EAAUxgD,EAASunD,EAAuBpiB,EAAekvB,EAAY1yD,EAAOokC,YAAapkC,EAAOg6B,SAAUq4B,GAC1H,CAAC,EAAcryD,WAU1C6mE,wBAAwBrpE,UAAU6qE,iBAAmB,SAAUxpB,GAC3D,OAAO,IAAI,GAAUA,EAASiU,UAAY9jD,EAAU4B,aAAc1R,KAAKgvB,gBAQ3E24C,wBAAwBrpE,UAAU8qE,4BAA8B,SAAUzpB,EAAU6T,GAGhF,OAD4B,GAAcrxB,sBAAsBwd,EAASkT,aAAe/iD,EAAU4B,aAAcygB,GAAc4oC,QAAS/6D,KAAKiqB,OAAQjqB,KAAKgvB,cAAewkC,IAW5KmU,wBAAwBrpE,UAAU+qE,oBAAsB,SAAU1pB,EAAU+G,EAAuB8M,EAAYp/B,GAC3G,OAAO,GAAc0M,cAAc6e,EAASkT,YAAanM,EAAuB8M,OAAYruD,OAAWA,OAAWA,EAAWivB,EAAWurB,EAASre,QAAQt9B,KAQ7J2jE,wBAAwBrpE,UAAUkrE,eAAiB,SAAU7pB,EAAUxgD,GACnE,OAAOwgD,EAAStiB,MAAQ,GAASE,WAAWoiB,EAAStiB,OAAS,GAASE,WAAWp+B,EAAQk+B,QAO9FsqC,wBAAwBrpE,UAAUmrE,uBAAyB,SAAU9pB,EAAUxgD,GAC3E,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIy1D,EAAmBiU,EACvB,OAAOx7D,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACD,GAAMpP,EAAQ66B,YAAcjmB,EAAqBm1B,IAAM,MAAO,CAAC,EAAa,GAM5E,GAAIyW,EAASgqB,IAET,OADA3pE,KAAKiqB,OAAO6J,MAAM,8DACX,CAAC,EAAc6rB,EAASgqB,KAanC,GAXAlU,EAAoB,IAAI,GAAkBz1D,KAAKgvB,eAC/C06C,EAAgB,CACZh5C,sBAAuBvxB,EAAQuxB,sBAC/BE,mBAAoBzxB,EAAQyxB,mBAC5B+1B,UAAWxnD,EAAQwnD,UACnBgL,SAAUxyD,EAAQwyD,WAMjBxyD,EAAQ2mB,MACT,MAAM,GAAgB1E,0BAE1B,MAAO,CAAC,EAAaq0C,EAAkBhE,aAAa9R,EAASyU,aAAcj1D,EAAQ2mB,MAAO4jD,IAC9F,KAAK,EAAG,MAAO,CAAC,EAAc5mD,EAAGxb,QACjC,KAAK,EAAG,MAAO,CAAC,EAAcq4C,EAASyU,sBAevDuT,wBAAwBrpE,UAAU21D,6BAA+B,SAAUtU,EAAUxgD,EAASq0D,EAAYlvB,EAAelQ,EAAW++B,GAChI,OAAOzlD,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI4pE,EAAMvV,EAAgBwV,EAAmBnqC,EAAK+B,EAAKqoC,EAAqB9vC,EAC5E,OAAO9rB,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAMD,OALAq7D,EAAO5pE,KAAK+pE,+BAA+BpqB,GAC3C0U,EAAiB1U,EAAStiB,MAAQ,GAASE,WAAWoiB,EAAStiB,OAAS,GAASE,WAAWp+B,EAAQk+B,OACpGwsC,EAAoBlqB,EAASre,QAAQ0oC,YAAc,GACnDtqC,EAAMmqC,EAAuB,KAAKrW,EAAWr8C,OAAOuqB,KAAO8xB,EAAWr8C,OAAOwqB,KAAO7xB,EAAU4B,aAC9F+vB,EAAMooC,EAA4B,UAAKrW,EAAWr8C,OAAOsqB,KAAO3xB,EAAU4B,aACnE,CAAC,EAAa1R,KAAKypE,uBAAuB9pB,EAAUxgD,IAC/D,KAAK,EAmBD,OAlBA2qE,EAAsBhnD,EAAGxb,OACzB0yB,EAAa76B,EAAQ66B,YAAcjmB,EAAqBm1B,IAAOn1B,EAAqBm1B,IAAMn1B,EAAqB2mB,OAiBxG,CAAC,EAhBC,CACLtG,UAAWA,EACXwhC,SAAUl2B,EACV5E,SAAU2G,EACVzpB,OAAQq8C,EAAel2B,UACvBmD,QAASgD,EAAc5D,iBACvB7F,QAAS8kB,EAASiU,SAClBjzB,cAAe6yB,EAAWr8C,OAC1B+tB,YAAa4kC,EACbjU,YAAW+T,GAAO5pE,KAAKiqE,oBAAoBL,GAC3Cp9B,UAAW,IAAIrZ,KAAkD,IAA7CwZ,OAAOwmB,EAAexT,EAAS4U,aACnDv6B,UAAWA,EACXxjB,cAAexW,KAAKwW,cACpBhV,MAAOm+C,EAASn+C,MAChBu0D,kBAAkB,YAW1C4R,wBAAwBrpE,UAAUgrE,aAAe,SAAUhlC,GACvD,IAAIluB,EAAQpW,KAEZA,KAAK60C,eAAe7P,WAAWV,GAE/BtkC,KAAK60C,eAAehM,qBAAqBvE,GAAetjC,OAAM,SAAUP,GACpE2V,EAAM6T,OAAOphB,MAAM,uEAAyEpI,OAapGknE,wBAAwBrpE,UAAUirE,kBAAoB,SAAU5pB,EAAUxgD,EAASunD,EAAuBpiB,EAAekvB,EAAYsW,EAAqBhvC,EAAUq4B,GAChK,IAAI5pB,EAAgB,GAAc3O,oBAAoB8rB,EAAuBvnD,EAAQi1B,UAAWurB,EAASiU,UAAY9jD,EAAU4B,aAAcvS,EAAQg1B,SAAUq/B,EAAWr8C,OAAOsqB,KAAO3xB,EAAU4B,cAO9LkjD,EAAyBzB,GALZh0D,EAAQ66B,YAAcjmB,EAAqBm1B,IACtDp5B,EAAUwC,oBACsB,iBAAxBqtC,EAAS4U,WACbnO,SAASzG,EAAS4U,WAAY,IAC9B5U,EAAS4U,aAAe,GAE9BF,EAAiBr0D,KAAKwpE,eAAe7pB,EAAUxgD,GAC/CqqC,EAAoB,GAAkByD,wBAAwByZ,EAAuBvnD,EAAQi1B,UAAW01C,EAAqB3qE,EAAQg1B,SAAUq/B,EAC7IA,EAAWr8C,OAAOsqB,KAAO3xB,EAAU4B,aACnCopB,EAAUu5B,EAAel1B,cAAey1B,EAAwB,EAAG50D,KAAKgvB,eAC1Ek7C,EAAoB,IAAIrZ,GAAYvsB,EAAeiF,EAAeC,GACtExpC,KAAK8nE,qBAAqBhjC,gBAAgBolC,IAE9CvC,wBAAwBrpE,UAAUyrE,+BAAiC,SAAUpqB,GACzE,IAAIiqB,EAAO5pE,KAAKmqE,oBAAoBxqB,GACpC,OAAKiqB,GAGL5pE,KAAK8uB,kBAAkB6H,gBAAgB,CACnCyzC,YAAapqE,KAAKgiE,qBAAqBqI,iBACvCC,iBAAkBtqE,KAAKgiE,qBAAqBuI,sBAC5CC,kBAAmBZ,EAAKa,eACxBC,uBAAwBd,EAAKe,sBAC7BC,qBAAsBhB,EAAKiB,oBAC3BC,eAAgBlB,EAAKmB,YACrBC,mBAAoBpB,EAAKqB,gBACzBC,iBAAkBtB,EAAKuB,eACvBC,cAAexB,EAAKyB,WACpBC,eAAgB1B,EAAK2B,YACrBC,oBAAqB5B,EAAK6B,mBAC1BC,kBAAmB9B,EAAK+B,eACxBC,iBAAkBhC,EAAKiC,cACvBC,eAAgBlC,EAAKmC,YACrBC,mBAAoBpC,EAAKqC,kBAC1BjsE,KAAKwW,eACDozD,GAnBI,MAyBfjC,wBAAwBrpE,UAAUoqE,uBAAyB,SAAU/oB,GACjE,GAAIA,EAASphD,eAAe,iBACxBohD,EAASphD,eAAe,aACxBohD,EAASphD,eAAe,gBACxBohD,EAASphD,eAAe,YACxBohD,EAASphD,eAAe,UACxBohD,EAASphD,eAAe,cACxB,OAAOohD,EAGP,MAAM,GAAgBlpC,sBAAsB,0CAQpDkxD,wBAAwBrpE,UAAU6rE,oBAAsB,SAAUxqB,GAC9D,GAAIA,EAASqqB,WAAWkC,KACpB,IACI,OAAOjzD,KAAKkJ,MAAMw9B,EAASqqB,WAAWkC,MAE1C,MAAOzrE,GACHT,KAAKiqB,OAAOphB,MAAM,kFAG1B,OAAO,MAOX8+D,wBAAwBrpE,UAAU2rE,oBAAsB,SAAUL,GAC9D,YAA8B,IAAnBA,EAAKuC,WACZnsE,KAAKiqB,OAAOI,QAAQ,mIACb,KAEFu/C,EAAKuC,WAMlBxE,wBAAwBrpE,UAAU+pE,wBAA0B,SAAUlpE,GAClE,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIo0B,EAAWuhC,EAAoB39C,EAAQo0D,EAAqB1uC,EAAU2uC,EAAWjK,EAAkBsH,EAAkC7R,EACrIzhD,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,OAFAvO,KAAKiqB,OAAO6J,MAAM,4DAClBM,EAAYj1B,EAAQi1B,WAAap0B,KAAK4uD,OAAO0T,KAAKluC,UAC7Cj1B,EAAQmiC,QACN,CAAC,EAAathC,KAAKuiE,yBAAyBnuC,EAAWj1B,EAAQmiC,UADzC,CAAC,EAAa,GAE/C,KAAK,EACDxe,EAAGxb,OACHwb,EAAGvU,MAAQ,EACf,KAAK,EAiCD,OAhCAonD,EAAqB,IAAI,GAAUvhC,IAChBud,gBACnB35B,EAAS7Y,EAAQ6Y,OAAQo0D,EAAsB9+D,OAAOnO,EAAS,CAAC,YAChEu+B,EAAW,IAAI,GAAS1lB,GAAU,KACzBymB,aAAajsB,GACtB65D,EAAY,WAER,OAAQj2D,EAAMgqD,OACV,KAAK3qD,GAAM62D,UACX,KAAK72D,GAAM6xD,8BAEP,OADAlxD,EAAM6T,OAAO6J,MAAM,+DACZnhB,EAAYI,KAG3B,GAAK5T,EAAQioD,OAKb,OAAQjoD,EAAQioD,QACZ,KAAKz0C,EAAYI,KACjB,KAAKJ,EAAYG,QACjB,KAAKH,EAAYC,MAEb,OADAwD,EAAM6T,OAAO6J,MAAM,kEACZ30B,EAAQioD,OACnB,QAEI,MADAhxC,EAAM6T,OAAO6J,MAAM,qCAAuC30B,EAAQioD,OAAS,uCACrE,GAAiB5gC,oDAZ3BpQ,EAAM6T,OAAO6J,MAAM,qDAe3BsuC,EAAmBh1D,SAASA,SAAS,GAAIg/D,GAAsB,CAAE9pC,UAAWtiC,KAAKsiC,UAAWnO,SAAUn0B,KAAK4uD,OAAO0T,KAAKnuC,SAAUC,UAAWuhC,EAAmBn6B,UAAW6B,MAAOK,EAASyB,cAAe+nB,YAAalnD,KAAKwiE,eAAerjE,EAAQ+nD,aAAcE,OAAQilB,IAAa71D,cAAexW,KAAKwW,cAAewjB,UAAW76B,EAAQorC,qBAAsBgiC,qBAAsBnoE,SAASooE,MAAOC,gBAAiBr/D,SAASA,SAASA,SAAS,GAAIjO,EAAQs5D,sBAAuBt5D,EAAQyxD,sBAAuB,CAAEhB,UAAW/3C,KAAmC60D,qBAAqB,IAEpjBvtE,EAAQorC,uBAAyBx2B,EAAqBm1B,IAAa,CAAC,EAAa,IACvFwgC,EAAgB,CACZ94C,mBAAoBzxB,EAAQyxB,mBAC5BF,sBAAuBvxB,EAAQuxB,sBAC/Bi2B,UAAWxnD,EAAQwnD,UACnBgL,SAAUxyD,EAAQwyD,UAGf,CAAC,EADY,IAAI,GAAkB3xD,KAAKgvB,eACRgiC,YAAY0Y,KACvD,KAAK,EACD7R,EAAa/0C,EAAGxb,OAEhB86D,EAAiBnR,OAAS4G,EAAW3G,aACrCkR,EAAiBt8C,MAAQ+xC,EAAWj/C,IACpCkK,EAAGvU,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,EAAc6zD,WAKvCuF,wBA7jBiC,CA8jB1C,IChkBE,GAAsC,WACtC,SAASgF,qBAAqB1iD,EAAQ2iD,EAAoB99C,EAAmBs7C,GACzEpqE,KAAKiqB,OAASA,EACdjqB,KAAK4sE,mBAAqBA,EAC1B5sE,KAAKoqE,YAAcA,EACnBpqE,KAAK6sE,UAAY,IAAIx/C,IACrBrtB,KAAK8sE,mBAAqB,IAAIz/C,IAC9BrtB,KAAK+sE,WAAa,EAClB/sE,KAAKgtE,eAAiB,IAAIC,eAC1BjtE,KAAKktE,eAAiBltE,KAAKmtE,gBAAgBnvE,KAAKgC,MAChDA,KAAK8uB,kBAAoBA,EACzB9uB,KAAKotE,eAAiBt+C,EAAkBmB,iBAAiB/iB,EAAkBmgE,+BAmP/E,OA7OAV,qBAAqBruE,UAAUmqE,YAAc,SAAUt6D,GACnD,OAAOT,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIstE,EACAl3D,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAW/B,OAVA9iB,KAAKiqB,OAAO6J,MAAM,8CAClBw5C,EAAM,CACFC,QAAS11D,GACTuyD,YAAapqE,KAAKoqE,YAClB2C,WAAY/sE,KAAK+sE,aACjB5+D,KAAMA,GAEVnO,KAAKiqB,OAAO6J,MAAM,+DAClB9zB,KAAKiqB,OAAO+J,SAAS,gEAAkE/a,KAAKC,UAAUo0D,IACtGttE,KAAKgtE,eAAeQ,MAAMC,YAAYH,GAC/B,CAAC,EAAc,IAAIziE,SAAQ,SAAUrL,EAASI,GAC7CwW,EAAMy2D,UAAUv/C,IAAIggD,EAAIP,WAAY,CAAEvtE,QAASA,EAASI,OAAQA,eAWpF+sE,qBAAqBe,eAAiB,SAAUzjD,EAAQ2iD,EAAoB99C,GACxE,OAAOphB,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI2tE,EAAmBC,EACvB,OAAO1/D,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACD0b,EAAO6J,MAAM,iDACbhR,EAAGvU,MAAQ,EACf,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IAEf,CAAC,GADR8sE,EAAoB,IAAIhB,qBAAqB1iD,EAAQ2iD,EAAoB99C,EAAmBjX,KACrDg2D,wBAC3C,KAAK,EAED,OADA/qD,EAAGxb,OACI,CAAC,EAAcqmE,GAC1B,KAAK,EAGD,OAFA7qD,EAAGxb,OAEI,CAAC,GADRsmE,EAAiB,IAAIjB,qBAAqB1iD,EAAQ2iD,EAAoB99C,IAClC++C,wBACxC,KAAK,EAED,OADA/qD,EAAGxb,OACI,CAAC,EAAcsmE,GAC1B,KAAK,EAAG,MAAO,CAAC,WAQhCjB,qBAAqBruE,UAAUuvE,qBAAuB,WAClD,OAAOngE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIstE,EACAl3D,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAoB/B,OAnBA9iB,KAAKiqB,OAAO6J,MAAM,uDAElBtM,OAAOkB,iBAAiB,UAAW1oB,KAAKktE,gBAAgB,GACxDI,EAAM,CACFC,QAAS11D,GACTuyD,YAAapqE,KAAKoqE,YAClB2C,WAAY/sE,KAAK+sE,aACjB5+D,KAAM,CACFvH,OAAQuO,EAAsB24D,mBAGtC9tE,KAAKotE,eAAez2C,gBAAgB,CAChCyzC,YAAapqE,KAAKoqE,YAClB2D,4BAA6B/tE,KAAK4sE,qBAEtC5sE,KAAKgtE,eAAeQ,MAAMQ,UAAY,SAAUriD,GAC5CvV,EAAM63D,iBAAiBtiD,IAE3BnE,OAAOimD,YAAYH,EAAK9lD,OAAOy6B,OAAQ,CAACjiD,KAAKgtE,eAAekB,QACrD,CAAC,EAAc,IAAIrjE,SAAQ,SAAUrL,EAASI,GAC7CwW,EAAM02D,mBAAmBx/C,IAAIggD,EAAIP,WAAY,CAAEvtE,QAASA,EAASI,OAAQA,IACzEwW,EAAM+3D,UAAY3mD,OAAOulB,YAAW,WAKhCvlB,OAAOs9B,oBAAoB,UAAW1uC,EAAM82D,gBAAgB,GAC5D92D,EAAM42D,eAAeQ,MAAM1hD,QAC3B1V,EAAM42D,eAAekB,MAAMpiD,QAC3B1V,EAAMg3D,eAAev8C,eAAe,CAAEu9C,4BAA4B,EAAMt9C,SAAS,IACjFlxB,EAAO,GAAiBwmB,qCACxBhQ,EAAM02D,mBAAmBpgD,OAAO4gD,EAAIP,cACrC32D,EAAMw2D,+BAS7BD,qBAAqBruE,UAAU6uE,gBAAkB,SAAUxhD,GAGvD,GAFA3rB,KAAKiqB,OAAO6J,MAAM,iDAEdnI,EAAM0iD,SAAW7mD,OAArB,CAGA,IAAIroB,EAAUwsB,EAAM1Q,KACpB,GAAK9b,EAAQouE,SAAWpuE,EAAQouE,UAAY11D,MAGxC1Y,EAAQirE,aAAejrE,EAAQirE,cAAgBpqE,KAAKoqE,cAGpDjrE,EAAQgP,KAAKvH,SAAWuO,EAAsB24D,iBAAkB,CAEhE9tE,KAAKiqB,OAAOI,QAAQlrB,EAAQirE,YAAc,sBAAwBjrE,EAAQirE,YAAc,iBAAmB,0BAC3GkE,aAAatuE,KAAKmuE,WAClBnuE,KAAKgtE,eAAeQ,MAAM1hD,QAC1B9rB,KAAKgtE,eAAekB,MAAMpiD,QAC1BtE,OAAOs9B,oBAAoB,UAAW9kD,KAAKktE,gBAAgB,GAC3D,IAAIqB,EAAoBvuE,KAAK8sE,mBAAmBzvE,IAAI8B,EAAQ4tE,YACxDwB,IACAvuE,KAAKotE,eAAev8C,eAAe,CAAEC,SAAS,EAAO09C,oBAAoB,IACzED,EAAkB3uE,OAAO,GAAiBymB,8CAQtDsmD,qBAAqBruE,UAAU2vE,iBAAmB,SAAUtiD,GACxD3rB,KAAKiqB,OAAO6J,MAAM,mDAClB,IAAI30B,EAAUwsB,EAAM1Q,KAChBwzD,EAAWzuE,KAAK6sE,UAAUxvE,IAAI8B,EAAQ4tE,YACtCwB,EAAoBvuE,KAAK8sE,mBAAmBzvE,IAAI8B,EAAQ4tE,YAC5D,IACI,IAAInmE,EAASzH,EAAQgP,KAAKvH,OAC1B,GAAIA,IAAWuO,EAAsBu5D,SAAU,CAC3C,IAAKD,EACD,OAEJ,IAAI9uB,EAAWxgD,EAAQgP,KAAKwxC,SAG5B,GAFA3/C,KAAKiqB,OAAO6J,MAAM,mEAClB9zB,KAAKiqB,OAAO+J,SAAS,oEAAsE/a,KAAKC,UAAUymC,IAClF,YAApBA,EAASzpB,OACTu4C,EAAS7uE,OAAO,GAAgBolE,YAAYrlB,EAAS9pC,KAAM8pC,EAASglB,YAAahlB,EAASilB,UAEzF,KAAIjlB,EAAS7+C,OASd,MAAM,GAAU2V,sBAAsB,kCARlCkpC,EAAS7+C,OAAa,MAAK6+C,EAAS7+C,OAAoB,YACxD2tE,EAAS7uE,OAAO,GAAgBolE,YAAYrlB,EAAS7+C,OAAa,KAAG6+C,EAAS7+C,OAAoB,YAAG6+C,EAAS7+C,OAAY,MAG1H2tE,EAASjvE,QAAQmgD,EAAS7+C,QAMlCd,KAAK6sE,UAAUngD,OAAOvtB,EAAQ4tE,iBAE7B,GAAInmE,IAAWuO,EAAsBw5D,kBAAmB,CACzD,IAAKJ,EACD,OAEJD,aAAatuE,KAAKmuE,WAClB3mD,OAAOs9B,oBAAoB,UAAW9kD,KAAKktE,gBAAgB,GAC3DltE,KAAKoqE,YAAcjrE,EAAQirE,YAC3BpqE,KAAKsqE,iBAAmBnrE,EAAQgP,KAAKid,QACrCprB,KAAKiqB,OAAOI,QAAQ,qEAAuErqB,KAAKoqE,aAChGpqE,KAAKotE,eAAev8C,eAAe,CAAE29C,oBAAoB,EAAM19C,SAAS,IACxEy9C,EAAkB/uE,UAClBQ,KAAK8sE,mBAAmBpgD,OAAOvtB,EAAQ4tE,aAI/C,MAAOlnE,GACH7F,KAAKiqB,OAAOphB,MAAM,6CAClB7I,KAAKiqB,OAAOsJ,SAAS,8CAAgD1tB,EAAI9G,YACzEiB,KAAKiqB,OAAOsJ,SAAS,mBAAqB5H,GACtC8iD,EACAA,EAAS7uE,OAAOiG,GAEX0oE,GACLA,EAAkB3uE,OAAOiG,KAQrC8mE,qBAAqBruE,UAAU+rE,eAAiB,WAC5C,OAAOrqE,KAAKoqE,aAMhBuC,qBAAqBruE,UAAUisE,oBAAsB,WACjD,OAAOvqE,KAAKsqE,kBAShBqC,qBAAqBiC,kBAAoB,SAAUhgB,EAAQ3kC,EAAQ4kD,EAAyBtkC,GAExF,GADAtgB,EAAO6J,MAAM,6BACR86B,EAAOqT,OAAO5e,kBAGf,OAFAp5B,EAAO6J,MAAM,yEAEN,EAEX,IAAK+6C,EAGD,OAFA5kD,EAAO6J,MAAM,kFAEN,EAEX,GAAIyW,EACA,OAAQA,GACJ,KAAKx2B,EAAqB2mB,OAC1B,KAAK3mB,EAAqBm1B,IAEtB,OADAjf,EAAO6J,MAAM,yEACN,EACX,QAEI,OADA7J,EAAO6J,MAAM,8EACN,EAGnB,OAAO,GAEJ64C,qBA9P8B,GCErC,GAAoC,WACpC,SAASmC,mBAAmBC,EAAgBlN,EAAa9kB,EAAiB9yB,EAAQ6E,GAC9E9uB,KAAKgvE,WAAaD,EAClB/uE,KAAK60C,eAAiBgtB,EACtB7hE,KAAK+8C,gBAAkBA,EACvB/8C,KAAKiqB,OAASA,EACdjqB,KAAK8uB,kBAAoBA,EAyI7B,OAnIAggD,mBAAmBxwE,UAAU2wE,2BAA6B,SAAU16B,EAAc/yC,EAAO4yB,EAAW86C,GAChG,OAAOxhE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIy8C,EAAU8Y,EAAc4Z,EAC5B,OAAOjhE,YAAYlO,MAAM,SAAU8iB,GAI/B,GAHA9iB,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBkiE,2BAA4BpvE,KAAK+8C,gBAAgBvmC,eAC9GxW,KAAKiqB,OAAOI,QAAQ,gDAEhB,GAAY3I,QAAQ6yB,GACpB,MAAM,GAAiB3wB,qBAAqB2wB,GAIhD,GAFAkI,EAAWz8C,KAAK60C,eAAeuG,iBAAiB55C,KAChD+zD,EAAev1D,KAAK60C,eAAe2E,kBAAkBiD,IAEjD,MAAM,GAAgB39B,yBAAyB,gBAEnD,IACIqwD,EAAmBnvE,KAAKgvE,WAAW9X,uBAAuB3iB,EAAcghB,GAE5E,MAAO90D,GACH,MAAIA,aAAa,IAAeA,EAAE6V,WAAagN,GAA2CzN,KAEhF,GAAiBwO,2BAGjB5jB,EAId,OADAT,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBmiE,6BAA8BrvE,KAAK+8C,gBAAgBvmC,eACrG,CAAC,EAAcxW,KAAKsvE,6BAA6BH,EAAkB3tE,EAAO4yB,EAAW86C,WAYxGJ,mBAAmBxwE,UAAUgxE,6BAA+B,SAAUH,EAAkB3tE,EAAO4yB,EAAW86C,EAAeK,GAErH,YADsB,IAAlBA,IAA4BA,GAAgB,GACzC7hE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIy8C,EAAU8Y,EAAcia,EAAUC,EAAaC,EAAeC,EAClE,OAAOzhE,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAKD,GAJAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBmiE,6BAA8BrvE,KAAK+8C,gBAAgBvmC,eAChHxW,KAAKiqB,OAAO6J,MAAM,0DAClB2oB,EAAWz8C,KAAK60C,eAAeuG,iBAAiB55C,KAChD+zD,EAAev1D,KAAK60C,eAAe2E,kBAAkBiD,IAEjD,MAAM,GAAgB39B,yBAAyB,gBAMnD,OAJA0wD,EAAWxvE,KAAK60C,eAAeqG,iBAAiBqa,GAChDka,EAAczvE,KAAK60C,eAAe2E,kBAAkBg2B,GAEpDxvE,KAAK+8C,gBAAgBlnC,KAAOs5D,EAAiBt5D,KACxCs5D,EAAiBS,0BACtB5vE,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkB2iE,6BAA8B7vE,KAAK+8C,gBAAgBvmC,eACrG,CAAC,EAAaxW,KAAK8vE,6BAA6BX,EAAiBS,yBAA0Bx7C,EAAW86C,KAFtD,CAAC,EAAa,GAGzE,KAAK,EACDpsD,EAAGxb,OACHwb,EAAGvU,MAAQ,EACf,KAAK,EAkBD,OAhBIghE,IACAJ,EAAiBlsC,MAAQwsC,QAAetqE,GAE5CgqE,EAAiB3tE,MAAQ+zD,EAErB4Z,EAAiBtc,YACjB7yD,KAAK+8C,gBAAgBhc,WAAaouC,EAAiBtc,aAGnD6c,EAAgB1vE,KAAK+vE,yBAEjB/vE,KAAK+8C,gBAAgBlB,cAAgB6zB,GAI7C1vE,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkB0pD,uBAAwB52D,KAAK+8C,gBAAgBvmC,eAC/F,CAAC,EAAaxW,KAAKgvE,WAAWzY,aAAav2D,KAAK+8C,gBAAiBoyB,IAC5E,KAAK,EAGD,OAFAQ,EAAgB7sD,EAAGxb,OACnBtH,KAAK60C,eAAe2H,oBAAoBh7C,GACjC,CAAC,EAAcmuE,WAW1Cb,mBAAmBxwE,UAAUwxE,6BAA+B,SAAUE,EAAuB57C,EAAW86C,GACpG,OAAOxhE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIiwE,EAA2BC,EAC/B,OAAOhiE,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,OAFAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkB2iE,6BAA8B7vE,KAAK+8C,gBAAgBvmC,eAChHy5D,EAA4B,WAAaD,EAAwB,IAAM57C,EAAUmrB,OAAS,IACnF,CAAC,EAAa,GAAiBmgB,yBAAyBuQ,EAA2Bf,EAAelvE,KAAK60C,eAAgBzgB,EAAUnyB,QAASjC,KAAKiqB,OAAQjqB,KAAK8uB,kBAAmB9uB,KAAK+8C,gBAAgBvmC,gBAC/M,KAAK,EAGD,OAFA05D,EAAyBptD,EAAGxb,OAC5BtH,KAAKgvE,WAAWze,gBAAgB2f,GACzB,CAAC,WAQ5BpB,mBAAmBxwE,UAAUyxE,oBAAsB,WAE/C,IAAIL,EAAgB1vE,KAAK60C,eAAe2E,kBAAkBlkC,EAAmBymC,gBAAgB,GAC7F,GAAI2zB,EACA,IACI,OAAOz2D,KAAKkJ,MAAMutD,GAEtB,MAAOjvE,GACHT,KAAKgvE,WAAW/kD,OAAOphB,MAAM,wCAC7B7I,KAAKgvE,WAAW/kD,OAAOsJ,SAAS,yCAA2Cm8C,GAGnF,OAAO,MAEJZ,mBA/I4B,GCGnC,GAA6B,SAAU/4D,GAEvC,SAASo6D,YAAYvhB,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmB+4C,EAAmB7F,EAAsBxrD,GACzJ,IAAIJ,EAAQL,EAAOpZ,KAAKqD,KAAM4uD,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmBkzC,EAAsBxrD,IAAkBxW,KAIrK,OAFAoW,EAAMg6D,aAAeh6D,EAAMg6D,aAAapyE,KAAKoY,GAC7CA,EAAMi6D,cAAgBxI,EACfzxD,EAoeX,OA1eApJ,UAAUmjE,YAAap6D,GAYvBo6D,YAAY7xE,UAAUi4D,aAAe,SAAUp3D,GAC3C,IACI,IAAImxE,EAAYtwE,KAAKuwE,kBAAkBpxE,EAAQ6Y,QAAUxF,EAAqBrT,EAAQi1B,WAAap0B,KAAK4uD,OAAO0T,KAAKluC,WAChHo8C,EAAwBrxE,EAAQqxE,uBAAyB,GAE7D,GAAIxwE,KAAK4uD,OAAOqT,OAAOwO,YAGnB,OAFAzwE,KAAKiqB,OAAOI,QAAQ,4CAEbrqB,KAAK0wE,uBAAuBvxE,EAASmxE,EAAWE,GAIvDxwE,KAAKiqB,OAAOI,QAAQ,iEACpB,IAAIsmD,EAAQ3wE,KAAK4wE,eAAe,cAAeN,EAAWE,GAC1D,OAAOxwE,KAAK0wE,uBAAuBvxE,EAASmxE,EAAWE,EAAuBG,GAGtF,MAAOlwE,GACH,OAAOoK,QAAQjL,OAAOa,KAO9B0vE,YAAY7xE,UAAUkpE,OAAS,SAAUlQ,GACrC,IACIt3D,KAAKiqB,OAAOI,QAAQ,sBACpB,IAAI+4C,EAAqBpjE,KAAKmjE,wBAAwB7L,GAClDgZ,EAAYtwE,KAAK6wE,wBAAwBzN,GACzChvC,EAAYkjC,GAAiBA,EAAcljC,UAC3C08C,EAAwBxZ,GAAiBA,EAAcwZ,sBACvDN,GAAyBlZ,aAAqD,EAASA,EAAckZ,wBAA0B,GAEnI,GAAIxwE,KAAK4uD,OAAOqT,OAAOwO,YAGnB,OAFAzwE,KAAKiqB,OAAOI,QAAQ,2BAEbrqB,KAAK+wE,iBAAiB3N,EAAoBkN,EAAWE,EAAuBp8C,OAAWjvB,EAAW2rE,GAIzG9wE,KAAKiqB,OAAOI,QAAQ,0CACpB,IAAIsmD,EAAQ3wE,KAAK4wE,eAAe,cAAeN,EAAWE,GAC1D,OAAOxwE,KAAK+wE,iBAAiB3N,EAAoBkN,EAAWE,EAAuBp8C,EAAWu8C,EAAOG,GAG7G,MAAOrwE,GAEH,OAAOoK,QAAQjL,OAAOa,KAY9B0vE,YAAY7xE,UAAUoyE,uBAAyB,SAAUvxE,EAASmxE,EAAWE,EAAuBG,GAChG,OAAOjjE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI8tD,EAAwBkjB,EAAcj0B,EAAiBk0B,EAAY1I,EAAgB2I,EAAiCC,EAAaC,EAAoBC,EAAiBC,EAAa3mD,EAAMysC,EAAcma,EAASC,EAAyB5gC,EAA0BxpB,EACnQhR,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAID,OAHAvO,KAAKiqB,OAAOI,QAAQ,iCACpByjC,EAAyB9tD,KAAK2iE,iCAAiCltD,GAAMg8D,mBACrEzxE,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBq3D,wDAAyDplE,EAAQqX,eACnH,CAAC,EAAaxW,KAAKokE,+BAA+BjlE,EAASuW,GAAgBg8D,QACtF,KAAK,EACDV,EAAeluD,EAAGxb,OAClBtH,KAAK60C,eAAe6G,mBAAmBs1B,EAAaxvE,MAAOwvE,EAAa/tC,MAAO+tC,EAAa58C,UAAW48C,EAAa93B,WAAappC,EAAU4B,aAAcs/D,EAAa1vC,SAAW,MACjLxe,EAAGvU,MAAQ,EACf,KAAK,EAID,OAHAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IAEtBb,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBg2D,4DAA6D/jE,EAAQqX,eACvH,CAAC,EAAaxW,KAAKgjE,mCAAmCgO,IACjE,KAAK,EAID,OAHAj0B,EAAkBj6B,EAAGxb,OAErBtH,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBu2D,8CAA+CtkE,EAAQqX,eACzG,CAAC,EAAaxW,KAAKsjE,qBAAqBxV,EAAwBkjB,EAAa58C,UAAW48C,EAAajhB,oBAChH,KAAK,EAQD,OAPAkhB,EAAanuD,EAAGxb,OAChBtH,KAAKiqB,OAAOI,QAAQ,4BACpBk+C,EAAiB,GAAqBqG,kBAAkB5uE,KAAK4uD,OAAQ5uD,KAAKiqB,OAAQjqB,KAAKgiE,qBAAsB7iE,EAAQorC,sBACrH2mC,OAAkC,EAC9B3I,IACA2I,EAAkClxE,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBykE,+BAAgCxyE,EAAQqX,gBAEjI,CAAC,EAAay6D,EAAW/a,eAAe9oD,SAASA,SAAS,GAAI4jE,GAAe,CAAEtY,aAAc6P,MACxG,KAAK,EAUD,OATA4I,EAAcruD,EAAGxb,OACjB8pE,EAAqB,IAAI,GAAmBH,EAAYjxE,KAAK60C,eAAgBkI,EAAiB/8C,KAAKiqB,OAAQjqB,KAAK8uB,mBAChHuiD,EAAkB,CACdV,MAAOA,EACPL,UAAWA,EACXE,sBAAuBA,GAE3Bc,EAActxE,KAAK4xE,oBAAoBT,EAAaE,GACpDrxE,KAAK8hE,aAAa/c,UAAUX,GAAUytB,aAAcn8D,GAAgBg8D,MAAO,CAAEJ,YAAaA,GAAe,MAClG,CAAC,EAAatxE,KAAK8xE,oBAAoBR,IAClD,KAAK,EAMD,GALA3mD,EAAO7H,EAAGxb,OACV8vD,EAAe,GAAUzjB,oBAAoBhpB,GAC7C4mD,EAAUvxE,KAAK8jE,gCAAgC1M,EAAc1hD,GAAgBg8D,MAAOV,EAAax6D,eAEjG,GAAgBiwC,eAAezmD,KAAK60C,eAAgB70C,KAAK4uD,OAAO0T,KAAKnuC,SAAU4oB,GAC3Eqa,EAAa90B,UAAW,CASxB,GARAtiC,KAAKiqB,OAAOI,QAAQ,mDAEhB6mD,GACAA,EAAgCrgD,eAAe,CAC3CC,SAAS,EACTy3C,gBAAgB,KAGnBvoE,KAAKgiE,qBACN,MAAM,GAAiB17C,4CAI3B,OAFAkrD,EAA0B,IAAI,GAAwBxxE,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkBtsD,GAAMg8D,kBAAmBzxE,KAAK8uB,kBAAmB9uB,KAAKgiE,qBAAsB5K,EAAa90B,UAAWtiC,KAAKqwE,cAAeW,EAAax6D,eACxSo6B,EAAmB,GAAcJ,kBAAkBxwC,KAAKgvB,cAAeuiD,GAAS3gC,iBACzE,CAAC,EAAc4gC,EAAwBjb,aAAanpD,SAASA,SAAS,GAAI4jE,GAAe,CAAExvE,MAAOovC,EAAkBwW,YAAQjiD,KAC1HjE,SAAQ,WACTkV,EAAMy+B,eAAe2H,oBAAoB+0B,OAGrD,MAAO,CAAC,EAAaH,EAAmBnC,2BAA2BtkD,EAAM4mD,EAASN,EAAW78C,UAAWp0B,KAAK6mD,gBACjH,KAAK,EAED,MAAO,CAAC,EADC/jC,EAAGxb,QAEhB,KAAK,EAWD,MAVA8f,EAAMtE,EAAGxb,OACLqpE,GAEAA,EAAM7kD,QAEN1E,aAAe,IACfA,EAAI7Q,iBAAiBvW,KAAKwW,eAE9Bs3C,EAAuBiT,mBAAmB35C,GAC1CpnB,KAAK60C,eAAe2H,oBAAoBw0B,EAAaxvE,OAC/C4lB,EACV,KAAK,EAAG,MAAO,CAAC,WAchC+oD,YAAY7xE,UAAUyyE,iBAAmB,SAAUC,EAAcV,EAAWE,EAAuB1N,EAAkB6N,EAAOG,GACxH,OAAOpjE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI8tD,EAAwBmjB,EAAYc,EAAWT,EAAaxI,EAAmBkJ,EAAahkD,EAChG,OAAO9f,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACDvO,KAAKiqB,OAAOI,QAAQ,2BACpBrqB,KAAK8hE,aAAa/c,UAAUX,GAAU6tB,aAAcv8D,GAAgBg8D,MAAOV,GAC3EljB,EAAyB9tD,KAAK2iE,iCAAiCltD,GAAMy8D,aACrEpvD,EAAGvU,MAAQ,EACf,KAAK,EAGD,OAFAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IAEf,CAAC,EAAab,KAAKkiE,mBAAmB8O,EAAa1vC,UAC9D,KAAK,EAKD,OAHAxe,EAAGxb,OAEHtH,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBu2D,8CAA+CuN,EAAax6D,eAC9G,CAAC,EAAaxW,KAAKsjE,qBAAqBxV,EAAwBgV,IAC3E,KAAK,EAOD,OANAmO,EAAanuD,EAAGxb,OAChBtH,KAAKiqB,OAAOI,QAAQ,4BACpB0nD,EAAYd,EAAW5Z,aAAa2Z,GACpChxE,KAAK8hE,aAAa/c,UAAUX,GAAU+tB,eAAgBz8D,GAAgBg8D,MAAOV,GAC7EM,EAActxE,KAAKoyE,UAAUL,EAAW,CAAEzB,UAAWA,EAAWE,sBAAuBA,EAAuBG,MAAOA,IACrH3wE,KAAK8hE,aAAa/c,UAAUX,GAAUytB,aAAcn8D,GAAgBg8D,MAAO,CAAEJ,YAAaA,GAAe,MAClG,CAAC,EAAatxE,KAAKqyE,mBAAmBf,IACjD,KAAK,EAgBD,OAfAxuD,EAAGxb,OACCwpE,GACAhI,EAAoB,CAChB1I,MAAO3qD,GAAMy8D,YACbhuB,QAASlkD,KAAK4uD,OAAOqT,OAAO8G,0BAC5B9kB,WAAW,GAEf+tB,EAAc,GAAU9+B,eAAe49B,EAAuB,GAAaruB,iBAC3EziD,KAAKiqB,OAAOI,QAAQ,2DACpBrqB,KAAKiqB,OAAO4J,WAAW,+BAAiCm+C,GACxDhyE,KAAK+hE,iBAAiBje,iBAAiBkuB,EAAalJ,IAGpD9oE,KAAKiqB,OAAOI,QAAQ,uCAEjB,CAAC,EAAa,GACzB,KAAK,EAaD,MAZA2D,EAAMlL,EAAGxb,OACLqpE,GAEAA,EAAM7kD,QAENkC,aAAe,IACfA,EAAIzX,iBAAiBvW,KAAKwW,eAE9BxW,KAAK60C,eAAe0H,0BAAyB,GAC7Cv8C,KAAK8hE,aAAa/c,UAAUX,GAAUkuB,eAAgB58D,GAAgBg8D,MAAO,KAAM1jD,GACnFhuB,KAAK8hE,aAAa/c,UAAUX,GAAUmuB,WAAY78D,GAAgBg8D,OAClE5jB,EAAuBiT,mBAAmB/yC,GACpCA,EACV,KAAK,EAED,OADAhuB,KAAK8hE,aAAa/c,UAAUX,GAAUmuB,WAAY78D,GAAgBg8D,OAC3D,CAAC,WAS5BvB,YAAY7xE,UAAUszE,oBAAsB,SAAUY,EAAY9vD,GAE9D,GAAK,GAAYhB,QAAQ8wD,GAQrB,MADAxyE,KAAKiqB,OAAOphB,MAAM,yBACZ,GAAiB8a,gCALvB,OAFA3jB,KAAKiqB,OAAO0J,QAAQ,gBAAkB6+C,GAE/BxyE,KAAKoyE,UAAUI,EAAY9vD,IAa1CytD,YAAY7xE,UAAUwzE,oBAAsB,SAAUR,GAClD,IAAIl7D,EAAQpW,KACZ,OAAO,IAAI6K,SAAQ,SAAUrL,EAASI,GAKlC,IAAI6yE,EAAWr8D,EAAMw4C,OAAOqT,OAAOyQ,kBAAoBt8D,EAAMw4C,OAAOqT,OAAO0Q,yBACvEC,EAAQ,EACZx8D,EAAM6T,OAAOI,QAAQ,sDACrB,IAAIwoD,EAAaC,aAAY,WAEzB,GAAIxB,EAAYyB,OAKZ,OAJA38D,EAAM6T,OAAOphB,MAAM,oDACnBuN,EAAM48D,aACNC,cAAcJ,QACdjzE,EAAO,GAAiBykB,4BAG5B,IAAI/f,EAAOwL,EAAU4B,aACjBiZ,EAAO7a,EAAU4B,aACrB,IAMIpN,EAAOgtE,EAAYjtE,SAASC,KAC5BqmB,EAAO2mD,EAAYjtE,SAASsmB,KAEhC,MAAOlqB,IAEH,GAAYihB,QAAQpd,IAAkB,gBAATA,IAGjC8R,EAAM6T,OAAOI,QAAQ,+EAKrBuoD,IACIjoD,GACAvU,EAAM6T,OAAOI,QAAQ,wDACrB4oD,cAAcJ,GACdz8D,EAAM48D,WAAW1B,GACb,GAAUr9B,4BAA4BtpB,IACtCvU,EAAM6T,OAAOI,QAAQ,iFACrB7qB,EAAQmrB,KAGRvU,EAAM6T,OAAOphB,MAAM,+JACnBuN,EAAM6T,OAAOsJ,SAAS,kDAAoD5I,GAC1E/qB,EAAO,GAAiBmkB,kDAGvB6uD,EAAQH,IACbr8D,EAAM6T,OAAOphB,MAAM,6EACnBoqE,cAAcJ,GACdjzE,EAAO,GAAiB0kB,sCAE7BlO,EAAMw4C,OAAOqT,OAAO0Q,8BAQ/BxC,YAAY7xE,UAAU+zE,mBAAqB,SAAUf,GACjD,IAAIl7D,EAAQpW,KACZ,OAAO,IAAI6K,SAAQ,SAAUrL,GACzB4W,EAAM6T,OAAOI,QAAQ,qDACrB,IAAIwoD,EAAaC,aAAY,WAErBxB,EAAYyB,SACZ38D,EAAM6T,OAAOphB,MAAM,mDACnBuN,EAAM48D,aACNC,cAAcJ,GACdrzE,KAEJ,IAAI8E,EAAOwL,EAAU4B,aACrB,IAMIpN,EAAOgtE,EAAYjtE,SAASC,KAEhC,MAAO7D,IAEH,GAAYihB,QAAQpd,IAAkB,gBAATA,IAGjC8R,EAAM6T,OAAOI,QAAQ,wFACrB4oD,cAAcJ,GACdz8D,EAAM48D,WAAW1B,GACjB9xE,OACD4W,EAAMw4C,OAAOqT,OAAO0Q,8BAgB/BxC,YAAY7xE,UAAU8zE,UAAY,SAAUc,EAAaC,GACrD,IACI,IAAI7B,OAAc,EAalB,GAXI6B,EAAYxC,OACZW,EAAc6B,EAAYxC,MAC1B3wE,KAAKiqB,OAAO4J,WAAW,+BAAiCq/C,GACxD5B,EAAYjtE,SAASgJ,OAAO6lE,SAEM,IAAtBC,EAAYxC,QAExB3wE,KAAKiqB,OAAO4J,WAAW,4BAA8Bq/C,GACrD5B,EAActxE,KAAK4wE,eAAesC,EAAaC,EAAY7C,UAAW6C,EAAY3C,yBAGjFc,EACD,MAAM,GAAiBltD,gCAO3B,OALIktD,EAAY8B,OACZ9B,EAAY8B,QAEhBpzE,KAAKqzE,cAAgB/B,EACrB9pD,OAAOkB,iBAAiB,eAAgB1oB,KAAKowE,cACtCkB,EAEX,MAAO7wE,GAGH,MAFAT,KAAKiqB,OAAOphB,MAAM,uBAAyBpI,EAAEmuB,SAC7C5uB,KAAK60C,eAAe0H,0BAAyB,GACvC,GAAiBp4B,uBAAuB1jB,EAAE1B,cAUxDoxE,YAAY7xE,UAAUsyE,eAAiB,SAAUsC,EAAa5C,EAAWE,GACrE,IAAI1tD,EAAIqH,EAAI+W,EAAIC,EAKZmyC,EAAU9rD,OAAO+rD,WAAa/rD,OAAO+rD,WAAa/rD,OAAOgsD,QACzDC,EAASjsD,OAAOksD,UAAYlsD,OAAOksD,UAAYlsD,OAAOmsD,QAKtDC,EAAWpsD,OAAOqsD,YAAczvE,SAAS0vE,gBAAgBC,aAAe3vE,SAAS+J,KAAK4lE,YACtFC,EAAYxsD,OAAOysD,aAAe7vE,SAAS0vE,gBAAgBI,cAAgB9vE,SAAS+J,KAAK+lE,aACzFC,EAAmD,QAA1CrxD,EAAK0tD,EAAsB4D,iBAA8B,IAAPtxD,OAAgB,EAASA,EAAGqxD,MACvF9xE,EAAoD,QAA1C8nB,EAAKqmD,EAAsB4D,iBAA8B,IAAPjqD,OAAgB,EAASA,EAAG9nB,OACxFgyE,EAAqD,QAA9CnzC,EAAKsvC,EAAsB8D,qBAAkC,IAAPpzC,OAAgB,EAASA,EAAGmzC,IACzFE,EAAsD,QAA9CpzC,EAAKqvC,EAAsB8D,qBAAkC,IAAPnzC,OAAgB,EAASA,EAAGozC,KAiB9F,QAhBKJ,GAASA,EAAQ,GAAKA,EAAQP,KAC/B5zE,KAAKiqB,OAAOI,QAAQ,4EACpB8pD,EAAQv8D,MAEPvV,GAAUA,EAAS,GAAKA,EAAS2xE,KAClCh0E,KAAKiqB,OAAOI,QAAQ,8EACpBhoB,EAASuV,MAERy8D,GAAOA,EAAM,GAAKA,EAAML,KACzBh0E,KAAKiqB,OAAOI,QAAQ,iFACpBgqD,EAAMt6D,KAAKy6D,IAAI,EAAKR,EAAY,EAAMp8D,GAAgC,EAAM67D,MAE3Ec,GAAQA,EAAO,GAAKA,EAAOX,KAC5B5zE,KAAKiqB,OAAOI,QAAQ,mFACpBkqD,EAAOx6D,KAAKy6D,IAAI,EAAKZ,EAAW,EAAMh8D,GAA+B,EAAM07D,IAExE9rD,OAAO+D,KAAK2nD,EAAa5C,EAAW,SAAW6D,EAAQ,YAAc9xE,EAAS,SAAWgyE,EAAM,UAAYE,EAAO,qBAK7HpE,YAAY7xE,UAAU8xE,aAAe,SAAU3vE,GAC3CT,KAAK60C,eAAe6H,8BAA8BhnC,GAAgBg8D,OAC9D1xE,KAAKqzE,eACLrzE,KAAKqzE,cAAcvnD,QAGvBrrB,EAAEg0E,kBAMNtE,YAAY7xE,UAAU00E,WAAa,SAAU1B,GACrCA,GAEAA,EAAYxlD,QAGhBtE,OAAOs9B,oBAAoB,eAAgB9kD,KAAKowE,cAEhDpwE,KAAK60C,eAAe0H,0BAAyB,IAOjD4zB,YAAY7xE,UAAUiyE,kBAAoB,SAAUv4D,EAAQoc,GACxD,OAAOxc,GAAqC,IAAM5X,KAAK4uD,OAAO0T,KAAKnuC,SAAW,IAAMnc,EAAO9U,KAAK,KAAO,IAAMkxB,EAAY,IAAMp0B,KAAKwW,eAOxI25D,YAAY7xE,UAAUuyE,wBAA0B,SAAU1xE,GACtD,IAAIk6B,EAAgBl6B,EAAQmiC,SAAWniC,EAAQmiC,QAAQjI,cACvD,OAAOzhB,GAAqC,IAAM5X,KAAK4uD,OAAO0T,KAAKnuC,SAAW,IAAMkF,EAAgB,IAAMr5B,KAAKwW,eAE5G25D,YA3eqB,CA4e9B,ICjfE,GAAiC,SAAUp6D,GAE3C,SAAS2+D,gBAAgB3F,EAAgBlN,EAAa9kB,EAAiB9yB,EAAQ+E,EAAeF,GAC1F,IAAI1Y,EAAQL,EAAOpZ,KAAKqD,KAAM+uE,EAAgBlN,EAAa9kB,EAAiB9yB,EAAQ6E,IAAsB9uB,KAE1G,OADAoW,EAAM4Y,cAAgBA,EACf5Y,EA2HX,OA/HApJ,UAAU0nE,gBAAiB3+D,GAU3B2+D,gBAAgBp2E,UAAUszE,oBAAsB,SAAUY,EAAY9vD,GAClE,OAAOhV,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI8oE,EACJ,OAAO56D,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,OADAvO,KAAKiqB,OAAOI,QAAQ,8CACd,GAAY3I,QAAQ8wD,GAAoB,CAAC,EAAa,IAExD9vD,EAAOiyD,oBACP30E,KAAKiqB,OAAOI,QAAQ,kFACpBrqB,KAAK60C,eAAekB,kBAAkBzgC,EAAmB6mC,WAAYz5B,EAAOiyD,mBAAmB,IAGnG30E,KAAK60C,eAAekB,kBAAkBzgC,EAAmB+mC,eAAgBr8C,KAAK+8C,gBAAgBvmC,eAAe,GAC7GxW,KAAK60C,eAAeiI,iBAAiB98C,KAAK+8C,gBAAiB/8C,KAAKgvB,eAChEhvB,KAAKiqB,OAAO0J,QAAQ,qDAAuD6+C,GAC3E1J,EAAoB,CAChB1I,MAAO3qD,GAAMozD,qBACb3kB,QAASxhC,EAAOkyD,gBAChB3wB,WAAW,GAE4B,mBAA9BvhC,EAAOmyD,mBAA2C,CAAC,EAAa,IAC7E70E,KAAKiqB,OAAOI,QAAQ,8EAED,IADR3H,EAAOmyD,mBAAmBrC,GACH,CAAC,EAAa,IAChDxyE,KAAKiqB,OAAOI,QAAQ,4FACb,CAAC,EAAa3H,EAAOq/C,iBAAiB/d,iBAAiBwuB,EAAY1J,OAC9E,KAAK,EAWL,KAAK,EAED,OADAhmD,EAAGxb,OACI,CAAC,GAVZ,KAAK,EAED,OADAtH,KAAKiqB,OAAOI,QAAQ,+FACb,CAAC,GACZ,KAAK,EAAG,MAAO,CAAC,EAAa,GAC7B,KAAK,EAGD,OADArqB,KAAKiqB,OAAOI,QAAQ,0EACb,CAAC,EAAa3H,EAAOq/C,iBAAiB/d,iBAAiBwuB,EAAY1J,IAI9E,KAAK,EAAG,MAAO,CAAC,EAAa,GAC7B,KAAK,EAGD,MADA9oE,KAAKiqB,OAAO/gB,KAAK,8DACX,GAAiBya,gCAC3B,KAAK,EAAG,MAAO,CAAC,WAShC+wD,gBAAgBp2E,UAAU2wE,2BAA6B,SAAU16B,EAAc/yC,EAAO4yB,EAAW86C,GAC7F,OAAOxhE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIy8C,EAAU8Y,EAAc4Z,EAAkBK,EAAUC,EAAaC,EAAeC,EACpF,OAAOzhE,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,GAFAvO,KAAKiqB,OAAOI,QAAQ,6CAEhB,GAAY3I,QAAQ6yB,GACpB,MAAM,GAAiB3wB,qBAAqB2wB,GAMhD,GAHAv0C,KAAK60C,eAAe0H,0BAAyB,GAC7CE,EAAWz8C,KAAK60C,eAAeuG,iBAAiB55C,KAChD+zD,EAAev1D,KAAK60C,eAAe2E,kBAAkBiD,IAEjD,MAAM,GAAgB39B,yBAAyB,gBAEnD,IACIqwD,EAAmBnvE,KAAKgvE,WAAW9X,uBAAuB3iB,EAAcghB,GAE5E,MAAO90D,GACH,MAAIA,aAAa,IAAeA,EAAE6V,WAAagN,GAA2CzN,KAEhF,GAAiBwO,2BAGjB5jB,EAOd,OAJA+uE,EAAWxvE,KAAK60C,eAAeqG,iBAAiBqa,GAChDka,EAAczvE,KAAK60C,eAAe2E,kBAAkBg2B,GAEpDxvE,KAAK+8C,gBAAgBlnC,KAAOs5D,EAAiBt5D,KACxCs5D,EAAiBS,yBACf,CAAC,EAAa5vE,KAAK8vE,6BAA6BX,EAAiBS,yBAA0Bx7C,EAAW86C,IADtD,CAAC,EAAa,GAEzE,KAAK,EACDpsD,EAAGxb,OACHwb,EAAGvU,MAAQ,EACf,KAAK,EAaD,OAZA4gE,EAAiBlsC,MAAQwsC,QAAetqE,EACxCgqE,EAAiB3tE,MAAQ+zD,EAErB4Z,EAAiBtc,YACjB7yD,KAAK+8C,gBAAgBhc,WAAaouC,EAAiBtc,aAGnD6c,EAAgB1vE,KAAK+vE,yBAEjB/vE,KAAK+8C,gBAAgBlB,cAAgB6zB,GAGtC,CAAC,EAAa1vE,KAAKgvE,WAAWzY,aAAav2D,KAAK+8C,gBAAiBoyB,IAC5E,KAAK,EAGD,OAFAQ,EAAgB7sD,EAAGxb,OACnBtH,KAAK60C,eAAe2H,oBAAoBh7C,GACjC,CAAC,EAAcmuE,WAKnC+E,gBAhIyB,CAiIlC,IC5HE,GAAgC,SAAU3+D,GAE1C,SAAS++D,eAAelmB,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmB+4C,EAAmB7F,EAAsBxrD,GAC5J,IAAIJ,EAAQL,EAAOpZ,KAAKqD,KAAM4uD,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmBkzC,EAAsBxrD,IAAkBxW,KAErK,OADAoW,EAAMi6D,cAAgBxI,EACfzxD,EAuUX,OA3UApJ,UAAU8nE,eAAgB/+D,GAU1B++D,eAAex2E,UAAUi4D,aAAe,SAAUp3D,GAC9C,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIgxE,EAAcljB,EAAwBinB,EAAkBh4B,EAAiBk0B,EAAYG,EAAoBD,EAAawD,EAAmBvtD,EACzIhR,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,OADAvO,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBq3D,wDAAyDplE,EAAQqX,eACnH,CAAC,EAAaxW,KAAKokE,+BAA+BjlE,EAASuW,GAAgBstC,WACtF,KAAK,EACDguB,EAAeluD,EAAGxb,OAClBtH,KAAK60C,eAAe6G,mBAAmBs1B,EAAaxvE,MAAOwvE,EAAa/tC,MAAO+tC,EAAa58C,UAAW48C,EAAa93B,WAAappC,EAAU4B,aAAcs/D,EAAa1vC,SAAW,MACjLwsB,EAAyB9tD,KAAK2iE,iCAAiCltD,GAAMozD,sBACrEkM,EAAmB,SAAUppD,GAErBA,EAAMqpD,YACN5+D,EAAM6T,OAAOI,QAAQ,wEACrBjU,EAAMy+B,eAAe2H,oBAAoBw0B,EAAaxvE,OACtD4U,EAAM0rD,aAAa/c,UAAUX,GAAU6wB,qBAAsBv/D,GAAgBstC,YAGrFlgC,EAAGvU,MAAQ,EACf,KAAK,EAID,OAHAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IAEtBb,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBg2D,4DAA6D/jE,EAAQqX,eACvH,CAAC,EAAaxW,KAAKgjE,mCAAmCgO,IACjE,KAAK,EAID,OAHAj0B,EAAkBj6B,EAAGxb,OAErBtH,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBu2D,8CAA+CtkE,EAAQqX,eACzG,CAAC,EAAaxW,KAAKsjE,qBAAqBxV,EAAwBkjB,EAAa58C,UAAW48C,EAAajhB,oBAChH,KAAK,EAID,OAHAkhB,EAAanuD,EAAGxb,OAChBtH,KAAKiqB,OAAOI,QAAQ,4BACpB+mD,EAAqB,IAAI,GAAgBH,EAAYjxE,KAAK60C,eAAgBkI,EAAiB/8C,KAAKiqB,OAAQjqB,KAAKgvB,cAAehvB,KAAK8uB,mBAC1H,CAAC,EAAamiD,EAAW/a,eAAe9oD,SAASA,SAAS,GAAI4jE,GAAe,CAAEtY,aAAc,GAAqBkW,kBAAkB5uE,KAAK4uD,OAAQ5uD,KAAKiqB,OAAQjqB,KAAKgiE,qBAAsB7iE,EAAQorC,0BAC5M,KAAK,EAMD,OALA4mC,EAAcruD,EAAGxb,OACjBqtE,EAAoB30E,KAAKk1E,qBAAqB/1E,EAAQw1E,mBACtD30E,KAAKiqB,OAAO4J,WAAW,wBAA0B8gD,GAEjDntD,OAAOkB,iBAAiB,WAAYqsD,GAC7B,CAAC,EAAa3D,EAAmBQ,oBAAoBT,EAAa,CACjEpP,iBAAkB/hE,KAAK+hE,iBACvB6S,gBAAiB50E,KAAK4uD,OAAOqT,OAAO8G,0BACpC4L,kBAAmBA,EACnBE,mBAAoB11E,EAAQ01E,sBAExC,KAAK,EAEL,MAAO,CAAC,EAAc/xD,EAAGxb,QACzB,KAAK,EAQD,MAPA8f,EAAMtE,EAAGxb,kBACU,IACf8f,EAAI7Q,iBAAiBvW,KAAKwW,eAE9BgR,OAAOs9B,oBAAoB,WAAYiwB,GACvCjnB,EAAuBiT,mBAAmB35C,GAC1CpnB,KAAK60C,eAAe2H,oBAAoBw0B,EAAaxvE,OAC/C4lB,EACV,KAAK,EAAG,MAAO,CAAC,WAWhC0tD,eAAex2E,UAAU2qE,sBAAwB,SAAUt+C,GACvD,OAAOjd,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI8tD,EAAwBqnB,EAAc3zE,EAAO41D,EAAcge,EAAiBC,EAA2BC,EAAsBC,EAAkBzM,EAAmB0M,EAAuBC,EAAUznD,EACvM,OAAO9f,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACDu/C,EAAyB9tD,KAAK2iE,iCAAiCltD,GAAMwzD,uBACrEnmD,EAAGvU,MAAQ,EACf,KAAK,EAED,GADAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,GAAI,CAAE,MAClBb,KAAK60C,eAAe0I,yBAAwB,GAE7C,OADAv9C,KAAKiqB,OAAO/gB,KAAK,yFACV,CAAC,EAAc,MAG1B,KADAisE,EAAen1E,KAAK01E,wBAAwB/qD,GAAQnD,OAAOnjB,SAASsmB,OAKhE,OAFA3qB,KAAKiqB,OAAO/gB,KAAK,6GACjBlJ,KAAK60C,eAAe6H,8BAA8BhnC,GAAgBstC,UAC3D,CAAC,EAAc,MAE1BxhD,OAAQ,EACR,IACI41D,EAAe,GAAUzjB,oBAAoBwhC,GAC7C3zE,EAAQxB,KAAK8jE,gCAAgC1M,EAAc1hD,GAAgBstC,UAC3EhjD,KAAKiqB,OAAOI,QAAQ,6BAExB,MAAO5pB,GAGH,OAFAT,KAAKiqB,OAAO/gB,KAAK,6DAA+DzI,GAChFT,KAAK60C,eAAe6H,8BAA8BhnC,GAAgBstC,UAC3D,CAAC,EAAc,MAK1B,OAHAoyB,EAAkBp1E,KAAK60C,eAAe2E,kBAAkBlkC,EAAmB6mC,YAAY,IAASrsC,EAAU4B,aAC1G2jE,EAA4B,GAAUljC,kBAAkBijC,GACxDE,EAAuB,GAAUnjC,kBAAkB3qB,OAAOnjB,SAASC,MAC7D+wE,IAA8BC,GAAwBt1E,KAAK4uD,OAAO0T,KAAK0G,2BAE7EhpE,KAAKiqB,OAAOI,QAAQ,kDACb,CAAC,EAAarqB,KAAK21E,WAAWR,EAAc3zE,EAAOssD,KAHsD,CAAC,EAAa,GAIlI,KAAK,EAMD,OALAynB,EAAmBzyD,EAAGxb,OAClB8tE,EAAgB7nE,QAAQ,MAAQ,GAEhC,GAAa40C,YAAYizB,GAEtB,CAAC,EAAcG,GAC1B,KAAK,EACD,OAAMv1E,KAAK4uD,OAAO0T,KAAK0G,0BAAkC,CAAC,EAAa,IACvEhpE,KAAKiqB,OAAOI,QAAQ,yDACb,CAAC,EAAcrqB,KAAK21E,WAAWR,EAAc3zE,EAAOssD,KAC/D,KAAK,EACD,OAAO,GAAazL,eAAgBriD,KAAK4uD,OAAOqT,OAAOnf,sBAA+B,CAAC,EAAa,IAKpG9iD,KAAK60C,eAAekB,kBAAkBzgC,EAAmB8mC,SAAU+4B,GAAc,GACjFrM,EAAoB,CAChB1I,MAAO3qD,GAAMwzD,sBACb/kB,QAASlkD,KAAK4uD,OAAOqT,OAAO8G,0BAC5B9kB,WAAW,GAEfuxB,GAAwB,EACjBJ,GAAuC,SAApBA,EAAoC,CAAC,EAAa,IAC5EK,EAAW,GAAa/yB,cAExB1iD,KAAK60C,eAAekB,kBAAkBzgC,EAAmB6mC,WAAYs5B,GAAU,GAC/Ez1E,KAAKiqB,OAAOuJ,QAAQ,8EACb,CAAC,EAAaxzB,KAAK+hE,iBAAiBje,iBAAiB2xB,EAAU3M,MAC1E,KAAK,EAED,OADA0M,EAAwB1yD,EAAGxb,OACpB,CAAC,EAAa,GACzB,KAAK,EAGD,OADAtH,KAAKiqB,OAAOI,QAAQ,kCAAoC+qD,GACjD,CAAC,EAAap1E,KAAK+hE,iBAAiBje,iBAAiBsxB,EAAiBtM,IACjF,KAAK,EACD0M,EAAwB1yD,EAAGxb,OAC3Bwb,EAAGvU,MAAQ,EACf,KAAK,EAED,IAAKinE,EACD,MAAO,CAAC,EAAcx1E,KAAK21E,WAAWR,EAAc3zE,EAAOssD,IAE/DhrC,EAAGvU,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,EAAc,MAC9B,KAAK,GAOD,MANAyf,EAAMlL,EAAGxb,kBACU,IACf0mB,EAAIzX,iBAAiBvW,KAAKwW,eAE9Bs3C,EAAuBiT,mBAAmB/yC,GAC1ChuB,KAAK60C,eAAe6H,8BAA8BhnC,GAAgBstC,UAC5Dh1B,EACV,KAAK,GAAI,MAAO,CAAC,WAUjC8mD,eAAex2E,UAAUo3E,wBAA0B,SAAU/qD,GAIzD,GAHA3qB,KAAKiqB,OAAOI,QAAQ,kCAEC,GAAU4pB,4BAA4BtpB,GAIvD,OAFA,GAAak3B,UAAUr6B,QACvBxnB,KAAKiqB,OAAOI,QAAQ,2DACbM,EAEX,IAAIirD,EAAa51E,KAAK60C,eAAe2E,kBAAkBlkC,EAAmB8mC,UAAU,GAGpF,OAFAp8C,KAAK60C,eAAeroB,WAAWxsB,KAAK60C,eAAewD,iBAAiB/iC,EAAmB8mC,WACvFp8C,KAAKiqB,OAAOI,QAAQ,iEACburD,GAOXd,eAAex2E,UAAUq3E,WAAa,SAAUhrD,EAAMnpB,EAAOssD,GACzD,OAAOpgD,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIs9C,EAAe8Z,EAAcoa,EAAyB5gC,EAAkBilC,EAAkB5E,EAC1F76D,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAID,GAHA+uC,EAAgBt9C,KAAK60C,eAAeoI,iBAAiBz7C,EAAOxB,KAAKgvB,eACjEhvB,KAAKiqB,OAAOI,QAAQ,gDACpB+sC,EAAe,GAAUzjB,oBAAoBhpB,IAC5B2X,UAAW,CAExB,GADAtiC,KAAKiqB,OAAOI,QAAQ,oDACfrqB,KAAKgiE,qBACN,MAAM,GAAiB17C,4CAI3B,OAFAkrD,EAA0B,IAAI,GAAwBxxE,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkBtsD,GAAMg8D,kBAAmBzxE,KAAK8uB,kBAAmB9uB,KAAKgiE,qBAAsB5K,EAAa90B,UAAWtiC,KAAKqwE,cAAe/yB,EAAc9mC,eACzSo6B,EAAmB,GAAcJ,kBAAkBxwC,KAAKgvB,cAAextB,GAAOovC,iBACvE,CAAC,EAAc4gC,EAAwBjb,aAAanpD,SAASA,SAAS,GAAIkwC,GAAgB,CAAE97C,MAAOovC,EAAkBwW,YAAQjiD,KAC3HjE,SAAQ,WACTkV,EAAMy+B,eAAe2H,oBAAoBh7C,OAIrD,KADAq0E,EAAmB71E,KAAK60C,eAAeyG,mBAAmB95C,IAEtD,MAAM,GAAiB4jB,+BAG3B,OADAplB,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBu2D,8CAA+CnmB,EAAc9mC,eAC/G,CAAC,EAAaxW,KAAKsjE,qBAAqBxV,EAAwB+nB,IAC3E,KAAK,EAKD,OAJA5E,EAAanuD,EAAGxb,OAChBtH,KAAKiqB,OAAOI,QAAQ,4BACpB,GAAgBo8B,eAAezmD,KAAK60C,eAAgB70C,KAAK4uD,OAAO0T,KAAKnuC,SAAUmpB,GAExE,CAAC,EADa,IAAI,GAAgB2zB,EAAYjxE,KAAK60C,eAAgByI,EAAet9C,KAAKiqB,OAAQjqB,KAAKgvB,cAAehvB,KAAK8uB,mBACvFmgD,2BAA2BtkD,EAAMnpB,EAAOyvE,EAAW78C,UAAWp0B,KAAK6mD,gBAC/G,KAAK,EAAG,MAAO,CAAC,EAAc/jC,EAAGxb,gBAUjDwtE,eAAex2E,UAAUkpE,OAAS,SAAUlQ,GACxC,OAAO5pD,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIojE,EAAoBtV,EAAwBgb,EAAmBmI,EAAYc,EAAqB9jD,EACpG,OAAO/f,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EACDvO,KAAKiqB,OAAOI,QAAQ,yBACpB+4C,EAAqBpjE,KAAKmjE,wBAAwB7L,GAClDxJ,EAAyB9tD,KAAK2iE,iCAAiCltD,GAAM+xD,QACrE1kD,EAAGvU,MAAQ,EACf,KAAK,EAID,OAHAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,GAAI,CAAE,KACvBb,KAAK8hE,aAAa/c,UAAUX,GAAU6tB,aAAcv8D,GAAgBstC,SAAUsU,GAEvE,CAAC,EAAat3D,KAAKkiE,mBAAmBkB,EAAmB9hC,UACpE,KAAK,EASD,OAPAxe,EAAGxb,OACHwhE,EAAoB,CAChB1I,MAAO3qD,GAAM+xD,OACbtjB,QAASlkD,KAAK4uD,OAAOqT,OAAO8G,0BAC5B9kB,WAAW,GAEfjkD,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBu2D,8CAA+CL,EAAmB5sD,eACpH,CAAC,EAAaxW,KAAKsjE,qBAAqBxV,EAAwBwJ,GAAiBA,EAAcljC,YAC1G,KAAK,EAKD,OAJA68C,EAAanuD,EAAGxb,OAChBtH,KAAKiqB,OAAOI,QAAQ,4BACpB0nD,EAAYd,EAAW5Z,aAAa+L,GACpCpjE,KAAK8hE,aAAa/c,UAAUX,GAAU+tB,eAAgBz8D,GAAgBstC,SAAUogB,GAC1E9L,GAA6D,mBAArCA,EAAcud,oBAEzB,IADRvd,EAAcud,mBAAmB9C,GACV,CAAC,EAAa,IAChD/xE,KAAKiqB,OAAOI,QAAQ,8DAEfrqB,KAAK60C,eAAe2I,4BACrBx9C,KAAK60C,eAAe0H,0BAAyB,GAE1C,CAAC,EAAav8C,KAAK+hE,iBAAiB/d,iBAAiB+tB,EAAWjJ,KARgB,CAAC,EAAa,GASzG,KAAK,EAED,OADAhmD,EAAGxb,OACI,CAAC,GACZ,KAAK,EAEDtH,KAAK60C,eAAe0H,0BAAyB,GAC7Cv8C,KAAKiqB,OAAOI,QAAQ,iEACpBvH,EAAGvU,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,EAAa,GAC7B,KAAK,EAKD,OAHKvO,KAAK60C,eAAe2I,4BACrBx9C,KAAK60C,eAAe0H,0BAAyB,GAE1C,CAAC,EAAav8C,KAAK+hE,iBAAiB/d,iBAAiB+tB,EAAWjJ,IAC3E,KAAK,EAED,OADAhmD,EAAGxb,OACI,CAAC,GACZ,KAAK,EAAG,MAAO,CAAC,EAAa,IAC7B,KAAK,GAQD,MAPA2mB,EAAMnL,EAAGxb,kBACU,IACf2mB,EAAI1X,iBAAiBvW,KAAKwW,eAE9Bs3C,EAAuBiT,mBAAmB9yC,GAC1CjuB,KAAK8hE,aAAa/c,UAAUX,GAAUkuB,eAAgB58D,GAAgBstC,SAAU,KAAM/0B,GACtFjuB,KAAK8hE,aAAa/c,UAAUX,GAAUmuB,WAAY78D,GAAgBstC,UAC5D/0B,EACV,KAAK,GAED,OADAjuB,KAAK8hE,aAAa/c,UAAUX,GAAUmuB,WAAY78D,GAAgBstC,UAC3D,CAAC,WAS5B8xB,eAAex2E,UAAU42E,qBAAuB,SAAUY,GACtD,IAAInB,EAAoBmB,GAAoBtuD,OAAOnjB,SAASC,KAC5D,OAAO,GAAU4uC,eAAeyhC,EAAmB,GAAalyB,kBAE7DqyB,eA5UwB,CA6UjC,IClVE,GAA+B,SAAU/+D,GAEzC,SAASggE,cAAchH,EAAgBlN,EAAa9kB,EAAiB9yB,EAAQglC,EAAengC,GACxF,IAAI1Y,EAAQL,EAAOpZ,KAAKqD,KAAM+uE,EAAgBlN,EAAa9kB,EAAiB9yB,EAAQ6E,IAAsB9uB,KAG1G,OAFAoW,EAAM4/D,kBAAoB/mB,EAAc+mB,kBACxC5/D,EAAMu8D,yBAA2B1jB,EAAc0jB,yBACxCv8D,EA2IX,OAhJApJ,UAAU+oE,cAAehgE,GAYzBggE,cAAcz3E,UAAUszE,oBAAsB,SAAUY,GACpD,OAAO9kE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAED,GADAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkB+oE,iCAAkCj2E,KAAK+8C,gBAAgBvmC,eAChH,GAAYkL,QAAQ8wD,GAGpB,MADAxyE,KAAKiqB,OAAO/gB,KAAK,yBACX,GAAiBya,gCAE3B,OAAK3jB,KAAKg2E,mBACVh2E,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBgpE,uBAAwBl2E,KAAK+8C,gBAAgBvmC,eAC/F,CAAC,EAAaxW,KAAKm2E,UAAU3D,KAFA,CAAC,EAAa,GAGtD,KAAK,EAAG,MAAO,CAAC,EAAc1vD,EAAGxb,QACjC,KAAK,EAAG,MAAO,CAAC,EAActH,KAAKo2E,cAAc5D,YAUjEuD,cAAcz3E,UAAU+3E,qBAAuB,SAAUC,EAAQpyB,GAC7D,IAAI9tC,EAAQpW,KAEZ,OADAA,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBqpE,kCAAmCv2E,KAAK+8C,gBAAgBvmC,eAC9G,IAAI3L,SAAQ,SAAUrL,EAASI,GAC9BskD,EAAUC,IACV/tC,EAAM6T,OAAOuJ,QAAQ,qEAAuE0wB,EAAU,yBAAjF,yCAMzB,IACIsyB,EADUhvD,OAAOivD,YAAYpgD,MACL6tB,EACxB2uB,EAAaC,aAAY,WACzB,GAAItrD,OAAOivD,YAAYpgD,MAAQmgD,EAI3B,OAHApgE,EAAMsgE,mBAAmBJ,GACzBrD,cAAcJ,QACdjzE,EAAO,GAAiB2kB,mCAG5B,IAAIjgB,EAAOwL,EAAU4B,aACjBowC,EAAgBw0B,EAAOx0B,cAC3B,IAMIx9C,EAAOw9C,EAAgBA,EAAcz9C,SAASC,KAAOwL,EAAU4B,aAEnE,MAAOjR,IACP,IAAI,GAAYihB,QAAQpd,GAAxB,CAGA,IAAIqyE,EAAc70B,EAAgBA,EAAcz9C,SAASsmB,KAAO7a,EAAU4B,aAC1E,OAAI,GAAUuiC,4BAA4B0iC,IAEtCvgE,EAAMsgE,mBAAmBJ,GACzBrD,cAAcJ,QACdrzE,EAAQm3E,SAJZ,KAODvgE,EAAMu8D,8BAQjBoD,cAAcz3E,UAAU63E,UAAY,SAAUjD,GAC1C,IAAI98D,EAAQpW,KAMZ,OALAA,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBgpE,uBAAwBl2E,KAAK+8C,gBAAgBvmC,eAKnG,IAAI3L,SAAQ,SAAUrL,EAASI,GAClC,IAAIg3E,EAAcxgE,EAAMygE,qBACxB9pC,YAAW,WACF6pC,GAILA,EAAYE,IAAM5D,EAClB1zE,EAAQo3E,IAJJh3E,EAAO,2BAKZwW,EAAM4/D,uBAUjBD,cAAcz3E,UAAU83E,cAAgB,SAAUlD,GAC9C,IAAI0D,EAAc52E,KAAK62E,qBAEvB,OADAD,EAAYE,IAAM5D,EACX0D,GAOXb,cAAcz3E,UAAUu4E,mBAAqB,WACzC,IAAIE,EAAY3yE,SAAS4yE,cAAc,UAQvC,OAPAD,EAAU1zE,UAAY,mBACtB0zE,EAAUE,MAAMC,WAAa,SAC7BH,EAAUE,MAAME,SAAW,WAC3BJ,EAAUE,MAAM9C,MAAQ4C,EAAUE,MAAM50E,OAAS,IACjD00E,EAAUE,MAAMG,OAAS,IACzBL,EAAUM,aAAa,UAAW,+CAClCjzE,SAASkzE,qBAAqB,QAAQ,GAAGC,YAAYR,GAC9CA,GAOXhB,cAAcz3E,UAAUo4E,mBAAqB,SAAUJ,GAC/ClyE,SAAS+J,OAASmoE,EAAOtzE,YACzBoB,SAAS+J,KAAKqpE,YAAYlB,IAG3BP,cAjJuB,CAkJhC,IC/IE,GAAoC,SAAUhgE,GAE9C,SAAS0hE,mBAAmB7oB,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkB3B,EAAOtxC,EAAmB+4C,EAAmB7F,EAAsBxrD,GACvK,IAAIJ,EAAQL,EAAOpZ,KAAKqD,KAAM4uD,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmBkzC,EAAsBxrD,IAAkBxW,KAGrK,OAFAoW,EAAMgqD,MAAQA,EACdhqD,EAAMi6D,cAAgBxI,EACfzxD,EAoIX,OAzIApJ,UAAUyqE,mBAAoB1hE,GAW9B0hE,mBAAmBn5E,UAAUi4D,aAAe,SAAUp3D,GAClD,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIqmE,EAAyBa,EAAepZ,EAAwBmjB,EAAY7pD,EAChF,OAAOlZ,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EASD,GARAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBwqE,+BAAgCv4E,EAAQqX,eACrGxW,KAAKiqB,OAAOI,QAAQ,+BACpBg8C,EAA0BrmE,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBwqE,+BAAgCv4E,EAAQqX,eAExH,GAAYkL,QAAQviB,EAAQ+5C,YAAc,GAAYx3B,QAAQviB,EAAQg6C,QAAUh6C,EAAQmiC,SAAW,GAAY5f,QAAQviB,EAAQmiC,QAAQtB,YACvIhgC,KAAKiqB,OAAOuJ,QAAQ,uGAGpBr0B,EAAQioD,QAAWjoD,EAAQioD,SAAWz0C,EAAYI,MAAU5T,EAAQioD,SAAWz0C,EAAYM,WAI3F,MAHAozD,EAAwBx1C,eAAe,CACnCC,SAAS,IAEP,GAAiB/L,6BAA6B5lB,EAAQioD,QAIhE,OADApnD,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBq3D,wDAAyDplE,EAAQqX,eACnH,CAAC,EAAaxW,KAAKokE,+BAA+Bh3D,SAASA,SAAS,GAAIjO,GAAU,CAAEioD,OAAQjoD,EAAQioD,QAAUz0C,EAAYI,OAAS2C,GAAgBiiE,SAC9J,KAAK,EACDzQ,EAAgBpkD,EAAGxb,OACnBtH,KAAK60C,eAAe6G,mBAAmBwrB,EAAc1lE,MAAO0lE,EAAcjkC,MAAOikC,EAAc9yC,UAAW8yC,EAAchuB,WAAappC,EAAU4B,aAAcw1D,EAAc5lC,SAAW,MACtLwsB,EAAyB9tD,KAAK2iE,iCAAiC3iE,KAAKogE,OACpEt9C,EAAGvU,MAAQ,EACf,KAAK,EAID,OAHAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IAEtBb,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBu2D,8CAA+CtkE,EAAQqX,eACzG,CAAC,EAAaxW,KAAKsjE,qBAAqBxV,EAAwBoZ,EAAc9yC,UAAW8yC,EAAcnX,oBAClH,KAAK,EAID,OAHAkhB,EAAanuD,EAAGxb,OAChBtH,KAAKiqB,OAAOI,QAAQ,4BACpBrqB,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkB0qE,8BAA+Bz4E,EAAQqX,eACzF,CAAC,EAAaxW,KAAK63E,kBAAkB5G,EAAY/J,GAAexmE,MAAK,SAAUI,GAM9E,OALAulE,EAAwBx1C,eAAe,CACnCC,SAAS,EACT+kC,WAAW,EACXL,UAAW10D,EAAO00D,YAEf10D,MAEnB,KAAK,EAAG,MAAO,CAAC,EAAcgiB,EAAGxb,QACjC,KAAK,EAYD,MAXA8f,EAAMtE,EAAGxb,kBACU,IACf8f,EAAI7Q,iBAAiBvW,KAAKwW,eAE9Bs3C,EAAuBiT,mBAAmB35C,GAC1CpnB,KAAK60C,eAAe2H,oBAAoB0qB,EAAc1lE,OACtD6kE,EAAwBx1C,eAAe,CACnC5a,UAAWmR,aAAe,IAAaA,EAAInR,gBAAa9Q,EACxD8xD,aAAc7vC,aAAe,IAAaA,EAAI9Q,eAAYnR,EAC1D2rB,SAAS,IAEP1J,EACV,KAAK,EAAG,MAAO,CAAC,WAQhCqwD,mBAAmBn5E,UAAUkpE,OAAS,WAElC,OAAO38D,QAAQjL,OAAO,GAAiBilB,uCAQ3C4yD,mBAAmBn5E,UAAUu5E,kBAAoB,SAAU5G,EAAY/J,GACnE,OAAOx5D,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI+8C,EAAiBo0B,EAAa2G,EAAeC,EAAWptD,EAAMysC,EAAc51D,EAAOgwE,EAAyB5gC,EAC5Gx6B,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAID,OAHAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkB0qE,8BAA+B1Q,EAAc1wD,eAE1GxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBg2D,4DAA6DgE,EAAc1wD,eAC7H,CAAC,EAAaxW,KAAKgjE,mCAAmCkE,IACjE,KAAK,EAID,OAHAnqB,EAAkBj6B,EAAGxb,OAErBtH,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBipD,eAAgB+Q,EAAc1wD,eAChF,CAAC,EAAay6D,EAAW/a,eAAe9oD,SAASA,SAAS,GAAI85D,GAAgB,CAAExO,aAAc,GAAqBkW,kBAAkB5uE,KAAK4uD,OAAQ5uD,KAAKiqB,OAAQjqB,KAAKgiE,qBAAsBkF,EAAc38B,0BACnN,KAAK,EAKD,OAJA4mC,EAAcruD,EAAGxb,OACjBwwE,EAAgB,IAAI,GAAc7G,EAAYjxE,KAAK60C,eAAgBkI,EAAiB/8C,KAAKiqB,OAAQjqB,KAAK4uD,OAAOqT,OAAQjiE,KAAK8uB,mBAE1H9uB,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkB+oE,iCAAkC/O,EAAc1wD,eAClG,CAAC,EAAashE,EAAclG,oBAAoBT,IAC3D,KAAK,EAID,OAHA4G,EAAYj1D,EAAGxb,OAEftH,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBqpE,kCAAmCrP,EAAc1wD,eACnG,CAAC,EAAashE,EAAczB,qBAAqB0B,EAAW/3E,KAAK4uD,OAAOqT,OAAO+V,oBAC1F,KAAK,EAID,GAHArtD,EAAO7H,EAAGxb,OACV8vD,EAAe,GAAUzjB,oBAAoBhpB,GAC7CnpB,EAAQxB,KAAK8jE,gCAAgC1M,EAAc1hD,GAAgBiiE,OAAQ56B,EAAgBvmC,eAC/F4gD,EAAa90B,UAAW,CAExB,GADAtiC,KAAKiqB,OAAOI,QAAQ,oDACfrqB,KAAKgiE,qBACN,MAAM,GAAiB17C,4CAI3B,OAFAkrD,EAA0B,IAAI,GAAwBxxE,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkB/hE,KAAKogE,MAAOpgE,KAAK8uB,kBAAmB9uB,KAAKgiE,qBAAsB5K,EAAa90B,UAAWtiC,KAAK60C,eAAgB70C,KAAKwW,eACpRo6B,EAAmB,GAAcJ,kBAAkBxwC,KAAKgvB,cAAextB,GAAOovC,iBACvE,CAAC,EAAc4gC,EAAwBjb,aAAanpD,SAASA,SAAS,GAAI85D,GAAgB,CAAE1lE,MAAOovC,EAAkBwW,OAAQ8f,EAAc9f,QAAUz0C,EAAYI,QAAS7R,SAAQ,WACjLkV,EAAMy+B,eAAe2H,oBAAoBh7C,OAKrD,OADAxB,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBkiE,2BAA4BlI,EAAc1wD,eAC5F,CAAC,EAAcshE,EAAc7I,2BAA2BtkD,EAAMnpB,EAAOyvE,EAAW78C,UAAWp0B,KAAK6mD,wBAKpH4wB,mBA1I4B,CA2IrC,IC9IE,GAAqC,SAAU1hE,GAE/C,SAASkiE,sBACL,OAAkB,OAAXliE,GAAmBA,EAAOlJ,MAAM7M,KAAM4M,YAAc5M,KAgF/D,OAlFAgN,UAAUirE,oBAAqBliE,GAQ/BkiE,oBAAoB35E,UAAUi4D,aAAe,SAAUp3D,GACnD,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIknE,EAAepkD,EAAIujD,EAAyBvY,EAAwBoqB,EACpE9hE,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAID,OAHAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBirE,gCAAiCh5E,EAAQqX,eACtGxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBm1D,sBAAuBljE,EAAQqX,eACxFsM,EAAK,CAAC1V,SAAS,GAAIjO,IACZ,CAAC,EAAaa,KAAKmiE,sBAAsBhjE,EAASA,EAAQmiC,UACrE,KAAK,EAID,OAHA4lC,EAAgB95D,SAASP,WAAM,EAAQiW,EAAG9T,OAAO,CAACmb,EAAG7iB,UACrD++D,EAA0BrmE,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBirE,gCAAiCjR,EAAc1wD,eACnIs3C,EAAyB9tD,KAAK2iE,iCAAiCltD,GAAM6xD,+BAC9D,CAAC,EAAatnE,KAAKo4E,yBAAyBtqB,EAAwBoZ,EAAc9yC,UAAW8yC,EAAcnX,oBACtH,KAAK,EAKD,OAJAmoB,EAAqB/tD,EAAG7iB,OACxBtH,KAAKiqB,OAAOI,QAAQ,gCAEpBrqB,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkB+4D,6CAA8C9mE,EAAQqX,eACxG,CAAC,EAAc0hE,EAAmBpS,2BAA2BoB,GAC3DxmE,MAAK,SAAUI,GAMhB,OALAulE,EAAwBx1C,eAAe,CACnCC,SAAS,EACT+kC,UAAW/0D,EAAO+0D,UAClBL,UAAW10D,EAAO00D,YAEf10D,KAENE,OAAM,SAAUP,GAUjB,MATIA,aAAa,IACbA,EAAE8V,iBAAiBH,EAAMI,eAE7Bs3C,EAAuBiT,mBAAmBtgE,GAC1C4lE,EAAwBx1C,eAAe,CACnC5a,UAAWxV,EAAEwV,UACbghD,aAAcx2D,EAAE6V,SAChBwa,SAAS,IAEPrwB,cASlCw3E,oBAAoB35E,UAAUkpE,OAAS,WAEnC,OAAO38D,QAAQjL,OAAO,GAAiBilB,uCAO3CozD,oBAAoB35E,UAAU85E,yBAA2B,SAAUtqB,EAAwBiS,EAAchQ,GACrG,OAAOriD,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwjE,EACJ,OAAOt1D,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,OADAvO,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBw2D,gDAAiD1jE,KAAKwW,eACxG,CAAC,EAAaxW,KAAK2jE,uBAAuB7V,EAAwBiS,EAAchQ,IAC3F,KAAK,EAED,OADAyT,EAAe1gD,EAAGxb,OACX,CAAC,EAAc,IAAI,GAAmBk8D,EAAcxjE,KAAK8uB,4BAK7EmpD,oBAnF6B,CAoFtC,ICpFE,GAA4B,WAC5B,SAASI,WAAW1pB,EAAe2pB,EAASruD,EAAQzQ,GAChDxZ,KAAKmjD,qBAAyC,oBAAX37B,OACnCxnB,KAAK4uD,OAASD,EACd3uD,KAAKs4E,QAAUA,EACft4E,KAAKiqB,OAASA,EACdjqB,KAAKwZ,UAAYA,EA4MrB,OAlMA6+D,WAAW/5E,UAAUi6E,mBAAqB,SAAUp5E,EAASwgD,EAAU19C,GAEnE,GADAjC,KAAKiqB,OAAO/gB,KAAK,2CACZy2C,EAASiU,SACV,MAAM,GAAiBjuC,6BAA6B,oDAExD,IACIof,EACA3Q,EAFAyG,EAAU,IAAI,GAAU8kB,EAASiU,SAAU5zD,KAAKwZ,WAGpD,GAAIra,EAAQmiC,QAAS,CACjB,IAAIk3C,EAAqBx4E,KAAKy4E,YAAY59C,EAAS17B,EAAQmiC,QAAQhI,iBAAan0B,OAAWA,EAAWhG,EAAQmiC,QAAQjI,eACtH0L,EAAc,IAAI8rB,GAAY2nB,EAAoBx4E,KAAK04E,YAAY79C,EAAS29C,EAAmBn/C,cAAel6B,EAAQmiC,QAAQhI,YAAan6B,EAAQmiC,QAAQxG,UAAW96B,KAAK24E,gBAAgBx5E,EAASwgD,EAAU64B,EAAmBn/C,cAAel6B,EAAQmiC,QAAQhI,YAAan6B,EAAQmiC,QAAQxG,SAAU74B,GAAUjC,KAAK44E,iBAAiBz5E,EAASwgD,EAAU64B,EAAmBn/C,cAAel6B,EAAQmiC,QAAQhI,kBAE3Y,KAAIn6B,EAAQi1B,UA0Bb,MAAM,GAAiBzO,6BAA6B,yEAzBpD,IAAIo6C,EAAe,GAAUpB,kBAAkBx/D,EAAQi1B,UAAWj1B,EAAQ4wD,mBACtEwK,EAAmB,CACnBlF,aAAcr1D,KAAK4uD,OAAO0T,KAAKjN,aAC/BqI,iBAAkB19D,KAAK4uD,OAAO0T,KAAK5E,iBACnCM,uBAAwBh+D,KAAK4uD,OAAO0T,KAAKtE,uBACzCb,kBAAmBn9D,KAAK4uD,OAAO0T,KAAKnF,kBACpCnN,2BAA4BhwD,KAAK4uD,OAAO0T,KAAKtS,4BAIjD,GAFA57B,EAAY,IAAI,GAAU2rC,EAAc//D,KAAK4uD,OAAOqT,OAAOpb,cAAe7mD,KAAKs4E,QAAS/d,EAAkBv6D,KAAKiqB,QAE3GhoB,EAAQ8+B,WAAY,CACpB/gC,KAAKiqB,OAAO6J,MAAM,2CACd0kD,EAAqBx4E,KAAKy4E,YAAY59C,EAASzG,EAAU6nC,gBAAiBh6D,EAAQ8+B,WAAY3M,EAAU8L,eAC5G6E,EAAc,IAAI8rB,GAAY2nB,EAAoBx4E,KAAK04E,YAAY79C,EAAS29C,EAAmBn/C,cAAejF,EAAU6nC,gBAAiB7nC,EAAUmrB,QAASv/C,KAAK24E,gBAAgBx5E,EAASwgD,EAAU64B,EAAmBn/C,cAAejF,EAAU6nC,gBAAiB7nC,EAAUmrB,OAAQt9C,GAAUjC,KAAK44E,iBAAiBz5E,EAASwgD,EAAU64B,EAAmBn/C,cAAejF,EAAU6nC,sBAEjX,KAAItc,EAASkT,YAMd,MAAM,GAAiBltC,6BAA6B,yDALpD3lB,KAAKiqB,OAAO6J,MAAM,4CACd0kD,EAAqBx4E,KAAKy4E,YAAY59C,EAASzG,EAAU6nC,gBAAiBtc,EAASkT,YAAaz+B,EAAU8L,eAC9G6E,EAAc,IAAI8rB,GAAY2nB,EAAoBx4E,KAAK04E,YAAY79C,EAAS29C,EAAmBn/C,cAAejF,EAAU6nC,gBAAiB7nC,EAAUmrB,QAASv/C,KAAK24E,gBAAgBx5E,EAASwgD,EAAU64B,EAAmBn/C,cAAejF,EAAU6nC,gBAAiB7nC,EAAUmrB,OAAQt9C,GAAUjC,KAAK44E,iBAAiBz5E,EAASwgD,EAAU64B,EAAmBn/C,cAAejF,EAAU6nC,mBAS1X,OAAOj8D,KAAKi0D,6BAA6B90D,EAAS07B,EAASkK,EAAa3Q,IAW5EikD,WAAW/5E,UAAUm6E,YAAc,SAAU59C,EAASvB,EAAayH,EAAYb,EAAe24C,GAC1F,IAAIx/C,EAOJ,GANIw/C,EACAx/C,EAAgBw/C,OAEO1zE,IAAlB+6B,GAA+Ba,IACpC1H,EAAgB,GAAc8I,sBAAsBpB,EAAYb,EAAelgC,KAAKiqB,OAAQjqB,KAAKwZ,UAAWqhB,KAE3GxB,EACD,MAAM,GAAiB1T,6BAA6B,oCAExD,IAAI2e,EAAgBvD,EAChB,GAAcD,cAAcC,EAAY1H,EAAewB,OAAS11B,OAAWA,OAAWA,EAAWm0B,GACjG,GAAc0I,qBAAqB3I,EAAewB,OAAS11B,OAAWA,OAAWA,EAAWm0B,GAChG,GAAIt5B,KAAKmjD,qBAGL,OAFAnjD,KAAKiqB,OAAOI,QAAQ,gCACpBrqB,KAAKs4E,QAAQtzC,WAAWV,GACjBA,EAGP,MAAM,GAAiB3e,6BAA6B,yEAW5D0yD,WAAW/5E,UAAUo6E,YAAc,SAAU79C,EAASxB,EAAeC,EAAawB,GAC9E,IAAIC,EAAgB,GAAcH,oBAAoBvB,EAAeC,EAAauB,EAAQsI,SAAUnjC,KAAK4uD,OAAO0T,KAAKnuC,SAAU2G,GAC/H,GAAI96B,KAAKmjD,qBAGL,OAFAnjD,KAAKiqB,OAAOI,QAAQ,iCACpBrqB,KAAKs4E,QAAQrzC,qBAAqBlK,GAC3BA,EAGP,MAAM,GAAiBpV,6BAA6B,yEAY5D0yD,WAAW/5E,UAAUq6E,gBAAkB,SAAUx5E,EAASwgD,EAAUtmB,EAAeC,EAAawB,EAAU74B,GACtG,IAAK09C,EAASyU,aAEV,OADAp0D,KAAKiqB,OAAOI,QAAQ,qDACb,KAEX,IAAKs1B,EAAS4U,WACV,MAAM,GAAiB5uC,6BAA6B,4DAExD,IAAK1jB,EAAQsrC,kBACT,MAAM,GAAiB5nB,6BAA6B,6DAExD,IAAI3N,EAAS,IAAI,GAAS7Y,EAAQ6Y,QAAQmnB,cACtCqN,EAAYvqC,EAAQuqC,WAAcmT,EAAS4U,YAAa,IAAIphC,MAAOmZ,UAAY,IAC/EiB,EAAoBtrC,EAAQsrC,kBAC5B+I,EAAoB,GAAkBrJ,wBAAwB5T,EAAeC,EAAaqmB,EAASyU,aAAcp0D,KAAK4uD,OAAO0T,KAAKnuC,SAAU2G,EAAU9iB,EAAQw0B,EAAWe,EAAmBvtC,KAAKwZ,WACrM,GAAIxZ,KAAKmjD,qBAGL,OAFAnjD,KAAKiqB,OAAOI,QAAQ,qCACpBrqB,KAAKs4E,QAAQlyC,yBAAyBkQ,GAC/BA,EAGP,MAAM,GAAiB3wB,6BAA6B,yEAW5D0yD,WAAW/5E,UAAUs6E,iBAAmB,SAAUz5E,EAASwgD,EAAUtmB,EAAeC,GAChF,IAAKqmB,EAASqV,cAEV,OADAh1D,KAAKiqB,OAAOI,QAAQ,sDACb,KAEX,IAAIksB,EAAqB,GAAmB5I,yBAAyBtU,EAAeC,EAAaqmB,EAASqV,cAAeh1D,KAAK4uD,OAAO0T,KAAKnuC,UAC1I,GAAIn0B,KAAKmjD,qBAGL,OAFAnjD,KAAKiqB,OAAOI,QAAQ,sCACpBrqB,KAAKs4E,QAAQjzC,0BAA0BkR,GAChCA,EAGP,MAAM,GAAiB5wB,6BAA6B,yEAW5D0yD,WAAW/5E,UAAU21D,6BAA+B,SAAU90D,EAASq0D,EAAYzuB,EAAa3Q,GAC5F,IAAItR,EAAIqH,EAAI+W,EAIRgM,EAHAhI,EAAcp1B,EAAU4B,aACxB2iD,EAAiB,GACjB7nB,EAAY,MAEZzH,aAAiD,EAASA,EAAYG,eACtEA,EAAcH,EAAYG,YAAYlK,OACtCq5B,EAAiB,GAAS92B,WAAWwH,EAAYG,YAAYvc,QAAQwV,UACrEqO,EAAY,IAAIrZ,KAAiD,IAA5CwZ,OAAO5H,EAAYG,YAAYsH,YACpDU,EAAe,IAAI/Z,KAAyD,IAApDwZ,OAAO5H,EAAYG,YAAYqI,qBAE3D,IAAI7N,GAAO8zB,aAA+C,EAASA,EAAWr8C,OAAOuqB,OAAS8xB,aAA+C,EAASA,EAAWr8C,OAAOwqB,MAAQ7xB,EAAU4B,aACtL+vB,GAAO+xB,aAA+C,EAASA,EAAWr8C,OAAOsqB,MAAQ3xB,EAAU4B,aACvG,MAAO,CACH0iB,UAAWA,EAAYA,EAAUuhC,mBAAqB7lD,EAAU4B,aAChEkkD,SAAUl2B,EACV5E,SAAU2G,EACVzpB,OAAQq8C,EACR/yB,SAAUyD,aAAiD,EAASA,EAAYzD,SAAWyD,EAAYzD,QAAQZ,iBAAmB,KAClI7F,QAAS24B,EAAaA,EAAWrwB,SAAWrzB,EAAU4B,aACtDivB,cAAe6yB,EAAaA,EAAWr8C,OAAS,GAChD+tB,YAAaA,EACb2wB,WAAW,EACXrpB,UAAWA,EACXh2B,cAAerX,EAAQqX,eAAiB1G,EAAU4B,aAClD8jD,UAAW1lD,EAAU4B,aACrBw7B,aAAcA,EACdvT,SAAU7pB,EAAU4B,aACpBsoB,WAAyG,QAA5FlX,EAAKiiB,aAAiD,EAASA,EAAYG,mBAAgC,IAAPpiB,OAAgB,EAASA,EAAGkX,YAAclqB,EAAU4B,aACrKlQ,MAAOsO,EAAU4B,aACjBsvB,oBAA8G,QAAxF7W,EAAK4a,aAAiD,EAASA,EAAYzD,eAA4B,IAAPnX,OAAgB,EAASA,EAAG6W,qBAAuBlxB,EAAU4B,aACnLuvB,aAAuG,QAAxFC,EAAK6D,aAAiD,EAASA,EAAYzD,eAA4B,IAAPJ,OAAgB,EAASA,EAAGD,cAAgBnxB,EAAU4B,aACrKmE,UAAM1Q,EACN4wD,kBAAkB,IAGnBsiB,WAlNoB,GCH3B,GAAkD,SAAUtiE,GAE5D,SAAS+iE,iCAAiClqB,GACtC,IAAIx4C,EAAQL,EAAOpZ,KAAKqD,KAAM4uD,IAAW5uD,KAEzC,OADAoW,EAAM6/C,oBAAqB,EACpB7/C,EAEX,OANApJ,UAAU8rE,iCAAkC/iE,GAMrC+iE,iCAP0C,CAQnD,ICHE,GAAsC,SAAU/iE,GAEhD,SAASgjE,qBAAqBnqB,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkB3B,EAAOtxC,EAAmBkzC,EAAsBxrD,GACtJ,IAAIJ,EAAQL,EAAOpZ,KAAKqD,KAAM4uD,EAAQiT,EAAa7yC,EAAe/E,EAAQ63C,EAAcC,EAAkBjzC,EAAmBkzC,EAAsBxrD,IAAkBxW,KAErK,OADAoW,EAAMgqD,MAAQA,EACPhqD,EA+DX,OAnEApJ,UAAU+rE,qBAAsBhjE,GAUhCgjE,qBAAqBz6E,UAAUi4D,aAAe,SAAUp3D,GACpD,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIknE,EAAepZ,EAAwB/Q,EAAiBymB,EAAcyN,EAA2B7pD,EACrG,OAAOlZ,YAAYlO,MAAM,SAAU8iB,GAC/B,OAAQA,EAAGvU,OACP,KAAK,EAGD,GAFAvO,KAAKiqB,OAAO6J,MAAM,6CAEb30B,EAAQ0W,KACT,MAAM,GAAiBkQ,8BAI3B,OADA/lB,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBq3D,wDAAyDplE,EAAQqX,eACnH,CAAC,EAAaxW,KAAKokE,+BAA+BjlE,EAASuW,GAAgBiiE,SACtF,KAAK,EACDzQ,EAAgBpkD,EAAGxb,OACnBtH,KAAK60C,eAAe6G,mBAAmBwrB,EAAc1lE,MAAO0lE,EAAcjkC,MAAOikC,EAAc9yC,UAAW8yC,EAAchuB,WAAappC,EAAU4B,aAAcw1D,EAAc5lC,SAAW,MACtLwsB,EAAyB9tD,KAAK2iE,iCAAiC3iE,KAAKogE,OACpEt9C,EAAGvU,MAAQ,EACf,KAAK,EAKD,OAJAuU,EAAGtU,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBk8C,EAAkB3vC,SAASA,SAAS,GAAI85D,GAAgB,CAAErxD,KAAM1W,EAAQ0W,OAExE7V,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBw2D,gDAAiDvkE,EAAQqX,eAC3G,CAAC,EAAaxW,KAAK2jE,uBAAuB7V,EAAwBoZ,EAAc9yC,YAC3F,KAAK,EAMD,OALAovC,EAAe1gD,EAAGxb,OAClB2pE,EAAa,IAAI,GAAiCzN,GAClDxjE,KAAKiqB,OAAOI,QAAQ,4BAGb,CAAC,EAFQ,IAAI,GAAc4mD,EAAYjxE,KAAK60C,eAAgBkI,EAAiB/8C,KAAKiqB,OAAQjqB,KAAK4uD,OAAOqT,OAAQjiE,KAAK8uB,mBAEtFwgD,6BAA6B,CACzDz5D,KAAM1W,EAAQ0W,KACdu/C,aAAcj2D,EAAQ8hC,YACtBi0B,sBAAuB/1D,EAAQ6hC,mBAC/B4uC,yBAA0BzwE,EAAQ65E,uBACnC9R,EAAc1lE,MAAOyvE,EAAW78C,UAAWp0B,KAAK6mD,eAAe,IAC1E,KAAK,EAOD,MANAz/B,EAAMtE,EAAGxb,kBACU,IACf8f,EAAI7Q,iBAAiBvW,KAAKwW,eAE9Bs3C,EAAuBiT,mBAAmB35C,GAC1CpnB,KAAK60C,eAAe2H,oBAAoB0qB,EAAc1lE,OAChD4lB,EACV,KAAK,EAAG,MAAO,CAAC,WAQhC2xD,qBAAqBz6E,UAAUkpE,OAAS,WAEpC,OAAO38D,QAAQjL,OAAO,GAAiBilB,uCAEpCk0D,qBApE8B,CAqEvC,IC7EEE,GAA+C,WAC/C,SAASA,8BAA8Bl8E,EAAMyZ,GACzCxW,KAAKwW,cAAgBA,EACrBxW,KAAK60B,YAAcokD,8BAA8BC,gBAAgBn8E,EAAMyZ,GACvExW,KAAKm5E,UAAYF,8BAA8BG,cAAcr8E,EAAMyZ,GACnExW,KAAKq5E,QAAUJ,8BAA8BK,YAAYv8E,EAAMyZ,GAkFnE,OAhFAyiE,8BAA8BC,gBAAkB,SAAUn8E,EAAMyZ,GAC5D,MAAO,gBAAkBzZ,EAAO,IAAMyZ,GAE1CyiE,8BAA8BG,cAAgB,SAAUr8E,EAAMyZ,GAC1D,MAAO,cAAgBzZ,EAAO,IAAMyZ,GAExCyiE,8BAA8BK,YAAc,SAAUv8E,EAAMyZ,GACxD,MAAO,YAAczZ,EAAO,IAAMyZ,GAEtCyiE,8BAA8BM,2BAA6B,WACvD,MAAyB,oBAAX/xD,aACoB,IAAvBA,OAAOivD,aACqB,mBAA5BjvD,OAAOivD,YAAYjsE,MACY,mBAA/Bgd,OAAOivD,YAAY+C,SACe,mBAAlChyD,OAAOivD,YAAYgD,YACkB,mBAArCjyD,OAAOivD,YAAYiD,eACqB,mBAAxClyD,OAAOivD,YAAYkD,kBAOlCV,8BAA8BW,kBAAoB,SAAUpjE,EAAeqjE,GACvE,GAAIZ,8BAA8BM,6BAC9B,IACIM,EAAaj4E,SAAQ,SAAUm1B,GAC3B,IAAIlC,EAAcokD,8BAA8BC,gBAAgBniD,EAAYh6B,KAAMyZ,GACtDgR,OAAOivD,YAAYkD,iBAAiB9kD,EAAa,WACnDpyB,OAAS,IAC/B+kB,OAAOivD,YAAYiD,cAAc7kD,GACjCrN,OAAOivD,YAAYgD,WAAWR,8BAA8BG,cAAcvkD,EAAare,IACvFgR,OAAOivD,YAAYgD,WAAWR,8BAA8BK,YAAYzkD,EAAare,QAIjG,MAAO/V,MAKfw4E,8BAA8B36E,UAAU2xB,iBAAmB,WACvD,GAAIgpD,8BAA8BM,6BAC9B,IACI/xD,OAAOivD,YAAYjsE,KAAKxK,KAAKm5E,WAEjC,MAAO14E,MAKfw4E,8BAA8B36E,UAAUuyB,eAAiB,WACrD,GAAIooD,8BAA8BM,6BAC9B,IACI/xD,OAAOivD,YAAYjsE,KAAKxK,KAAKq5E,SAC7B7xD,OAAOivD,YAAY+C,QAAQx5E,KAAK60B,YAAa70B,KAAKm5E,UAAWn5E,KAAKq5E,SAEtE,MAAO54E,MAKfw4E,8BAA8B36E,UAAUo5B,iBAAmB,WACvD,GAAIuhD,8BAA8BM,6BAC9B,IACI,IAAIO,EAAwBtyD,OAAOivD,YAAYkD,iBAAiB35E,KAAK60B,YAAa,WAClF,GAAIilD,EAAsBr3E,OAAS,EAAG,CAClC,IAAIg1B,EAAaqiD,EAAsB,GAAGC,SAI1C,OAHAvyD,OAAOivD,YAAYiD,cAAc15E,KAAK60B,aACtCrN,OAAOivD,YAAYgD,WAAWz5E,KAAKm5E,WACnC3xD,OAAOivD,YAAYgD,WAAWz5E,KAAKq5E,SAC5B5hD,GAGf,MAAOh3B,IAIX,OAAO,MAEJw4E,8BAvFuC,GCM9C,GAA0C,SAAUljE,GAEpD,SAASikE,yBAAyB7lD,EAAUC,EAAWnK,EAAQoK,EAAaC,EAAgBC,EAAsBrK,GAC9G,IAAI9T,EAAQL,EAAOpZ,KAAKqD,KAAMm0B,EAAUC,EAAWnK,EAAQoK,EAAaC,EAAgBC,IAAyBv0B,KAGjH,OAFAoW,EAAM4Y,cAAgB,IAAI,GAAc5Y,EAAM6T,OAAQC,GACtD9T,EAAM+Y,cAAgB,IAAI,GAAc/Y,EAAM4Y,eACvC5Y,EA0GX,OA/GApJ,UAAUgtE,yBAA0BjkE,GAOpCikE,yBAAyB17E,UAAUw2B,6BAA+B,SAAUD,EAAare,GACrF,OAAO,IAAIyiE,GAA8BpkD,EAAare,IAE1DwjE,yBAAyB17E,UAAUw3B,WAAa,WAC5C,OAAO91B,KAAKmvB,cAAc1V,gBAE9BugE,yBAAyB17E,UAAU27E,kBAAoB,WACnD,IAAIn3D,EACJ,OAA4C,QAAnCA,EAAK1e,SAAS81E,uBAAoC,IAAPp3D,OAAgB,EAASA,EAAG/jB,aAAe,MAEnGi7E,yBAAyB17E,UAAU67E,gCAAkC,SAAUnkD,GAC3E,IAAIgB,EAAYh3B,KAAKy0B,sBAAsBp3B,IAAI24B,EAAgBrK,MAAMnV,eACjE4jE,EAAcpjD,GAAaA,EAAUf,UAAYD,EAAgBrK,MAAMsK,QACvEokD,EAAyB,GACzBD,IAAgBpjD,aAA6C,EAASA,EAAUQ,4BAChFR,EAAUQ,0BAA0B51B,SAAQ,SAAUk2B,GAClDuiD,EAAuBx5E,KAAKuM,SAAS,GAAI0qB,OAI7CuiD,EAAuB53E,OAAS,GAChCw2E,GAA8BW,kBAAkB5jD,EAAgBrK,MAAMnV,cAAe6jE,IAG7FL,yBAAyB17E,UAAUg8E,8BAAgC,WAC/D,MAAyB,oBAAX9yD,aACoB,IAAvBA,OAAOivD,aACoB,mBAA3BjvD,OAAOivD,YAAYpgD,KAUlC2jD,yBAAyB17E,UAAU2xB,iBAAmB,SAAU4E,EAAare,GACzE,IAAIJ,EAAQpW,KAERu6E,EAAsBv6E,KAAKi6E,oBAC3BjkD,EAAkBjgB,EAAOzX,UAAU2xB,iBAAiBtzB,KAAKqD,KAAM60B,EAAare,GAChF,OAAOpJ,SAASA,SAAS,GAAI4oB,GAAkB,CAAEnF,eAAgB,SAAUlF,GACnE,IAAI6uD,EAAMxkD,EAAgBnF,eAAezjB,SAAS,CAAEmtE,oBAAqBA,EAAqBE,kBAAmBrkE,EAAM6jE,qBAAuBtuD,IAE9I,OADAvV,EAAM+jE,gCAAgCnkD,GAC/BwkD,GACR/jD,mBAAoB,WACnBT,EAAgBS,qBAChBrgB,EAAM+jE,gCAAgCnkD,GACtCA,EAAgBe,YAAYW,uBASxCsiD,yBAAyB17E,UAAU06B,gBAAkB,SAAU/D,EAAWze,GACtE,GAAKxW,KAAKs6E,gCAIV,GAAK9jE,EAAL,CAIA,IAAI0e,EAAgBl1B,KAAK20B,4BAA4Bt3B,IAAImZ,GAKrD0e,IACAl1B,KAAKiqB,OAAO6J,MAAM,kDAAoDoB,EAAcn4B,KAAO,SAAUyZ,GACrGxW,KAAKu1B,oBAAoBL,EAAcn4B,KAAMyZ,OAAerR,GAAW,IAE3EnF,KAAK20B,4BAA4BrH,IAAI9W,EAAe,CAAEzZ,KAAMk4B,EAAWE,KAAM3N,OAAOivD,YAAYpgD,aAZ5Fr2B,KAAKiqB,OAAO6J,MAAM,+CAAiDmB,EAAY,0DAJ/Ej1B,KAAKiqB,OAAO6J,MAAM,0GAA4GmB,IA2BtI+kD,yBAAyB17E,UAAUi3B,oBAAsB,SAAUN,EAAWze,EAAegf,EAAWC,GACpG,GAAKz1B,KAAKs6E,gCAIV,GAAK9jE,EAAL,CAIA,IAAI6e,EAAetf,EAAOzX,UAAU02B,gBAAgBr4B,KAAKqD,KAAMi1B,EAAWze,GAC1E,GAAK6e,EAAL,CAGA,IAAIC,EAAc9N,OAAOivD,YAAYpgD,MACjCqkD,EAAellD,GAAazf,EAAOzX,UAAU82B,oBAAoBz4B,KAAKqD,KAAMq1B,EAAcC,GAC9F,OAAOvf,EAAOzX,UAAUi3B,oBAAoB54B,KAAKqD,KAAMi1B,EAAWze,EAAekkE,EAAcjlD,SAT3Fz1B,KAAKiqB,OAAO6J,MAAM,+CAAiDmB,EAAY,uDAJ/Ej1B,KAAKiqB,OAAO6J,MAAM,uGAAyGmB,IAe5H+kD,yBAhHkC,CAiH3C,ICzGE,GAAyC,SAAUjkE,GAuBnD,SAAS4kE,wBAAwBhsB,GAC7B,IAAIv4C,EAAQL,EAAOpZ,KAAKqD,KAAM2uD,IAAkB3uD,KAKhD,OAJAoW,EAAMwkE,0BAAuBz1E,EAC7BiR,EAAMykE,0BAA4B,IAAIxtD,IAEtCjX,EAAM0kE,oBAAsB1kE,EAAM0kE,oBAAoB98E,KAAKoY,GACpDA,EA6NX,OAzPApJ,UAAU2tE,wBAAyB5kE,GAuCnC4kE,wBAAwBr8E,UAAUy8E,cAAgB,SAAU57E,GACxD,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwW,EACJ,OAAOtI,YAAYlO,MAAM,SAAU8iB,GAG/B,OAFAtM,EAAgBxW,KAAKg7E,wBAAwB77E,GAC7Ca,KAAKiqB,OAAOI,QAAQ,uBAAwB7T,GACrC,CAAC,EAAcxW,KAAK6oE,qBAAqBz7D,SAAS,CAAEoJ,cAAeA,GAAkBrX,GAAW4Y,aAWnH4iE,wBAAwBr8E,UAAU28E,WAAa,SAAU97E,GACrD,IAAIqX,EAAgBxW,KAAKg7E,wBAAwB77E,GAEjD,OADAa,KAAKiqB,OAAOI,QAAQ,oBAAqB7T,GAClCxW,KAAKyxE,kBAAkBrkE,SAAS,CAAEoJ,cAAeA,GAAkBrX,GAAW4Y,MAQzF4iE,wBAAwBr8E,UAAU48E,mBAAqB,SAAU/7E,GAC7D,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwW,EAAeggD,EAAgBl1B,EAASokB,EAAYy1B,EAAkBC,EAAgBz7B,EACtFvpC,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAS/B,GARAtM,EAAgBxW,KAAKg7E,wBAAwB77E,IAC7Cq3D,EAAiBx2D,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBmuE,mBAAoB7kE,IAChFmgB,gBAAgB,CAC3B2kD,kBAAmBn8E,EAAQm8E,oBAE/Bt7E,KAAKu7E,iCAAiC7lE,GAAgBiiE,QACtD33E,KAAKiqB,OAAOI,QAAQ,4BAA6B7T,KACjD8qB,EAAUniC,EAAQmiC,SAAWthC,KAAKm4C,oBAE9B,MAAM,GAAiBrzB,uBAgB3B,OAdA4gC,EAAa,CACTvxB,SAAUn0B,KAAK4uD,OAAO0T,KAAKnuC,SAC3BC,UAAWj1B,EAAQi1B,WAAatkB,EAAU4B,aAC1CsG,OAAQ7Y,EAAQ6Y,OAChB0uC,sBAAuBplB,EAAQjI,cAC/BliB,OAAQhY,EAAQgY,OAChBozB,qBAAsBprC,EAAQorC,qBAC9B7Z,sBAAuBvxB,EAAQuxB,sBAC/BE,mBAAoBzxB,EAAQyxB,mBAC5B+1B,UAAWxnD,EAAQwnD,UACnBnc,OAAQrrC,EAAQqrC,QAEpB2wC,EAAmBliE,KAAKC,UAAUwsC,QAEJ,KAD9B01B,EAAiBp7E,KAAK66E,0BAA0Bx9E,IAAI89E,KAEhDn7E,KAAKiqB,OAAOI,QAAQ,uEAAwE7T,GAC5FxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBsuE,wBAAyBhlE,GAClFmpC,EAAW3/C,KAAKy7E,wBAAwBruE,SAASA,SAAS,GAAIjO,GAAU,CAAEqX,cAAeA,IAAkB8qB,GACtG5gC,MAAK,SAAUI,GAahB,OAZAsV,EAAMykE,0BAA0BnuD,OAAOyuD,GACvC3kB,EAAe7/B,gBAAgB,CAC3B+kD,gBAAiB56E,EAAOokC,YAAYziC,OACpCk5E,YAAa76E,EAAO+5B,QAAQp4B,SAEhC+zD,EAAe3lC,eAAe,CAC1BC,SAAS,EACT+kC,UAAW/0D,EAAO+0D,UAClB0S,eAAgBznE,EAAOi1D,iBACvBulB,kBAAmBn8E,EAAQm8E,kBAC3B9lB,UAAW10D,EAAO00D,YAEf10D,KAENE,OAAM,SAAU6H,GAOjB,MANAuN,EAAMykE,0BAA0BnuD,OAAOyuD,GACvC3kB,EAAe3lC,eAAe,CAC1B5a,UAAWpN,EAAMoN,UACjBghD,aAAcpuD,EAAMyN,SACpBwa,SAAS,IAEPjoB,KAEV7I,KAAK66E,0BAA0BvtD,IAAI6tD,EAAkBx7B,GAC9C,CAAC,EAAcA,KAGtB3/C,KAAKiqB,OAAOI,QAAQ,0FAA2F7T,GAE/GggD,EAAe//B,qBACR,CAAC,EAAc2kD,WAKtCT,wBAAwBr8E,UAAUw8E,oBAAsB,WAC/C96E,KAAK46E,uBAGV56E,KAAKiqB,OAAO/gB,KAAK,oCACjBlJ,KAAK46E,qBAAqB/jD,UAAU,CAChC+kD,sBAAuB,MAS/BjB,wBAAwBr8E,UAAUm9E,wBAA0B,SAAUt8E,EAASmiC,GAC3E,IAAIxe,EACJ,OAAOpV,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIc,EAAQomE,EAAea,EAAmB8T,EAAiBC,EAC3D1lE,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAQD,OAPAvO,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBsuE,wBAAyBr8E,EAAQqX,eAC9FxW,KAAK8hE,aAAa/c,UAAUX,GAAU23B,oBAAqBrmE,GAAgBiiE,OAAQx4E,GACnFa,KAAK46E,qBAAuB56E,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBsuE,wBAAyBr8E,EAAQqX,eAClF,QAApCsM,EAAK9iB,KAAK46E,4BAAyC,IAAP93D,GAAyBA,EAAG+T,UAAU,CAC/E+kD,sBAAuB,IAE3Bx3E,SAASskB,iBAAiB,mBAAoB1oB,KAAK86E,qBAC7C,GAAqBlM,kBAAkB5uE,KAAK4uD,OAAQ5uD,KAAKiqB,OAAQjqB,KAAK6uE,wBAAyB1vE,EAAQorC,uBAAyBjJ,EAAQV,iBAC9I5gC,KAAKiqB,OAAOI,QAAQ,yEACpB68C,EAAgB95D,SAASA,SAAS,GAAIjO,GAAU,CAAEmiC,QAASA,IAC3DxgC,EAASd,KAAKg8E,mBAAmB9U,EAAezxD,GAAM6xD,+BAA+BtmE,OAAM,SAAUP,GAAK,OAAOiN,UAAU0I,OAAO,OAAQ,GAAQ,WAE9I,OAAOlI,YAAYlO,MAAM,SAAU8iB,GAE/B,GAAIriB,aAAa,IAAmBA,EAAEokE,UAIlC,OAHA7kE,KAAKiqB,OAAOI,QAAQ,8EACpBrqB,KAAK6uE,6BAA0B1pE,EAExB,CAAC,EADanF,KAAKi8E,yBAAyB98E,EAAQqX,eAClB+/C,aAAap3D,IAE1D,MAAMsB,WAGP,CAAC,EAAa,IAhBkJ,CAAC,EAAa,GAiBzL,KAAK,EAID,OAHAT,KAAKiqB,OAAOI,QAAQ,kEACpB09C,EAAoB/nE,KAAKk8E,wBAAwB/8E,EAAQqX,eACzDxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBw6D,wBAAyBvoE,EAAQqX,eACnF,CAAC,EAAauxD,EAAkBN,wBAAwBtoE,EAASmiC,IAC5E,KAAK,EACDu6C,EAAkB1xD,EAAG7iB,OACrBw0E,EAAmB1uE,SAASA,SAAS,GAAIjO,GAAU,CAE/Cm8E,kBAAmBn8E,EAAQm8E,mBAAqBpjE,GAAkB6iD,UACtE/6D,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBivE,sBAAuBN,EAAgBrlE,eAChG1V,EAASd,KAAKo8E,sBAAsBrU,EAAmB8T,EAAiBC,GAAkB96E,OAAM,SAAUq7E,GACtG,GAAIP,EAAiBR,oBAAsBpjE,GAAkBokE,YACzD,MAAMD,EAMV,OAHA,GAAaz5B,6BACbxsC,EAAM0rD,aAAa/c,UAAUX,GAAUm4B,4BAA6B7mE,GAAgBiiE,OAAQkE,GAC5FzlE,EAAM0Y,kBAAkBkK,gBAAgB9rB,EAAkBsvE,2BAA4BX,EAAgBrlE,eAC/FJ,EAAM0vD,2BAA2B+V,EAAiBC,GAAkB96E,OAAM,SAAUy7E,GACvF,IAAIC,EAAgBD,aAA6B,GAC7CrlE,EAA6BqlE,aAA6B,GAC1DE,EAAcF,EAAkBxmE,YAAcc,GAAuDlB,KACrG+mE,EAAuBH,EAAkBxmE,YAAc2B,GAC3D,KAAM8kE,IACDE,GACDxlE,GACA0kE,EAAiBR,oBAAsBpjE,GAAkB2kE,4BACzDf,EAAiBR,oBAAsBpjE,GAAkB4kE,eACrDhB,EAAiBR,oBAAsBpjE,GAAkB6kE,OACzDJ,EACJ,MAAMF,EAIV,OAFArmE,EAAM6T,OAAOI,QAAQ,yGAA0GlrB,EAAQqX,eACvIJ,EAAM0Y,kBAAkBkK,gBAAgB9rB,EAAkB8vE,2BAA4BnB,EAAgBrlE,eAC/FJ,EAAM6mE,2BAA2BpB,SAGhD1xD,EAAG5b,MAAQ,EACf,KAAK,EAAG,MAAO,CAAC,EAAczN,EAAOJ,MAAK,SAAUi/C,GAC5C,IAAI78B,EAQJ,OAPA1M,EAAM0rD,aAAa/c,UAAUX,GAAU84B,sBAAuBxnE,GAAgBiiE,OAAQh4B,GAChD,QAArC78B,EAAK1M,EAAMwkE,4BAAyC,IAAP93D,GAAyBA,EAAG+N,eAAe,CACrFC,SAAS,EACT+kC,UAAWlW,EAASkW,UACpB0S,eAAgB5oB,EAASoW,iBACzBP,UAAW7V,EAAS6V,YAEjB7V,KACR3+C,OAAM,SAAUm8E,GACf,IAAIr6D,EAOJ,MANA1M,EAAM0rD,aAAa/c,UAAUX,GAAUg5B,sBAAuB1nE,GAAgBiiE,OAAQ,KAAMwF,GACtD,QAArCr6D,EAAK1M,EAAMwkE,4BAAyC,IAAP93D,GAAyBA,EAAG+N,eAAe,CACrF5a,UAAWknE,EAAkBlnE,UAC7BghD,aAAckmB,EAAkB7mE,SAChCwa,SAAS,IAEPqsD,KACPj8E,SAAQ,WACPkD,SAAS0gD,oBAAoB,mBAAoB1uC,EAAM0kE,iCAMxEH,wBA1PiC,CCUL,WAsBnC,SAAS0C,kBAAkB1uB,GlDiuCK,IAAUx6B,EAAUlK,EAChDmlC,EkD5tCApvD,KAAKmjD,qBAAyC,oBAAX37B,OAEnCxnB,KAAK4uD,O3ClCb,SAAS0uB,mBAAmBx6D,EAAIqgC,GAC5B,IAAIo6B,EAAgBz6D,EAAGw/C,KAAMkb,EAAiB16D,EAAGsK,MAAOqwD,EAAkB36D,EAAGm/C,OAAQyb,EAAqB56D,EAAG8sC,UAEzG+tB,EAAuB,CACvBxpD,SAAUrkB,EAAU4B,aACpB0iB,UAAW,GAAKtkB,EAAUI,kBAC1BwtD,iBAAkB,GAClBM,uBAAwBluD,EAAU4B,aAClCyrD,kBAAmBrtD,EAAU4B,aAC7Bw1C,YAAap3C,EAAU4B,aACvBinD,sBAAuB7oD,EAAU4B,aACjCs3D,2BAA2B,EAC3B/e,mBAAoB,GACpBoL,aAAcxkB,GAAawqB,IAC3BtL,kBAAmB,CACf1Q,mBAAoBvO,GAAmBwO,KACvCC,OAAQzvC,EAAU4B,cAEtBs+C,4BAA4B,GAG5B4tB,EAAwB,CACxB5sC,cAAe57B,EAAqBg8B,eACpC6D,uBAAwB7/B,EAAqBg8B,eAC7CqI,wBAAwB,EACxBW,eAAe,EAEflF,yBAAuBsoC,GAAkBA,EAAexsC,gBAAkB57B,EAAqB+7B,cAC/FsN,2BAA2B,GAG3Bo/B,EAAyB,CAEzBhrD,eAAgB,aAGhBE,SAAUvE,GAASiE,KACnBK,mBAAmB,GAGnBgrD,EAAiC1wE,SAASA,SAAS,GAAIixC,IAAyB,CAAEhsB,cAAewrD,EAAwBh3B,cAAe1D,EAAuB,GAAaR,0BAA4BlD,GAAsBsiB,iBAAkB,IAAIle,GAAoBk6B,iBAAkB,EAE1RrL,mBAAoB+K,aAAyD,EAASA,EAAgBM,mBAvD/E,IAuD8H/F,mBAAoByF,aAAyD,EAASA,EAAgBM,mBAAqB55B,GAA2B6xB,kBAAmB7yB,GAAwB,GAAaI,iBAAmB,IAAM,EAAGwlB,0BArDrW,IAqD6Z0H,aAAa,EAAO3tB,uBAAuB,EAAOO,mBAAmB,EAAO26B,8BAA+BP,aAAyD,EAASA,EAAgBO,+BApD3kB,IAoDwpBrL,yBAA0B/6D,GAA2CsS,cAAe,CACjxBO,cAAc,EACdnC,aAASnjB,KAEb84E,EAAwB7wE,SAASA,SAAS,GAAIqwE,GAAkB,CAAEprD,eAAgBorD,aAAyD,EAASA,EAAgBprD,gBAAkBwrD,IACtLK,EAA4B,CAC5B1+B,YAAa,CACTlpB,QAASxmB,EAAU4B,aACnB6kB,WAAYzmB,EAAU4B,eAS9B,MANsB,CAClB4wD,KAAMl1D,SAASA,SAAS,GAAIuwE,GAAuBJ,GACnDnwD,MAAOhgB,SAASA,SAAS,GAAIwwE,GAAwBJ,GACrDvb,OAAQ70D,SAASA,SAAS,GAAI0wE,GAAiCG,GAC/DruB,UAAWxiD,SAASA,SAAS,GAAI8wE,GAA4BR,I2CvB/CJ,CAAmB3uB,EAAe3uD,KAAKmjD,sBACrDnjD,KAAKsjD,aAAc,EAEnBtjD,KAAKiqB,OAAS,IAAI,GAAOjqB,KAAK4uD,OAAOqT,OAAO5vC,cAAe,GAAM,IAEjEryB,KAAK6mD,cAAgB7mD,KAAK4uD,OAAOqT,OAAOpb,cAExC7mD,KAAK+hE,iBAAmB/hE,KAAK4uD,OAAOqT,OAAOF,iBAE3C/hE,KAAKm+E,iBAAmB,IAAI9wD,IAE5BrtB,KAAKo+E,wBAA0B,IAAI/wD,IAEnCrtB,KAAK8uB,kBAAoB9uB,KAAKmjD,qBAC1B,IAAI,GAAyBnjD,KAAK4uD,OAAO0T,KAAKnuC,SAAUn0B,KAAK4uD,OAAO0T,KAAKluC,UAAWp0B,KAAKiqB,OAAQ,GAAM,GAASjqB,KAAK4uD,OAAOgB,UAAUpQ,YAAax/C,KAAK4uD,OAAOqT,OAAO/3C,eACtK,IAAI,GAAsBlqB,KAAK4uD,OAAO0T,KAAKnuC,SAAUn0B,KAAK4uD,OAAO0T,KAAKluC,UAAWp0B,KAAKiqB,OAAQ,GAAM,GAASjqB,KAAK4uD,OAAOgB,UAAUpQ,aAEvIx/C,KAAKgvB,cAAgBhvB,KAAKmjD,qBAAuB,IAAI,GAAUnjD,KAAKiqB,OAAQjqB,KAAK8uB,kBAAmB9uB,KAAK4uD,OAAOqT,OAAO/3C,eAAiB+O,GACxIj5B,KAAK8hE,aAAe,IAAI,GAAa9hE,KAAKiqB,OAAQjqB,KAAKgvB,eAEvDhvB,KAAK60C,eAAiB70C,KAAKmjD,qBACvB,IAAI,GAAoBnjD,KAAK4uD,OAAO0T,KAAKnuC,SAAUn0B,KAAK4uD,OAAOxhC,MAAOptB,KAAKgvB,cAAehvB,KAAKiqB,SlDosC7DkK,EkDnsCJn0B,KAAK4uD,OAAO0T,KAAKnuC,SlDmsCHlK,EkDnsCajqB,KAAKiqB,OlDosClEmlC,EAAe,CACfpe,cAAe57B,EAAqB+X,cACpC8nB,uBAAwB7/B,EAAqB+X,cAC7CssB,wBAAwB,EACxBW,eAAe,EACflF,uBAAuB,EACvBuJ,2BAA2B,GAExB,IAAI,GAAoBtqB,EAAUi7B,EAAcn2B,GAA+BhP,IkD1sClF,IAAIo0D,EAAqB,CACrBrtC,cAAe57B,EAAqB+X,cACpC8nB,uBAAwB7/B,EAAqB+X,cAC7CssB,wBAAwB,EACxBW,eAAe,EACflF,uBAAuB,EACvBuJ,2BAA2B,GAE/Bz+C,KAAKs+E,sBAAwB,IAAI,GAAoBt+E,KAAK4uD,OAAO0T,KAAKnuC,SAAUkqD,EAAoBr+E,KAAKgvB,cAAehvB,KAAKiqB,QAE7HjqB,KAAKqyD,WAAa,IAAI,GAAWryD,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKiqB,OAAQjqB,KAAKgvB,eAErFhvB,KAAKu+E,mCAAqCv+E,KAAKu+E,mCAAmCvgF,KAAKgC,MAk8B3F,OA77BAq9E,kBAAkB/+E,UAAUkgF,WAAa,WACrC,OAAO9wE,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIqjD,EAAmBo7B,EAAiB37D,EAAIsE,EAAKs3D,EACjD,OAAOxwE,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAED,GADAvO,KAAKiqB,OAAO6J,MAAM,qBACd9zB,KAAKsjD,YAEL,OADAtjD,KAAKiqB,OAAO/gB,KAAK,sDACV,CAAC,GAKZ,GAHAm6C,EAAoBrjD,KAAK4uD,OAAOqT,OAAO5e,kBACvCo7B,EAAkBz+E,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkByxE,6BAC5E3+E,KAAK8hE,aAAa/c,UAAUX,GAAUw6B,mBACjCv7B,EAAmB,MAAO,CAAC,EAAa,GAC7Cl5B,EAAG5b,MAAQ,EACf,KAAK,EAGD,OAFA4b,EAAG3b,KAAK3N,KAAK,CAAC,EAAG,EAAG,CAAE,IACtBiiB,EAAK9iB,KACE,CAAC,EAAa,GAAqB0tE,eAAe1tE,KAAKiqB,OAAQjqB,KAAK4uD,OAAOqT,OAAO+b,6BAA8Bh+E,KAAK8uB,oBAChI,KAAK,EAED,OADAhM,EAAG+rD,wBAA0B1kD,EAAG7iB,OACzB,CAAC,EAAa,GACzB,KAAK,EAGD,OAFA8f,EAAM+C,EAAG7iB,OACTtH,KAAKiqB,OAAOI,QAAQjD,GACb,CAAC,EAAa,GACzB,KAAK,EACD,OAAMpnB,KAAK4uD,OAAOxhC,MAAMqxB,0BAAkC,CAAC,EAAa,IACxEz+C,KAAKiqB,OAAOI,QAAQ,6EACpBq0D,EAAiC1+E,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkB2xE,8BACpF,CAAC,EAAa7+E,KAAK60C,eAAeiF,iCAC7C,KAAK,EACD3vB,EAAG7iB,OACHo3E,EAA+B7tD,eAAe,CAAEC,SAAS,IACzD3G,EAAG5b,MAAQ,EACf,KAAK,EAID,OAHAvO,KAAKsjD,aAAc,EACnBtjD,KAAK8hE,aAAa/c,UAAUX,GAAU06B,gBACtCL,EAAgB5tD,eAAe,CAAEwyB,kBAAmBA,EAAmBvyB,SAAS,IACzE,CAAC,WAa5BusD,kBAAkB/+E,UAAU2qE,sBAAwB,SAAUt+C,GAC1D,OAAOjd,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAI++E,EAAkBC,EAAqBr/B,EAAUxgD,EAASg/E,EAAkBc,EAAczoE,EAAe0oE,EACzG9oE,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAK/B,OAJA9iB,KAAKiqB,OAAOI,QAAQ,gCAEpB,GAAa+4B,yCAAyCpjD,KAAK4uD,OAAOqT,OAAO5e,kBAAmBrjD,KAAKsjD,aACjGy7B,EAAmB/+E,KAAK+jC,iBACpB/jC,KAAKmjD,sBACL67B,EAAsBr0D,GAAQ7a,EAAU4B,kBAEhB,KADxBiuC,EAAW3/C,KAAKm+E,iBAAiB9gF,IAAI2hF,KAEjCh/E,KAAK8hE,aAAa/c,UAAUX,GAAU+6B,sBAAuBzpE,GAAgBstC,UAC7EhjD,KAAKiqB,OAAOI,QAAQ,iFACpBlrB,EAAUa,KAAK60C,eAAewI,yBAC9B8gC,OAAmB,EACfh/E,GAAW,GAAqByvE,kBAAkB5uE,KAAK4uD,OAAQ5uD,KAAKiqB,OAAQjqB,KAAK6uE,0BAA4B7uE,KAAK6uE,0BAA4BlkD,GAC9I3qB,KAAKiqB,OAAO6J,MAAM,gEAClBmrD,EAAe,IAAI,GAAwBj/E,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkBtsD,GAAMwzD,sBAAuBjpE,KAAK8uB,kBAAmB9uB,KAAK6uE,wBAAyB1vE,EAAQmjC,UAAWtiC,KAAKs+E,sBAAuBn/E,EAAQqX,eAClS2nE,EAAmBc,EAAahW,0BAGhCjpE,KAAKiqB,OAAO6J,MAAM,yDAClBtd,EAAgBxW,KAAK60C,eAAe2E,kBAAkBlkC,EAAmB+mC,gBAAgB,IAASvsC,EAAU4B,aAC5GwtE,EAAiBl/E,KAAKo/E,qBAAqB5oE,GAC3C2nE,EAAmBe,EAAejW,sBAAsBt+C,IAE5Dg1B,EAAWw+B,EAAiBz9E,MAAK,SAAUI,GACnCA,IAEkBi+E,EAAiBt8E,OAAS2T,EAAM2tB,iBAAiBthC,QAE/D2T,EAAM0rD,aAAa/c,UAAUX,GAAUi7B,cAAe3pE,GAAgBstC,SAAUliD,GAChFsV,EAAM6T,OAAOI,QAAQ,2DAGrBjU,EAAM0rD,aAAa/c,UAAUX,GAAU84B,sBAAuBxnE,GAAgBstC,SAAUliD,GACxFsV,EAAM6T,OAAOI,QAAQ,mEAI7B,OADAjU,EAAM0rD,aAAa/c,UAAUX,GAAUk7B,oBAAqB5pE,GAAgBstC,UACrEliD,KACRE,OAAM,SAAUP,GASf,MAPIs+E,EAAiBt8E,OAAS,EAC1B2T,EAAM0rD,aAAa/c,UAAUX,GAAUg5B,sBAAuB1nE,GAAgBstC,SAAU,KAAMviD,GAG9F2V,EAAM0rD,aAAa/c,UAAUX,GAAUm7B,cAAe7pE,GAAgBstC,SAAU,KAAMviD,GAE1F2V,EAAM0rD,aAAa/c,UAAUX,GAAUk7B,oBAAqB5pE,GAAgBstC,UACtEviD,KAEVT,KAAKm+E,iBAAiB7wD,IAAI0xD,EAAqBr/B,IAG/C3/C,KAAKiqB,OAAOI,QAAQ,8FAEjB,CAAC,EAAcs1B,KAE1B3/C,KAAKiqB,OAAOI,QAAQ,+DACb,CAAC,EAAc,cAalCgzD,kBAAkB/+E,UAAUuqE,qBAAuB,SAAU1pE,GACzD,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwW,EAAegpE,EAAY1+E,EAAQm+E,EAAcC,EACjD9oE,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAgC/B,OA/BAtM,EAAgBxW,KAAKg7E,wBAAwB77E,GAC7Ca,KAAKiqB,OAAOI,QAAQ,8BAA+B7T,GACnDxW,KAAKu7E,iCAAiC7lE,GAAgBstC,WACtDw8B,EAAax/E,KAAK+jC,iBAAiBthC,OAAS,GAExCzC,KAAK8hE,aAAa/c,UAAUX,GAAU23B,oBAAqBrmE,GAAgBstC,SAAU7jD,GAGrFa,KAAK8hE,aAAa/c,UAAUX,GAAUq7B,YAAa/pE,GAAgBstC,SAAU7jD,GAE7Ea,KAAK6uE,yBAA2B7uE,KAAK0/E,aAAavgF,IAClD8/E,EAAe,IAAI,GAAwBj/E,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkBtsD,GAAMozD,qBAAsB7oE,KAAK8uB,kBAAmB9uB,KAAK6uE,wBAAyB7uE,KAAK2/E,mBAAmBxgF,GAAUa,KAAKs+E,sBAAuBn/E,EAAQqX,eAChT1V,EAASm+E,EAAapW,qBAAqB1pE,GAAS6B,OAAM,SAAUP,GAChE,GAAIA,aAAa,IAAmBA,EAAEokE,UAGlC,OAFAzuD,EAAMy4D,6BAA0B1pE,EACXiR,EAAMgpE,qBAAqBjgF,EAAQqX,eAClC+/C,aAAap3D,GAElC,GAAIsB,aAAa,GAGlB,OAFA2V,EAAM6T,OAAOI,QAAQ,mHACAjU,EAAMgpE,qBAAqBjgF,EAAQqX,eAClC+/C,aAAap3D,GAGvC,MADAiX,EAAMy+B,eAAe0H,0BAAyB,GACxC97C,OAIVy+E,EAAiBl/E,KAAKo/E,qBAAqBjgF,EAAQqX,eACnD1V,EAASo+E,EAAe3oB,aAAap3D,IAElC,CAAC,EAAc2B,EAAOE,OAAM,SAAUP,GAQrC,MANI++E,EACAppE,EAAM0rD,aAAa/c,UAAUX,GAAUg5B,sBAAuB1nE,GAAgBstC,SAAU,KAAMviD,GAG9F2V,EAAM0rD,aAAa/c,UAAUX,GAAUm7B,cAAe7pE,GAAgBstC,SAAU,KAAMviD,GAEpFA,aAc1B48E,kBAAkB/+E,UAAUmzE,kBAAoB,SAAUtyE,GACtD,IAAIiX,EAAQpW,KACRwW,EAAgBxW,KAAKg7E,wBAAwB77E,GAC7CygF,EAAqB5/E,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkB2yE,kBAAmBrpE,GACtG,IACIxW,KAAKiqB,OAAOI,QAAQ,2BAA4B7T,GAChDxW,KAAKu7E,iCAAiC7lE,GAAgBg8D,OAE1D,MAAOjxE,GAEH,OAAOoK,QAAQjL,OAAOa,GAG1B,IAOIK,EAPAi+E,EAAmB/+E,KAAK+jC,kBACxBg7C,EAAiBt8E,OAAS,EAC1BzC,KAAK8hE,aAAa/c,UAAUX,GAAU23B,oBAAqBrmE,GAAgBg8D,MAAOvyE,GAGlFa,KAAK8hE,aAAa/c,UAAUX,GAAUq7B,YAAa/pE,GAAgBg8D,MAAOvyE,GAG1Ea,KAAK0/E,aAAavgF,IAClB2B,EAASd,KAAKg8E,mBAAmB78E,EAASsW,GAAMg8D,mBAAmB/wE,MAAK,SAAUi/C,GAO9E,OANAvpC,EAAMy+B,eAAe0H,0BAAyB,GAC9CqjC,EAAmB/uD,eAAe,CAC9BC,SAAS,EACTy3C,gBAAgB,EAChB/S,UAAW7V,EAAS6V,YAEjB7V,KACR3+C,OAAM,SAAUP,GACf,GAAIA,aAAa,IAAmBA,EAAEokE,UAGlC,OAFAzuD,EAAMy4D,6BAA0B1pE,EACdiR,EAAM0pE,kBAAkB3gF,EAAQqX,eAC/B+/C,aAAap3D,GAE/B,GAAIsB,aAAa,GAGlB,OAFA2V,EAAM6T,OAAOI,QAAQ,gHACHjU,EAAM0pE,kBAAkB3gF,EAAQqX,eAC/B+/C,aAAap3D,GAGpC,MADAiX,EAAMy+B,eAAe0H,0BAAyB,GACxC97C,KAKVK,EADkBd,KAAK8/E,kBAAkB3gF,EAAQqX,eAC5B+/C,aAAap3D,GAEtC,OAAO2B,EAAOJ,MAAK,SAAUI,GAmBzB,OAfkBi+E,EAAiBt8E,OAAS2T,EAAM2tB,iBAAiBthC,OAE/D2T,EAAM0rD,aAAa/c,UAAUX,GAAUi7B,cAAe3pE,GAAgBg8D,MAAO5wE,GAG7EsV,EAAM0rD,aAAa/c,UAAUX,GAAU84B,sBAAuBxnE,GAAgBg8D,MAAO5wE,GAEzF8+E,EAAmBjpD,gBAAgB,CAC/B+kD,gBAAiB56E,EAAOokC,YAAYziC,OACpCk5E,YAAa76E,EAAO+5B,QAAQp4B,SAEhCm9E,EAAmB/uD,eAAe,CAC9BC,SAAS,EACT0kC,UAAW10D,EAAO00D,YAEf10D,KACRE,OAAM,SAAUP,GAaf,OAZIs+E,EAAiBt8E,OAAS,EAC1B2T,EAAM0rD,aAAa/c,UAAUX,GAAUg5B,sBAAuB1nE,GAAgBg8D,MAAO,KAAMjxE,GAG3F2V,EAAM0rD,aAAa/c,UAAUX,GAAUm7B,cAAe7pE,GAAgBg8D,MAAO,KAAMjxE,GAEvFm/E,EAAmB/uD,eAAe,CAC9B5a,UAAWxV,EAAEwV,UACbghD,aAAcx2D,EAAE6V,SAChBwa,SAAS,IAGNjmB,QAAQjL,OAAOa,OAG9B48E,kBAAkB/+E,UAAUigF,mCAAqC,WAC7D,IAAIxnD,EAAc/2B,KAAK+/E,sBAAwB//E,KAAKggF,mCAC/CjpD,IAGL/2B,KAAKiqB,OAAO/gB,KAAK,uCAAwC6tB,EAAYpL,MAAM5uB,MAC3Eg6B,EAAYF,UAAU,CAClB+kD,sBAAuB,MAoB/ByB,kBAAkB/+E,UAAUguE,UAAY,SAAUntE,GAC9C,IAAI2jB,EACJ,OAAOpV,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwW,EAAew6D,EAAclwE,EAAQm/E,EACrC7pE,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAUmqB,GA4B/B,OA3BA3T,EAAgBxW,KAAKg7E,wBAAwB77E,GAC7C6xE,EAAe5jE,SAASA,SAAS,GAAIjO,GAAU,CAE3CioD,OAAQjoD,EAAQioD,OAAQ5wC,cAAeA,IAC3CxW,KAAKu7E,iCAAiC7lE,GAAgBiiE,QACtD33E,KAAK+/E,qBAAuB//E,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBgzE,UAAW1pE,GAC5D,QAApCsM,EAAK9iB,KAAK+/E,4BAAyC,IAAPj9D,GAAyBA,EAAG+T,UAAU,CAC/E+kD,sBAAuB,IAE3Bx3E,SAASskB,iBAAiB,mBAAoB1oB,KAAKu+E,oCACnDv+E,KAAKiqB,OAAOI,QAAQ,mBAAoB7T,GACxCxW,KAAK8hE,aAAa/c,UAAUX,GAAU+7B,iBAAkBzqE,GAAgBiiE,OAAQ3G,GAC5EhxE,KAAK0/E,aAAa1O,GAClBlwE,EAASd,KAAKg8E,mBAAmBhL,EAAcv7D,GAAM62D,WAAWtrE,OAAM,SAAUP,GAE5E,GAAIA,aAAa,IAAmBA,EAAEokE,UAGlC,OAFAzuD,EAAMy4D,6BAA0B1pE,EACPiR,EAAM6lE,yBAAyBjL,EAAax6D,eAC3C+/C,aAAaya,GAE3C,MAAMvwE,MAIVw/E,EAAqBjgF,KAAKi8E,yBAAyBjL,EAAax6D,eAChE1V,EAASm/E,EAAmB1pB,aAAaya,IAEtC,CAAC,EAAclwE,EAAOJ,MAAK,SAAUi/C,GACpC,IAAI78B,EAAIqH,EAWR,OAVA/T,EAAM0rD,aAAa/c,UAAUX,GAAUg8B,mBAAoB1qE,GAAgBiiE,OAAQh4B,GAC7C,QAArC78B,EAAK1M,EAAM2pE,4BAAyC,IAAPj9D,GAAyBA,EAAG6T,gBAAgB,CACtF+kD,gBAAiB/7B,EAASza,YAAYziC,OACtCk5E,YAAah8B,EAAS9kB,QAAQp4B,SAEI,QAArC0nB,EAAK/T,EAAM2pE,4BAAyC,IAAP51D,GAAyBA,EAAG0G,eAAe,CACrFC,SAAS,EACTy3C,eAAgB5oB,EAASoW,iBACzBP,UAAW7V,EAAS6V,YAEjB7V,KACR3+C,OAAM,SAAUP,GACf,IAAIqiB,EAOJ,MANA1M,EAAM0rD,aAAa/c,UAAUX,GAAUi8B,mBAAoB3qE,GAAgBiiE,OAAQ,KAAMl3E,GACnD,QAArCqiB,EAAK1M,EAAM2pE,4BAAyC,IAAPj9D,GAAyBA,EAAG+N,eAAe,CACrF5a,UAAWxV,EAAEwV,UACbghD,aAAcx2D,EAAE6V,SAChBwa,SAAS,IAEPrwB,KACPS,SAAQ,WACPkD,SAAS0gD,oBAAoB,mBAAoB1uC,EAAMmoE,+CAe3ElB,kBAAkB/+E,UAAUgiF,mBAAqB,SAAUnhF,GACvD,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwW,EAAe+pE,EAAiBC,EAAkB7gC,EAClDvpC,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAC/BtM,EAAgBxW,KAAKg7E,wBAAwB77E,GAC7Ca,KAAKu7E,iCAAiC7lE,GAAgBiiE,QACtD33E,KAAKiqB,OAAO6J,MAAM,4BAA6Btd,GAC/CxW,KAAK8hE,aAAa/c,UAAUX,GAAUq8B,4BAA6B/qE,GAAgBiiE,OAAQx4E,GAC3FohF,EAAkBvgF,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkBwzE,mBAAoBvhF,EAAQqX,eACxG,IACI,GAAIrX,EAAQ0W,MAAQ1W,EAAQyhC,gBAExB,MAAM,GAAiB3a,8CAEtB,GAAI9mB,EAAQ0W,KAoCb,OAnCA2qE,EAAmBrhF,EAAQ0W,MAC3B8pC,EAAW3/C,KAAKo+E,wBAAwB/gF,IAAImjF,KA+BxCxgF,KAAKiqB,OAAOI,QAAQ,4CAA6ClrB,EAAQqX,eACzE+pE,EAAgB9pD,uBA9BhBz2B,KAAKiqB,OAAOI,QAAQ,4CAA6C7T,GACjEmpC,EAAW3/C,KAAK2gF,wBAAwBvzE,SAASA,SAAS,GAAIjO,GAAU,CAAEqX,cAAeA,KACpF9V,MAAK,SAAUI,GAYhB,OAXAsV,EAAM0rD,aAAa/c,UAAUX,GAAUw8B,8BAA+BlrE,GAAgBiiE,OAAQ72E,GAC9FsV,EAAMgoE,wBAAwB1xD,OAAO8zD,GACrCD,EAAgB5pD,gBAAgB,CAC5B+kD,gBAAiB56E,EAAOokC,YAAYziC,OACpCk5E,YAAa76E,EAAO+5B,QAAQp4B,SAEhC89E,EAAgB1vD,eAAe,CAC3BC,SAAS,EACTy3C,eAAgBznE,EAAOi1D,iBACvBP,UAAW10D,EAAO00D,YAEf10D,KAENE,OAAM,SAAU6H,GAQjB,MAPAuN,EAAMgoE,wBAAwB1xD,OAAO8zD,GACrCpqE,EAAM0rD,aAAa/c,UAAUX,GAAUy8B,8BAA+BnrE,GAAgBiiE,OAAQ,KAAM9uE,GACpG03E,EAAgB1vD,eAAe,CAC3B5a,UAAWpN,EAAMoN,UACjBghD,aAAcpuD,EAAMyN,SACpBwa,SAAS,IAEPjoB,KAEV7I,KAAKo+E,wBAAwB9wD,IAAIkzD,EAAkB7gC,IAMhD,CAAC,EAAcA,GAErB,GAAIxgD,EAAQyhC,gBAAiB,CAC9B,GAAI5gC,KAAK0/E,aAAavgF,EAASA,EAAQyhC,iBACnC,MAAO,CAAC,EAAc5gC,KAAKg8E,mBAAmB78E,EAASsW,GAAM6qE,mBAAoBnhF,EAAQyhC,iBAAiB5/B,OAAM,SAAUP,GAKlH,MAHIA,aAAa,IAAmBA,EAAEokE,YAClCzuD,EAAMy4D,6BAA0B1pE,GAE9B1E,MAId,MAAM,GAAiB0lB,oDAI3B,MAAM,GAAiBH,+CAG/B,MAAOvlB,GAOH,MANAT,KAAK8hE,aAAa/c,UAAUX,GAAUy8B,8BAA+BnrE,GAAgBiiE,OAAQ,KAAMl3E,GACnG8/E,EAAgB1vD,eAAe,CAC3B5a,UAAWxV,aAAa,IAAaA,EAAEwV,gBAAa9Q,EACpD8xD,aAAcx2D,aAAa,IAAaA,EAAE6V,eAAYnR,EACtD2rB,SAAS,IAEPrwB,EAEV,MAAO,CAAC,UASpB48E,kBAAkB/+E,UAAUqiF,wBAA0B,SAAUxhF,GAC5D,IAAI2jB,EACJ,OAAOpV,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IACIoW,EAAQpW,KACZ,OAAOkO,YAAYlO,MAAM,SAAUmqB,GAC/B,OAAQA,EAAG5b,OACP,KAAK,EAQD,OAPAvO,KAAKiqB,OAAO6J,MAAM,iCAAkC30B,EAAQqX,eAC5DxW,KAAKggF,mCAAqChgF,KAAK8uB,kBAAkBmB,iBAAiB/iB,EAAkB4zE,wBAAyB3hF,EAAQqX,eAClF,QAAlDsM,EAAK9iB,KAAKggF,0CAAuD,IAAPl9D,GAAyBA,EAAG+T,UAAU,CAC7F+kD,sBAAuB,IAE3Bx3E,SAASskB,iBAAiB,mBAAoB1oB,KAAKu+E,oCAE5C,CAAC,EADev+E,KAAK+gF,2BAA2B5hF,EAAQqX,eACrB+/C,aAAap3D,GAASuB,MAAK,SAAUi/C,GACvE,IAAI78B,EAOJ,OANoD,QAAnDA,EAAK1M,EAAM4pE,0CAAuD,IAAPl9D,GAAyBA,EAAG+N,eAAe,CACnGC,SAAS,EACT+kC,UAAWlW,EAASkW,UACpB0S,eAAgB5oB,EAASoW,iBACzBP,UAAW7V,EAAS6V,YAEjB7V,KACR3+C,OAAM,SAAUm8E,GACf,IAAIr6D,EAMJ,MALoD,QAAnDA,EAAK1M,EAAM4pE,0CAAuD,IAAPl9D,GAAyBA,EAAG+N,eAAe,CACnG5a,UAAWknE,EAAkBlnE,UAC7BghD,aAAckmB,EAAkB7mE,SAChCwa,SAAS,IAEPqsD,KACPj8E,SAAQ,WACPkD,SAAS0gD,oBAAoB,mBAAoB1uC,EAAMmoE,wCAEnE,KAAK,EAED,MAAO,CAAC,EADYp0D,EAAG7iB,gBAa3C+1E,kBAAkB/+E,UAAU89E,sBAAwB,SAAUrU,EAAmBiZ,EAAe9Z,GAC5F,OAAOx5D,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAE/B,OADA9iB,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBivE,sBAAuB6E,EAAcxqE,eAC1F0wD,EAAcoU,mBAClB,KAAKpjE,GAAkB6iD,QACvB,KAAK7iD,GAAkBokE,YACvB,KAAKpkE,GAAkB2kE,2BACnB,MAAO,CAAC,EAAc9U,EAAkBxR,aAAayqB,IACzD,QACI,MAAM,GAAgBlgE,6BAE9B,MAAO,CAAC,UAUpBu8D,kBAAkB/+E,UAAUwnE,2BAA6B,SAAUkb,EAAe9Z,GAC9E,OAAOx5D,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIihF,EACJ,OAAO/yE,YAAYlO,MAAM,SAAU8iB,GAE/B,OADA9iB,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkBsvE,2BAA4BwE,EAAcxqE,eAC/F0wD,EAAcoU,mBAClB,KAAKpjE,GAAkB6iD,QACvB,KAAK7iD,GAAkB2kE,2BACvB,KAAK3kE,GAAkB4kE,aACvB,KAAK5kE,GAAkBgpE,uBAGnB,OAFAD,EAAsBjhF,KAAKmhF,0BAA0BH,EAAcxqE,eACnExW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBirE,gCAAiC6I,EAAcxqE,eACjG,CAAC,EAAcyqE,EAAoB1qB,aAAayqB,IAC3D,QACI,MAAM,GAAgBlgE,6BAE9B,MAAO,CAAC,UASpBu8D,kBAAkB/+E,UAAU2+E,2BAA6B,SAAU99E,GAC/D,OAAOuO,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIigF,EACJ,OAAO/xE,YAAYlO,MAAM,SAAU8iB,GAI/B,OAHA9iB,KAAK8uB,kBAAkByG,oBAAoBroB,EAAkB8vE,2BAA4B79E,EAAQqX,eACjGypE,EAAqBjgF,KAAKi8E,yBAAyB98E,EAAQqX,eAC3DxW,KAAK8uB,kBAAkBkK,gBAAgB9rB,EAAkBwqE,+BAAgCv4E,EAAQqX,eAC1F,CAAC,EAAcypE,EAAmB1pB,aAAap3D,WAWlEk+E,kBAAkB/+E,UAAUkpE,OAAS,SAAUlQ,GAC3C,OAAO5pD,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwW,EACJ,OAAOtI,YAAYlO,MAAM,SAAU8iB,GAG/B,OAFAtM,EAAgBxW,KAAKg7E,wBAAwB1jB,GAC7Ct3D,KAAKiqB,OAAOuJ,QAAQ,mGAAoGhd,GACjH,CAAC,EAAcxW,KAAKohF,eAAeh0E,SAAS,CAAEoJ,cAAeA,GAAiB8gD,YASjG+lB,kBAAkB/+E,UAAU8iF,eAAiB,SAAU9pB,GACnD,OAAO5pD,UAAU1N,UAAM,OAAQ,GAAQ,WACnC,IAAIwW,EACJ,OAAOtI,YAAYlO,MAAM,SAAU8iB,GAI/B,OAHAtM,EAAgBxW,KAAKg7E,wBAAwB1jB,GAC7Ct3D,KAAKu7E,iCAAiC7lE,GAAgBstC,UAE/C,CAAC,EADShjD,KAAKo/E,qBAAqB5oE,GACNgxD,OAAOlQ,WAQxD+lB,kBAAkB/+E,UAAU4zE,YAAc,SAAU5a,GAChD,IACI,IAAI9gD,EAAgBxW,KAAKg7E,wBAAwB1jB,GAGjD,OAFAt3D,KAAKu7E,iCAAiC7lE,GAAgBg8D,OACpC1xE,KAAK8/E,kBAAkBtpE,GACtBgxD,OAAOlQ,GAE9B,MAAO72D,GAEH,OAAOoK,QAAQjL,OAAOa,KAW9B48E,kBAAkB/+E,UAAUylC,eAAiB,WAEzC,OADA/jC,KAAKiqB,OAAOI,QAAQ,yBACbrqB,KAAKmjD,qBAAuBnjD,KAAK60C,eAAe9Q,iBAAmB,IAU9Es5C,kBAAkB/+E,UAAU+iF,qBAAuB,SAAUrhD,GAEzD,GADAhgC,KAAKiqB,OAAO6J,MAAM,gCACbkM,EAED,OADAhgC,KAAKiqB,OAAOuJ,QAAQ,8CACb,KAEX,IAAI8N,EAAUthC,KAAK60C,eAAerQ,yBAAyB,CAAExE,SAAUA,IACvE,OAAIsB,GACAthC,KAAKiqB,OAAOI,QAAQ,oEACpBrqB,KAAKiqB,OAAO4J,WAAW,yEAA2EmM,GAC3FsB,IAGPthC,KAAKiqB,OAAOI,QAAQ,mEACb,OAUfgzD,kBAAkB/+E,UAAUgjF,mBAAqB,SAAUjoD,GAEvD,GADAr5B,KAAKiqB,OAAO6J,MAAM,8BACbuF,EAED,OADAr5B,KAAKiqB,OAAOuJ,QAAQ,iDACb,KAEX,IAAI8N,EAAUthC,KAAK60C,eAAerQ,yBAAyB,CAAEnL,cAAeA,IAC5E,OAAIiI,GACAthC,KAAKiqB,OAAOI,QAAQ,uEACpBrqB,KAAKiqB,OAAO4J,WAAW,4EAA8EwF,GAC9FiI,IAGPthC,KAAKiqB,OAAOI,QAAQ,iEACb,OAUfgzD,kBAAkB/+E,UAAUijF,oBAAsB,SAAUthD,GAExD,GADAjgC,KAAKiqB,OAAO6J,MAAM,+BACbmM,EAED,OADAjgC,KAAKiqB,OAAOuJ,QAAQ,mDACb,KAEX,IAAI8N,EAAUthC,KAAK60C,eAAerQ,yBAAyB,CAAEvE,eAAgBA,IAC7E,OAAIqB,GACAthC,KAAKiqB,OAAOI,QAAQ,yEACpBrqB,KAAKiqB,OAAO4J,WAAW,8EAAgFoM,GAChGqB,IAGPthC,KAAKiqB,OAAOI,QAAQ,kEACb,OAOfgzD,kBAAkB/+E,UAAUu6C,iBAAmB,SAAUvX,GACrDthC,KAAK60C,eAAegE,iBAAiBvX,IAKzC+7C,kBAAkB/+E,UAAU65C,iBAAmB,WAC3C,OAAOn4C,KAAK60C,eAAesD,oBAW/BklC,kBAAkB/+E,UAAUi9E,iCAAmC,SAAU5+B,EAAiBJ,GActF,QAbiC,IAA7BA,IAAuCA,GAA2B,GACtEv8C,KAAKiqB,OAAOI,QAAQ,4CAEpB,GAAa64B,2BAA2BljD,KAAKmjD,sBAE7C,GAAaN,sBAAsBlG,EAAiB38C,KAAK4uD,OAAOqT,OAAOnf,uBAEvE,GAAaF,6BAEb,GAAaK,4BAEb,GAAaG,yCAAyCpjD,KAAK4uD,OAAOqT,OAAO5e,kBAAmBrjD,KAAKsjD,aAE7F3G,IAAoBjnC,GAAgBstC,UACpChjD,KAAK4uD,OAAOxhC,MAAM4jB,gBAAkB57B,EAAqB+X,gBACxDntB,KAAK4uD,OAAOxhC,MAAMqsB,uBACnB,MAAM,GAA8B7vB,yCAEpC+yB,IAAoBjnC,GAAgBstC,UAAYrG,IAAoBjnC,GAAgBg8D,OACpF1xE,KAAKwhF,4BAA4BjlC,IASzC8gC,kBAAkB/+E,UAAUkjF,4BAA8B,SAAUjlC,GAChEv8C,KAAKiqB,OAAOI,QAAQ,kEAEpB,GAAau4B,6BAETrG,GACAv8C,KAAK60C,eAAe0H,0BAAyB,IAOrD8gC,kBAAkB/+E,UAAU09E,mBAAqB,SAAU78E,EAASihE,EAAO99B,GACvE,OAAO50B,UAAU1N,UAAM,OAAQ,GAAQ,WAEnC,OAAOkO,YAAYlO,MAAM,SAAU8iB,GAE/B,GADA9iB,KAAKiqB,OAAO6J,MAAM,8BACb9zB,KAAK6uE,wBACN,MAAM,GAAiBvoD,4CAG3B,MAAO,CAAC,EADO,IAAI,GAAwBtmB,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkB3B,EAAOpgE,KAAK8uB,kBAAmB9uB,KAAK6uE,wBAAyBvsC,GAAatiC,KAAK2/E,mBAAmBxgF,GAAUa,KAAKs+E,sBAAuBn/E,EAAQqX,eACrQ+/C,aAAap3D,WAQ5Dk+E,kBAAkB/+E,UAAUohF,aAAe,SAAUvgF,EAASmjC,GAE1D,GADAtiC,KAAKiqB,OAAO6J,MAAM,wBACb,GAAqB86C,kBAAkB5uE,KAAK4uD,OAAQ5uD,KAAKiqB,OAAQjqB,KAAK6uE,wBAAyB1vE,EAAQorC,sBAExG,OADAvqC,KAAKiqB,OAAO6J,MAAM,oEACX,EAEX,GAAI30B,EAAQioD,OACR,OAAQjoD,EAAQioD,QACZ,KAAKz0C,EAAYI,KACjB,KAAKJ,EAAYG,QACjB,KAAKH,EAAYC,MACb5S,KAAKiqB,OAAO6J,MAAM,uDAClB,MACJ,QAEI,OADA9zB,KAAKiqB,OAAO6J,MAAM,0BAA4B30B,EAAQioD,OAAS,yDACxD,EAGnB,SAAK9kB,IAActiC,KAAK2/E,mBAAmBxgF,MACvCa,KAAKiqB,OAAO6J,MAAM,oEACX,IASfupD,kBAAkB/+E,UAAUqhF,mBAAqB,SAAUxgF,GACvD,IAAImiC,EAAUniC,EAAQmiC,SAAWthC,KAAK60C,eAAeoE,sBAAsB95C,EAAQ+5C,UAAW/5C,EAAQg6C,MAAQn5C,KAAKm4C,mBACnH,OAAO7W,GAAWA,EAAQV,iBAAmB,IAMjDy8C,kBAAkB/+E,UAAUwhF,kBAAoB,SAAUtpE,GACtD,OAAO,IAAI,GAAYxW,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkB/hE,KAAK8uB,kBAAmB9uB,KAAKs+E,sBAAuBt+E,KAAK6uE,wBAAyBr4D,IAM1N6mE,kBAAkB/+E,UAAU8gF,qBAAuB,SAAU5oE,GACzD,OAAO,IAAI,GAAexW,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkB/hE,KAAK8uB,kBAAmB9uB,KAAKs+E,sBAAuBt+E,KAAK6uE,wBAAyBr4D,IAM7N6mE,kBAAkB/+E,UAAU29E,yBAA2B,SAAUzlE,GAC7D,OAAO,IAAI,GAAmBxW,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkBtsD,GAAM62D,UAAWtsE,KAAK8uB,kBAAmB9uB,KAAKs+E,sBAAuBt+E,KAAK6uE,wBAAyBr4D,IAKlP6mE,kBAAkB/+E,UAAU49E,wBAA0B,SAAU1lE,GAC5D,OAAO,IAAI,GAAkBxW,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkB/hE,KAAK8uB,kBAAmB9uB,KAAK6uE,wBAAyBr4D,IAKpM6mE,kBAAkB/+E,UAAU6iF,0BAA4B,SAAU3qE,GAC9D,OAAO,IAAI,GAAoBxW,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkB/hE,KAAK8uB,kBAAmB9uB,KAAK6uE,wBAAyBr4D,IAKtM6mE,kBAAkB/+E,UAAUyiF,2BAA6B,SAAUvqE,GAC/D,OAAO,IAAI,GAAqBxW,KAAK4uD,OAAQ5uD,KAAK60C,eAAgB70C,KAAKgvB,cAAehvB,KAAKiqB,OAAQjqB,KAAK8hE,aAAc9hE,KAAK+hE,iBAAkBtsD,GAAM6qE,mBAAoBtgF,KAAK8uB,kBAAmB9uB,KAAK6uE,wBAAyBr4D,IAMjO6mE,kBAAkB/+E,UAAUomD,iBAAmB,SAAUjsB,GACrD,OAAOz4B,KAAK8hE,aAAapd,iBAAiBjsB,IAM9C4kD,kBAAkB/+E,UAAUqmD,oBAAsB,SAAUjsB,GACxD14B,KAAK8hE,aAAand,oBAAoBjsB,IAQ1C2kD,kBAAkB/+E,UAAUk6B,uBAAyB,SAAUC,GAC3D,OAAOz4B,KAAK8uB,kBAAkB0J,uBAAuBC,IAQzD4kD,kBAAkB/+E,UAAUq6B,0BAA4B,SAAUD,GAC9D,OAAO14B,KAAK8uB,kBAAkB6J,0BAA0BD,IAK5D2kD,kBAAkB/+E,UAAUsmD,2BAA6B,WACrD5kD,KAAK8hE,aAAald,8BAKtBy4B,kBAAkB/+E,UAAUumD,4BAA8B,WACtD7kD,KAAK8hE,aAAajd,+BAKtBw4B,kBAAkB/+E,UAAUmjF,cAAgB,WACxC,OAAOzhF,KAAKqyD,YAKhBgrB,kBAAkB/+E,UAAUojF,UAAY,WACpC,OAAO1hF,KAAKiqB,QAMhBozD,kBAAkB/+E,UAAUqjF,UAAY,SAAU13D,GAC9CjqB,KAAKiqB,OAASA,GAOlBozD,kBAAkB/+E,UAAUsjF,yBAA2B,SAAU9iC,EAAK1zB,GAElEprB,KAAK60C,eAAegD,mBAAmBiH,EAAK1zB,IAMhDiyD,kBAAkB/+E,UAAUujF,oBAAsB,SAAU9f,GACxD/hE,KAAK+hE,iBAAmBA,GAK5Bsb,kBAAkB/+E,UAAUwjF,iBAAmB,WAC3C,OAAO9hF,KAAK4uD,QAShByuB,kBAAkB/+E,UAAU08E,wBAA0B,SAAU77E,GAC5D,OAAIA,aAAyC,EAASA,EAAQqX,eACnDrX,EAAQqX,cAEfxW,KAAKmjD,qBACEnjD,KAAKgvB,cAAcK,gBAMvBvf,EAAU4B,cAEd2rE,kBApgC2B,I,+lBC3B/B,IAAM0E,IAAwB/iF,EAgB/BgjF,GAAe,IAAIrH,GAXN,CACfrY,KAAM,CACFnuC,SANan1B,uCAObo1B,UALU,4CADAp1B,8BAQdouB,MAAO,CACH4jB,cAAe,iBACfyI,wBAAwB,KAK1BwoC,GAAe,CACjBjqE,OAAQ,CAAC,cAGPkqE,GAAgB,aAETC,GAAkB,SAAlBA,kBAAkB,OAAMH,IAExBI,GAAc,SAAdA,cACT,GAAIL,GAAyB,MAAO,CAAEM,QAAS,CAAEtlF,KAAMmlF,KACvD,IAAM5gD,EAAU0gD,GAAa7pC,mBAC7B,GAAK7W,EAQL,OAJAghD,IAAe,CACXtiD,SAAUsB,EAAUA,EAAQtB,SAAWkiD,KAGpC5gD,EAPH0gD,GAAajH,iBAURwH,GAAY,+BAAG,sCAAAjzE,EAAA,mEACpByyE,GADoB,yCACY,IADZ,UAGlBzgD,EAAU0gD,GAAa7pC,mBAHL,sBAKd,IAAIpxC,MAAM,yBALI,cAOlB67D,EAAe,IAAIzvC,MAAU,IAAIA,KAAiC,IAA5BmO,EAAQX,cAAc6hD,KAP1C,SAQDR,GAAa9G,mBAAb,+BAChB+G,IADgB,IAEnB3gD,UACAshC,kBAXoB,cAQlBjjB,EARkB,yBAajBA,EAAS9kB,SAbQ,kDAAH,gBAAZ0nD,eAAY,mCAgBZE,GAAmB,+BAAG,kBAAOnxC,EAAKrvC,GAAZ,iBAAAqN,EAAA,oEAC3ByyE,GAD2B,yCAEpBniC,MAAMtO,EAAKrvC,IAFS,gCAMLsgF,KANK,cAMrB1nD,EANqB,OAOrB6nD,EAPqB,+BAQpBzgF,GARoB,IASvB69C,QAAQ,cAAD,iBACA79C,EAAQ69C,SADR,IAEH6iC,cAAc,UAAD,OAAY9nD,OAXN,kBAcpB+kB,MAAMtO,EAAKoxC,IAdS,yCAgB3BJ,IAAA,MAhB2B,uBAiBpBn9E,GAjBoB,iEAAH,gBAAnBs9E,oBAAmB,wCAqBnBjb,GAAS,SAATA,SACT,IAAMlmC,EAAU0gD,GAAa7pC,mBAC7B6pC,GAAanpC,iBAAiB,MAC9BmpC,GAAaZ,eAAe,CAAE9/C,YAC9BghD,IAAe,Q,gCCnFnB,0JAaA,MAMMM,EAAsB,IAK5B,MAAMC,IAaHhjF,YAAYijF,EAAQzlD,EAAQ,IAAI,IAAW0lD,EAxB1B,GAwBmD/iF,KAAK+iF,SAAWA,EACnF/iF,KAAKgjF,OAAS,CAAC,CAAE3lD,UACbylD,GACF9iF,KAAKijF,WAAWH,GAOnBI,YAAY93D,GACX,OAAOprB,KAAK+iF,SAAW33D,EAMxB63D,WAAWH,GACE9iF,KAAKmjF,cACbL,OAASA,EACTA,GAAUA,EAAOM,mBACnBN,EAAOM,oBAOVC,YAEC,MAAMhmD,EAAQ,IAAMrK,MAAMhzB,KAAKsjF,YAK/B,OAJAtjF,KAAKujF,WAAW1iF,KAAK,CACnBiiF,OAAQ9iF,KAAKwjF,YACbnmD,UAEKA,EAMRomD,WACC,QAAIzjF,KAAKujF,WAAW9gF,QAAU,MACrBzC,KAAKujF,WAAWv4E,MAM1B04E,UAAUjrD,GACT,MAAM4E,EAAQr9B,KAAKqjF,YACnB,IACE5qD,EAAS4E,GACT,QACAr9B,KAAKyjF,YAORD,YACC,OAAOxjF,KAAKmjF,cAAcL,OAI3BQ,WACC,OAAOtjF,KAAKmjF,cAAc9lD,MAI3BkmD,WACC,OAAOvjF,KAAKgjF,OAIbG,cACC,OAAOnjF,KAAKgjF,OAAOhjF,KAAKgjF,OAAOvgF,OAAS,GAMzCkhF,iBAAiBp4E,EAAWq4E,GAC3B,MAAM3tD,EAAWj2B,KAAK6jF,aAAeD,GAAQA,EAAKE,SAAWF,EAAKE,SAAW,cACvEC,EAAqB,IAAIh9E,MAAM,6BAarC,OAZA/G,KAAKgkF,aAAY,CAAClB,EAAQzlD,KACxBylD,EAAOa,iBACLp4E,EACA,CACE04E,kBAAmB14E,EACnBw4E,wBACGH,EACHE,SAAU7tD,GAEZoH,MAGGpH,EAMRiuD,eACCt1D,EAEA4D,EACAoxD,GAEA,MAAM3tD,EAAWj2B,KAAK6jF,aAAeD,GAAQA,EAAKE,SAAWF,EAAKE,SAAW,cACvEC,EAAqB,IAAIh9E,MAAM6nB,GAcrC,OAbA5uB,KAAKgkF,aAAY,CAAClB,EAAQzlD,KACxBylD,EAAOoB,eACLt1D,EACA4D,EACA,CACEyxD,kBAAmBr1D,EACnBm1D,wBACGH,EACHE,SAAU7tD,GAEZoH,MAGGpH,EAMRkuD,aAAax4D,EAAOi4D,GACnB,MAAM3tD,EAAU2tD,GAAQA,EAAKE,SAAWF,EAAKE,SAAW,cAQxD,OAPKn4D,EAAM/jB,OACT5H,KAAK6jF,aAAe5tD,GAGtBj2B,KAAKgkF,aAAY,CAAClB,EAAQzlD,KACxBylD,EAAOqB,aAAax4D,EAAO,IAAKi4D,EAAME,SAAU7tD,GAAWoH,MAEtDpH,EAMRmuD,cACC,OAAOpkF,KAAK6jF,aAMbQ,cAAcC,EAAYV,GACzB,MAAM,MAAEvmD,EAAK,OAAEylD,GAAW9iF,KAAKmjF,cAE/B,IAAKL,EAAQ,OAEb,MAAM,iBAAEyB,EAAmB,KAAI,eAAEC,EAAiB5B,GAC/CE,EAAO2B,YAAc3B,EAAO2B,cAAiB,GAEhD,GAAID,GAAkB,EAAG,OAEzB,MACME,EAAmB,CAAEztE,UADT,iBACuBqtE,GACnCK,EAAkBJ,EACnB,WAAD,EAAgB,IAAMA,EAAiBG,EAAkBd,KACzDc,EAEoB,OAApBC,IAEA7B,EAAO8B,MACT9B,EAAO8B,KAAK,sBAAuBD,EAAiBf,GAGtDvmD,EAAMgnD,cAAcM,EAAiBH,IAMtCK,QAAQC,GACP9kF,KAAKsjF,WAAWuB,QAAQC,GAMzBC,QAAQC,GACPhlF,KAAKsjF,WAAWyB,QAAQC,GAMzBC,UAAUC,GACTllF,KAAKsjF,WAAW2B,UAAUC,GAM3BC,OAAOpnF,EAAKN,GACXuC,KAAKsjF,WAAW6B,OAAOpnF,EAAKN,GAM7B2nF,SAASrnF,EAAKsnF,GACbrlF,KAAKsjF,WAAW8B,SAASrnF,EAAKsnF,GAO/BC,WAAWvoF,EAAMuJ,GAChBtG,KAAKsjF,WAAWgC,WAAWvoF,EAAMuJ,GAMlCi/E,eAAe9sD,GACd,MAAM,MAAE4E,EAAK,OAAEylD,GAAW9iF,KAAKmjF,cAC3BL,GACFrqD,EAAS4E,GAOZmoD,IAAI/sD,GACH,MAAMgtD,EAASC,SAAS1lF,MACxB,IACEy4B,EAASz4B,MACT,QACA0lF,SAASD,IAOZE,eAAeC,GACd,MAAM9C,EAAS9iF,KAAKwjF,YACpB,IAAKV,EAAQ,OAAO,KACpB,IACE,OAAOA,EAAO6C,eAAeC,GAC7B,MAAOziF,GAEP,OAD6B,oBAArB0iF,kBAAoCA,mBAAqB,IAAOC,KAAK,+BAA+BF,EAAY5hF,2BACjH,MAOV+hF,iBAAiBz/E,EAAS0/E,GACzB,MAAMllF,EAASd,KAAKimF,qBAAqB,mBAAoB3/E,EAAS0/E,GAEtE,IAAiC,oBAArBH,kBAAoCA,oBAAsB/kF,EAAQ,CAC7Dd,KAAKwjF,YAQlB0C,QAAQJ,KAAK,sKALbI,QAAQJ,KACN,gHAWN,OAAOhlF,EAMRqlF,eACC,OAAOnmF,KAAKimF,qBAAqB,gBAMlCG,eAAeC,GAAa,GAE3B,GAAIA,EACF,OAAOrmF,KAAKqmF,aAIdrmF,KAAKsmF,qBAMND,aACC,MACMhpD,EADQr9B,KAAKmjF,cACC9lD,MACdkpD,EAAUlpD,EAAMmpD,aAClBD,GACF,YAAaA,GAEfvmF,KAAKsmF,qBAGLjpD,EAAMopD,aAMPC,aAAapgF,GACZ,MAAM,MAAE+2B,EAAK,OAAEylD,GAAW9iF,KAAKmjF,eACzB,QAAEwD,EAAO,YAAErtD,EAAc,KAAyBwpD,GAAUA,EAAO2B,cAAiB,IAGpF,UAAEhhC,GAAc,IAAWzD,WAAa,GAExCumC,EAAU,YAAY,CAC1BI,UACArtD,cACAwrD,KAAMznD,EAAMupD,aACRnjC,GAAa,CAAEA,gBAChBn9C,IAICugF,EAAiBxpD,EAAMmpD,YAAcnpD,EAAMmpD,aASjD,OARIK,GAA4C,OAA1BA,EAAe3wD,QACnC,YAAc2wD,EAAgB,CAAE3wD,OAAQ,WAE1Cl2B,KAAKqmF,aAGLhpD,EAAMopD,WAAWF,GAEVA,EAORO,uBACC,MAAMhE,EAAS9iF,KAAKwjF,YACdvhF,EAAU6gF,GAAUA,EAAO2B,aACjC,OAAOsC,QAAQ9kF,GAAWA,EAAQ+kF,gBAMnCV,qBACC,MAAM,MAAEjpD,EAAK,OAAEylD,GAAW9iF,KAAKmjF,cAEzBoD,EAAUlpD,EAAMmpD,aAClBD,GAAWzD,GAAUA,EAAOsD,gBAC9BtD,EAAOsD,eAAeG,GAUzBvC,YAAYvrD,GACX,MAAM,MAAE4E,EAAK,OAAEylD,GAAW9iF,KAAKmjF,cAC3BL,GACFrqD,EAASqqD,EAAQzlD,GASpB4oD,qBAAqBr/E,KAAW+F,GAC/B,MACMs6E,EADUC,iBACOC,WACvB,GAAIF,GAAUA,EAAOG,YAAmD,mBAA9BH,EAAOG,WAAWxgF,GAC1D,OAAOqgF,EAAOG,WAAWxgF,GAAQiG,MAAM7M,KAAM2M,IAElB,oBAArBk5E,kBAAoCA,mBAAqB,IAAOC,KAAK,oBAAoBl/E,wCAWrG,SAASsgF,iBAKP,OAJA,IAAWC,WAAa,IAAWA,YAAc,CAC/CC,WAAY,GACZC,SAAKliF,GAEA,IAQT,SAASugF,SAAS2B,GAChB,MAAMC,EAAWJ,iBACXzB,EAAS8B,kBAAkBD,GAEjC,OADAE,gBAAgBF,EAAUD,GACnB5B,EAUT,SAASgC,gBAEP,MAAMH,EAAWJ,iBAEjB,GAAII,EAASH,YAAcG,EAASH,WAAWO,IAAK,CAClD,MAAML,EAAMC,EAASH,WAAWO,IAAID,gBAEpC,GAAIJ,EACF,OAAOA,EAKX,OAAOM,aAAaL,GAGtB,SAASK,aAAaL,EAAWJ,kBAO/B,OALKU,gBAAgBN,KAAaC,kBAAkBD,GAAUpE,YA3d5C,IA4dhBsE,gBAAgBF,EAAU,IAAIzE,KAIzB0E,kBAAkBD,GAkD3B,SAASM,gBAAgBC,GACvB,SAAUA,GAAWA,EAAQV,YAAcU,EAAQV,WAAWE,KAShE,SAASE,kBAAkBM,GACzB,OAAO,YAAmB,OAAO,IAAM,IAAIhF,KAAOgF,GASpD,SAASL,gBAAgBK,EAASR,GAChC,IAAKQ,EAAS,OAAO,EAGrB,OAFoBA,EAAQV,WAAaU,EAAQV,YAAc,IACpDE,IAAMA,GACV,I,gCCvjBT,iKAGA,MAEMS,EAAiB,CAAC,QAAS,OAAQ,OAAQ,QAAS,MAAO,SAAU,SAGrEC,EAEH,GAUH,SAASC,eAAevvD,GACtB,KAAM,YAAa,KACjB,OAAOA,IAGT,MAAMytD,EAAU,IAAWA,QACrB+B,EAAe,GAEfC,EAAgBhrF,OAAO6N,KAAKg9E,GAGlCG,EAActmF,SAAQ4wB,IACpB,MAAM21D,EAAwBJ,EAAuBv1D,GACrDy1D,EAAaz1D,GAAS0zD,EAAQ1zD,GAC9B0zD,EAAQ1zD,GAAS21D,KAGnB,IACE,OAAO1vD,IACP,QAEAyvD,EAActmF,SAAQ4wB,IACpB0zD,EAAQ1zD,GAASy1D,EAAaz1D,OAoCpC,MAAMvI,EA/BN,SAASm+D,aACP,IAAIC,GAAU,EACd,MAAMp+D,EAAS,CACbq+D,OAAQ,KACND,GAAU,GAEZE,QAAS,KACPF,GAAU,IAqBd,MAjBiC,oBAArBxC,kBAAoCA,iBAC9CiC,EAAelmF,SAAQ7E,IAErBktB,EAAOltB,GAAQ,IAAI4P,KACb07E,GACFL,gBAAe,KACb,IAAW9B,QAAQnpF,GAAM,kBAAaA,SAAa4P,UAM3Dm7E,EAAelmF,SAAQ7E,IACrBktB,EAAOltB,GAAQ,UAIZktB,EAGMm+D,I,gCC9Ef,4lBACA,MAAMI,EAAiBtrF,OAAOoB,UAAUS,SASxC,SAAS0pF,QAAQC,GACf,OAAQF,EAAe7rF,KAAK+rF,IAC1B,IAAK,iBACL,IAAK,qBACL,IAAK,wBACH,OAAO,EACT,QACE,OAAOC,aAAaD,EAAK3hF,QAU/B,SAAS6hF,UAAUF,EAAKrlF,GACtB,OAAOmlF,EAAe7rF,KAAK+rF,KAAS,WAAWrlF,KAUjD,SAASwlF,aAAaH,GACpB,OAAOE,UAAUF,EAAK,cAUxB,SAASI,WAAWJ,GAClB,OAAOE,UAAUF,EAAK,YAUxB,SAASK,eAAeL,GACtB,OAAOE,UAAUF,EAAK,gBAUxB,SAASM,SAASN,GAChB,OAAOE,UAAUF,EAAK,UAUxB,SAASO,YAAYP,GACnB,OAAe,OAARA,GAAgC,iBAARA,GAAmC,mBAARA,EAU5D,SAASQ,cAAcR,GACrB,OAAOE,UAAUF,EAAK,UAUxB,SAASS,QAAQT,GACf,MAAwB,oBAAVU,OAAyBT,aAAaD,EAAKU,OAU3D,SAASC,UAAUX,GACjB,MAA0B,oBAAZY,SAA2BX,aAAaD,EAAKY,SAU7D,SAASC,SAASb,GAChB,OAAOE,UAAUF,EAAK,UAOxB,SAASc,WAAWd,GAElB,OAAO3B,QAAQ2B,GAAOA,EAAIhoF,MAA4B,mBAAbgoF,EAAIhoF,MAU/C,SAAS+oF,iBAAiBf,GACxB,OAAOQ,cAAcR,IAAQ,gBAAiBA,GAAO,mBAAoBA,GAAO,oBAAqBA,EAUvG,SAASv+E,MAAMu+E,GACb,MAAsB,iBAARA,GAAoBA,GAAQA,EAW5C,SAASC,aAAaD,EAAKgB,GACzB,IACE,OAAOhB,aAAegB,EACtB,MAAOtoD,GACP,OAAO,K,iCC7KX,YA2BA,SAASuoD,YAAY/kF,GACnB,OAAOA,GAAOA,EAAImV,MAAQA,KAAOnV,OAAMO,EA5BzC,qIAgCA,MAAMykF,EACkB,iBAAdx9E,YAA0Bu9E,YAAYv9E,aAE5B,iBAAVob,QAAsBmiE,YAAYniE,SAC1B,iBAARvhB,MAAoB0jF,YAAY1jF,OACtB,iBAAV4jF,GAAsBF,YAAYE,IAC1C,WACE,OAAO7pF,KADT,IAGA,GAKF,SAAS8pF,kBACP,OAAOF,EAcT,SAASG,mBAAmBhtF,EAAMitF,EAASplF,GACzC,MAAMqlF,EAAOrlF,GAAOglF,EACdzC,EAAc8C,EAAI9C,WAAa8C,EAAI9C,YAAc,GAEvD,OADkBA,EAAWpqF,KAAUoqF,EAAWpqF,GAAQitF,Q,kDChE5D,mbAeA,SAASE,KAAK7b,EAAQtxE,EAAMotF,GAC1B,KAAMptF,KAAQsxE,GACZ,OAGF,MAAM+b,EAAW/b,EAAOtxE,GAClBstF,EAAUF,EAAmBC,GAInC,GAAuB,mBAAZC,EACT,IACEC,oBAAoBD,EAASD,GAC7B,MAAOG,IAMXlc,EAAOtxE,GAAQstF,EAUjB,SAASG,yBAAyB5lF,EAAK7H,EAAMU,GAC3CP,OAAOC,eAAeyH,EAAK7H,EAAM,CAE/BU,MAAOA,EACPqH,UAAU,EACVD,cAAc,IAWlB,SAASylF,oBAAoBD,EAASD,GACpC,MAAMK,EAAQL,EAAS9rF,WAAa,GACpC+rF,EAAQ/rF,UAAY8rF,EAAS9rF,UAAYmsF,EACzCD,yBAAyBH,EAAS,sBAAuBD,GAU3D,SAASM,oBAAoBC,GAC3B,OAAOA,EAAKC,oBASd,SAAS/uE,UAAUzd,GACjB,OAAOlB,OAAO6N,KAAK3M,GAChB0F,KAAI/F,GAAO,GAAGge,mBAAmBhe,MAAQge,mBAAmB3d,EAAOL,QACnEmF,KAAK,KAWV,SAAS2nF,qBAAqBptF,GAG5B,GAAI,YAAQA,GACV,MAAO,CACLmxB,QAASnxB,EAAMmxB,QACf7xB,KAAMU,EAAMV,KACZ+tF,MAAOrtF,EAAMqtF,SACVC,iBAAiBttF,IAEjB,GAAI,YAAQA,GAAQ,CACzB,MAAMutF,EAEP,CACGpjF,KAAMnK,EAAMmK,KACZ+gB,OAAQsiE,qBAAqBxtF,EAAMkrB,QACnCuiE,cAAeD,qBAAqBxtF,EAAMytF,kBACvCH,iBAAiBttF,IAOtB,MAJ2B,oBAAhB0tF,aAA+B,YAAa1tF,EAAO0tF,eAC5DH,EAAOI,OAAS3tF,EAAM2tF,QAGjBJ,EAEP,OAAOvtF,EAKX,SAASwtF,qBAAqBtiE,GAC5B,IACE,OAAO,YAAUA,GAAU,YAAiBA,GAAUzrB,OAAOoB,UAAUS,SAASpC,KAAKgsB,GACrF,MAAOxlB,GACP,MAAO,aAKX,SAAS4nF,iBAAiBnmF,GACxB,GAAmB,iBAARA,GAA4B,OAARA,EAAc,CAC3C,MAAMymF,EAAiB,GACvB,IAAK,MAAMhtF,KAAYuG,EACjB1H,OAAOoB,UAAUC,eAAe5B,KAAKiI,EAAKvG,KAC5CgtF,EAAehtF,GAAY,EAAOA,IAGtC,OAAOgtF,EAEP,MAAO,GASX,SAASC,+BAA+B//E,EAAWggF,EAAY,IAC7D,MAAMxgF,EAAO7N,OAAO6N,KAAK8/E,qBAAqBt/E,IAG9C,GAFAR,EAAK4Q,QAEA5Q,EAAKtI,OACR,MAAO,uBAGT,GAAIsI,EAAK,GAAGtI,QAAU8oF,EACpB,OAAO,YAASxgF,EAAK,GAAIwgF,GAG3B,IAAK,IAAIC,EAAezgF,EAAKtI,OAAQ+oF,EAAe,EAAGA,IAAgB,CACrE,MAAMC,EAAa1gF,EAAKpJ,MAAM,EAAG6pF,GAActoF,KAAK,MACpD,KAAIuoF,EAAWhpF,OAAS8oF,GAGxB,OAAIC,IAAiBzgF,EAAKtI,OACjBgpF,EAEF,YAASA,EAAYF,GAG9B,MAAO,GAST,SAASG,kBAAkBC,GAOzB,OAAOC,mBAAmBD,EAHH,IAAIt+D,KAM7B,SAASu+D,mBAAmBD,EAAYE,GACtC,GAAI,YAAcF,GAAa,CAE7B,MAAMG,EAAUD,EAAexuF,IAAIsuF,GACnC,QAAgBxmF,IAAZ2mF,EACF,OAAOA,EAGT,MAAMC,EAAc,GAEpBF,EAAev+D,IAAIq+D,EAAYI,GAE/B,IAAK,MAAMhuF,KAAOb,OAAO6N,KAAK4gF,QACG,IAApBA,EAAW5tF,KACpBguF,EAAYhuF,GAAO6tF,mBAAmBD,EAAW5tF,GAAM8tF,IAI3D,OAAOE,EAGT,GAAInpF,MAAMC,QAAQ8oF,GAAa,CAE7B,MAAMG,EAAUD,EAAexuF,IAAIsuF,GACnC,QAAgBxmF,IAAZ2mF,EACF,OAAOA,EAGT,MAAMC,EAAc,GAQpB,OANAF,EAAev+D,IAAIq+D,EAAYI,GAE/BJ,EAAW/pF,SAASmsB,IAClBg+D,EAAYlrF,KAAK+qF,mBAAmB79D,EAAM89D,OAGrCE,EAGT,OAAOJ,I,gCC7OT,mUASA,SAASK,QACP,MAAM/B,EAAM,IACNxiE,EAASwiE,EAAIxiE,QAAUwiE,EAAIgC,SAEjC,GAAIxkE,GAAUA,EAAOykE,WACnB,OAAOzkE,EAAOykE,aAAajwE,QAAQ,KAAM,IAG3C,MAAMkwE,EACJ1kE,GAAUA,EAAO7N,gBAAkB,IAAM6N,EAAO7N,gBAAgB,IAAID,WAAW,IAAI,GAAK,IAAsB,GAAhBI,KAAKC,SAIrG,OAAQ,CAAE,KAAS,IAAM,IAAM,IAAM,MAAMiC,QAAQ,UAAUpf,IAE1D,GAA2B,GAAlBsvF,MAA0B,EAAO,GAAKptF,SAAS,MAI7D,SAASqtF,kBAAkBzgE,GACzB,OAAOA,EAAMpgB,WAAaogB,EAAMpgB,UAAUjD,OAASqjB,EAAMpgB,UAAUjD,OAAO,QAAKnD,EAOjF,SAASknF,oBAAoB1gE,GAC3B,MAAM,QAAEiD,EAASk1D,SAAU7tD,GAAYtK,EACvC,GAAIiD,EACF,OAAOA,EAGT,MAAM09D,EAAiBF,kBAAkBzgE,GACzC,OAAI2gE,EACEA,EAAe1kF,MAAQ0kF,EAAe7uF,MACjC,GAAG6uF,EAAe1kF,SAAS0kF,EAAe7uF,QAE5C6uF,EAAe1kF,MAAQ0kF,EAAe7uF,OAASw4B,GAAW,YAE5DA,GAAW,YAUpB,SAASs2D,sBAAsB5gE,EAAOluB,EAAOmK,GAC3C,MAAM2D,EAAaogB,EAAMpgB,UAAYogB,EAAMpgB,WAAa,GAClDjD,EAAUiD,EAAUjD,OAASiD,EAAUjD,QAAU,GACjDgkF,EAAkBhkF,EAAO,GAAKA,EAAO,IAAM,GAC5CgkF,EAAe7uF,QAClB6uF,EAAe7uF,MAAQA,GAAS,IAE7B6uF,EAAe1kF,OAClB0kF,EAAe1kF,KAAOA,GAAQ,SAWlC,SAAS4kF,sBAAsB7gE,EAAO8gE,GACpC,MAAMH,EAAiBF,kBAAkBzgE,GACzC,IAAK2gE,EACH,OAGF,MACMI,EAAmBJ,EAAeK,UAGxC,GAFAL,EAAeK,UAAY,CAFA/kF,KAAM,UAAWglF,SAAS,KAEAF,KAAqBD,GAEtEA,GAAgB,SAAUA,EAAc,CAC1C,MAAMI,EAAa,IAAMH,GAAoBA,EAAiBzxE,QAAUwxE,EAAaxxE,MACrFqxE,EAAeK,UAAU1xE,KAAO4xE,GA8EpC,SAASC,wBAAwBvhF,GAE/B,GAAIA,GAAa,EAAawhF,oBAC5B,OAAO,EAGT,IAGE,YAAyBxhF,EAAY,uBAAuB,GAC5D,MAAO1F,IAIT,OAAO,EAST,SAASmnF,SAASC,GAChB,OAAOrqF,MAAMC,QAAQoqF,GAAcA,EAAa,CAACA,K,kFC7L/CC,E,0CAEJ,SAASC,MAAMC,GACX,OAAO,IAAIviF,SAAQ,SAAArL,GAAO,OAAIutC,WAAWvtC,EAAS4tF,M,SAqCvCC,iB,6GAAf,kCAAA/9E,EAAA,sEACU0yE,EAAeG,cADzB,SAEUH,EAAaxD,aAFvB,uBAGUwD,EAAa/Y,wBAAwBvoE,MAAK,WAC5BshF,EAAaj+C,iBAAiB,IAE1Ci+C,EAAajH,mBAHf,OAKG,SAACl1E,GACNqgF,QAAQr9E,MAAMhD,MATtB,gCAWWm8E,GAXX,kD,gGAcA,qCAAA1yE,EAAA,oEACQyyE,IADR,iEAM+BsL,iBAN/B,OAMUrL,EANV,QAOU1gD,EAAU0gD,EAAaj+C,iBAAiB,IAE1Ci+C,EAAanpC,iBAAiBvX,GAG9B0gD,EAAajH,gBAZrB,mD,uBAjDA,SAASuS,eACL,IAAMxtC,EAAU,IAAIO,QACpBP,EAAQS,OAAO,SAAU,YACzBT,EAAQS,OAAO,gBAAiB,sBAEhCX,MAAM,gBAAiB,CAAExyB,MAAO,WAAYmgE,SAAU,SAAUztC,YAC3Dp/C,MAAK,SAACi/C,GACH,OAAIA,EAAS6tC,GACF7tC,EAAShU,OAEb9gC,QAAQjL,OAAO,IAAImH,MAAM,+BAEnCrG,MAAK,SAAC+sF,GACH,IAAMriE,EAAUqiE,EAAWC,eAC3B,GAAKR,GAEE,GAAI9hE,IAAY8hE,EAAc,CAOjC,OAHU,IADA1lE,OAAOmmE,QAAP,wBAAgCviE,EAAhC,2EAEN5D,OAAOnjB,SAASupF,UAEb,QARPV,EAAe9hE,EAUnB,OAAO,KAEV1qB,MAAK,SAACmtF,GACEA,GACDV,MAAM,KAAWzsF,KAAK4sF,iBAxBlC,OA2BW,kBAAMH,MAAM,KAAWzsF,KAAK4sF,iBAiC3CA,G,SAhBeQ,sB,kDAiBfA,I,iBC1EA,IAAIx/E,EAGJA,EAAI,WACH,OAAOtO,KADJ,GAIJ,IAECsO,EAAIA,GAAK,IAAIjC,SAAS,cAAb,GACR,MAAO5L,GAEc,iBAAX+mB,SAAqBlZ,EAAIkZ,QAOrCjrB,EAAOD,QAAUgS,G,iBClBjB,IAOIy/E,EACAC,EARAhvF,EAAUzC,EAAOD,QAAU,GAU/B,SAAS2xF,mBACL,MAAM,IAAIlnF,MAAM,mCAEpB,SAASmnF,sBACL,MAAM,IAAInnF,MAAM,qCAsBpB,SAASonF,WAAWC,GAChB,GAAIL,IAAqBhhD,WAErB,OAAOA,WAAWqhD,EAAK,GAG3B,IAAKL,IAAqBE,mBAAqBF,IAAqBhhD,WAEhE,OADAghD,EAAmBhhD,WACZA,WAAWqhD,EAAK,GAE3B,IAEI,OAAOL,EAAiBK,EAAK,GAC/B,MAAM3tF,GACJ,IAEI,OAAOstF,EAAiBpxF,KAAK,KAAMyxF,EAAK,GAC1C,MAAM3tF,GAEJ,OAAOstF,EAAiBpxF,KAAKqD,KAAMouF,EAAK,MAvCnD,WACG,IAEQL,EADsB,mBAAfhhD,WACYA,WAEAkhD,iBAEzB,MAAOxtF,GACLstF,EAAmBE,iBAEvB,IAEQD,EADwB,mBAAjB1f,aACcA,aAEA4f,oBAE3B,MAAOztF,GACLutF,EAAqBE,qBAjB7B,GAwEA,IAEIG,EAFAC,EAAQ,GACRC,GAAW,EAEXC,GAAc,EAElB,SAASC,kBACAF,GAAaF,IAGlBE,GAAW,EACPF,EAAa5rF,OACb6rF,EAAQD,EAAar/E,OAAOs/E,GAE5BE,GAAc,EAEdF,EAAM7rF,QACNisF,cAIR,SAASA,aACL,IAAIH,EAAJ,CAGA,IAAIrqC,EAAUiqC,WAAWM,iBACzBF,GAAW,EAGX,IADA,IAAIjsF,EAAMgsF,EAAM7rF,OACVH,GAAK,CAGP,IAFA+rF,EAAeC,EACfA,EAAQ,KACCE,EAAalsF,GACd+rF,GACAA,EAAaG,GAAYhJ,MAGjCgJ,GAAc,EACdlsF,EAAMgsF,EAAM7rF,OAEhB4rF,EAAe,KACfE,GAAW,EAnEf,SAASI,gBAAgBC,GACrB,GAAIZ,IAAuB1f,aAEvB,OAAOA,aAAasgB,GAGxB,IAAKZ,IAAuBE,sBAAwBF,IAAuB1f,aAEvE,OADA0f,EAAqB1f,aACdA,aAAasgB,GAExB,IAEI,OAAOZ,EAAmBY,GAC5B,MAAOnuF,GACL,IAEI,OAAOutF,EAAmBrxF,KAAK,KAAMiyF,GACvC,MAAOnuF,GAGL,OAAOutF,EAAmBrxF,KAAKqD,KAAM4uF,KAgD7CD,CAAgBzqC,IAiBpB,SAAS2qC,KAAKT,EAAKlvD,GACfl/B,KAAKouF,IAAMA,EACXpuF,KAAKk/B,MAAQA,EAYjB,SAAS4vD,QA5BT9vF,EAAQ+vF,SAAW,SAAUX,GACzB,IAAIzhF,EAAO,IAAI/J,MAAMgK,UAAUnK,OAAS,GACxC,GAAImK,UAAUnK,OAAS,EACnB,IAAK,IAAIjG,EAAI,EAAGA,EAAIoQ,UAAUnK,OAAQjG,IAClCmQ,EAAKnQ,EAAI,GAAKoQ,UAAUpQ,GAGhC8xF,EAAMztF,KAAK,IAAIguF,KAAKT,EAAKzhF,IACJ,IAAjB2hF,EAAM7rF,QAAiB8rF,GACvBJ,WAAWO,aASnBG,KAAKvwF,UAAUknF,IAAM,WACjBxlF,KAAKouF,IAAIvhF,MAAM,KAAM7M,KAAKk/B,QAE9BlgC,EAAQwtE,MAAQ,UAChBxtE,EAAQgwF,SAAU,EAClBhwF,EAAQuiC,IAAM,GACdviC,EAAQiwF,KAAO,GACfjwF,EAAQosB,QAAU,GAClBpsB,EAAQkwF,SAAW,GAInBlwF,EAAQmwF,GAAKL,KACb9vF,EAAQowF,YAAcN,KACtB9vF,EAAQqwF,KAAOP,KACf9vF,EAAQswF,IAAMR,KACd9vF,EAAQuwF,eAAiBT,KACzB9vF,EAAQwwF,mBAAqBV,KAC7B9vF,EAAQ4lF,KAAOkK,KACf9vF,EAAQywF,gBAAkBX,KAC1B9vF,EAAQ0wF,oBAAsBZ,KAE9B9vF,EAAQ2wF,UAAY,SAAU5yF,GAAQ,MAAO,IAE7CiC,EAAQ4wF,QAAU,SAAU7yF,GACxB,MAAM,IAAIgK,MAAM,qCAGpB/H,EAAQ6wF,IAAM,WAAc,MAAO,KACnC7wF,EAAQ8wF,MAAQ,SAAUC,GACtB,MAAM,IAAIhpF,MAAM,mCAEpB/H,EAAQgxF,MAAQ,WAAa,OAAO,I,gCCvLpC,qPAkBA,SAASrM,iBAAiBp4E,EAAW0kF,GACnC,OAAO,cAAgBtM,iBAAiBp4E,EAAW,CAAE0kF,mBAoCvD,SAAS1K,eAAe9sD,GACtB,cAAgB8sD,eAAe9sD,GAqBjC,SAAS6sD,WAAWvoF,EAAMuJ,GACxB,cAAgBg/E,WAAWvoF,EAAMuJ,GA6CnC,SAASu+E,QAAQC,GACf,cAAgBD,QAAQC,GAgB1B,SAASpB,UAAUjrD,GACjB,cAAgBirD,UAAUjrD,K,gCC7I5B,gMASA,SAASy3D,SAASluE,EAAKwyD,EAAM,GAC3B,MAAmB,iBAARxyD,GAA4B,IAARwyD,GAGxBxyD,EAAIvf,QAAU+xE,EAFZxyD,EAEwB,GAAGA,EAAIrgB,MAAM,EAAG6yE,QAWnD,SAAS2b,SAASC,EAAMC,GACtB,IAAIC,EAAUF,EACd,MAAMG,EAAaD,EAAQ7tF,OAC3B,GAAI8tF,GAAc,IAChB,OAAOD,EAELD,EAAQE,IAEVF,EAAQE,GAGV,IAAIC,EAAQz2E,KAAKy6D,IAAI6b,EAAQ,GAAI,GAC7BG,EAAQ,IACVA,EAAQ,GAGV,IAAIC,EAAM12E,KAAKysC,IAAIgqC,EAAQ,IAAKD,GAgBhC,OAfIE,EAAMF,EAAa,IACrBE,EAAMF,GAEJE,IAAQF,IACVC,EAAQz2E,KAAKy6D,IAAIic,EAAM,IAAK,IAG9BH,EAAUA,EAAQ3uF,MAAM6uF,EAAOC,GAC3BD,EAAQ,IACVF,EAAU,WAAWA,KAEnBG,EAAMF,IACRD,GAAW,WAGNA,EAUT,SAASI,SAAS50E,EAAO60E,GACvB,IAAK/tF,MAAMC,QAAQiZ,GACjB,MAAO,GAGT,MAAM80E,EAAS,GAEf,IAAK,IAAIp0F,EAAI,EAAGA,EAAIsf,EAAMrZ,OAAQjG,IAAK,CACrC,MAAMiB,EAAQqe,EAAMtf,GACpB,IACEo0F,EAAO/vF,KAAK2a,OAAO/d,IACnB,MAAOgD,GACPmwF,EAAO/vF,KAAK,iCAIhB,OAAO+vF,EAAO1tF,KAAKytF,GAwCrB,SAASE,yBACPC,EACAC,EAAW,GACXC,GAA0B,GAE1B,OAAOD,EAASv5E,MAAK4L,GAlCvB,SAAS6tE,kBACPxzF,EACA2lB,EACA4tE,GAA0B,GAE1B,QAAK,YAASvzF,KAIV,YAAS2lB,GACJA,EAAQjJ,KAAK1c,KAElB,YAAS2lB,KACJ4tE,EAA0BvzF,IAAU2lB,EAAU3lB,EAAMqpC,SAAS1jB,KAqBtC6tE,CAAkBH,EAAY1tE,EAAS4tE,O,gCC/HzE,mKAUA,SAASE,YAAY5qF,GAEnB,MAAM6qF,EAAe,cAEf5K,EAAU,CACdptC,IAAK,cACLi4C,MAAM,EACNn6E,UAAWk6E,EACXE,QAASF,EACTpX,SAAU,EACV7jD,OAAQ,KACRmY,OAAQ,EACRijD,gBAAgB,EAChBC,OAAQ,IA8GZ,SAASC,cAAcjL,GACrB,OAAO,YAAkB,CACvBptC,IAAK,GAAGotC,EAAQptC,MAChBi4C,KAAM7K,EAAQ6K,KAEdC,QAAS,IAAIl+D,KAAuB,IAAlBozD,EAAQ8K,SAAgBI,cAC1Cx6E,UAAW,IAAIkc,KAAyB,IAApBozD,EAAQtvE,WAAkBw6E,cAC9Cv7D,OAAQqwD,EAAQrwD,OAChBmY,OAAQk4C,EAAQl4C,OAChBqjD,IAA4B,iBAAhBnL,EAAQmL,KAA2C,iBAAhBnL,EAAQmL,IAAmB,GAAGnL,EAAQmL,WAAQvsF,EAC7F40E,SAAUwM,EAAQxM,SAClB4X,MAAO,CACLhL,QAASJ,EAAQI,QACjBrtD,YAAaitD,EAAQjtD,YACrBs4D,WAAYrL,EAAQsL,UACpBC,WAAYvL,EAAQ9iC,aA7HR+tC,CAAcjL,IAO9B,OAJIjgF,GACFyrF,cAAcxL,EAASjgF,GAGlBigF,EAeT,SAASwL,cAAcxL,EAASjgF,EAAU,IA6BxC,GA5BIA,EAAQw+E,QACLyB,EAAQsL,WAAavrF,EAAQw+E,KAAK8M,aACrCrL,EAAQsL,UAAYvrF,EAAQw+E,KAAK8M,YAG9BrL,EAAQmL,KAAQprF,EAAQorF,MAC3BnL,EAAQmL,IAAMprF,EAAQw+E,KAAK9gF,IAAMsC,EAAQw+E,KAAKhjD,OAASx7B,EAAQw+E,KAAK9kD,WAIxEumD,EAAQtvE,UAAY3Q,EAAQ2Q,WAAa,cAErC3Q,EAAQgrF,iBACV/K,EAAQ+K,eAAiBhrF,EAAQgrF,gBAE/BhrF,EAAQ6yC,MAEVotC,EAAQptC,IAA6B,KAAvB7yC,EAAQ6yC,IAAI12C,OAAgB6D,EAAQ6yC,IAAM,oBAErCh0C,IAAjBmB,EAAQ8qF,OACV7K,EAAQ6K,KAAO9qF,EAAQ8qF,OAEpB7K,EAAQmL,KAAOprF,EAAQorF,MAC1BnL,EAAQmL,IAAM,GAAGprF,EAAQorF,OAEI,iBAApBprF,EAAQ+qF,UACjB9K,EAAQ8K,QAAU/qF,EAAQ+qF,SAExB9K,EAAQ+K,eACV/K,EAAQxM,cAAW50E,OACd,GAAgC,iBAArBmB,EAAQyzE,SACxBwM,EAAQxM,SAAWzzE,EAAQyzE,aACtB,CACL,MAAMA,EAAWwM,EAAQtvE,UAAYsvE,EAAQ8K,QAC7C9K,EAAQxM,SAAWA,GAAY,EAAIA,EAAW,EAE5CzzE,EAAQqgF,UACVJ,EAAQI,QAAUrgF,EAAQqgF,SAExBrgF,EAAQgzB,cACVitD,EAAQjtD,YAAchzB,EAAQgzB,cAE3BitD,EAAQsL,WAAavrF,EAAQurF,YAChCtL,EAAQsL,UAAYvrF,EAAQurF,YAEzBtL,EAAQ9iC,WAAan9C,EAAQm9C,YAChC8iC,EAAQ9iC,UAAYn9C,EAAQm9C,WAEA,iBAAnBn9C,EAAQ+nC,SACjBk4C,EAAQl4C,OAAS/nC,EAAQ+nC,QAEvB/nC,EAAQ4vB,SACVqwD,EAAQrwD,OAAS5vB,EAAQ4vB,QAe7B,SAAS87D,aAAazL,EAASrwD,GAC7B,IAAI5vB,EAAU,GACV4vB,EACF5vB,EAAU,CAAE4vB,UACgB,OAAnBqwD,EAAQrwD,SACjB5vB,EAAU,CAAE4vB,OAAQ,WAGtB67D,cAAcxL,EAASjgF,K,iCCzHzB,uIAIA,MAAMxE,EAAS,cAaTmwF,EAAsB,CAC1B5lD,WAAY,IAAMlZ,KAAKkD,MAAQ,KAiEjC,MAAM67D,EAAsB,cAZ5B,SAASC,qBACP,IAEE,OADkB,YAAe51F,EAAQ,cACxBk6E,YACjB,MAAO92E,GACP,QAOsCwyF,GAnD1C,SAASC,wBACP,MAAM,YAAE3b,GAAgB30E,EACxB,IAAK20E,IAAgBA,EAAYpgD,IAC/B,OA0BF,MAAO,CACLA,IAAK,IAAMogD,EAAYpgD,MACvBg8D,WAJiBl/D,KAAKkD,MAAQogD,EAAYpgD,OAwBmB+7D,GAE3DE,OACoBntF,IAAxB+sF,EACID,EACA,CACE5lD,WAAY,KAAO6lD,EAAoBG,WAAaH,EAAoB77D,OAAS,KAMnFk8D,EAAyBN,EAAoB5lD,WAAWruC,KAAKi0F,GAa7DO,EAAqBF,EAAgBjmD,WAAWruC,KAAKs0F,GAkB3D,IAAIG,EAMJ,MAAMC,EAA+B,MAKnC,MAAM,YAAEjc,GAAgB30E,EACxB,IAAK20E,IAAgBA,EAAYpgD,IAE/B,YADAo8D,EAAoC,QAItC,MAAME,EAAY,KACZC,EAAiBnc,EAAYpgD,MAC7Bw8D,EAAU1/D,KAAKkD,MAGfy8D,EAAkBrc,EAAY4b,WAChCt4E,KAAKg5E,IAAItc,EAAY4b,WAAaO,EAAiBC,GACnDF,EACEK,EAAuBF,EAAkBH,EAQzCM,EAAkBxc,EAAYyc,QAAUzc,EAAYyc,OAAOD,gBAG3DE,EAFgD,iBAApBF,EAEgBl5E,KAAKg5E,IAAIE,EAAkBL,EAAiBC,GAAWF,EAGzG,OAAIK,GAF8BG,EAAuBR,EAInDG,GAAmBK,GACrBV,EAAoC,aAC7Bhc,EAAY4b,aAEnBI,EAAoC,kBAC7BQ,IAKXR,EAAoC,UAC7BI,IA9C4B,K,sDCpIrC,2JAYA,MAAMO,MAyCHvzF,cACCG,KAAKqzF,qBAAsB,EAC3BrzF,KAAKszF,gBAAkB,GACvBtzF,KAAKuzF,iBAAmB,GACxBvzF,KAAKwzF,aAAe,GACpBxzF,KAAKyzF,aAAe,GACpBzzF,KAAK0zF,MAAQ,GACb1zF,KAAK2zF,MAAQ,GACb3zF,KAAK4zF,OAAS,GACd5zF,KAAK6zF,UAAY,GACjB7zF,KAAK8zF,uBAAyB,GAC9B9zF,KAAK+zF,oBAAsBC,6BAO5BC,aAAa52D,GACZ,MAAMmB,EAAW,IAAI40D,MAkBrB,OAjBI/1D,IACFmB,EAASg1D,aAAe,IAAIn2D,EAAMm2D,cAClCh1D,EAASm1D,MAAQ,IAAKt2D,EAAMs2D,OAC5Bn1D,EAASo1D,OAAS,IAAKv2D,EAAMu2D,QAC7Bp1D,EAASq1D,UAAY,IAAKx2D,EAAMw2D,WAChCr1D,EAASk1D,MAAQr2D,EAAMq2D,MACvBl1D,EAAS01D,OAAS72D,EAAM62D,OACxB11D,EAAS21D,MAAQ92D,EAAM82D,MACvB31D,EAAS41D,SAAW/2D,EAAM+2D,SAC1B51D,EAAS61D,iBAAmBh3D,EAAMg3D,iBAClC71D,EAAS81D,aAAej3D,EAAMi3D,aAC9B91D,EAAS+0D,iBAAmB,IAAIl2D,EAAMk2D,kBACtC/0D,EAAS+1D,gBAAkBl3D,EAAMk3D,gBACjC/1D,EAASi1D,aAAe,IAAIp2D,EAAMo2D,cAClCj1D,EAASs1D,uBAAyB,IAAKz2D,EAAMy2D,wBAC7Ct1D,EAASu1D,oBAAsB,IAAK12D,EAAM02D,sBAErCv1D,EAORg2D,iBAAiB/7D,GAChBz4B,KAAKszF,gBAAgBzyF,KAAK43B,GAM3Bg8D,kBAAkBh8D,GAEjB,OADAz4B,KAAKuzF,iBAAiB1yF,KAAK43B,GACpBz4B,KAMR6kF,QAAQC,GAMP,OALA9kF,KAAK0zF,MAAQ5O,GAAQ,GACjB9kF,KAAKo0F,UACP,YAAcp0F,KAAKo0F,SAAU,CAAEtP,SAEjC9kF,KAAK00F,wBACE10F,KAMR4mF,UACC,OAAO5mF,KAAK0zF,MAMbiB,oBACC,OAAO30F,KAAKu0F,gBAMbK,kBAAkBC,GAEjB,OADA70F,KAAKu0F,gBAAkBM,EAChB70F,KAMR+kF,QAAQC,GAMP,OALAhlF,KAAK2zF,MAAQ,IACR3zF,KAAK2zF,SACL3O,GAELhlF,KAAK00F,wBACE10F,KAMRmlF,OAAOpnF,EAAKN,GAGX,OAFAuC,KAAK2zF,MAAQ,IAAK3zF,KAAK2zF,MAAO,CAAC51F,GAAMN,GACrCuC,KAAK00F,wBACE10F,KAMRilF,UAAUC,GAMT,OALAllF,KAAK4zF,OAAS,IACT5zF,KAAK4zF,UACL1O,GAELllF,KAAK00F,wBACE10F,KAMRolF,SAASrnF,EAAKsnF,GAGb,OAFArlF,KAAK4zF,OAAS,IAAK5zF,KAAK4zF,OAAQ,CAAC71F,GAAMsnF,GACvCrlF,KAAK00F,wBACE10F,KAMR80F,eAAeC,GAGd,OAFA/0F,KAAKs0F,aAAeS,EACpB/0F,KAAK00F,wBACE10F,KAMRg1F,SAECxiE,GAIA,OAFAxyB,KAAKk0F,OAAS1hE,EACdxyB,KAAK00F,wBACE10F,KAMRi1F,mBAAmBl4F,GAGlB,OAFAiD,KAAKq0F,iBAAmBt3F,EACxBiD,KAAK00F,wBACE10F,KAMRslF,WAAWvnF,EAAKuI,GASf,OARgB,OAAZA,SAEKtG,KAAK6zF,UAAU91F,GAEtBiC,KAAK6zF,UAAU91F,GAAOuI,EAGxBtG,KAAK00F,wBACE10F,KAMRk1F,QAAQC,GAGP,OAFAn1F,KAAKm0F,MAAQgB,EACbn1F,KAAK00F,wBACE10F,KAMRo1F,UACC,OAAOp1F,KAAKm0F,MAMbkB,iBAGC,MAAMF,EAAOn1F,KAAKo1F,UAClB,OAAOD,GAAQA,EAAKjpE,YAMrBu6D,WAAWF,GAOV,OANKA,EAGHvmF,KAAKo0F,SAAW7N,SAFTvmF,KAAKo0F,SAIdp0F,KAAK00F,wBACE10F,KAMRwmF,aACC,OAAOxmF,KAAKo0F,SAMbkB,OAAOrF,GACN,IAAKA,EACH,OAAOjwF,KAGT,GAA8B,mBAAnBiwF,EAA+B,CACxC,MAAMsF,EAAe,EAAkBv1F,MACvC,OAAOu1F,aAAwBnC,MAAQmC,EAAev1F,KA6CxD,OA1CIiwF,aAA0BmD,OAC5BpzF,KAAK2zF,MAAQ,IAAK3zF,KAAK2zF,SAAU1D,EAAe0D,OAChD3zF,KAAK4zF,OAAS,IAAK5zF,KAAK4zF,UAAW3D,EAAe2D,QAClD5zF,KAAK6zF,UAAY,IAAK7zF,KAAK6zF,aAAc5D,EAAe4D,WACpD5D,EAAeyD,OAASx2F,OAAO6N,KAAKklF,EAAeyD,OAAOjxF,SAC5DzC,KAAK0zF,MAAQzD,EAAeyD,OAE1BzD,EAAeiE,SACjBl0F,KAAKk0F,OAASjE,EAAeiE,QAE3BjE,EAAeqE,eACjBt0F,KAAKs0F,aAAerE,EAAeqE,cAEjCrE,EAAesE,kBACjBv0F,KAAKu0F,gBAAkBtE,EAAesE,iBAEpCtE,EAAe8D,sBACjB/zF,KAAK+zF,oBAAsB9D,EAAe8D,sBAEnC,YAAc9D,KAEvBA,EAAiBA,EACjBjwF,KAAK2zF,MAAQ,IAAK3zF,KAAK2zF,SAAU1D,EAAejL,MAChDhlF,KAAK4zF,OAAS,IAAK5zF,KAAK4zF,UAAW3D,EAAe5K,OAClDrlF,KAAK6zF,UAAY,IAAK7zF,KAAK6zF,aAAc5D,EAAeuF,UACpDvF,EAAenL,OACjB9kF,KAAK0zF,MAAQzD,EAAenL,MAE1BmL,EAAez9D,QACjBxyB,KAAKk0F,OAASjE,EAAez9D,OAE3By9D,EAAe8E,cACjB/0F,KAAKs0F,aAAerE,EAAe8E,aAEjC9E,EAAe4E,iBACjB70F,KAAKu0F,gBAAkBtE,EAAe4E,gBAEpC5E,EAAewF,qBACjBz1F,KAAK+zF,oBAAsB9D,EAAewF,qBAIvCz1F,KAMRytB,QAeC,OAdAztB,KAAKwzF,aAAe,GACpBxzF,KAAK2zF,MAAQ,GACb3zF,KAAK4zF,OAAS,GACd5zF,KAAK0zF,MAAQ,GACb1zF,KAAK6zF,UAAY,GACjB7zF,KAAKk0F,YAAS/uF,EACdnF,KAAKq0F,sBAAmBlvF,EACxBnF,KAAKs0F,kBAAenvF,EACpBnF,KAAKu0F,qBAAkBpvF,EACvBnF,KAAKm0F,WAAQhvF,EACbnF,KAAKo0F,cAAWjvF,EAChBnF,KAAK00F,wBACL10F,KAAKyzF,aAAe,GACpBzzF,KAAK+zF,oBAAsBC,6BACpBh0F,KAMRqkF,cAAcC,EAAYE,GACzB,MAAMkR,EAAsC,iBAAnBlR,EAA8BA,EAjW3B,IAoW5B,GAAIkR,GAAa,EACf,OAAO11F,KAGT,MAAM0kF,EAAmB,CACvBztE,UAAW,iBACRqtE,GAKL,OAHAtkF,KAAKwzF,aAAe,IAAIxzF,KAAKwzF,aAAc9O,GAAkB/iF,OAAO+zF,GACpE11F,KAAK00F,wBAEE10F,KAMR21F,oBACC,OAAO31F,KAAKwzF,aAAaxzF,KAAKwzF,aAAa/wF,OAAS,GAMrDmzF,mBAGC,OAFA51F,KAAKwzF,aAAe,GACpBxzF,KAAK00F,wBACE10F,KAMR61F,cAAcC,GAEb,OADA91F,KAAKyzF,aAAa5yF,KAAKi1F,GAChB91F,KAMR+1F,iBACC,OAAO/1F,KAAKyzF,aAMbuC,mBAEC,OADAh2F,KAAKyzF,aAAe,GACbzzF,KAURi2F,aAAatqE,EAAOi4D,EAAO,IAuB1B,GAtBI5jF,KAAK4zF,QAAU12F,OAAO6N,KAAK/K,KAAK4zF,QAAQnxF,SAC1CkpB,EAAM05D,MAAQ,IAAKrlF,KAAK4zF,UAAWjoE,EAAM05D,QAEvCrlF,KAAK2zF,OAASz2F,OAAO6N,KAAK/K,KAAK2zF,OAAOlxF,SACxCkpB,EAAMq5D,KAAO,IAAKhlF,KAAK2zF,SAAUhoE,EAAMq5D,OAErChlF,KAAK0zF,OAASx2F,OAAO6N,KAAK/K,KAAK0zF,OAAOjxF,SACxCkpB,EAAMm5D,KAAO,IAAK9kF,KAAK0zF,SAAU/nE,EAAMm5D,OAErC9kF,KAAK6zF,WAAa32F,OAAO6N,KAAK/K,KAAK6zF,WAAWpxF,SAChDkpB,EAAM6pE,SAAW,IAAKx1F,KAAK6zF,aAAcloE,EAAM6pE,WAE7Cx1F,KAAKk0F,SACPvoE,EAAM6G,MAAQxyB,KAAKk0F,QAEjBl0F,KAAKq0F,mBACP1oE,EAAMO,YAAclsB,KAAKq0F,kBAMvBr0F,KAAKm0F,MAAO,CACdxoE,EAAM6pE,SAAW,CAAE1hE,MAAO9zB,KAAKm0F,MAAM+B,qBAAsBvqE,EAAM6pE,UACjE,MAAMtpE,EAAclsB,KAAKm0F,MAAMjoE,YAC/B,GAAIA,EAAa,CACfP,EAAMwqE,sBAAwB,CAC5BC,uBAAwBlqE,EAAYmqE,+BACjC1qE,EAAMwqE,uBAEX,MAAMG,EAAkBpqE,EAAYnvB,KAChCu5F,IACF3qE,EAAMq5D,KAAO,CAAE94D,YAAaoqE,KAAoB3qE,EAAMq5D,QAgB5D,OAXAhlF,KAAKu2F,kBAAkB5qE,GAEvBA,EAAM6qE,YAAc,IAAK7qE,EAAM6qE,aAAe,MAAQx2F,KAAKwzF,cAC3D7nE,EAAM6qE,YAAc7qE,EAAM6qE,YAAY/zF,OAAS,EAAIkpB,EAAM6qE,iBAAcrxF,EAEvEwmB,EAAMwqE,sBAAwB,IACzBxqE,EAAMwqE,yBACNn2F,KAAK8zF,uBACR2B,mBAAoBz1F,KAAK+zF,qBAGpB/zF,KAAKy2F,uBAAuB,IAAIC,8BAA+B12F,KAAKuzF,kBAAmB5nE,EAAOi4D,GAMtG+S,yBAAyBC,GAGxB,OAFA52F,KAAK8zF,uBAAyB,IAAK9zF,KAAK8zF,0BAA2B8C,GAE5D52F,KAMR62F,sBAAsBvwF,GAErB,OADAtG,KAAK+zF,oBAAsBztF,EACpBtG,KAMR82F,wBACC,OAAO92F,KAAK+zF,oBAMb0C,uBACCM,EACAprE,EACAi4D,EACAhuC,EAAQ,GAER,OAAO,IAAI,KAAY,CAACp2C,EAASI,KAC/B,MAAMo3F,EAAYD,EAAWnhD,GAC7B,GAAc,OAAVjqB,GAAuC,mBAAdqrE,EAC3Bx3F,EAAQmsB,OACH,CACL,MAAM7qB,EAASk2F,EAAU,IAAKrrE,GAASi4D,IAEV,oBAArBiC,kBAAoCA,mBAC1CmR,EAAUhzF,IACC,OAAXlD,GACA,IAAOuyB,IAAI,oBAAoB2jE,EAAUhzF,qBAEvC,YAAWlD,GACRA,EACFJ,MAAKu2F,GAASj3F,KAAKy2F,uBAAuBM,EAAYE,EAAOrT,EAAMhuC,EAAQ,GAAGl1C,KAAKlB,KACnFkB,KAAK,KAAMd,GAETI,KAAKy2F,uBAAuBM,EAAYj2F,EAAQ8iF,EAAMhuC,EAAQ,GAChEl1C,KAAKlB,GACLkB,KAAK,KAAMd,OASrB80F,wBAIM10F,KAAKqzF,sBACRrzF,KAAKqzF,qBAAsB,EAC3BrzF,KAAKszF,gBAAgB1xF,SAAQ62B,IAC3BA,EAASz4B,SAEXA,KAAKqzF,qBAAsB,GAQ9BkD,kBAAkB5qE,GAEjBA,EAAMopE,YAAcppE,EAAMopE,YAAc,YAASppE,EAAMopE,aAAe,GAGlE/0F,KAAKs0F,eACP3oE,EAAMopE,YAAcppE,EAAMopE,YAAY/lF,OAAOhP,KAAKs0F,eAIhD3oE,EAAMopE,cAAgBppE,EAAMopE,YAAYtyF,eACnCkpB,EAAMopE,aAQnB,SAAS2B,2BACP,OAAO,YAAmB,yBAAyB,IAAM,KAO3D,SAASQ,wBAAwBz+D,GAC/Bi+D,2BAA2B71F,KAAK43B,GAGlC,SAASu7D,6BACP,MAAO,CACL98E,QAAS,cACTigF,OAAQ,cAAQx6E,UAAU","file":"static/js/main.92300f031c65471f824d.js","sourcesContent":[" \t// The module cache\n \tvar installedModules = {};\n\n \t// The require function\n \tfunction __webpack_require__(moduleId) {\n\n \t\t// Check if module is in cache\n \t\tif(installedModules[moduleId]) {\n \t\t\treturn installedModules[moduleId].exports;\n \t\t}\n \t\t// Create a new module (and put it into the cache)\n \t\tvar module = installedModules[moduleId] = {\n \t\t\ti: moduleId,\n \t\t\tl: false,\n \t\t\texports: {}\n \t\t};\n\n \t\t// Execute the module function\n \t\tmodules[moduleId].call(module.exports, module, module.exports, __webpack_require__);\n\n \t\t// Flag the module as loaded\n \t\tmodule.l = true;\n\n \t\t// Return the exports of the module\n \t\treturn module.exports;\n \t}\n\n\n \t// expose the modules object (__webpack_modules__)\n \t__webpack_require__.m = modules;\n\n \t// expose the module cache\n \t__webpack_require__.c = installedModules;\n\n \t// define getter function for harmony exports\n \t__webpack_require__.d = function(exports, name, getter) {\n \t\tif(!__webpack_require__.o(exports, name)) {\n \t\t\tObject.defineProperty(exports, name, { enumerable: true, get: getter });\n \t\t}\n \t};\n\n \t// define __esModule on exports\n \t__webpack_require__.r = function(exports) {\n \t\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n \t\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n \t\t}\n \t\tObject.defineProperty(exports, '__esModule', { value: true });\n \t};\n\n \t// create a fake namespace object\n \t// mode & 1: value is a module id, require it\n \t// mode & 2: merge all properties of value into the ns\n \t// mode & 4: return value when already ns object\n \t// mode & 8|1: behave like require\n \t__webpack_require__.t = function(value, mode) {\n \t\tif(mode & 1) value = __webpack_require__(value);\n \t\tif(mode & 8) return value;\n \t\tif((mode & 4) && typeof value === 'object' && value && value.__esModule) return value;\n \t\tvar ns = Object.create(null);\n \t\t__webpack_require__.r(ns);\n \t\tObject.defineProperty(ns, 'default', { enumerable: true, value: value });\n \t\tif(mode & 2 && typeof value != 'string') for(var key in value) __webpack_require__.d(ns, key, function(key) { return value[key]; }.bind(null, key));\n \t\treturn ns;\n \t};\n\n \t// getDefaultExport function for compatibility with non-harmony modules\n \t__webpack_require__.n = function(module) {\n \t\tvar getter = module && module.__esModule ?\n \t\t\tfunction getDefault() { return module['default']; } :\n \t\t\tfunction getModuleExports() { return module; };\n \t\t__webpack_require__.d(getter, 'a', getter);\n \t\treturn getter;\n \t};\n\n \t// Object.prototype.hasOwnProperty.call\n \t__webpack_require__.o = function(object, property) { return Object.prototype.hasOwnProperty.call(object, property); };\n\n \t// __webpack_public_path__\n \t__webpack_require__.p = \"/\";\n\n\n \t// Load entry module and return exports\n \treturn __webpack_require__(__webpack_require__.s = 622);\n","const DEFAULT_ENVIRONMENT = 'production';\n\nexport { DEFAULT_ENVIRONMENT };\n//# sourceMappingURL=constants.js.map\n","module.exports = function(originalModule) {\n\tif (!originalModule.webpackPolyfill) {\n\t\tvar module = Object.create(originalModule);\n\t\t// module.parent = undefined by default\n\t\tif (!module.children) module.children = [];\n\t\tObject.defineProperty(module, \"loaded\", {\n\t\t\tenumerable: true,\n\t\t\tget: function() {\n\t\t\t\treturn module.l;\n\t\t\t}\n\t\t});\n\t\tObject.defineProperty(module, \"id\", {\n\t\t\tenumerable: true,\n\t\t\tget: function() {\n\t\t\t\treturn module.i;\n\t\t\t}\n\t\t});\n\t\tObject.defineProperty(module, \"exports\", {\n\t\t\tenumerable: true\n\t\t});\n\t\tmodule.webpackPolyfill = 1;\n\t}\n\treturn module;\n};\n","module.exports = require(\"regenerator-runtime\");\n","import { isBrowserBundle } from './env.js';\n\n/**\n * NOTE: In order to avoid circular dependencies, if you add a function to this module and it needs to print something,\n * you must either a) use `console.log` rather than the logger, or b) put your function elsewhere.\n */\n\n/**\n * Checks whether we're in the Node.js or Browser environment\n *\n * @returns Answer to given question\n */\nfunction isNodeEnv() {\n // explicitly check for browser bundles as those can be optimized statically\n // by terser/rollup.\n return (\n !isBrowserBundle() &&\n Object.prototype.toString.call(typeof process !== 'undefined' ? process : 0) === '[object process]'\n );\n}\n\n/**\n * Requires a module which is protected against bundler minification.\n *\n * @param request The module path to resolve\n */\n// eslint-disable-next-line @typescript-eslint/explicit-module-boundary-types, @typescript-eslint/no-explicit-any\nfunction dynamicRequire(mod, request) {\n // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n return mod.require(request);\n}\n\n/**\n * Helper for dynamically loading module that should work with linked dependencies.\n * The problem is that we _should_ be using `require(require.resolve(moduleName, { paths: [cwd()] }))`\n * However it's _not possible_ to do that with Webpack, as it has to know all the dependencies during\n * build time. `require.resolve` is also not available in any other way, so we cannot create,\n * a fake helper like we do with `dynamicRequire`.\n *\n * We always prefer to use local package, thus the value is not returned early from each `try/catch` block.\n * That is to mimic the behavior of `require.resolve` exactly.\n *\n * @param moduleName module name to require\n * @returns possibly required module\n */\nfunction loadModule(moduleName) {\n let mod;\n\n try {\n mod = dynamicRequire(module, moduleName);\n } catch (e) {\n // no-empty\n }\n\n try {\n const { cwd } = dynamicRequire(module, 'process');\n mod = dynamicRequire(module, `${cwd()}/node_modules/${moduleName}`) ;\n } catch (e) {\n // no-empty\n }\n\n return mod;\n}\n\nexport { dynamicRequire, isNodeEnv, loadModule };\n//# sourceMappingURL=node.js.map\n","import { isThenable } from './is.js';\n\n/* eslint-disable @typescript-eslint/explicit-function-return-type */\n\n/** SyncPromise internal states */\nvar States; (function (States) {\n /** Pending */\n const PENDING = 0; States[States[\"PENDING\"] = PENDING] = \"PENDING\";\n /** Resolved / OK */\n const RESOLVED = 1; States[States[\"RESOLVED\"] = RESOLVED] = \"RESOLVED\";\n /** Rejected / Error */\n const REJECTED = 2; States[States[\"REJECTED\"] = REJECTED] = \"REJECTED\";\n})(States || (States = {}));\n\n// Overloads so we can call resolvedSyncPromise without arguments and generic argument\n\n/**\n * Creates a resolved sync promise.\n *\n * @param value the value to resolve the promise with\n * @returns the resolved sync promise\n */\nfunction resolvedSyncPromise(value) {\n return new SyncPromise(resolve => {\n resolve(value);\n });\n}\n\n/**\n * Creates a rejected sync promise.\n *\n * @param value the value to reject the promise with\n * @returns the rejected sync promise\n */\nfunction rejectedSyncPromise(reason) {\n return new SyncPromise((_, reject) => {\n reject(reason);\n });\n}\n\n/**\n * Thenable class that behaves like a Promise and follows it's interface\n * but is not async internally\n */\nclass SyncPromise {\n\n constructor(\n executor,\n ) {SyncPromise.prototype.__init.call(this);SyncPromise.prototype.__init2.call(this);SyncPromise.prototype.__init3.call(this);SyncPromise.prototype.__init4.call(this);\n this._state = States.PENDING;\n this._handlers = [];\n\n try {\n executor(this._resolve, this._reject);\n } catch (e) {\n this._reject(e);\n }\n }\n\n /** JSDoc */\n then(\n onfulfilled,\n onrejected,\n ) {\n return new SyncPromise((resolve, reject) => {\n this._handlers.push([\n false,\n result => {\n if (!onfulfilled) {\n // TODO: ¯\\_(ツ)_/¯\n // TODO: FIXME\n resolve(result );\n } else {\n try {\n resolve(onfulfilled(result));\n } catch (e) {\n reject(e);\n }\n }\n },\n reason => {\n if (!onrejected) {\n reject(reason);\n } else {\n try {\n resolve(onrejected(reason));\n } catch (e) {\n reject(e);\n }\n }\n },\n ]);\n this._executeHandlers();\n });\n }\n\n /** JSDoc */\n catch(\n onrejected,\n ) {\n return this.then(val => val, onrejected);\n }\n\n /** JSDoc */\n finally(onfinally) {\n return new SyncPromise((resolve, reject) => {\n let val;\n let isRejected;\n\n return this.then(\n value => {\n isRejected = false;\n val = value;\n if (onfinally) {\n onfinally();\n }\n },\n reason => {\n isRejected = true;\n val = reason;\n if (onfinally) {\n onfinally();\n }\n },\n ).then(() => {\n if (isRejected) {\n reject(val);\n return;\n }\n\n resolve(val );\n });\n });\n }\n\n /** JSDoc */\n __init() {this._resolve = (value) => {\n this._setResult(States.RESOLVED, value);\n };}\n\n /** JSDoc */\n __init2() {this._reject = (reason) => {\n this._setResult(States.REJECTED, reason);\n };}\n\n /** JSDoc */\n __init3() {this._setResult = (state, value) => {\n if (this._state !== States.PENDING) {\n return;\n }\n\n if (isThenable(value)) {\n void (value ).then(this._resolve, this._reject);\n return;\n }\n\n this._state = state;\n this._value = value;\n\n this._executeHandlers();\n };}\n\n /** JSDoc */\n __init4() {this._executeHandlers = () => {\n if (this._state === States.PENDING) {\n return;\n }\n\n const cachedHandlers = this._handlers.slice();\n this._handlers = [];\n\n cachedHandlers.forEach(handler => {\n if (handler[0]) {\n return;\n }\n\n if (this._state === States.RESOLVED) {\n // eslint-disable-next-line @typescript-eslint/no-floating-promises\n handler[1](this._value );\n }\n\n if (this._state === States.REJECTED) {\n handler[2](this._value);\n }\n\n handler[0] = true;\n });\n };}\n}\n\nexport { SyncPromise, rejectedSyncPromise, resolvedSyncPromise };\n//# sourceMappingURL=syncpromise.js.map\n","import { isString } from './is.js';\nimport { getGlobalObject } from './worldwide.js';\n\n// eslint-disable-next-line deprecation/deprecation\nconst WINDOW = getGlobalObject();\n\nconst DEFAULT_MAX_STRING_LENGTH = 80;\n\n/**\n * Given a child DOM element, returns a query-selector statement describing that\n * and its ancestors\n * e.g. [HTMLElement] => body > div > input#foo.btn[name=baz]\n * @returns generated DOM path\n */\nfunction htmlTreeAsString(\n elem,\n options = {},\n) {\n\n // try/catch both:\n // - accessing event.target (see getsentry/raven-js#838, #768)\n // - `htmlTreeAsString` because it's complex, and just accessing the DOM incorrectly\n // - can throw an exception in some circumstances.\n try {\n let currentElem = elem ;\n const MAX_TRAVERSE_HEIGHT = 5;\n const out = [];\n let height = 0;\n let len = 0;\n const separator = ' > ';\n const sepLength = separator.length;\n let nextStr;\n const keyAttrs = Array.isArray(options) ? options : options.keyAttrs;\n const maxStringLength = (!Array.isArray(options) && options.maxStringLength) || DEFAULT_MAX_STRING_LENGTH;\n\n while (currentElem && height++ < MAX_TRAVERSE_HEIGHT) {\n nextStr = _htmlElementAsString(currentElem, keyAttrs);\n // bail out if\n // - nextStr is the 'html' element\n // - the length of the string that would be created exceeds maxStringLength\n // (ignore this limit if we are on the first iteration)\n if (nextStr === 'html' || (height > 1 && len + out.length * sepLength + nextStr.length >= maxStringLength)) {\n break;\n }\n\n out.push(nextStr);\n\n len += nextStr.length;\n currentElem = currentElem.parentNode;\n }\n\n return out.reverse().join(separator);\n } catch (_oO) {\n return '';\n }\n}\n\n/**\n * Returns a simple, query-selector representation of a DOM element\n * e.g. [HTMLElement] => input#foo.btn[name=baz]\n * @returns generated DOM path\n */\nfunction _htmlElementAsString(el, keyAttrs) {\n const elem = el\n\n;\n\n const out = [];\n let className;\n let classes;\n let key;\n let attr;\n let i;\n\n if (!elem || !elem.tagName) {\n return '';\n }\n\n out.push(elem.tagName.toLowerCase());\n\n // Pairs of attribute keys defined in `serializeAttribute` and their values on element.\n const keyAttrPairs =\n keyAttrs && keyAttrs.length\n ? keyAttrs.filter(keyAttr => elem.getAttribute(keyAttr)).map(keyAttr => [keyAttr, elem.getAttribute(keyAttr)])\n : null;\n\n if (keyAttrPairs && keyAttrPairs.length) {\n keyAttrPairs.forEach(keyAttrPair => {\n out.push(`[${keyAttrPair[0]}=\"${keyAttrPair[1]}\"]`);\n });\n } else {\n if (elem.id) {\n out.push(`#${elem.id}`);\n }\n\n // eslint-disable-next-line prefer-const\n className = elem.className;\n if (className && isString(className)) {\n classes = className.split(/\\s+/);\n for (i = 0; i < classes.length; i++) {\n out.push(`.${classes[i]}`);\n }\n }\n }\n const allowedAttrs = ['aria-label', 'type', 'name', 'title', 'alt'];\n for (i = 0; i < allowedAttrs.length; i++) {\n key = allowedAttrs[i];\n attr = elem.getAttribute(key);\n if (attr) {\n out.push(`[${key}=\"${attr}\"]`);\n }\n }\n return out.join('');\n}\n\n/**\n * A safe form of location.href\n */\nfunction getLocationHref() {\n try {\n return WINDOW.document.location.href;\n } catch (oO) {\n return '';\n }\n}\n\n/**\n * Gets a DOM element by using document.querySelector.\n *\n * This wrapper will first check for the existance of the function before\n * actually calling it so that we don't have to take care of this check,\n * every time we want to access the DOM.\n *\n * Reason: DOM/querySelector is not available in all environments.\n *\n * We have to cast to any because utils can be consumed by a variety of environments,\n * and we don't want to break TS users. If you know what element will be selected by\n * `document.querySelector`, specify it as part of the generic call. For example,\n * `const element = getDomElement('selector');`\n *\n * @param selector the selector string passed on to document.querySelector\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction getDomElement(selector) {\n if (WINDOW.document && WINDOW.document.querySelector) {\n return WINDOW.document.querySelector(selector) ;\n }\n return null;\n}\n\nexport { getDomElement, getLocationHref, htmlTreeAsString };\n//# sourceMappingURL=browser.js.map\n","function _defineProperty(obj, key, value) {\n if (key in obj) {\n Object.defineProperty(obj, key, {\n value: value,\n enumerable: true,\n configurable: true,\n writable: true\n });\n } else {\n obj[key] = value;\n }\n\n return obj;\n}\n\nmodule.exports = _defineProperty, module.exports.__esModule = true, module.exports[\"default\"] = module.exports;","/*\n * This module exists for optimizations in the build process through rollup and terser. We define some global\n * constants, which can be overridden during build. By guarding certain pieces of code with functions that return these\n * constants, we can control whether or not they appear in the final bundle. (Any code guarded by a false condition will\n * never run, and will hence be dropped during treeshaking.) The two primary uses for this are stripping out calls to\n * `logger` and preventing node-related code from appearing in browser bundles.\n *\n * Attention:\n * This file should not be used to define constants/flags that are intended to be used for tree-shaking conducted by\n * users. These flags should live in their respective packages, as we identified user tooling (specifically webpack)\n * having issues tree-shaking these constants across package boundaries.\n * An example for this is the __SENTRY_DEBUG__ constant. It is declared in each package individually because we want\n * users to be able to shake away expressions that it guards.\n */\n\n/**\n * Figures out if we're building a browser bundle.\n *\n * @returns true if this is a browser bundle build.\n */\nfunction isBrowserBundle() {\n return typeof __SENTRY_BROWSER_BUNDLE__ !== 'undefined' && !!__SENTRY_BROWSER_BUNDLE__;\n}\n\n/**\n * Get source of SDK.\n */\nfunction getSDKSource() {\n // @ts-ignore \"npm\" is injected by rollup during build process\n return \"npm\";\n}\n\nexport { getSDKSource, isBrowserBundle };\n//# sourceMappingURL=env.js.map\n","/**\n * Copyright (c) 2014-present, Facebook, Inc.\n *\n * This source code is licensed under the MIT license found in the\n * LICENSE file in the root directory of this source tree.\n */\n\nvar runtime = (function (exports) {\n \"use strict\";\n\n var Op = Object.prototype;\n var hasOwn = Op.hasOwnProperty;\n var undefined; // More compressible than void 0.\n var $Symbol = typeof Symbol === \"function\" ? Symbol : {};\n var iteratorSymbol = $Symbol.iterator || \"@@iterator\";\n var asyncIteratorSymbol = $Symbol.asyncIterator || \"@@asyncIterator\";\n var toStringTagSymbol = $Symbol.toStringTag || \"@@toStringTag\";\n\n function define(obj, key, value) {\n Object.defineProperty(obj, key, {\n value: value,\n enumerable: true,\n configurable: true,\n writable: true\n });\n return obj[key];\n }\n try {\n // IE 8 has a broken Object.defineProperty that only works on DOM objects.\n define({}, \"\");\n } catch (err) {\n define = function(obj, key, value) {\n return obj[key] = value;\n };\n }\n\n function wrap(innerFn, outerFn, self, tryLocsList) {\n // If outerFn provided and outerFn.prototype is a Generator, then outerFn.prototype instanceof Generator.\n var protoGenerator = outerFn && outerFn.prototype instanceof Generator ? outerFn : Generator;\n var generator = Object.create(protoGenerator.prototype);\n var context = new Context(tryLocsList || []);\n\n // The ._invoke method unifies the implementations of the .next,\n // .throw, and .return methods.\n generator._invoke = makeInvokeMethod(innerFn, self, context);\n\n return generator;\n }\n exports.wrap = wrap;\n\n // Try/catch helper to minimize deoptimizations. Returns a completion\n // record like context.tryEntries[i].completion. This interface could\n // have been (and was previously) designed to take a closure to be\n // invoked without arguments, but in all the cases we care about we\n // already have an existing method we want to call, so there's no need\n // to create a new function object. We can even get away with assuming\n // the method takes exactly one argument, since that happens to be true\n // in every case, so we don't have to touch the arguments object. The\n // only additional allocation required is the completion record, which\n // has a stable shape and so hopefully should be cheap to allocate.\n function tryCatch(fn, obj, arg) {\n try {\n return { type: \"normal\", arg: fn.call(obj, arg) };\n } catch (err) {\n return { type: \"throw\", arg: err };\n }\n }\n\n var GenStateSuspendedStart = \"suspendedStart\";\n var GenStateSuspendedYield = \"suspendedYield\";\n var GenStateExecuting = \"executing\";\n var GenStateCompleted = \"completed\";\n\n // Returning this object from the innerFn has the same effect as\n // breaking out of the dispatch switch statement.\n var ContinueSentinel = {};\n\n // Dummy constructor functions that we use as the .constructor and\n // .constructor.prototype properties for functions that return Generator\n // objects. For full spec compliance, you may wish to configure your\n // minifier not to mangle the names of these two functions.\n function Generator() {}\n function GeneratorFunction() {}\n function GeneratorFunctionPrototype() {}\n\n // This is a polyfill for %IteratorPrototype% for environments that\n // don't natively support it.\n var IteratorPrototype = {};\n define(IteratorPrototype, iteratorSymbol, function () {\n return this;\n });\n\n var getProto = Object.getPrototypeOf;\n var NativeIteratorPrototype = getProto && getProto(getProto(values([])));\n if (NativeIteratorPrototype &&\n NativeIteratorPrototype !== Op &&\n hasOwn.call(NativeIteratorPrototype, iteratorSymbol)) {\n // This environment has a native %IteratorPrototype%; use it instead\n // of the polyfill.\n IteratorPrototype = NativeIteratorPrototype;\n }\n\n var Gp = GeneratorFunctionPrototype.prototype =\n Generator.prototype = Object.create(IteratorPrototype);\n GeneratorFunction.prototype = GeneratorFunctionPrototype;\n define(Gp, \"constructor\", GeneratorFunctionPrototype);\n define(GeneratorFunctionPrototype, \"constructor\", GeneratorFunction);\n GeneratorFunction.displayName = define(\n GeneratorFunctionPrototype,\n toStringTagSymbol,\n \"GeneratorFunction\"\n );\n\n // Helper for defining the .next, .throw, and .return methods of the\n // Iterator interface in terms of a single ._invoke method.\n function defineIteratorMethods(prototype) {\n [\"next\", \"throw\", \"return\"].forEach(function(method) {\n define(prototype, method, function(arg) {\n return this._invoke(method, arg);\n });\n });\n }\n\n exports.isGeneratorFunction = function(genFun) {\n var ctor = typeof genFun === \"function\" && genFun.constructor;\n return ctor\n ? ctor === GeneratorFunction ||\n // For the native GeneratorFunction constructor, the best we can\n // do is to check its .name property.\n (ctor.displayName || ctor.name) === \"GeneratorFunction\"\n : false;\n };\n\n exports.mark = function(genFun) {\n if (Object.setPrototypeOf) {\n Object.setPrototypeOf(genFun, GeneratorFunctionPrototype);\n } else {\n genFun.__proto__ = GeneratorFunctionPrototype;\n define(genFun, toStringTagSymbol, \"GeneratorFunction\");\n }\n genFun.prototype = Object.create(Gp);\n return genFun;\n };\n\n // Within the body of any async function, `await x` is transformed to\n // `yield regeneratorRuntime.awrap(x)`, so that the runtime can test\n // `hasOwn.call(value, \"__await\")` to determine if the yielded value is\n // meant to be awaited.\n exports.awrap = function(arg) {\n return { __await: arg };\n };\n\n function AsyncIterator(generator, PromiseImpl) {\n function invoke(method, arg, resolve, reject) {\n var record = tryCatch(generator[method], generator, arg);\n if (record.type === \"throw\") {\n reject(record.arg);\n } else {\n var result = record.arg;\n var value = result.value;\n if (value &&\n typeof value === \"object\" &&\n hasOwn.call(value, \"__await\")) {\n return PromiseImpl.resolve(value.__await).then(function(value) {\n invoke(\"next\", value, resolve, reject);\n }, function(err) {\n invoke(\"throw\", err, resolve, reject);\n });\n }\n\n return PromiseImpl.resolve(value).then(function(unwrapped) {\n // When a yielded Promise is resolved, its final value becomes\n // the .value of the Promise<{value,done}> result for the\n // current iteration.\n result.value = unwrapped;\n resolve(result);\n }, function(error) {\n // If a rejected Promise was yielded, throw the rejection back\n // into the async generator function so it can be handled there.\n return invoke(\"throw\", error, resolve, reject);\n });\n }\n }\n\n var previousPromise;\n\n function enqueue(method, arg) {\n function callInvokeWithMethodAndArg() {\n return new PromiseImpl(function(resolve, reject) {\n invoke(method, arg, resolve, reject);\n });\n }\n\n return previousPromise =\n // If enqueue has been called before, then we want to wait until\n // all previous Promises have been resolved before calling invoke,\n // so that results are always delivered in the correct order. If\n // enqueue has not been called before, then it is important to\n // call invoke immediately, without waiting on a callback to fire,\n // so that the async generator function has the opportunity to do\n // any necessary setup in a predictable way. This predictability\n // is why the Promise constructor synchronously invokes its\n // executor callback, and why async functions synchronously\n // execute code before the first await. Since we implement simple\n // async functions in terms of async generators, it is especially\n // important to get this right, even though it requires care.\n previousPromise ? previousPromise.then(\n callInvokeWithMethodAndArg,\n // Avoid propagating failures to Promises returned by later\n // invocations of the iterator.\n callInvokeWithMethodAndArg\n ) : callInvokeWithMethodAndArg();\n }\n\n // Define the unified helper method that is used to implement .next,\n // .throw, and .return (see defineIteratorMethods).\n this._invoke = enqueue;\n }\n\n defineIteratorMethods(AsyncIterator.prototype);\n define(AsyncIterator.prototype, asyncIteratorSymbol, function () {\n return this;\n });\n exports.AsyncIterator = AsyncIterator;\n\n // Note that simple async functions are implemented on top of\n // AsyncIterator objects; they just return a Promise for the value of\n // the final result produced by the iterator.\n exports.async = function(innerFn, outerFn, self, tryLocsList, PromiseImpl) {\n if (PromiseImpl === void 0) PromiseImpl = Promise;\n\n var iter = new AsyncIterator(\n wrap(innerFn, outerFn, self, tryLocsList),\n PromiseImpl\n );\n\n return exports.isGeneratorFunction(outerFn)\n ? iter // If outerFn is a generator, return the full iterator.\n : iter.next().then(function(result) {\n return result.done ? result.value : iter.next();\n });\n };\n\n function makeInvokeMethod(innerFn, self, context) {\n var state = GenStateSuspendedStart;\n\n return function invoke(method, arg) {\n if (state === GenStateExecuting) {\n throw new Error(\"Generator is already running\");\n }\n\n if (state === GenStateCompleted) {\n if (method === \"throw\") {\n throw arg;\n }\n\n // Be forgiving, per 25.3.3.3.3 of the spec:\n // https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume\n return doneResult();\n }\n\n context.method = method;\n context.arg = arg;\n\n while (true) {\n var delegate = context.delegate;\n if (delegate) {\n var delegateResult = maybeInvokeDelegate(delegate, context);\n if (delegateResult) {\n if (delegateResult === ContinueSentinel) continue;\n return delegateResult;\n }\n }\n\n if (context.method === \"next\") {\n // Setting context._sent for legacy support of Babel's\n // function.sent implementation.\n context.sent = context._sent = context.arg;\n\n } else if (context.method === \"throw\") {\n if (state === GenStateSuspendedStart) {\n state = GenStateCompleted;\n throw context.arg;\n }\n\n context.dispatchException(context.arg);\n\n } else if (context.method === \"return\") {\n context.abrupt(\"return\", context.arg);\n }\n\n state = GenStateExecuting;\n\n var record = tryCatch(innerFn, self, context);\n if (record.type === \"normal\") {\n // If an exception is thrown from innerFn, we leave state ===\n // GenStateExecuting and loop back for another invocation.\n state = context.done\n ? GenStateCompleted\n : GenStateSuspendedYield;\n\n if (record.arg === ContinueSentinel) {\n continue;\n }\n\n return {\n value: record.arg,\n done: context.done\n };\n\n } else if (record.type === \"throw\") {\n state = GenStateCompleted;\n // Dispatch the exception by looping back around to the\n // context.dispatchException(context.arg) call above.\n context.method = \"throw\";\n context.arg = record.arg;\n }\n }\n };\n }\n\n // Call delegate.iterator[context.method](context.arg) and handle the\n // result, either by returning a { value, done } result from the\n // delegate iterator, or by modifying context.method and context.arg,\n // setting context.delegate to null, and returning the ContinueSentinel.\n function maybeInvokeDelegate(delegate, context) {\n var method = delegate.iterator[context.method];\n if (method === undefined) {\n // A .throw or .return when the delegate iterator has no .throw\n // method always terminates the yield* loop.\n context.delegate = null;\n\n if (context.method === \"throw\") {\n // Note: [\"return\"] must be used for ES3 parsing compatibility.\n if (delegate.iterator[\"return\"]) {\n // If the delegate iterator has a return method, give it a\n // chance to clean up.\n context.method = \"return\";\n context.arg = undefined;\n maybeInvokeDelegate(delegate, context);\n\n if (context.method === \"throw\") {\n // If maybeInvokeDelegate(context) changed context.method from\n // \"return\" to \"throw\", let that override the TypeError below.\n return ContinueSentinel;\n }\n }\n\n context.method = \"throw\";\n context.arg = new TypeError(\n \"The iterator does not provide a 'throw' method\");\n }\n\n return ContinueSentinel;\n }\n\n var record = tryCatch(method, delegate.iterator, context.arg);\n\n if (record.type === \"throw\") {\n context.method = \"throw\";\n context.arg = record.arg;\n context.delegate = null;\n return ContinueSentinel;\n }\n\n var info = record.arg;\n\n if (! info) {\n context.method = \"throw\";\n context.arg = new TypeError(\"iterator result is not an object\");\n context.delegate = null;\n return ContinueSentinel;\n }\n\n if (info.done) {\n // Assign the result of the finished delegate to the temporary\n // variable specified by delegate.resultName (see delegateYield).\n context[delegate.resultName] = info.value;\n\n // Resume execution at the desired location (see delegateYield).\n context.next = delegate.nextLoc;\n\n // If context.method was \"throw\" but the delegate handled the\n // exception, let the outer generator proceed normally. If\n // context.method was \"next\", forget context.arg since it has been\n // \"consumed\" by the delegate iterator. If context.method was\n // \"return\", allow the original .return call to continue in the\n // outer generator.\n if (context.method !== \"return\") {\n context.method = \"next\";\n context.arg = undefined;\n }\n\n } else {\n // Re-yield the result returned by the delegate method.\n return info;\n }\n\n // The delegate iterator is finished, so forget it and continue with\n // the outer generator.\n context.delegate = null;\n return ContinueSentinel;\n }\n\n // Define Generator.prototype.{next,throw,return} in terms of the\n // unified ._invoke helper method.\n defineIteratorMethods(Gp);\n\n define(Gp, toStringTagSymbol, \"Generator\");\n\n // A Generator should always return itself as the iterator object when the\n // @@iterator function is called on it. Some browsers' implementations of the\n // iterator prototype chain incorrectly implement this, causing the Generator\n // object to not be returned from this call. This ensures that doesn't happen.\n // See https://github.com/facebook/regenerator/issues/274 for more details.\n define(Gp, iteratorSymbol, function() {\n return this;\n });\n\n define(Gp, \"toString\", function() {\n return \"[object Generator]\";\n });\n\n function pushTryEntry(locs) {\n var entry = { tryLoc: locs[0] };\n\n if (1 in locs) {\n entry.catchLoc = locs[1];\n }\n\n if (2 in locs) {\n entry.finallyLoc = locs[2];\n entry.afterLoc = locs[3];\n }\n\n this.tryEntries.push(entry);\n }\n\n function resetTryEntry(entry) {\n var record = entry.completion || {};\n record.type = \"normal\";\n delete record.arg;\n entry.completion = record;\n }\n\n function Context(tryLocsList) {\n // The root entry object (effectively a try statement without a catch\n // or a finally block) gives us a place to store values thrown from\n // locations where there is no enclosing try statement.\n this.tryEntries = [{ tryLoc: \"root\" }];\n tryLocsList.forEach(pushTryEntry, this);\n this.reset(true);\n }\n\n exports.keys = function(object) {\n var keys = [];\n for (var key in object) {\n keys.push(key);\n }\n keys.reverse();\n\n // Rather than returning an object with a next method, we keep\n // things simple and return the next function itself.\n return function next() {\n while (keys.length) {\n var key = keys.pop();\n if (key in object) {\n next.value = key;\n next.done = false;\n return next;\n }\n }\n\n // To avoid creating an additional object, we just hang the .value\n // and .done properties off the next function object itself. This\n // also ensures that the minifier will not anonymize the function.\n next.done = true;\n return next;\n };\n };\n\n function values(iterable) {\n if (iterable) {\n var iteratorMethod = iterable[iteratorSymbol];\n if (iteratorMethod) {\n return iteratorMethod.call(iterable);\n }\n\n if (typeof iterable.next === \"function\") {\n return iterable;\n }\n\n if (!isNaN(iterable.length)) {\n var i = -1, next = function next() {\n while (++i < iterable.length) {\n if (hasOwn.call(iterable, i)) {\n next.value = iterable[i];\n next.done = false;\n return next;\n }\n }\n\n next.value = undefined;\n next.done = true;\n\n return next;\n };\n\n return next.next = next;\n }\n }\n\n // Return an iterator with no values.\n return { next: doneResult };\n }\n exports.values = values;\n\n function doneResult() {\n return { value: undefined, done: true };\n }\n\n Context.prototype = {\n constructor: Context,\n\n reset: function(skipTempReset) {\n this.prev = 0;\n this.next = 0;\n // Resetting context._sent for legacy support of Babel's\n // function.sent implementation.\n this.sent = this._sent = undefined;\n this.done = false;\n this.delegate = null;\n\n this.method = \"next\";\n this.arg = undefined;\n\n this.tryEntries.forEach(resetTryEntry);\n\n if (!skipTempReset) {\n for (var name in this) {\n // Not sure about the optimal order of these conditions:\n if (name.charAt(0) === \"t\" &&\n hasOwn.call(this, name) &&\n !isNaN(+name.slice(1))) {\n this[name] = undefined;\n }\n }\n }\n },\n\n stop: function() {\n this.done = true;\n\n var rootEntry = this.tryEntries[0];\n var rootRecord = rootEntry.completion;\n if (rootRecord.type === \"throw\") {\n throw rootRecord.arg;\n }\n\n return this.rval;\n },\n\n dispatchException: function(exception) {\n if (this.done) {\n throw exception;\n }\n\n var context = this;\n function handle(loc, caught) {\n record.type = \"throw\";\n record.arg = exception;\n context.next = loc;\n\n if (caught) {\n // If the dispatched exception was caught by a catch block,\n // then let that catch block handle the exception normally.\n context.method = \"next\";\n context.arg = undefined;\n }\n\n return !! caught;\n }\n\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n var record = entry.completion;\n\n if (entry.tryLoc === \"root\") {\n // Exception thrown outside of any try block that could handle\n // it, so set the completion value of the entire function to\n // throw the exception.\n return handle(\"end\");\n }\n\n if (entry.tryLoc <= this.prev) {\n var hasCatch = hasOwn.call(entry, \"catchLoc\");\n var hasFinally = hasOwn.call(entry, \"finallyLoc\");\n\n if (hasCatch && hasFinally) {\n if (this.prev < entry.catchLoc) {\n return handle(entry.catchLoc, true);\n } else if (this.prev < entry.finallyLoc) {\n return handle(entry.finallyLoc);\n }\n\n } else if (hasCatch) {\n if (this.prev < entry.catchLoc) {\n return handle(entry.catchLoc, true);\n }\n\n } else if (hasFinally) {\n if (this.prev < entry.finallyLoc) {\n return handle(entry.finallyLoc);\n }\n\n } else {\n throw new Error(\"try statement without catch or finally\");\n }\n }\n }\n },\n\n abrupt: function(type, arg) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.tryLoc <= this.prev &&\n hasOwn.call(entry, \"finallyLoc\") &&\n this.prev < entry.finallyLoc) {\n var finallyEntry = entry;\n break;\n }\n }\n\n if (finallyEntry &&\n (type === \"break\" ||\n type === \"continue\") &&\n finallyEntry.tryLoc <= arg &&\n arg <= finallyEntry.finallyLoc) {\n // Ignore the finally entry if control is not jumping to a\n // location outside the try/catch block.\n finallyEntry = null;\n }\n\n var record = finallyEntry ? finallyEntry.completion : {};\n record.type = type;\n record.arg = arg;\n\n if (finallyEntry) {\n this.method = \"next\";\n this.next = finallyEntry.finallyLoc;\n return ContinueSentinel;\n }\n\n return this.complete(record);\n },\n\n complete: function(record, afterLoc) {\n if (record.type === \"throw\") {\n throw record.arg;\n }\n\n if (record.type === \"break\" ||\n record.type === \"continue\") {\n this.next = record.arg;\n } else if (record.type === \"return\") {\n this.rval = this.arg = record.arg;\n this.method = \"return\";\n this.next = \"end\";\n } else if (record.type === \"normal\" && afterLoc) {\n this.next = afterLoc;\n }\n\n return ContinueSentinel;\n },\n\n finish: function(finallyLoc) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.finallyLoc === finallyLoc) {\n this.complete(entry.completion, entry.afterLoc);\n resetTryEntry(entry);\n return ContinueSentinel;\n }\n }\n },\n\n \"catch\": function(tryLoc) {\n for (var i = this.tryEntries.length - 1; i >= 0; --i) {\n var entry = this.tryEntries[i];\n if (entry.tryLoc === tryLoc) {\n var record = entry.completion;\n if (record.type === \"throw\") {\n var thrown = record.arg;\n resetTryEntry(entry);\n }\n return thrown;\n }\n }\n\n // The context.catch method must only be called with a location\n // argument that corresponds to a known catch block.\n throw new Error(\"illegal catch attempt\");\n },\n\n delegateYield: function(iterable, resultName, nextLoc) {\n this.delegate = {\n iterator: values(iterable),\n resultName: resultName,\n nextLoc: nextLoc\n };\n\n if (this.method === \"next\") {\n // Deliberately forget the last sent value so that we don't\n // accidentally pass it on to the delegate.\n this.arg = undefined;\n }\n\n return ContinueSentinel;\n }\n };\n\n // Regardless of whether this script is executing as a CommonJS module\n // or not, return the runtime object so that we can declare the variable\n // regeneratorRuntime in the outer scope, which allows this module to be\n // injected easily by `bin/regenerator --include-runtime script.js`.\n return exports;\n\n}(\n // If this script is executing as a CommonJS module, use module.exports\n // as the regeneratorRuntime namespace. Otherwise create a new empty\n // object. Either way, the resulting object will be used to initialize\n // the regeneratorRuntime variable at the top of this file.\n typeof module === \"object\" ? module.exports : {}\n));\n\ntry {\n regeneratorRuntime = runtime;\n} catch (accidentalStrictMode) {\n // This module should not be running in strict mode, so the above\n // assignment should always work unless something is misconfigured. Just\n // in case runtime.js accidentally runs in strict mode, in modern engines\n // we can explicitly access globalThis. In older engines we can escape\n // strict mode using a global Function call. This could conceivably fail\n // if a Content Security Policy forbids using Function, but in that case\n // the proper solution is to fix the accidental strict mode problem. If\n // you've misconfigured your bundler to force strict mode and applied a\n // CSP to forbid Function, and you're not willing to fix either of those\n // problems, please detail your unique predicament in a GitHub issue.\n if (typeof globalThis === \"object\") {\n globalThis.regeneratorRuntime = runtime;\n } else {\n Function(\"r\", \"regeneratorRuntime = r\")(runtime);\n }\n}\n","function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {\n try {\n var info = gen[key](arg);\n var value = info.value;\n } catch (error) {\n reject(error);\n return;\n }\n\n if (info.done) {\n resolve(value);\n } else {\n Promise.resolve(value).then(_next, _throw);\n }\n}\n\nfunction _asyncToGenerator(fn) {\n return function () {\n var self = this,\n args = arguments;\n return new Promise(function (resolve, reject) {\n var gen = fn.apply(self, args);\n\n function _next(value) {\n asyncGeneratorStep(gen, resolve, reject, _next, _throw, \"next\", value);\n }\n\n function _throw(err) {\n asyncGeneratorStep(gen, resolve, reject, _next, _throw, \"throw\", err);\n }\n\n _next(undefined);\n });\n };\n}\n\nmodule.exports = _asyncToGenerator, module.exports.__esModule = true, module.exports[\"default\"] = module.exports;","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\n/*! *****************************************************************************\r\nCopyright (c) Microsoft Corporation.\r\n\r\nPermission to use, copy, modify, and/or distribute this software for any\r\npurpose with or without fee is hereby granted.\r\n\r\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH\r\nREGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY\r\nAND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,\r\nINDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM\r\nLOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR\r\nOTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR\r\nPERFORMANCE OF THIS SOFTWARE.\r\n***************************************************************************** */\r\n/* global Reflect, Promise */\r\n\r\nvar extendStatics = function(d, b) {\r\n extendStatics = Object.setPrototypeOf ||\r\n ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||\r\n function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };\r\n return extendStatics(d, b);\r\n};\r\n\r\nfunction __extends(d, b) {\r\n extendStatics(d, b);\r\n function __() { this.constructor = d; }\r\n d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());\r\n}\r\n\r\nvar __assign = function() {\r\n __assign = Object.assign || function __assign(t) {\r\n for (var s, i = 1, n = arguments.length; i < n; i++) {\r\n s = arguments[i];\r\n for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];\r\n }\r\n return t;\r\n };\r\n return __assign.apply(this, arguments);\r\n};\r\n\r\nfunction __rest(s, e) {\r\n var t = {};\r\n for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)\r\n t[p] = s[p];\r\n if (s != null && typeof Object.getOwnPropertySymbols === \"function\")\r\n for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {\r\n if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))\r\n t[p[i]] = s[p[i]];\r\n }\r\n return t;\r\n}\r\n\r\nfunction __awaiter(thisArg, _arguments, P, generator) {\r\n function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\r\n return new (P || (P = Promise))(function (resolve, reject) {\r\n function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\r\n function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\r\n function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\r\n step((generator = generator.apply(thisArg, _arguments || [])).next());\r\n });\r\n}\r\n\r\nfunction __generator(thisArg, body) {\r\n var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;\r\n return g = { next: verb(0), \"throw\": verb(1), \"return\": verb(2) }, typeof Symbol === \"function\" && (g[Symbol.iterator] = function() { return this; }), g;\r\n function verb(n) { return function (v) { return step([n, v]); }; }\r\n function step(op) {\r\n if (f) throw new TypeError(\"Generator is already executing.\");\r\n while (_) try {\r\n if (f = 1, y && (t = op[0] & 2 ? y[\"return\"] : op[0] ? y[\"throw\"] || ((t = y[\"return\"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;\r\n if (y = 0, t) op = [op[0] & 2, t.value];\r\n switch (op[0]) {\r\n case 0: case 1: t = op; break;\r\n case 4: _.label++; return { value: op[1], done: false };\r\n case 5: _.label++; y = op[1]; op = [0]; continue;\r\n case 7: op = _.ops.pop(); _.trys.pop(); continue;\r\n default:\r\n if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }\r\n if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }\r\n if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }\r\n if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }\r\n if (t[2]) _.ops.pop();\r\n _.trys.pop(); continue;\r\n }\r\n op = body.call(thisArg, _);\r\n } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }\r\n if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };\r\n }\r\n}\r\n\r\nfunction __read(o, n) {\r\n var m = typeof Symbol === \"function\" && o[Symbol.iterator];\r\n if (!m) return o;\r\n var i = m.call(o), r, ar = [], e;\r\n try {\r\n while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);\r\n }\r\n catch (error) { e = { error: error }; }\r\n finally {\r\n try {\r\n if (r && !r.done && (m = i[\"return\"])) m.call(i);\r\n }\r\n finally { if (e) throw e.error; }\r\n }\r\n return ar;\r\n}\r\n\r\nfunction __spread() {\r\n for (var ar = [], i = 0; i < arguments.length; i++)\r\n ar = ar.concat(__read(arguments[i]));\r\n return ar;\r\n}\n\nexport { __assign, __awaiter, __extends, __generator, __read, __rest, __spread };\n//# sourceMappingURL=_tslib.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Enumeration of operations that are instrumented by have their performance measured by the PerformanceClient.\r\n *\r\n * @export\r\n * @enum {number}\r\n */\r\nvar PerformanceEvents;\r\n(function (PerformanceEvents) {\r\n /**\r\n * acquireTokenByCode API (msal-browser and msal-node).\r\n * Used to acquire tokens by trading an authorization code against the token endpoint.\r\n */\r\n PerformanceEvents[\"AcquireTokenByCode\"] = \"acquireTokenByCode\";\r\n /**\r\n * acquireTokenByRefreshToken API (msal-browser and msal-node).\r\n * Used to renew an access token using a refresh token against the token endpoint.\r\n */\r\n PerformanceEvents[\"AcquireTokenByRefreshToken\"] = \"acquireTokenByRefreshToken\";\r\n /**\r\n * acquireTokenSilent API (msal-browser and msal-node).\r\n * Used to silently acquire a new access token (from the cache or the network).\r\n */\r\n PerformanceEvents[\"AcquireTokenSilent\"] = \"acquireTokenSilent\";\r\n /**\r\n * acquireTokenSilentAsync (msal-browser).\r\n * Internal API for acquireTokenSilent.\r\n */\r\n PerformanceEvents[\"AcquireTokenSilentAsync\"] = \"acquireTokenSilentAsync\";\r\n /**\r\n * acquireTokenPopup (msal-browser).\r\n * Used to acquire a new access token interactively through pop ups\r\n */\r\n PerformanceEvents[\"AcquireTokenPopup\"] = \"acquireTokenPopup\";\r\n /**\r\n * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).\r\n * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.\r\n */\r\n PerformanceEvents[\"CryptoOptsGetPublicKeyThumbprint\"] = \"cryptoOptsGetPublicKeyThumbprint\";\r\n /**\r\n * signJwt API in CryptoOpts class (msal-browser).\r\n * Used to signed a pop token.\r\n */\r\n PerformanceEvents[\"CryptoOptsSignJwt\"] = \"cryptoOptsSignJwt\";\r\n /**\r\n * acquireToken API in the SilentCacheClient class (msal-browser).\r\n * Used to read access tokens from the cache.\r\n */\r\n PerformanceEvents[\"SilentCacheClientAcquireToken\"] = \"silentCacheClientAcquireToken\";\r\n /**\r\n * acquireToken API in the SilentIframeClient class (msal-browser).\r\n * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.\r\n */\r\n PerformanceEvents[\"SilentIframeClientAcquireToken\"] = \"silentIframeClientAcquireToken\";\r\n /**\r\n * acquireToken API in SilentRereshClient (msal-browser).\r\n * Used to acquire a new set of tokens from the token endpoint using a refresh token.\r\n */\r\n PerformanceEvents[\"SilentRefreshClientAcquireToken\"] = \"silentRefreshClientAcquireToken\";\r\n /**\r\n * ssoSilent API (msal-browser).\r\n * Used to silently acquire an authorization code and set of tokens using a hidden iframe.\r\n */\r\n PerformanceEvents[\"SsoSilent\"] = \"ssoSilent\";\r\n /**\r\n * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).\r\n * Used to load authority metadata for a request.\r\n */\r\n PerformanceEvents[\"StandardInteractionClientGetDiscoveredAuthority\"] = \"standardInteractionClientGetDiscoveredAuthority\";\r\n /**\r\n * acquireToken APIs in msal-browser.\r\n * Used to make an /authorize endpoint call with native brokering enabled.\r\n */\r\n PerformanceEvents[\"FetchAccountIdWithNativeBroker\"] = \"fetchAccountIdWithNativeBroker\";\r\n /**\r\n * acquireToken API in NativeInteractionClient class (msal-browser).\r\n * Used to acquire a token from Native component when native brokering is enabled.\r\n */\r\n PerformanceEvents[\"NativeInteractionClientAcquireToken\"] = \"nativeInteractionClientAcquireToken\";\r\n /**\r\n * Time spent creating default headers for requests to token endpoint\r\n */\r\n PerformanceEvents[\"BaseClientCreateTokenRequestHeaders\"] = \"baseClientCreateTokenRequestHeaders\";\r\n /**\r\n * Used to measure the time taken for completing embedded-broker handshake (PW-Broker).\r\n */\r\n PerformanceEvents[\"BrokerHandhshake\"] = \"brokerHandshake\";\r\n /**\r\n * acquireTokenByRefreshToken API in BrokerClientApplication (PW-Broker) .\r\n */\r\n PerformanceEvents[\"AcquireTokenByRefreshTokenInBroker\"] = \"acquireTokenByRefreshTokenInBroker\";\r\n /**\r\n * Time taken for token acquisition by broker\r\n */\r\n PerformanceEvents[\"AcquireTokenByBroker\"] = \"acquireTokenByBroker\";\r\n /**\r\n * Time spent on the network for refresh token acquisition\r\n */\r\n PerformanceEvents[\"RefreshTokenClientExecuteTokenRequest\"] = \"refreshTokenClientExecuteTokenRequest\";\r\n /**\r\n * Time taken for acquiring refresh token , records RT size\r\n */\r\n PerformanceEvents[\"RefreshTokenClientAcquireToken\"] = \"refreshTokenClientAcquireToken\";\r\n /**\r\n * Time taken for acquiring cached refresh token\r\n */\r\n PerformanceEvents[\"RefreshTokenClientAcquireTokenWithCachedRefreshToken\"] = \"refreshTokenClientAcquireTokenWithCachedRefreshToken\";\r\n /**\r\n * acquireTokenByRefreshToken API in RefreshTokenClient (msal-common).\r\n */\r\n PerformanceEvents[\"RefreshTokenClientAcquireTokenByRefreshToken\"] = \"refreshTokenClientAcquireTokenByRefreshToken\";\r\n /**\r\n * Helper function to create token request body in RefreshTokenClient (msal-common).\r\n */\r\n PerformanceEvents[\"RefreshTokenClientCreateTokenRequestBody\"] = \"refreshTokenClientCreateTokenRequestBody\";\r\n /**\r\n * acquireTokenFromCache (msal-browser).\r\n * Internal API for acquiring token from cache\r\n */\r\n PerformanceEvents[\"AcquireTokenFromCache\"] = \"acquireTokenFromCache\";\r\n /**\r\n * acquireTokenBySilentIframe (msal-browser).\r\n * Internal API for acquiring token by silent Iframe\r\n */\r\n PerformanceEvents[\"AcquireTokenBySilentIframe\"] = \"acquireTokenBySilentIframe\";\r\n /**\r\n * Internal API for initializing base request in BaseInteractionClient (msal-browser)\r\n */\r\n PerformanceEvents[\"InitializeBaseRequest\"] = \"initializeBaseRequest\";\r\n /**\r\n * Internal API for initializing silent request in SilentCacheClient (msal-browser)\r\n */\r\n PerformanceEvents[\"InitializeSilentRequest\"] = \"initializeSilentRequest\";\r\n PerformanceEvents[\"InitializeClientApplication\"] = \"initializeClientApplication\";\r\n /**\r\n * Helper function in SilentIframeClient class (msal-browser).\r\n */\r\n PerformanceEvents[\"SilentIframeClientTokenHelper\"] = \"silentIframeClientTokenHelper\";\r\n /**\r\n * SilentHandler\r\n */\r\n PerformanceEvents[\"SilentHandlerInitiateAuthRequest\"] = \"silentHandlerInitiateAuthRequest\";\r\n PerformanceEvents[\"SilentHandlerMonitorIframeForHash\"] = \"silentHandlerMonitorIframeForHash\";\r\n PerformanceEvents[\"SilentHandlerLoadFrame\"] = \"silentHandlerLoadFrame\";\r\n /**\r\n * Helper functions in StandardInteractionClient class (msal-browser)\r\n */\r\n PerformanceEvents[\"StandardInteractionClientCreateAuthCodeClient\"] = \"standardInteractionClientCreateAuthCodeClient\";\r\n PerformanceEvents[\"StandardInteractionClientGetClientConfiguration\"] = \"standardInteractionClientGetClientConfiguration\";\r\n PerformanceEvents[\"StandardInteractionClientInitializeAuthorizationRequest\"] = \"standardInteractionClientInitializeAuthorizationRequest\";\r\n PerformanceEvents[\"StandardInteractionClientInitializeAuthorizationCodeRequest\"] = \"standardInteractionClientInitializeAuthorizationCodeRequest\";\r\n /**\r\n * getAuthCodeUrl API (msal-browser and msal-node).\r\n */\r\n PerformanceEvents[\"GetAuthCodeUrl\"] = \"getAuthCodeUrl\";\r\n /**\r\n * Functions from InteractionHandler (msal-browser)\r\n */\r\n PerformanceEvents[\"HandleCodeResponseFromServer\"] = \"handleCodeResponseFromServer\";\r\n PerformanceEvents[\"HandleCodeResponseFromHash\"] = \"handleCodeResponseFromHash\";\r\n PerformanceEvents[\"UpdateTokenEndpointAuthority\"] = \"updateTokenEndpointAuthority\";\r\n /**\r\n * APIs in Authorization Code Client (msal-common)\r\n */\r\n PerformanceEvents[\"AuthClientAcquireToken\"] = \"authClientAcquireToken\";\r\n PerformanceEvents[\"AuthClientExecuteTokenRequest\"] = \"authClientExecuteTokenRequest\";\r\n PerformanceEvents[\"AuthClientCreateTokenRequestBody\"] = \"authClientCreateTokenRequestBody\";\r\n PerformanceEvents[\"AuthClientCreateQueryString\"] = \"authClientCreateQueryString\";\r\n /**\r\n * Generate functions in PopTokenGenerator (msal-common)\r\n */\r\n PerformanceEvents[\"PopTokenGenerateCnf\"] = \"popTokenGenerateCnf\";\r\n PerformanceEvents[\"PopTokenGenerateKid\"] = \"popTokenGenerateKid\";\r\n /**\r\n * handleServerTokenResponse API in ResponseHandler (msal-common)\r\n */\r\n PerformanceEvents[\"HandleServerTokenResponse\"] = \"handleServerTokenResponse\";\r\n /**\r\n * Authority functions\r\n */\r\n PerformanceEvents[\"AuthorityFactoryCreateDiscoveredInstance\"] = \"authorityFactoryCreateDiscoveredInstance\";\r\n PerformanceEvents[\"AuthorityResolveEndpointsAsync\"] = \"authorityResolveEndpointsAsync\";\r\n PerformanceEvents[\"AuthorityGetCloudDiscoveryMetadataFromNetwork\"] = \"authorityGetCloudDiscoveryMetadataFromNetwork\";\r\n PerformanceEvents[\"AuthorityUpdateCloudDiscoveryMetadata\"] = \"authorityUpdateCloudDiscoveryMetadata\";\r\n PerformanceEvents[\"AuthorityGetEndpointMetadataFromNetwork\"] = \"authorityGetEndpointMetadataFromNetwork\";\r\n PerformanceEvents[\"AuthorityUpdateEndpointMetadata\"] = \"authorityUpdateEndpointMetadata\";\r\n PerformanceEvents[\"AuthorityUpdateMetadataWithRegionalInformation\"] = \"authorityUpdateMetadataWithRegionalInformation\";\r\n /**\r\n * Region Discovery functions\r\n */\r\n PerformanceEvents[\"RegionDiscoveryDetectRegion\"] = \"regionDiscoveryDetectRegion\";\r\n PerformanceEvents[\"RegionDiscoveryGetRegionFromIMDS\"] = \"regionDiscoveryGetRegionFromIMDS\";\r\n PerformanceEvents[\"RegionDiscoveryGetCurrentVersion\"] = \"regionDiscoveryGetCurrentVersion\";\r\n PerformanceEvents[\"AcquireTokenByCodeAsync\"] = \"acquireTokenByCodeAsync\";\r\n PerformanceEvents[\"GetEndpointMetadataFromNetwork\"] = \"getEndpointMetadataFromNetwork\";\r\n PerformanceEvents[\"GetCloudDiscoveryMetadataFromNetworkMeasurement\"] = \"getCloudDiscoveryMetadataFromNetworkMeasurement\";\r\n PerformanceEvents[\"HandleRedirectPromiseMeasurement\"] = \"handleRedirectPromiseMeasurement\";\r\n PerformanceEvents[\"UpdateCloudDiscoveryMetadataMeasurement\"] = \"updateCloudDiscoveryMetadataMeasurement\";\r\n PerformanceEvents[\"UsernamePasswordClientAcquireToken\"] = \"usernamePasswordClientAcquireToken\";\r\n PerformanceEvents[\"NativeMessageHandlerHandshake\"] = \"nativeMessageHandlerHandshake\";\r\n /**\r\n * Cache operations\r\n */\r\n PerformanceEvents[\"ClearTokensAndKeysWithClaims\"] = \"clearTokensAndKeysWithClaims\";\r\n})(PerformanceEvents || (PerformanceEvents = {}));\r\n/**\r\n * State of the performance event.\r\n *\r\n * @export\r\n * @enum {number}\r\n */\r\nvar PerformanceEventStatus;\r\n(function (PerformanceEventStatus) {\r\n PerformanceEventStatus[PerformanceEventStatus[\"NotStarted\"] = 0] = \"NotStarted\";\r\n PerformanceEventStatus[PerformanceEventStatus[\"InProgress\"] = 1] = \"InProgress\";\r\n PerformanceEventStatus[PerformanceEventStatus[\"Completed\"] = 2] = \"Completed\";\r\n})(PerformanceEventStatus || (PerformanceEventStatus = {}));\r\nvar IntFields = new Set([\r\n \"accessTokenSize\",\r\n \"durationMs\",\r\n \"idTokenSize\",\r\n \"matsSilentStatus\",\r\n \"matsHttpStatus\",\r\n \"refreshTokenSize\",\r\n \"queuedTimeMs\",\r\n \"startTimeMs\",\r\n \"status\",\r\n]);\n\nexport { IntFields, PerformanceEventStatus, PerformanceEvents };\n//# sourceMappingURL=PerformanceEvent.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*! *****************************************************************************\r\nCopyright (c) Microsoft Corporation.\r\n\r\nPermission to use, copy, modify, and/or distribute this software for any\r\npurpose with or without fee is hereby granted.\r\n\r\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH\r\nREGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY\r\nAND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,\r\nINDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM\r\nLOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR\r\nOTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR\r\nPERFORMANCE OF THIS SOFTWARE.\r\n***************************************************************************** */\r\n/* global Reflect, Promise */\r\n\r\nvar extendStatics = function(d, b) {\r\n extendStatics = Object.setPrototypeOf ||\r\n ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||\r\n function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };\r\n return extendStatics(d, b);\r\n};\r\n\r\nfunction __extends(d, b) {\r\n extendStatics(d, b);\r\n function __() { this.constructor = d; }\r\n d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());\r\n}\r\n\r\nvar __assign = function() {\r\n __assign = Object.assign || function __assign(t) {\r\n for (var s, i = 1, n = arguments.length; i < n; i++) {\r\n s = arguments[i];\r\n for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];\r\n }\r\n return t;\r\n };\r\n return __assign.apply(this, arguments);\r\n};\r\n\r\nfunction __awaiter(thisArg, _arguments, P, generator) {\r\n function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\r\n return new (P || (P = Promise))(function (resolve, reject) {\r\n function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\r\n function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\r\n function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\r\n step((generator = generator.apply(thisArg, _arguments || [])).next());\r\n });\r\n}\r\n\r\nfunction __generator(thisArg, body) {\r\n var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;\r\n return g = { next: verb(0), \"throw\": verb(1), \"return\": verb(2) }, typeof Symbol === \"function\" && (g[Symbol.iterator] = function() { return this; }), g;\r\n function verb(n) { return function (v) { return step([n, v]); }; }\r\n function step(op) {\r\n if (f) throw new TypeError(\"Generator is already executing.\");\r\n while (_) try {\r\n if (f = 1, y && (t = op[0] & 2 ? y[\"return\"] : op[0] ? y[\"throw\"] || ((t = y[\"return\"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;\r\n if (y = 0, t) op = [op[0] & 2, t.value];\r\n switch (op[0]) {\r\n case 0: case 1: t = op; break;\r\n case 4: _.label++; return { value: op[1], done: false };\r\n case 5: _.label++; y = op[1]; op = [0]; continue;\r\n case 7: op = _.ops.pop(); _.trys.pop(); continue;\r\n default:\r\n if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }\r\n if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }\r\n if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }\r\n if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }\r\n if (t[2]) _.ops.pop();\r\n _.trys.pop(); continue;\r\n }\r\n op = body.call(thisArg, _);\r\n } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }\r\n if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };\r\n }\r\n}\r\n\r\nfunction __spreadArrays() {\r\n for (var s = 0, i = 0, il = arguments.length; i < il; i++) s += arguments[i].length;\r\n for (var r = Array(s), k = 0, i = 0; i < il; i++)\r\n for (var a = arguments[i], j = 0, jl = a.length; j < jl; j++, k++)\r\n r[k] = a[j];\r\n return r;\r\n}\n\nexport { __assign, __awaiter, __extends, __generator, __spreadArrays };\n//# sourceMappingURL=_tslib.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __spreadArrays } from '../_virtual/_tslib.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar Constants = {\r\n LIBRARY_NAME: \"MSAL.JS\",\r\n SKU: \"msal.js.common\",\r\n // Prefix for all library cache entries\r\n CACHE_PREFIX: \"msal\",\r\n // default authority\r\n DEFAULT_AUTHORITY: \"https://login.microsoftonline.com/common/\",\r\n DEFAULT_AUTHORITY_HOST: \"login.microsoftonline.com\",\r\n DEFAULT_COMMON_TENANT: \"common\",\r\n // ADFS String\r\n ADFS: \"adfs\",\r\n DSTS: \"dstsv2\",\r\n // Default AAD Instance Discovery Endpoint\r\n AAD_INSTANCE_DISCOVERY_ENDPT: \"https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=\",\r\n // CIAM URL\r\n CIAM_AUTH_URL: \".ciamlogin.com\",\r\n AAD_TENANT_DOMAIN_SUFFIX: \".onmicrosoft.com\",\r\n // Resource delimiter - used for certain cache entries\r\n RESOURCE_DELIM: \"|\",\r\n // Placeholder for non-existent account ids/objects\r\n NO_ACCOUNT: \"NO_ACCOUNT\",\r\n // Claims\r\n CLAIMS: \"claims\",\r\n // Consumer UTID\r\n CONSUMER_UTID: \"9188040d-6c67-4c5b-b112-36a304b66dad\",\r\n // Default scopes\r\n OPENID_SCOPE: \"openid\",\r\n PROFILE_SCOPE: \"profile\",\r\n OFFLINE_ACCESS_SCOPE: \"offline_access\",\r\n EMAIL_SCOPE: \"email\",\r\n // Default response type for authorization code flow\r\n CODE_RESPONSE_TYPE: \"code\",\r\n CODE_GRANT_TYPE: \"authorization_code\",\r\n RT_GRANT_TYPE: \"refresh_token\",\r\n FRAGMENT_RESPONSE_MODE: \"fragment\",\r\n S256_CODE_CHALLENGE_METHOD: \"S256\",\r\n URL_FORM_CONTENT_TYPE: \"application/x-www-form-urlencoded;charset=utf-8\",\r\n AUTHORIZATION_PENDING: \"authorization_pending\",\r\n NOT_DEFINED: \"not_defined\",\r\n EMPTY_STRING: \"\",\r\n NOT_APPLICABLE: \"N/A\",\r\n FORWARD_SLASH: \"/\",\r\n IMDS_ENDPOINT: \"http://169.254.169.254/metadata/instance/compute/location\",\r\n IMDS_VERSION: \"2020-06-01\",\r\n IMDS_TIMEOUT: 2000,\r\n AZURE_REGION_AUTO_DISCOVER_FLAG: \"TryAutoDetect\",\r\n REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX: \"login.microsoft.com\",\r\n REGIONAL_AUTH_NON_MSI_QUERY_STRING: \"allowestsrnonmsi=true\",\r\n KNOWN_PUBLIC_CLOUDS: [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"],\r\n TOKEN_RESPONSE_TYPE: \"token\",\r\n ID_TOKEN_RESPONSE_TYPE: \"id_token\",\r\n SHR_NONCE_VALIDITY: 240,\r\n INVALID_INSTANCE: \"invalid_instance\",\r\n};\r\nvar OIDC_DEFAULT_SCOPES = [\r\n Constants.OPENID_SCOPE,\r\n Constants.PROFILE_SCOPE,\r\n Constants.OFFLINE_ACCESS_SCOPE\r\n];\r\nvar OIDC_SCOPES = __spreadArrays(OIDC_DEFAULT_SCOPES, [\r\n Constants.EMAIL_SCOPE\r\n]);\r\n/**\r\n * Request header names\r\n */\r\nvar HeaderNames;\r\n(function (HeaderNames) {\r\n HeaderNames[\"CONTENT_TYPE\"] = \"Content-Type\";\r\n HeaderNames[\"RETRY_AFTER\"] = \"Retry-After\";\r\n HeaderNames[\"CCS_HEADER\"] = \"X-AnchorMailbox\";\r\n HeaderNames[\"WWWAuthenticate\"] = \"WWW-Authenticate\";\r\n HeaderNames[\"AuthenticationInfo\"] = \"Authentication-Info\";\r\n HeaderNames[\"X_MS_REQUEST_ID\"] = \"x-ms-request-id\";\r\n HeaderNames[\"X_MS_HTTP_VERSION\"] = \"x-ms-httpver\";\r\n})(HeaderNames || (HeaderNames = {}));\r\n/**\r\n * Persistent cache keys MSAL which stay while user is logged in.\r\n */\r\nvar PersistentCacheKeys;\r\n(function (PersistentCacheKeys) {\r\n PersistentCacheKeys[\"ID_TOKEN\"] = \"idtoken\";\r\n PersistentCacheKeys[\"CLIENT_INFO\"] = \"client.info\";\r\n PersistentCacheKeys[\"ADAL_ID_TOKEN\"] = \"adal.idtoken\";\r\n PersistentCacheKeys[\"ERROR\"] = \"error\";\r\n PersistentCacheKeys[\"ERROR_DESC\"] = \"error.description\";\r\n PersistentCacheKeys[\"ACTIVE_ACCOUNT\"] = \"active-account\";\r\n PersistentCacheKeys[\"ACTIVE_ACCOUNT_FILTERS\"] = \"active-account-filters\"; // new cache entry for active_account for a more robust version for browser\r\n})(PersistentCacheKeys || (PersistentCacheKeys = {}));\r\n/**\r\n * String constants related to AAD Authority\r\n */\r\nvar AADAuthorityConstants;\r\n(function (AADAuthorityConstants) {\r\n AADAuthorityConstants[\"COMMON\"] = \"common\";\r\n AADAuthorityConstants[\"ORGANIZATIONS\"] = \"organizations\";\r\n AADAuthorityConstants[\"CONSUMERS\"] = \"consumers\";\r\n})(AADAuthorityConstants || (AADAuthorityConstants = {}));\r\n/**\r\n * Keys in the hashParams sent by AAD Server\r\n */\r\nvar AADServerParamKeys;\r\n(function (AADServerParamKeys) {\r\n AADServerParamKeys[\"CLIENT_ID\"] = \"client_id\";\r\n AADServerParamKeys[\"REDIRECT_URI\"] = \"redirect_uri\";\r\n AADServerParamKeys[\"RESPONSE_TYPE\"] = \"response_type\";\r\n AADServerParamKeys[\"RESPONSE_MODE\"] = \"response_mode\";\r\n AADServerParamKeys[\"GRANT_TYPE\"] = \"grant_type\";\r\n AADServerParamKeys[\"CLAIMS\"] = \"claims\";\r\n AADServerParamKeys[\"SCOPE\"] = \"scope\";\r\n AADServerParamKeys[\"ERROR\"] = \"error\";\r\n AADServerParamKeys[\"ERROR_DESCRIPTION\"] = \"error_description\";\r\n AADServerParamKeys[\"ACCESS_TOKEN\"] = \"access_token\";\r\n AADServerParamKeys[\"ID_TOKEN\"] = \"id_token\";\r\n AADServerParamKeys[\"REFRESH_TOKEN\"] = \"refresh_token\";\r\n AADServerParamKeys[\"EXPIRES_IN\"] = \"expires_in\";\r\n AADServerParamKeys[\"STATE\"] = \"state\";\r\n AADServerParamKeys[\"NONCE\"] = \"nonce\";\r\n AADServerParamKeys[\"PROMPT\"] = \"prompt\";\r\n AADServerParamKeys[\"SESSION_STATE\"] = \"session_state\";\r\n AADServerParamKeys[\"CLIENT_INFO\"] = \"client_info\";\r\n AADServerParamKeys[\"CODE\"] = \"code\";\r\n AADServerParamKeys[\"CODE_CHALLENGE\"] = \"code_challenge\";\r\n AADServerParamKeys[\"CODE_CHALLENGE_METHOD\"] = \"code_challenge_method\";\r\n AADServerParamKeys[\"CODE_VERIFIER\"] = \"code_verifier\";\r\n AADServerParamKeys[\"CLIENT_REQUEST_ID\"] = \"client-request-id\";\r\n AADServerParamKeys[\"X_CLIENT_SKU\"] = \"x-client-SKU\";\r\n AADServerParamKeys[\"X_CLIENT_VER\"] = \"x-client-VER\";\r\n AADServerParamKeys[\"X_CLIENT_OS\"] = \"x-client-OS\";\r\n AADServerParamKeys[\"X_CLIENT_CPU\"] = \"x-client-CPU\";\r\n AADServerParamKeys[\"X_CLIENT_CURR_TELEM\"] = \"x-client-current-telemetry\";\r\n AADServerParamKeys[\"X_CLIENT_LAST_TELEM\"] = \"x-client-last-telemetry\";\r\n AADServerParamKeys[\"X_MS_LIB_CAPABILITY\"] = \"x-ms-lib-capability\";\r\n AADServerParamKeys[\"X_APP_NAME\"] = \"x-app-name\";\r\n AADServerParamKeys[\"X_APP_VER\"] = \"x-app-ver\";\r\n AADServerParamKeys[\"POST_LOGOUT_URI\"] = \"post_logout_redirect_uri\";\r\n AADServerParamKeys[\"ID_TOKEN_HINT\"] = \"id_token_hint\";\r\n AADServerParamKeys[\"DEVICE_CODE\"] = \"device_code\";\r\n AADServerParamKeys[\"CLIENT_SECRET\"] = \"client_secret\";\r\n AADServerParamKeys[\"CLIENT_ASSERTION\"] = \"client_assertion\";\r\n AADServerParamKeys[\"CLIENT_ASSERTION_TYPE\"] = \"client_assertion_type\";\r\n AADServerParamKeys[\"TOKEN_TYPE\"] = \"token_type\";\r\n AADServerParamKeys[\"REQ_CNF\"] = \"req_cnf\";\r\n AADServerParamKeys[\"OBO_ASSERTION\"] = \"assertion\";\r\n AADServerParamKeys[\"REQUESTED_TOKEN_USE\"] = \"requested_token_use\";\r\n AADServerParamKeys[\"ON_BEHALF_OF\"] = \"on_behalf_of\";\r\n AADServerParamKeys[\"FOCI\"] = \"foci\";\r\n AADServerParamKeys[\"CCS_HEADER\"] = \"X-AnchorMailbox\";\r\n AADServerParamKeys[\"RETURN_SPA_CODE\"] = \"return_spa_code\";\r\n AADServerParamKeys[\"NATIVE_BROKER\"] = \"nativebroker\";\r\n AADServerParamKeys[\"LOGOUT_HINT\"] = \"logout_hint\";\r\n})(AADServerParamKeys || (AADServerParamKeys = {}));\r\n/**\r\n * Claims request keys\r\n */\r\nvar ClaimsRequestKeys;\r\n(function (ClaimsRequestKeys) {\r\n ClaimsRequestKeys[\"ACCESS_TOKEN\"] = \"access_token\";\r\n ClaimsRequestKeys[\"XMS_CC\"] = \"xms_cc\";\r\n})(ClaimsRequestKeys || (ClaimsRequestKeys = {}));\r\n/**\r\n * we considered making this \"enum\" in the request instead of string, however it looks like the allowed list of\r\n * prompt values kept changing over past couple of years. There are some undocumented prompt values for some\r\n * internal partners too, hence the choice of generic \"string\" type instead of the \"enum\"\r\n */\r\nvar PromptValue = {\r\n LOGIN: \"login\",\r\n SELECT_ACCOUNT: \"select_account\",\r\n CONSENT: \"consent\",\r\n NONE: \"none\",\r\n CREATE: \"create\",\r\n NO_SESSION: \"no_session\"\r\n};\r\n/**\r\n * SSO Types - generated to populate hints\r\n */\r\nvar SSOTypes;\r\n(function (SSOTypes) {\r\n SSOTypes[\"ACCOUNT\"] = \"account\";\r\n SSOTypes[\"SID\"] = \"sid\";\r\n SSOTypes[\"LOGIN_HINT\"] = \"login_hint\";\r\n SSOTypes[\"ID_TOKEN\"] = \"id_token\";\r\n SSOTypes[\"DOMAIN_HINT\"] = \"domain_hint\";\r\n SSOTypes[\"ORGANIZATIONS\"] = \"organizations\";\r\n SSOTypes[\"CONSUMERS\"] = \"consumers\";\r\n SSOTypes[\"ACCOUNT_ID\"] = \"accountIdentifier\";\r\n SSOTypes[\"HOMEACCOUNT_ID\"] = \"homeAccountIdentifier\";\r\n})(SSOTypes || (SSOTypes = {}));\r\n/**\r\n * allowed values for codeVerifier\r\n */\r\nvar CodeChallengeMethodValues = {\r\n PLAIN: \"plain\",\r\n S256: \"S256\"\r\n};\r\n/**\r\n * allowed values for response_mode\r\n */\r\nvar ResponseMode;\r\n(function (ResponseMode) {\r\n ResponseMode[\"QUERY\"] = \"query\";\r\n ResponseMode[\"FRAGMENT\"] = \"fragment\";\r\n ResponseMode[\"FORM_POST\"] = \"form_post\";\r\n})(ResponseMode || (ResponseMode = {}));\r\n/**\r\n * allowed grant_type\r\n */\r\nvar GrantType;\r\n(function (GrantType) {\r\n GrantType[\"IMPLICIT_GRANT\"] = \"implicit\";\r\n GrantType[\"AUTHORIZATION_CODE_GRANT\"] = \"authorization_code\";\r\n GrantType[\"CLIENT_CREDENTIALS_GRANT\"] = \"client_credentials\";\r\n GrantType[\"RESOURCE_OWNER_PASSWORD_GRANT\"] = \"password\";\r\n GrantType[\"REFRESH_TOKEN_GRANT\"] = \"refresh_token\";\r\n GrantType[\"DEVICE_CODE_GRANT\"] = \"device_code\";\r\n GrantType[\"JWT_BEARER\"] = \"urn:ietf:params:oauth:grant-type:jwt-bearer\";\r\n})(GrantType || (GrantType = {}));\r\n/**\r\n * Account types in Cache\r\n */\r\nvar CacheAccountType;\r\n(function (CacheAccountType) {\r\n CacheAccountType[\"MSSTS_ACCOUNT_TYPE\"] = \"MSSTS\";\r\n CacheAccountType[\"ADFS_ACCOUNT_TYPE\"] = \"ADFS\";\r\n CacheAccountType[\"MSAV1_ACCOUNT_TYPE\"] = \"MSA\";\r\n CacheAccountType[\"GENERIC_ACCOUNT_TYPE\"] = \"Generic\"; // NTLM, Kerberos, FBA, Basic etc\r\n})(CacheAccountType || (CacheAccountType = {}));\r\n/**\r\n * Separators used in cache\r\n */\r\nvar Separators;\r\n(function (Separators) {\r\n Separators[\"CACHE_KEY_SEPARATOR\"] = \"-\";\r\n Separators[\"CLIENT_INFO_SEPARATOR\"] = \".\";\r\n})(Separators || (Separators = {}));\r\n/**\r\n * Credential Type stored in the cache\r\n */\r\nvar CredentialType;\r\n(function (CredentialType) {\r\n CredentialType[\"ID_TOKEN\"] = \"IdToken\";\r\n CredentialType[\"ACCESS_TOKEN\"] = \"AccessToken\";\r\n CredentialType[\"ACCESS_TOKEN_WITH_AUTH_SCHEME\"] = \"AccessToken_With_AuthScheme\";\r\n CredentialType[\"REFRESH_TOKEN\"] = \"RefreshToken\";\r\n})(CredentialType || (CredentialType = {}));\r\n/**\r\n * Combine all cache types\r\n */\r\nvar CacheType;\r\n(function (CacheType) {\r\n CacheType[CacheType[\"ADFS\"] = 1001] = \"ADFS\";\r\n CacheType[CacheType[\"MSA\"] = 1002] = \"MSA\";\r\n CacheType[CacheType[\"MSSTS\"] = 1003] = \"MSSTS\";\r\n CacheType[CacheType[\"GENERIC\"] = 1004] = \"GENERIC\";\r\n CacheType[CacheType[\"ACCESS_TOKEN\"] = 2001] = \"ACCESS_TOKEN\";\r\n CacheType[CacheType[\"REFRESH_TOKEN\"] = 2002] = \"REFRESH_TOKEN\";\r\n CacheType[CacheType[\"ID_TOKEN\"] = 2003] = \"ID_TOKEN\";\r\n CacheType[CacheType[\"APP_METADATA\"] = 3001] = \"APP_METADATA\";\r\n CacheType[CacheType[\"UNDEFINED\"] = 9999] = \"UNDEFINED\";\r\n})(CacheType || (CacheType = {}));\r\n/**\r\n * More Cache related constants\r\n */\r\nvar APP_METADATA = \"appmetadata\";\r\nvar CLIENT_INFO = \"client_info\";\r\nvar THE_FAMILY_ID = \"1\";\r\nvar AUTHORITY_METADATA_CONSTANTS = {\r\n CACHE_KEY: \"authority-metadata\",\r\n REFRESH_TIME_SECONDS: 3600 * 24 // 24 Hours\r\n};\r\nvar AuthorityMetadataSource;\r\n(function (AuthorityMetadataSource) {\r\n AuthorityMetadataSource[\"CONFIG\"] = \"config\";\r\n AuthorityMetadataSource[\"CACHE\"] = \"cache\";\r\n AuthorityMetadataSource[\"NETWORK\"] = \"network\";\r\n AuthorityMetadataSource[\"HARDCODED_VALUES\"] = \"hardcoded_values\";\r\n})(AuthorityMetadataSource || (AuthorityMetadataSource = {}));\r\nvar SERVER_TELEM_CONSTANTS = {\r\n SCHEMA_VERSION: 5,\r\n MAX_CUR_HEADER_BYTES: 80,\r\n MAX_LAST_HEADER_BYTES: 330,\r\n MAX_CACHED_ERRORS: 50,\r\n CACHE_KEY: \"server-telemetry\",\r\n CATEGORY_SEPARATOR: \"|\",\r\n VALUE_SEPARATOR: \",\",\r\n OVERFLOW_TRUE: \"1\",\r\n OVERFLOW_FALSE: \"0\",\r\n UNKNOWN_ERROR: \"unknown_error\"\r\n};\r\n/**\r\n * Type of the authentication request\r\n */\r\nvar AuthenticationScheme;\r\n(function (AuthenticationScheme) {\r\n AuthenticationScheme[\"BEARER\"] = \"Bearer\";\r\n AuthenticationScheme[\"POP\"] = \"pop\";\r\n AuthenticationScheme[\"SSH\"] = \"ssh-cert\";\r\n})(AuthenticationScheme || (AuthenticationScheme = {}));\r\n/**\r\n * Constants related to throttling\r\n */\r\nvar ThrottlingConstants = {\r\n // Default time to throttle RequestThumbprint in seconds\r\n DEFAULT_THROTTLE_TIME_SECONDS: 60,\r\n // Default maximum time to throttle in seconds, overrides what the server sends back\r\n DEFAULT_MAX_THROTTLE_TIME_SECONDS: 3600,\r\n // Prefix for storing throttling entries\r\n THROTTLING_PREFIX: \"throttling\",\r\n // Value assigned to the x-ms-lib-capability header to indicate to the server the library supports throttling\r\n X_MS_LIB_CAPABILITY_VALUE: \"retry-after, h429\"\r\n};\r\nvar Errors = {\r\n INVALID_GRANT_ERROR: \"invalid_grant\",\r\n CLIENT_MISMATCH_ERROR: \"client_mismatch\",\r\n};\r\n/**\r\n * Password grant parameters\r\n */\r\nvar PasswordGrantConstants;\r\n(function (PasswordGrantConstants) {\r\n PasswordGrantConstants[\"username\"] = \"username\";\r\n PasswordGrantConstants[\"password\"] = \"password\";\r\n})(PasswordGrantConstants || (PasswordGrantConstants = {}));\r\n/**\r\n * Response codes\r\n */\r\nvar ResponseCodes;\r\n(function (ResponseCodes) {\r\n ResponseCodes[ResponseCodes[\"httpSuccess\"] = 200] = \"httpSuccess\";\r\n ResponseCodes[ResponseCodes[\"httpBadRequest\"] = 400] = \"httpBadRequest\";\r\n})(ResponseCodes || (ResponseCodes = {}));\r\n/**\r\n * Region Discovery Sources\r\n */\r\nvar RegionDiscoverySources;\r\n(function (RegionDiscoverySources) {\r\n RegionDiscoverySources[\"FAILED_AUTO_DETECTION\"] = \"1\";\r\n RegionDiscoverySources[\"INTERNAL_CACHE\"] = \"2\";\r\n RegionDiscoverySources[\"ENVIRONMENT_VARIABLE\"] = \"3\";\r\n RegionDiscoverySources[\"IMDS\"] = \"4\";\r\n})(RegionDiscoverySources || (RegionDiscoverySources = {}));\r\n/**\r\n * Region Discovery Outcomes\r\n */\r\nvar RegionDiscoveryOutcomes;\r\n(function (RegionDiscoveryOutcomes) {\r\n RegionDiscoveryOutcomes[\"CONFIGURED_MATCHES_DETECTED\"] = \"1\";\r\n RegionDiscoveryOutcomes[\"CONFIGURED_NO_AUTO_DETECTION\"] = \"2\";\r\n RegionDiscoveryOutcomes[\"CONFIGURED_NOT_DETECTED\"] = \"3\";\r\n RegionDiscoveryOutcomes[\"AUTO_DETECTION_REQUESTED_SUCCESSFUL\"] = \"4\";\r\n RegionDiscoveryOutcomes[\"AUTO_DETECTION_REQUESTED_FAILED\"] = \"5\";\r\n})(RegionDiscoveryOutcomes || (RegionDiscoveryOutcomes = {}));\r\nvar CacheOutcome;\r\n(function (CacheOutcome) {\r\n CacheOutcome[\"NO_CACHE_HIT\"] = \"0\";\r\n CacheOutcome[\"FORCE_REFRESH\"] = \"1\";\r\n CacheOutcome[\"NO_CACHED_ACCESS_TOKEN\"] = \"2\";\r\n CacheOutcome[\"CACHED_ACCESS_TOKEN_EXPIRED\"] = \"3\";\r\n CacheOutcome[\"REFRESH_CACHED_ACCESS_TOKEN\"] = \"4\";\r\n CacheOutcome[\"CLAIMS_REQUESTED_CACHE_SKIPPED\"] = \"5\";\r\n})(CacheOutcome || (CacheOutcome = {}));\r\nvar JsonTypes;\r\n(function (JsonTypes) {\r\n JsonTypes[\"Jwt\"] = \"JWT\";\r\n JsonTypes[\"Jwk\"] = \"JWK\";\r\n JsonTypes[\"Pop\"] = \"pop\";\r\n})(JsonTypes || (JsonTypes = {}));\r\nvar ONE_DAY_IN_MS = 86400000;\n\nexport { AADAuthorityConstants, AADServerParamKeys, APP_METADATA, AUTHORITY_METADATA_CONSTANTS, AuthenticationScheme, AuthorityMetadataSource, CLIENT_INFO, CacheAccountType, CacheOutcome, CacheType, ClaimsRequestKeys, CodeChallengeMethodValues, Constants, CredentialType, Errors, GrantType, HeaderNames, JsonTypes, OIDC_DEFAULT_SCOPES, OIDC_SCOPES, ONE_DAY_IN_MS, PasswordGrantConstants, PersistentCacheKeys, PromptValue, RegionDiscoveryOutcomes, RegionDiscoverySources, ResponseCodes, ResponseMode, SERVER_TELEM_CONSTANTS, SSOTypes, Separators, THE_FAMILY_ID, ThrottlingConstants };\n//# sourceMappingURL=Constants.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { OIDC_DEFAULT_SCOPES } from '@azure/msal-common';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Constants\r\n */\r\nvar BrowserConstants = {\r\n /**\r\n * Interaction in progress cache value\r\n */\r\n INTERACTION_IN_PROGRESS_VALUE: \"interaction_in_progress\",\r\n /**\r\n * Invalid grant error code\r\n */\r\n INVALID_GRANT_ERROR: \"invalid_grant\",\r\n /**\r\n * Default popup window width\r\n */\r\n POPUP_WIDTH: 483,\r\n /**\r\n * Default popup window height\r\n */\r\n POPUP_HEIGHT: 600,\r\n /**\r\n * Name of the popup window starts with\r\n */\r\n POPUP_NAME_PREFIX: \"msal\",\r\n /**\r\n * Default popup monitor poll interval in milliseconds\r\n */\r\n DEFAULT_POLL_INTERVAL_MS: 30,\r\n /**\r\n * Msal-browser SKU\r\n */\r\n MSAL_SKU: \"msal.js.browser\",\r\n};\r\nvar NativeConstants = {\r\n CHANNEL_ID: \"53ee284d-920a-4b59-9d30-a60315b26836\",\r\n PREFERRED_EXTENSION_ID: \"ppnbnpeolgkicgegkbkbjmhlideopiji\",\r\n MATS_TELEMETRY: \"MATS\"\r\n};\r\nvar NativeExtensionMethod;\r\n(function (NativeExtensionMethod) {\r\n NativeExtensionMethod[\"HandshakeRequest\"] = \"Handshake\";\r\n NativeExtensionMethod[\"HandshakeResponse\"] = \"HandshakeResponse\";\r\n NativeExtensionMethod[\"GetToken\"] = \"GetToken\";\r\n NativeExtensionMethod[\"Response\"] = \"Response\";\r\n})(NativeExtensionMethod || (NativeExtensionMethod = {}));\r\nvar BrowserCacheLocation;\r\n(function (BrowserCacheLocation) {\r\n BrowserCacheLocation[\"LocalStorage\"] = \"localStorage\";\r\n BrowserCacheLocation[\"SessionStorage\"] = \"sessionStorage\";\r\n BrowserCacheLocation[\"MemoryStorage\"] = \"memoryStorage\";\r\n})(BrowserCacheLocation || (BrowserCacheLocation = {}));\r\n/**\r\n * HTTP Request types supported by MSAL.\r\n */\r\nvar HTTP_REQUEST_TYPE;\r\n(function (HTTP_REQUEST_TYPE) {\r\n HTTP_REQUEST_TYPE[\"GET\"] = \"GET\";\r\n HTTP_REQUEST_TYPE[\"POST\"] = \"POST\";\r\n})(HTTP_REQUEST_TYPE || (HTTP_REQUEST_TYPE = {}));\r\n/**\r\n * Temporary cache keys for MSAL, deleted after any request.\r\n */\r\nvar TemporaryCacheKeys;\r\n(function (TemporaryCacheKeys) {\r\n TemporaryCacheKeys[\"AUTHORITY\"] = \"authority\";\r\n TemporaryCacheKeys[\"ACQUIRE_TOKEN_ACCOUNT\"] = \"acquireToken.account\";\r\n TemporaryCacheKeys[\"SESSION_STATE\"] = \"session.state\";\r\n TemporaryCacheKeys[\"REQUEST_STATE\"] = \"request.state\";\r\n TemporaryCacheKeys[\"NONCE_IDTOKEN\"] = \"nonce.id_token\";\r\n TemporaryCacheKeys[\"ORIGIN_URI\"] = \"request.origin\";\r\n TemporaryCacheKeys[\"RENEW_STATUS\"] = \"token.renew.status\";\r\n TemporaryCacheKeys[\"URL_HASH\"] = \"urlHash\";\r\n TemporaryCacheKeys[\"REQUEST_PARAMS\"] = \"request.params\";\r\n TemporaryCacheKeys[\"SCOPES\"] = \"scopes\";\r\n TemporaryCacheKeys[\"INTERACTION_STATUS_KEY\"] = \"interaction.status\";\r\n TemporaryCacheKeys[\"CCS_CREDENTIAL\"] = \"ccs.credential\";\r\n TemporaryCacheKeys[\"CORRELATION_ID\"] = \"request.correlationId\";\r\n TemporaryCacheKeys[\"NATIVE_REQUEST\"] = \"request.native\";\r\n TemporaryCacheKeys[\"REDIRECT_CONTEXT\"] = \"request.redirect.context\";\r\n})(TemporaryCacheKeys || (TemporaryCacheKeys = {}));\r\nvar StaticCacheKeys;\r\n(function (StaticCacheKeys) {\r\n StaticCacheKeys[\"ACCOUNT_KEYS\"] = \"msal.account.keys\";\r\n StaticCacheKeys[\"TOKEN_KEYS\"] = \"msal.token.keys\";\r\n})(StaticCacheKeys || (StaticCacheKeys = {}));\r\n/**\r\n * Cache keys stored in-memory\r\n */\r\nvar InMemoryCacheKeys;\r\n(function (InMemoryCacheKeys) {\r\n InMemoryCacheKeys[\"WRAPPER_SKU\"] = \"wrapper.sku\";\r\n InMemoryCacheKeys[\"WRAPPER_VER\"] = \"wrapper.version\";\r\n})(InMemoryCacheKeys || (InMemoryCacheKeys = {}));\r\n/**\r\n * API Codes for Telemetry purposes.\r\n * Before adding a new code you must claim it in the MSAL Telemetry tracker as these number spaces are shared across all MSALs\r\n * 0-99 Silent Flow\r\n * 800-899 Auth Code Flow\r\n */\r\nvar ApiId;\r\n(function (ApiId) {\r\n ApiId[ApiId[\"acquireTokenRedirect\"] = 861] = \"acquireTokenRedirect\";\r\n ApiId[ApiId[\"acquireTokenPopup\"] = 862] = \"acquireTokenPopup\";\r\n ApiId[ApiId[\"ssoSilent\"] = 863] = \"ssoSilent\";\r\n ApiId[ApiId[\"acquireTokenSilent_authCode\"] = 864] = \"acquireTokenSilent_authCode\";\r\n ApiId[ApiId[\"handleRedirectPromise\"] = 865] = \"handleRedirectPromise\";\r\n ApiId[ApiId[\"acquireTokenByCode\"] = 866] = \"acquireTokenByCode\";\r\n ApiId[ApiId[\"acquireTokenSilent_silentFlow\"] = 61] = \"acquireTokenSilent_silentFlow\";\r\n ApiId[ApiId[\"logout\"] = 961] = \"logout\";\r\n ApiId[ApiId[\"logoutPopup\"] = 962] = \"logoutPopup\";\r\n})(ApiId || (ApiId = {}));\r\n/*\r\n * Interaction type of the API - used for state and telemetry\r\n */\r\nvar InteractionType;\r\n(function (InteractionType) {\r\n InteractionType[\"Redirect\"] = \"redirect\";\r\n InteractionType[\"Popup\"] = \"popup\";\r\n InteractionType[\"Silent\"] = \"silent\";\r\n InteractionType[\"None\"] = \"none\";\r\n})(InteractionType || (InteractionType = {}));\r\n/**\r\n * Types of interaction currently in progress.\r\n * Used in events in wrapper libraries to invoke functions when certain interaction is in progress or all interactions are complete.\r\n */\r\nvar InteractionStatus;\r\n(function (InteractionStatus) {\r\n /**\r\n * Initial status before interaction occurs\r\n */\r\n InteractionStatus[\"Startup\"] = \"startup\";\r\n /**\r\n * Status set when all login calls occuring\r\n */\r\n InteractionStatus[\"Login\"] = \"login\";\r\n /**\r\n * Status set when logout call occuring\r\n */\r\n InteractionStatus[\"Logout\"] = \"logout\";\r\n /**\r\n * Status set for acquireToken calls\r\n */\r\n InteractionStatus[\"AcquireToken\"] = \"acquireToken\";\r\n /**\r\n * Status set for ssoSilent calls\r\n */\r\n InteractionStatus[\"SsoSilent\"] = \"ssoSilent\";\r\n /**\r\n * Status set when handleRedirect in progress\r\n */\r\n InteractionStatus[\"HandleRedirect\"] = \"handleRedirect\";\r\n /**\r\n * Status set when interaction is complete\r\n */\r\n InteractionStatus[\"None\"] = \"none\";\r\n})(InteractionStatus || (InteractionStatus = {}));\r\nvar DEFAULT_REQUEST = {\r\n scopes: OIDC_DEFAULT_SCOPES\r\n};\r\n/**\r\n * JWK Key Format string (Type MUST be defined for window crypto APIs)\r\n */\r\nvar KEY_FORMAT_JWK = \"jwk\";\r\n// Supported wrapper SKUs\r\nvar WrapperSKU;\r\n(function (WrapperSKU) {\r\n WrapperSKU[\"React\"] = \"@azure/msal-react\";\r\n WrapperSKU[\"Angular\"] = \"@azure/msal-angular\";\r\n})(WrapperSKU || (WrapperSKU = {}));\r\n// DatabaseStorage Constants\r\nvar DB_NAME = \"msal.db\";\r\nvar DB_VERSION = 1;\r\nvar DB_TABLE_NAME = DB_NAME + \".keys\";\r\nvar CacheLookupPolicy;\r\n(function (CacheLookupPolicy) {\r\n /*\r\n * acquireTokenSilent will attempt to retrieve an access token from the cache. If the access token is expired\r\n * or cannot be found the refresh token will be used to acquire a new one. Finally, if the refresh token\r\n * is expired acquireTokenSilent will attempt to acquire new access and refresh tokens.\r\n */\r\n CacheLookupPolicy[CacheLookupPolicy[\"Default\"] = 0] = \"Default\";\r\n /*\r\n * acquireTokenSilent will only look for access tokens in the cache. It will not attempt to renew access or\r\n * refresh tokens.\r\n */\r\n CacheLookupPolicy[CacheLookupPolicy[\"AccessToken\"] = 1] = \"AccessToken\";\r\n /*\r\n * acquireTokenSilent will attempt to retrieve an access token from the cache. If the access token is expired or\r\n * cannot be found, the refresh token will be used to acquire a new one. If the refresh token is expired, it\r\n * will not be renewed and acquireTokenSilent will fail.\r\n */\r\n CacheLookupPolicy[CacheLookupPolicy[\"AccessTokenAndRefreshToken\"] = 2] = \"AccessTokenAndRefreshToken\";\r\n /*\r\n * acquireTokenSilent will not attempt to retrieve access tokens from the cache and will instead attempt to\r\n * exchange the cached refresh token for a new access token. If the refresh token is expired, it will not be\r\n * renewed and acquireTokenSilent will fail.\r\n */\r\n CacheLookupPolicy[CacheLookupPolicy[\"RefreshToken\"] = 3] = \"RefreshToken\";\r\n /*\r\n * acquireTokenSilent will not look in the cache for the access token. It will go directly to network with the\r\n * cached refresh token. If the refresh token is expired an attempt will be made to renew it. This is equivalent to\r\n * setting \"forceRefresh: true\".\r\n */\r\n CacheLookupPolicy[CacheLookupPolicy[\"RefreshTokenAndNetwork\"] = 4] = \"RefreshTokenAndNetwork\";\r\n /*\r\n * acquireTokenSilent will attempt to renew both access and refresh tokens. It will not look in the cache. This will\r\n * always fail if 3rd party cookies are blocked by the browser.\r\n */\r\n CacheLookupPolicy[CacheLookupPolicy[\"Skip\"] = 5] = \"Skip\";\r\n})(CacheLookupPolicy || (CacheLookupPolicy = {}));\n\nexport { ApiId, BrowserCacheLocation, BrowserConstants, CacheLookupPolicy, DB_NAME, DB_TABLE_NAME, DB_VERSION, DEFAULT_REQUEST, HTTP_REQUEST_TYPE, InMemoryCacheKeys, InteractionStatus, InteractionType, KEY_FORMAT_JWK, NativeConstants, NativeExtensionMethod, StaticCacheKeys, TemporaryCacheKeys, WrapperSKU };\n//# sourceMappingURL=BrowserConstants.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { Constants } from '../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * AuthErrorMessage class containing string constants used by error codes and messages.\r\n */\r\nvar AuthErrorMessage = {\r\n unexpectedError: {\r\n code: \"unexpected_error\",\r\n desc: \"Unexpected error in authentication.\"\r\n },\r\n postRequestFailed: {\r\n code: \"post_request_failed\",\r\n desc: \"Post request failed from the network, could be a 4xx/5xx or a network unavailability. Please check the exact error code for details.\"\r\n }\r\n};\r\n/**\r\n * General error class thrown by the MSAL.js library.\r\n */\r\nvar AuthError = /** @class */ (function (_super) {\r\n __extends(AuthError, _super);\r\n function AuthError(errorCode, errorMessage, suberror) {\r\n var _this = this;\r\n var errorString = errorMessage ? errorCode + \": \" + errorMessage : errorCode;\r\n _this = _super.call(this, errorString) || this;\r\n Object.setPrototypeOf(_this, AuthError.prototype);\r\n _this.errorCode = errorCode || Constants.EMPTY_STRING;\r\n _this.errorMessage = errorMessage || Constants.EMPTY_STRING;\r\n _this.subError = suberror || Constants.EMPTY_STRING;\r\n _this.name = \"AuthError\";\r\n return _this;\r\n }\r\n AuthError.prototype.setCorrelationId = function (correlationId) {\r\n this.correlationId = correlationId;\r\n };\r\n /**\r\n * Creates an error that is thrown when something unexpected happens in the library.\r\n * @param errDesc\r\n */\r\n AuthError.createUnexpectedError = function (errDesc) {\r\n return new AuthError(AuthErrorMessage.unexpectedError.code, AuthErrorMessage.unexpectedError.desc + \": \" + errDesc);\r\n };\r\n /**\r\n * Creates an error for post request failures.\r\n * @param errDesc\r\n * @returns\r\n */\r\n AuthError.createPostRequestFailed = function (errDesc) {\r\n return new AuthError(AuthErrorMessage.postRequestFailed.code, AuthErrorMessage.postRequestFailed.desc + \": \" + errDesc);\r\n };\r\n return AuthError;\r\n}(Error));\n\nexport { AuthError, AuthErrorMessage };\n//# sourceMappingURL=AuthError.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { AuthError } from './AuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Error thrown when there is an error with the server code, for example, unavailability.\r\n */\r\nvar ServerError = /** @class */ (function (_super) {\r\n __extends(ServerError, _super);\r\n function ServerError(errorCode, errorMessage, subError) {\r\n var _this = _super.call(this, errorCode, errorMessage, subError) || this;\r\n _this.name = \"ServerError\";\r\n Object.setPrototypeOf(_this, ServerError.prototype);\r\n return _this;\r\n }\r\n return ServerError;\r\n}(AuthError));\n\nexport { ServerError };\n//# sourceMappingURL=ServerError.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { Constants } from '../utils/Constants.js';\nimport { AuthError } from './AuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * InteractionRequiredServerErrorMessage contains string constants used by error codes and messages returned by the server indicating interaction is required\r\n */\r\nvar InteractionRequiredServerErrorMessage = [\r\n \"interaction_required\",\r\n \"consent_required\",\r\n \"login_required\"\r\n];\r\nvar InteractionRequiredAuthSubErrorMessage = [\r\n \"message_only\",\r\n \"additional_action\",\r\n \"basic_action\",\r\n \"user_password_expired\",\r\n \"consent_required\"\r\n];\r\n/**\r\n * Interaction required errors defined by the SDK\r\n */\r\nvar InteractionRequiredAuthErrorMessage = {\r\n noTokensFoundError: {\r\n code: \"no_tokens_found\",\r\n desc: \"No refresh token found in the cache. Please sign-in.\"\r\n },\r\n native_account_unavailable: {\r\n code: \"native_account_unavailable\",\r\n desc: \"The requested account is not available in the native broker. It may have been deleted or logged out. Please sign-in again using an interactive API.\"\r\n }\r\n};\r\n/**\r\n * Error thrown when user interaction is required.\r\n */\r\nvar InteractionRequiredAuthError = /** @class */ (function (_super) {\r\n __extends(InteractionRequiredAuthError, _super);\r\n function InteractionRequiredAuthError(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims) {\r\n var _this = _super.call(this, errorCode, errorMessage, subError) || this;\r\n Object.setPrototypeOf(_this, InteractionRequiredAuthError.prototype);\r\n _this.timestamp = timestamp || Constants.EMPTY_STRING;\r\n _this.traceId = traceId || Constants.EMPTY_STRING;\r\n _this.correlationId = correlationId || Constants.EMPTY_STRING;\r\n _this.claims = claims || Constants.EMPTY_STRING;\r\n _this.name = \"InteractionRequiredAuthError\";\r\n return _this;\r\n }\r\n /**\r\n * Helper function used to determine if an error thrown by the server requires interaction to resolve\r\n * @param errorCode\r\n * @param errorString\r\n * @param subError\r\n */\r\n InteractionRequiredAuthError.isInteractionRequiredError = function (errorCode, errorString, subError) {\r\n var isInteractionRequiredErrorCode = !!errorCode && InteractionRequiredServerErrorMessage.indexOf(errorCode) > -1;\r\n var isInteractionRequiredSubError = !!subError && InteractionRequiredAuthSubErrorMessage.indexOf(subError) > -1;\r\n var isInteractionRequiredErrorDesc = !!errorString && InteractionRequiredServerErrorMessage.some(function (irErrorCode) {\r\n return errorString.indexOf(irErrorCode) > -1;\r\n });\r\n return isInteractionRequiredErrorCode || isInteractionRequiredErrorDesc || isInteractionRequiredSubError;\r\n };\r\n /**\r\n * Creates an error thrown when the authorization code required for a token request is null or empty.\r\n */\r\n InteractionRequiredAuthError.createNoTokensFoundError = function () {\r\n return new InteractionRequiredAuthError(InteractionRequiredAuthErrorMessage.noTokensFoundError.code, InteractionRequiredAuthErrorMessage.noTokensFoundError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the native broker returns ACCOUNT_UNAVAILABLE status, indicating that the account was removed and interactive sign-in is required\r\n * @returns\r\n */\r\n InteractionRequiredAuthError.createNativeAccountUnavailableError = function () {\r\n return new InteractionRequiredAuthError(InteractionRequiredAuthErrorMessage.native_account_unavailable.code, InteractionRequiredAuthErrorMessage.native_account_unavailable.desc);\r\n };\r\n return InteractionRequiredAuthError;\r\n}(AuthError));\n\nexport { InteractionRequiredAuthError, InteractionRequiredAuthErrorMessage, InteractionRequiredAuthSubErrorMessage, InteractionRequiredServerErrorMessage };\n//# sourceMappingURL=InteractionRequiredAuthError.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { AuthError } from './AuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * ClientAuthErrorMessage class containing string constants used by error codes and messages.\r\n */\r\nvar JoseHeaderErrorMessage = {\r\n missingKidError: {\r\n code: \"missing_kid_error\",\r\n desc: \"The JOSE Header for the requested JWT, JWS or JWK object requires a keyId to be configured as the 'kid' header claim. No 'kid' value was provided.\"\r\n },\r\n missingAlgError: {\r\n code: \"missing_alg_error\",\r\n desc: \"The JOSE Header for the requested JWT, JWS or JWK object requires an algorithm to be specified as the 'alg' header claim. No 'alg' value was provided.\"\r\n },\r\n};\r\n/**\r\n * Error thrown when there is an error in the client code running on the browser.\r\n */\r\nvar JoseHeaderError = /** @class */ (function (_super) {\r\n __extends(JoseHeaderError, _super);\r\n function JoseHeaderError(errorCode, errorMessage) {\r\n var _this = _super.call(this, errorCode, errorMessage) || this;\r\n _this.name = \"JoseHeaderError\";\r\n Object.setPrototypeOf(_this, JoseHeaderError.prototype);\r\n return _this;\r\n }\r\n /**\r\n * Creates an error thrown when keyId isn't set on JOSE header.\r\n */\r\n JoseHeaderError.createMissingKidError = function () {\r\n return new JoseHeaderError(JoseHeaderErrorMessage.missingKidError.code, JoseHeaderErrorMessage.missingKidError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when algorithm isn't set on JOSE header.\r\n */\r\n JoseHeaderError.createMissingAlgError = function () {\r\n return new JoseHeaderError(JoseHeaderErrorMessage.missingAlgError.code, JoseHeaderErrorMessage.missingAlgError.desc);\r\n };\r\n return JoseHeaderError;\r\n}(AuthError));\n\nexport { JoseHeaderError, JoseHeaderErrorMessage };\n//# sourceMappingURL=JoseHeaderError.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { AsyncMemoryStorage } from './AsyncMemoryStorage.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar CryptoKeyStoreNames;\r\n(function (CryptoKeyStoreNames) {\r\n CryptoKeyStoreNames[\"asymmetricKeys\"] = \"asymmetricKeys\";\r\n CryptoKeyStoreNames[\"symmetricKeys\"] = \"symmetricKeys\";\r\n})(CryptoKeyStoreNames || (CryptoKeyStoreNames = {}));\r\n/**\r\n * MSAL CryptoKeyStore DB Version 2\r\n */\r\nvar CryptoKeyStore = /** @class */ (function () {\r\n function CryptoKeyStore(logger) {\r\n this.logger = logger;\r\n this.asymmetricKeys = new AsyncMemoryStorage(this.logger, CryptoKeyStoreNames.asymmetricKeys);\r\n this.symmetricKeys = new AsyncMemoryStorage(this.logger, CryptoKeyStoreNames.symmetricKeys);\r\n }\r\n CryptoKeyStore.prototype.clear = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var e_1;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n // Delete in-memory keystores\r\n this.asymmetricKeys.clearInMemory();\r\n this.symmetricKeys.clearInMemory();\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.asymmetricKeys.clearPersistent()];\r\n case 2:\r\n _a.sent();\r\n return [2 /*return*/, true];\r\n case 3:\r\n e_1 = _a.sent();\r\n if (e_1 instanceof Error) {\r\n this.logger.error(\"Clearing keystore failed with error: \" + e_1.message);\r\n }\r\n else {\r\n this.logger.error(\"Clearing keystore failed with unknown error\");\r\n }\r\n return [2 /*return*/, false];\r\n case 4: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n return CryptoKeyStore;\r\n}());\n\nexport { CryptoKeyStore, CryptoKeyStoreNames };\n//# sourceMappingURL=CryptoKeyStore.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { JoseHeaderError } from '../error/JoseHeaderError.js';\nimport { JsonTypes } from '../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar JoseHeader = /** @class */ (function () {\r\n function JoseHeader(options) {\r\n this.typ = options.typ;\r\n this.alg = options.alg;\r\n this.kid = options.kid;\r\n }\r\n /**\r\n * Builds SignedHttpRequest formatted JOSE Header from the\r\n * JOSE Header options provided or previously set on the object and returns\r\n * the stringified header object.\r\n * Throws if keyId or algorithm aren't provided since they are required for Access Token Binding.\r\n * @param shrHeaderOptions\r\n * @returns\r\n */\r\n JoseHeader.getShrHeaderString = function (shrHeaderOptions) {\r\n // KeyID is required on the SHR header\r\n if (!shrHeaderOptions.kid) {\r\n throw JoseHeaderError.createMissingKidError();\r\n }\r\n // Alg is required on the SHR header\r\n if (!shrHeaderOptions.alg) {\r\n throw JoseHeaderError.createMissingAlgError();\r\n }\r\n var shrHeader = new JoseHeader({\r\n // Access Token PoP headers must have type pop, but the type header can be overriden for special cases\r\n typ: shrHeaderOptions.typ || JsonTypes.Pop,\r\n kid: shrHeaderOptions.kid,\r\n alg: shrHeaderOptions.alg\r\n });\r\n return JSON.stringify(shrHeader);\r\n };\r\n return JoseHeader;\r\n}());\n\nexport { JoseHeader };\n//# sourceMappingURL=JoseHeader.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Utility class for math specific functions in browser.\r\n */\r\nvar MathUtils = /** @class */ (function () {\r\n function MathUtils() {\r\n }\r\n /**\r\n * Decimal to Hex\r\n *\r\n * @param num\r\n */\r\n MathUtils.decimalToHex = function (num) {\r\n var hex = num.toString(16);\r\n while (hex.length < 2) {\r\n hex = \"0\" + hex;\r\n }\r\n return hex;\r\n };\r\n return MathUtils;\r\n}());\n\nexport { MathUtils };\n//# sourceMappingURL=MathUtils.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { Constants } from '@azure/msal-common';\nimport { MathUtils } from '../utils/MathUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar GuidGenerator = /** @class */ (function () {\r\n function GuidGenerator(cryptoObj) {\r\n this.cryptoObj = cryptoObj;\r\n }\r\n /*\r\n * RFC4122: The version 4 UUID is meant for generating UUIDs from truly-random or\r\n * pseudo-random numbers.\r\n * The algorithm is as follows:\r\n * Set the two most significant bits (bits 6 and 7) of the\r\n * clock_seq_hi_and_reserved to zero and one, respectively.\r\n * Set the four most significant bits (bits 12 through 15) of the\r\n * time_hi_and_version field to the 4-bit version number from\r\n * Section 4.1.3. Version4\r\n * Set all the other bits to randomly (or pseudo-randomly) chosen\r\n * values.\r\n * UUID = time-low \"-\" time-mid \"-\"time-high-and-version \"-\"clock-seq-reserved and low(2hexOctet)\"-\" node\r\n * time-low = 4hexOctet\r\n * time-mid = 2hexOctet\r\n * time-high-and-version = 2hexOctet\r\n * clock-seq-and-reserved = hexOctet:\r\n * clock-seq-low = hexOctet\r\n * node = 6hexOctet\r\n * Format: xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\r\n * y could be 1000, 1001, 1010, 1011 since most significant two bits needs to be 10\r\n * y values are 8, 9, A, B\r\n */\r\n GuidGenerator.prototype.generateGuid = function () {\r\n try {\r\n var buffer = new Uint8Array(16);\r\n this.cryptoObj.getRandomValues(buffer);\r\n // buffer[6] and buffer[7] represents the time_hi_and_version field. We will set the four most significant bits (4 through 7) of buffer[6] to represent decimal number 4 (UUID version number).\r\n buffer[6] |= 0x40; // buffer[6] | 01000000 will set the 6 bit to 1.\r\n buffer[6] &= 0x4f; // buffer[6] & 01001111 will set the 4, 5, and 7 bit to 0 such that bits 4-7 == 0100 = \"4\".\r\n // buffer[8] represents the clock_seq_hi_and_reserved field. We will set the two most significant bits (6 and 7) of the clock_seq_hi_and_reserved to zero and one, respectively.\r\n buffer[8] |= 0x80; // buffer[8] | 10000000 will set the 7 bit to 1.\r\n buffer[8] &= 0xbf; // buffer[8] & 10111111 will set the 6 bit to 0.\r\n return MathUtils.decimalToHex(buffer[0]) + MathUtils.decimalToHex(buffer[1])\r\n + MathUtils.decimalToHex(buffer[2]) + MathUtils.decimalToHex(buffer[3])\r\n + \"-\" + MathUtils.decimalToHex(buffer[4]) + MathUtils.decimalToHex(buffer[5])\r\n + \"-\" + MathUtils.decimalToHex(buffer[6]) + MathUtils.decimalToHex(buffer[7])\r\n + \"-\" + MathUtils.decimalToHex(buffer[8]) + MathUtils.decimalToHex(buffer[9])\r\n + \"-\" + MathUtils.decimalToHex(buffer[10]) + MathUtils.decimalToHex(buffer[11])\r\n + MathUtils.decimalToHex(buffer[12]) + MathUtils.decimalToHex(buffer[13])\r\n + MathUtils.decimalToHex(buffer[14]) + MathUtils.decimalToHex(buffer[15]);\r\n }\r\n catch (err) {\r\n var guidHolder = \"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx\";\r\n var hex = \"0123456789abcdef\";\r\n var r = 0;\r\n var guidResponse = Constants.EMPTY_STRING;\r\n for (var i = 0; i < 36; i++) {\r\n if (guidHolder[i] !== \"-\" && guidHolder[i] !== \"4\") {\r\n // each x and y needs to be random\r\n r = Math.random() * 16 | 0;\r\n }\r\n if (guidHolder[i] === \"x\") {\r\n guidResponse += hex[r];\r\n }\r\n else if (guidHolder[i] === \"y\") {\r\n // clock-seq-and-reserved first hex is filtered and remaining hex values are random\r\n r &= 0x3; // bit and with 0011 to set pos 2 to zero ?0??\r\n r |= 0x8; // set pos 3 to 1 as 1???\r\n guidResponse += hex[r];\r\n }\r\n else {\r\n guidResponse += guidHolder[i];\r\n }\r\n }\r\n return guidResponse;\r\n }\r\n };\r\n /**\r\n * verifies if a string is GUID\r\n * @param guid\r\n */\r\n GuidGenerator.prototype.isGuid = function (guid) {\r\n var regexGuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\r\n return regexGuid.test(guid);\r\n };\r\n return GuidGenerator;\r\n}());\n\nexport { GuidGenerator };\n//# sourceMappingURL=GuidGenerator.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { Constants } from '@azure/msal-common';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Utility functions for strings in a browser. See here for implementation details:\r\n * https://developer.mozilla.org/en-US/docs/Web/API/WindowBase64/Base64_encoding_and_decoding#Solution_2_%E2%80%93_JavaScript's_UTF-16_%3E_UTF-8_%3E_base64\r\n */\r\nvar BrowserStringUtils = /** @class */ (function () {\r\n function BrowserStringUtils() {\r\n }\r\n /**\r\n * Converts string to Uint8Array\r\n * @param sDOMStr\r\n */\r\n BrowserStringUtils.stringToUtf8Arr = function (sDOMStr) {\r\n var nChr;\r\n var nArrLen = 0;\r\n var nStrLen = sDOMStr.length;\r\n /* mapping... */\r\n for (var nMapIdx = 0; nMapIdx < nStrLen; nMapIdx++) {\r\n nChr = sDOMStr.charCodeAt(nMapIdx);\r\n nArrLen += nChr < 0x80 ? 1 : nChr < 0x800 ? 2 : nChr < 0x10000 ? 3 : nChr < 0x200000 ? 4 : nChr < 0x4000000 ? 5 : 6;\r\n }\r\n var aBytes = new Uint8Array(nArrLen);\r\n /* transcription... */\r\n for (var nIdx = 0, nChrIdx = 0; nIdx < nArrLen; nChrIdx++) {\r\n nChr = sDOMStr.charCodeAt(nChrIdx);\r\n if (nChr < 128) {\r\n /* one byte */\r\n aBytes[nIdx++] = nChr;\r\n }\r\n else if (nChr < 0x800) {\r\n /* two bytes */\r\n aBytes[nIdx++] = 192 + (nChr >>> 6);\r\n aBytes[nIdx++] = 128 + (nChr & 63);\r\n }\r\n else if (nChr < 0x10000) {\r\n /* three bytes */\r\n aBytes[nIdx++] = 224 + (nChr >>> 12);\r\n aBytes[nIdx++] = 128 + (nChr >>> 6 & 63);\r\n aBytes[nIdx++] = 128 + (nChr & 63);\r\n }\r\n else if (nChr < 0x200000) {\r\n /* four bytes */\r\n aBytes[nIdx++] = 240 + (nChr >>> 18);\r\n aBytes[nIdx++] = 128 + (nChr >>> 12 & 63);\r\n aBytes[nIdx++] = 128 + (nChr >>> 6 & 63);\r\n aBytes[nIdx++] = 128 + (nChr & 63);\r\n }\r\n else if (nChr < 0x4000000) {\r\n /* five bytes */\r\n aBytes[nIdx++] = 248 + (nChr >>> 24);\r\n aBytes[nIdx++] = 128 + (nChr >>> 18 & 63);\r\n aBytes[nIdx++] = 128 + (nChr >>> 12 & 63);\r\n aBytes[nIdx++] = 128 + (nChr >>> 6 & 63);\r\n aBytes[nIdx++] = 128 + (nChr & 63);\r\n }\r\n else /* if (nChr <= 0x7fffffff) */ {\r\n /* six bytes */\r\n aBytes[nIdx++] = 252 + (nChr >>> 30);\r\n aBytes[nIdx++] = 128 + (nChr >>> 24 & 63);\r\n aBytes[nIdx++] = 128 + (nChr >>> 18 & 63);\r\n aBytes[nIdx++] = 128 + (nChr >>> 12 & 63);\r\n aBytes[nIdx++] = 128 + (nChr >>> 6 & 63);\r\n aBytes[nIdx++] = 128 + (nChr & 63);\r\n }\r\n }\r\n return aBytes;\r\n };\r\n /**\r\n * Converst string to ArrayBuffer\r\n * @param dataString\r\n */\r\n BrowserStringUtils.stringToArrayBuffer = function (dataString) {\r\n var data = new ArrayBuffer(dataString.length);\r\n var dataView = new Uint8Array(data);\r\n for (var i = 0; i < dataString.length; i++) {\r\n dataView[i] = dataString.charCodeAt(i);\r\n }\r\n return data;\r\n };\r\n /**\r\n * Converts Uint8Array to a string\r\n * @param aBytes\r\n */\r\n BrowserStringUtils.utf8ArrToString = function (aBytes) {\r\n var sView = Constants.EMPTY_STRING;\r\n for (var nPart = void 0, nLen = aBytes.length, nIdx = 0; nIdx < nLen; nIdx++) {\r\n nPart = aBytes[nIdx];\r\n sView += String.fromCharCode(nPart > 251 && nPart < 254 && nIdx + 5 < nLen ? /* six bytes */\r\n /* (nPart - 252 << 30) may be not so safe in ECMAScript! So...: */\r\n (nPart - 252) * 1073741824 + (aBytes[++nIdx] - 128 << 24) + (aBytes[++nIdx] - 128 << 18) + (aBytes[++nIdx] - 128 << 12) + (aBytes[++nIdx] - 128 << 6) + aBytes[++nIdx] - 128\r\n : nPart > 247 && nPart < 252 && nIdx + 4 < nLen ? /* five bytes */\r\n (nPart - 248 << 24) + (aBytes[++nIdx] - 128 << 18) + (aBytes[++nIdx] - 128 << 12) + (aBytes[++nIdx] - 128 << 6) + aBytes[++nIdx] - 128\r\n : nPart > 239 && nPart < 248 && nIdx + 3 < nLen ? /* four bytes */\r\n (nPart - 240 << 18) + (aBytes[++nIdx] - 128 << 12) + (aBytes[++nIdx] - 128 << 6) + aBytes[++nIdx] - 128\r\n : nPart > 223 && nPart < 240 && nIdx + 2 < nLen ? /* three bytes */\r\n (nPart - 224 << 12) + (aBytes[++nIdx] - 128 << 6) + aBytes[++nIdx] - 128\r\n : nPart > 191 && nPart < 224 && nIdx + 1 < nLen ? /* two bytes */\r\n (nPart - 192 << 6) + aBytes[++nIdx] - 128\r\n : /* nPart < 127 ? */ /* one byte */\r\n nPart);\r\n }\r\n return sView;\r\n };\r\n /**\r\n * Returns stringified jwk.\r\n * @param jwk\r\n */\r\n BrowserStringUtils.getSortedObjectString = function (obj) {\r\n return JSON.stringify(obj, Object.keys(obj).sort());\r\n };\r\n return BrowserStringUtils;\r\n}());\n\nexport { BrowserStringUtils };\n//# sourceMappingURL=BrowserStringUtils.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { Constants } from '@azure/msal-common';\nimport { BrowserStringUtils } from '../utils/BrowserStringUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Class which exposes APIs to encode plaintext to base64 encoded string. See here for implementation details:\r\n * https://developer.mozilla.org/en-US/docs/Web/API/WindowBase64/Base64_encoding_and_decoding#Solution_2_%E2%80%93_JavaScript's_UTF-16_%3E_UTF-8_%3E_base64\r\n */\r\nvar Base64Encode = /** @class */ (function () {\r\n function Base64Encode() {\r\n }\r\n /**\r\n * Returns URL Safe b64 encoded string from a plaintext string.\r\n * @param input\r\n */\r\n Base64Encode.prototype.urlEncode = function (input) {\r\n return encodeURIComponent(this.encode(input)\r\n .replace(/=/g, Constants.EMPTY_STRING)\r\n .replace(/\\+/g, \"-\")\r\n .replace(/\\//g, \"_\"));\r\n };\r\n /**\r\n * Returns URL Safe b64 encoded string from an int8Array.\r\n * @param inputArr\r\n */\r\n Base64Encode.prototype.urlEncodeArr = function (inputArr) {\r\n return this.base64EncArr(inputArr)\r\n .replace(/=/g, Constants.EMPTY_STRING)\r\n .replace(/\\+/g, \"-\")\r\n .replace(/\\//g, \"_\");\r\n };\r\n /**\r\n * Returns b64 encoded string from plaintext string.\r\n * @param input\r\n */\r\n Base64Encode.prototype.encode = function (input) {\r\n var inputUtf8Arr = BrowserStringUtils.stringToUtf8Arr(input);\r\n return this.base64EncArr(inputUtf8Arr);\r\n };\r\n /**\r\n * Base64 encode byte array\r\n * @param aBytes\r\n */\r\n Base64Encode.prototype.base64EncArr = function (aBytes) {\r\n var eqLen = (3 - (aBytes.length % 3)) % 3;\r\n var sB64Enc = Constants.EMPTY_STRING;\r\n for (var nMod3 = void 0, nLen = aBytes.length, nUint24 = 0, nIdx = 0; nIdx < nLen; nIdx++) {\r\n nMod3 = nIdx % 3;\r\n /* Uncomment the following line in order to split the output in lines 76-character long: */\r\n /*\r\n *if (nIdx > 0 && (nIdx * 4 / 3) % 76 === 0) { sB64Enc += \"\\r\\n\"; }\r\n */\r\n nUint24 |= aBytes[nIdx] << (16 >>> nMod3 & 24);\r\n if (nMod3 === 2 || aBytes.length - nIdx === 1) {\r\n sB64Enc += String.fromCharCode(this.uint6ToB64(nUint24 >>> 18 & 63), this.uint6ToB64(nUint24 >>> 12 & 63), this.uint6ToB64(nUint24 >>> 6 & 63), this.uint6ToB64(nUint24 & 63));\r\n nUint24 = 0;\r\n }\r\n }\r\n return eqLen === 0 ? sB64Enc : sB64Enc.substring(0, sB64Enc.length - eqLen) + (eqLen === 1 ? \"=\" : \"==\");\r\n };\r\n /**\r\n * Base64 string to array encoding helper\r\n * @param nUint6\r\n */\r\n Base64Encode.prototype.uint6ToB64 = function (nUint6) {\r\n return nUint6 < 26 ?\r\n nUint6 + 65\r\n : nUint6 < 52 ?\r\n nUint6 + 71\r\n : nUint6 < 62 ?\r\n nUint6 - 4\r\n : nUint6 === 62 ?\r\n 43\r\n : nUint6 === 63 ?\r\n 47\r\n :\r\n 65;\r\n };\r\n return Base64Encode;\r\n}());\n\nexport { Base64Encode };\n//# sourceMappingURL=Base64Encode.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { Constants } from '@azure/msal-common';\nimport { BrowserStringUtils } from '../utils/BrowserStringUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Class which exposes APIs to decode base64 strings to plaintext. See here for implementation details:\r\n * https://developer.mozilla.org/en-US/docs/Web/API/WindowBase64/Base64_encoding_and_decoding#Solution_2_%E2%80%93_JavaScript's_UTF-16_%3E_UTF-8_%3E_base64\r\n */\r\nvar Base64Decode = /** @class */ (function () {\r\n function Base64Decode() {\r\n }\r\n /**\r\n * Returns a URL-safe plaintext decoded string from b64 encoded input.\r\n * @param input\r\n */\r\n Base64Decode.prototype.decode = function (input) {\r\n var encodedString = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\r\n switch (encodedString.length % 4) {\r\n case 0:\r\n break;\r\n case 2:\r\n encodedString += \"==\";\r\n break;\r\n case 3:\r\n encodedString += \"=\";\r\n break;\r\n default:\r\n throw new Error(\"Invalid base64 string\");\r\n }\r\n var inputUtf8Arr = this.base64DecToArr(encodedString);\r\n return BrowserStringUtils.utf8ArrToString(inputUtf8Arr);\r\n };\r\n /**\r\n * Decodes base64 into Uint8Array\r\n * @param base64String\r\n * @param nBlockSize\r\n */\r\n Base64Decode.prototype.base64DecToArr = function (base64String, nBlockSize) {\r\n var sB64Enc = base64String.replace(/[^A-Za-z0-9\\+\\/]/g, Constants.EMPTY_STRING);\r\n var nInLen = sB64Enc.length;\r\n var nOutLen = nBlockSize ? Math.ceil((nInLen * 3 + 1 >>> 2) / nBlockSize) * nBlockSize : nInLen * 3 + 1 >>> 2;\r\n var aBytes = new Uint8Array(nOutLen);\r\n for (var nMod3 = void 0, nMod4 = void 0, nUint24 = 0, nOutIdx = 0, nInIdx = 0; nInIdx < nInLen; nInIdx++) {\r\n nMod4 = nInIdx & 3;\r\n nUint24 |= this.b64ToUint6(sB64Enc.charCodeAt(nInIdx)) << 18 - 6 * nMod4;\r\n if (nMod4 === 3 || nInLen - nInIdx === 1) {\r\n for (nMod3 = 0; nMod3 < 3 && nOutIdx < nOutLen; nMod3++, nOutIdx++) {\r\n aBytes[nOutIdx] = nUint24 >>> (16 >>> nMod3 & 24) & 255;\r\n }\r\n nUint24 = 0;\r\n }\r\n }\r\n return aBytes;\r\n };\r\n /**\r\n * Base64 string to array decoding helper\r\n * @param charNum\r\n */\r\n Base64Decode.prototype.b64ToUint6 = function (charNum) {\r\n return charNum > 64 && charNum < 91 ?\r\n charNum - 65\r\n : charNum > 96 && charNum < 123 ?\r\n charNum - 71\r\n : charNum > 47 && charNum < 58 ?\r\n charNum + 4\r\n : charNum === 43 ?\r\n 62\r\n : charNum === 47 ?\r\n 63\r\n :\r\n 0;\r\n };\r\n return Base64Decode;\r\n}());\n\nexport { Base64Decode };\n//# sourceMappingURL=Base64Decode.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { AuthError } from './AuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * ClientAuthErrorMessage class containing string constants used by error codes and messages.\r\n */\r\nvar ClientAuthErrorMessage = {\r\n clientInfoDecodingError: {\r\n code: \"client_info_decoding_error\",\r\n desc: \"The client info could not be parsed/decoded correctly. Please review the trace to determine the root cause.\"\r\n },\r\n clientInfoEmptyError: {\r\n code: \"client_info_empty_error\",\r\n desc: \"The client info was empty. Please review the trace to determine the root cause.\"\r\n },\r\n tokenParsingError: {\r\n code: \"token_parsing_error\",\r\n desc: \"Token cannot be parsed. Please review stack trace to determine root cause.\"\r\n },\r\n nullOrEmptyToken: {\r\n code: \"null_or_empty_token\",\r\n desc: \"The token is null or empty. Please review the trace to determine the root cause.\"\r\n },\r\n endpointResolutionError: {\r\n code: \"endpoints_resolution_error\",\r\n desc: \"Error: could not resolve endpoints. Please check network and try again.\"\r\n },\r\n networkError: {\r\n code: \"network_error\",\r\n desc: \"Network request failed. Please check network trace to determine root cause.\"\r\n },\r\n unableToGetOpenidConfigError: {\r\n code: \"openid_config_error\",\r\n desc: \"Could not retrieve endpoints. Check your authority and verify the .well-known/openid-configuration endpoint returns the required endpoints.\"\r\n },\r\n hashNotDeserialized: {\r\n code: \"hash_not_deserialized\",\r\n desc: \"The hash parameters could not be deserialized. Please review the trace to determine the root cause.\"\r\n },\r\n blankGuidGenerated: {\r\n code: \"blank_guid_generated\",\r\n desc: \"The guid generated was blank. Please review the trace to determine the root cause.\"\r\n },\r\n invalidStateError: {\r\n code: \"invalid_state\",\r\n desc: \"State was not the expected format. Please check the logs to determine whether the request was sent using ProtocolUtils.setRequestState().\"\r\n },\r\n stateMismatchError: {\r\n code: \"state_mismatch\",\r\n desc: \"State mismatch error. Please check your network. Continued requests may cause cache overflow.\"\r\n },\r\n stateNotFoundError: {\r\n code: \"state_not_found\",\r\n desc: \"State not found\"\r\n },\r\n nonceMismatchError: {\r\n code: \"nonce_mismatch\",\r\n desc: \"Nonce mismatch error. This may be caused by a race condition in concurrent requests.\"\r\n },\r\n nonceNotFoundError: {\r\n code: \"nonce_not_found\",\r\n desc: \"nonce not found\"\r\n },\r\n authTimeNotFoundError: {\r\n code: \"auth_time_not_found\",\r\n desc: \"Max Age was requested and the ID token is missing the auth_time variable.\" +\r\n \" auth_time is an optional claim and is not enabled by default - it must be enabled.\" +\r\n \" See https://aka.ms/msaljs/optional-claims for more information.\"\r\n },\r\n maxAgeTranspiredError: {\r\n code: \"max_age_transpired\",\r\n desc: \"Max Age is set to 0, or too much time has elapsed since the last end-user authentication.\"\r\n },\r\n noTokensFoundError: {\r\n code: \"no_tokens_found\",\r\n desc: \"No tokens were found for the given scopes, and no authorization code was passed to acquireToken. You must retrieve an authorization code before making a call to acquireToken().\"\r\n },\r\n multipleMatchingTokens: {\r\n code: \"multiple_matching_tokens\",\r\n desc: \"The cache contains multiple tokens satisfying the requirements. \" +\r\n \"Call AcquireToken again providing more requirements such as authority or account.\"\r\n },\r\n multipleMatchingAccounts: {\r\n code: \"multiple_matching_accounts\",\r\n desc: \"The cache contains multiple accounts satisfying the given parameters. Please pass more info to obtain the correct account\"\r\n },\r\n multipleMatchingAppMetadata: {\r\n code: \"multiple_matching_appMetadata\",\r\n desc: \"The cache contains multiple appMetadata satisfying the given parameters. Please pass more info to obtain the correct appMetadata\"\r\n },\r\n tokenRequestCannotBeMade: {\r\n code: \"request_cannot_be_made\",\r\n desc: \"Token request cannot be made without authorization code or refresh token.\"\r\n },\r\n appendEmptyScopeError: {\r\n code: \"cannot_append_empty_scope\",\r\n desc: \"Cannot append null or empty scope to ScopeSet. Please check the stack trace for more info.\"\r\n },\r\n removeEmptyScopeError: {\r\n code: \"cannot_remove_empty_scope\",\r\n desc: \"Cannot remove null or empty scope from ScopeSet. Please check the stack trace for more info.\"\r\n },\r\n appendScopeSetError: {\r\n code: \"cannot_append_scopeset\",\r\n desc: \"Cannot append ScopeSet due to error.\"\r\n },\r\n emptyInputScopeSetError: {\r\n code: \"empty_input_scopeset\",\r\n desc: \"Empty input ScopeSet cannot be processed.\"\r\n },\r\n DeviceCodePollingCancelled: {\r\n code: \"device_code_polling_cancelled\",\r\n desc: \"Caller has cancelled token endpoint polling during device code flow by setting DeviceCodeRequest.cancel = true.\"\r\n },\r\n DeviceCodeExpired: {\r\n code: \"device_code_expired\",\r\n desc: \"Device code is expired.\"\r\n },\r\n DeviceCodeUnknownError: {\r\n code: \"device_code_unknown_error\",\r\n desc: \"Device code stopped polling for unknown reasons.\"\r\n },\r\n NoAccountInSilentRequest: {\r\n code: \"no_account_in_silent_request\",\r\n desc: \"Please pass an account object, silent flow is not supported without account information\"\r\n },\r\n invalidCacheRecord: {\r\n code: \"invalid_cache_record\",\r\n desc: \"Cache record object was null or undefined.\"\r\n },\r\n invalidCacheEnvironment: {\r\n code: \"invalid_cache_environment\",\r\n desc: \"Invalid environment when attempting to create cache entry\"\r\n },\r\n noAccountFound: {\r\n code: \"no_account_found\",\r\n desc: \"No account found in cache for given key.\"\r\n },\r\n CachePluginError: {\r\n code: \"no cache plugin set on CacheManager\",\r\n desc: \"ICachePlugin needs to be set before using readFromStorage or writeFromStorage\"\r\n },\r\n noCryptoObj: {\r\n code: \"no_crypto_object\",\r\n desc: \"No crypto object detected. This is required for the following operation: \"\r\n },\r\n invalidCacheType: {\r\n code: \"invalid_cache_type\",\r\n desc: \"Invalid cache type\"\r\n },\r\n unexpectedAccountType: {\r\n code: \"unexpected_account_type\",\r\n desc: \"Unexpected account type.\"\r\n },\r\n unexpectedCredentialType: {\r\n code: \"unexpected_credential_type\",\r\n desc: \"Unexpected credential type.\"\r\n },\r\n invalidAssertion: {\r\n code: \"invalid_assertion\",\r\n desc: \"Client assertion must meet requirements described in https://tools.ietf.org/html/rfc7515\"\r\n },\r\n invalidClientCredential: {\r\n code: \"invalid_client_credential\",\r\n desc: \"Client credential (secret, certificate, or assertion) must not be empty when creating a confidential client. An application should at most have one credential\"\r\n },\r\n tokenRefreshRequired: {\r\n code: \"token_refresh_required\",\r\n desc: \"Cannot return token from cache because it must be refreshed. This may be due to one of the following reasons: forceRefresh parameter is set to true, claims have been requested, there is no cached access token or it is expired.\"\r\n },\r\n userTimeoutReached: {\r\n code: \"user_timeout_reached\",\r\n desc: \"User defined timeout for device code polling reached\",\r\n },\r\n tokenClaimsRequired: {\r\n code: \"token_claims_cnf_required_for_signedjwt\",\r\n desc: \"Cannot generate a POP jwt if the token_claims are not populated\"\r\n },\r\n noAuthorizationCodeFromServer: {\r\n code: \"authorization_code_missing_from_server_response\",\r\n desc: \"Server response does not contain an authorization code to proceed\"\r\n },\r\n noAzureRegionDetected: {\r\n code: \"no_azure_region_detected\",\r\n desc: \"No azure region was detected and no fallback was made available\"\r\n },\r\n accessTokenEntityNullError: {\r\n code: \"access_token_entity_null\",\r\n desc: \"Access token entity is null, please check logs and cache to ensure a valid access token is present.\"\r\n },\r\n bindingKeyNotRemovedError: {\r\n code: \"binding_key_not_removed\",\r\n desc: \"Could not remove the credential's binding key from storage.\"\r\n },\r\n logoutNotSupported: {\r\n code: \"end_session_endpoint_not_supported\",\r\n desc: \"Provided authority does not support logout.\"\r\n },\r\n keyIdMissing: {\r\n code: \"key_id_missing\",\r\n desc: \"A keyId value is missing from the requested bound token's cache record and is required to match the token to it's stored binding key.\"\r\n },\r\n noNetworkConnectivity: {\r\n code: \"no_network_connectivity\",\r\n desc: \"No network connectivity. Check your internet connection.\"\r\n },\r\n userCanceledError: {\r\n code: \"user_canceled\",\r\n desc: \"User canceled the flow.\"\r\n }\r\n};\r\n/**\r\n * Error thrown when there is an error in the client code running on the browser.\r\n */\r\nvar ClientAuthError = /** @class */ (function (_super) {\r\n __extends(ClientAuthError, _super);\r\n function ClientAuthError(errorCode, errorMessage) {\r\n var _this = _super.call(this, errorCode, errorMessage) || this;\r\n _this.name = \"ClientAuthError\";\r\n Object.setPrototypeOf(_this, ClientAuthError.prototype);\r\n return _this;\r\n }\r\n /**\r\n * Creates an error thrown when client info object doesn't decode correctly.\r\n * @param caughtError\r\n */\r\n ClientAuthError.createClientInfoDecodingError = function (caughtError) {\r\n return new ClientAuthError(ClientAuthErrorMessage.clientInfoDecodingError.code, ClientAuthErrorMessage.clientInfoDecodingError.desc + \" Failed with error: \" + caughtError);\r\n };\r\n /**\r\n * Creates an error thrown if the client info is empty.\r\n * @param rawClientInfo\r\n */\r\n ClientAuthError.createClientInfoEmptyError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.clientInfoEmptyError.code, \"\" + ClientAuthErrorMessage.clientInfoEmptyError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the id token extraction errors out.\r\n * @param err\r\n */\r\n ClientAuthError.createTokenParsingError = function (caughtExtractionError) {\r\n return new ClientAuthError(ClientAuthErrorMessage.tokenParsingError.code, ClientAuthErrorMessage.tokenParsingError.desc + \" Failed with error: \" + caughtExtractionError);\r\n };\r\n /**\r\n * Creates an error thrown when the id token string is null or empty.\r\n * @param invalidRawTokenString\r\n */\r\n ClientAuthError.createTokenNullOrEmptyError = function (invalidRawTokenString) {\r\n return new ClientAuthError(ClientAuthErrorMessage.nullOrEmptyToken.code, ClientAuthErrorMessage.nullOrEmptyToken.desc + \" Raw Token Value: \" + invalidRawTokenString);\r\n };\r\n /**\r\n * Creates an error thrown when the endpoint discovery doesn't complete correctly.\r\n */\r\n ClientAuthError.createEndpointDiscoveryIncompleteError = function (errDetail) {\r\n return new ClientAuthError(ClientAuthErrorMessage.endpointResolutionError.code, ClientAuthErrorMessage.endpointResolutionError.desc + \" Detail: \" + errDetail);\r\n };\r\n /**\r\n * Creates an error thrown when the fetch client throws\r\n */\r\n ClientAuthError.createNetworkError = function (endpoint, errDetail) {\r\n return new ClientAuthError(ClientAuthErrorMessage.networkError.code, ClientAuthErrorMessage.networkError.desc + \" | Fetch client threw: \" + errDetail + \" | Attempted to reach: \" + endpoint.split(\"?\")[0]);\r\n };\r\n /**\r\n * Creates an error thrown when the openid-configuration endpoint cannot be reached or does not contain the required data\r\n */\r\n ClientAuthError.createUnableToGetOpenidConfigError = function (errDetail) {\r\n return new ClientAuthError(ClientAuthErrorMessage.unableToGetOpenidConfigError.code, ClientAuthErrorMessage.unableToGetOpenidConfigError.desc + \" Attempted to retrieve endpoints from: \" + errDetail);\r\n };\r\n /**\r\n * Creates an error thrown when the hash cannot be deserialized.\r\n * @param hashParamObj\r\n */\r\n ClientAuthError.createHashNotDeserializedError = function (hashParamObj) {\r\n return new ClientAuthError(ClientAuthErrorMessage.hashNotDeserialized.code, ClientAuthErrorMessage.hashNotDeserialized.desc + \" Given Object: \" + hashParamObj);\r\n };\r\n /**\r\n * Creates an error thrown when the state cannot be parsed.\r\n * @param invalidState\r\n */\r\n ClientAuthError.createInvalidStateError = function (invalidState, errorString) {\r\n return new ClientAuthError(ClientAuthErrorMessage.invalidStateError.code, ClientAuthErrorMessage.invalidStateError.desc + \" Invalid State: \" + invalidState + \", Root Err: \" + errorString);\r\n };\r\n /**\r\n * Creates an error thrown when two states do not match.\r\n */\r\n ClientAuthError.createStateMismatchError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.stateMismatchError.code, ClientAuthErrorMessage.stateMismatchError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the state is not present\r\n * @param missingState\r\n */\r\n ClientAuthError.createStateNotFoundError = function (missingState) {\r\n return new ClientAuthError(ClientAuthErrorMessage.stateNotFoundError.code, ClientAuthErrorMessage.stateNotFoundError.desc + \": \" + missingState);\r\n };\r\n /**\r\n * Creates an error thrown when the nonce does not match.\r\n */\r\n ClientAuthError.createNonceMismatchError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.nonceMismatchError.code, ClientAuthErrorMessage.nonceMismatchError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when max_age was provided in the request, but auth_time is not in the token claims\r\n * @param missingNonce\r\n */\r\n ClientAuthError.createAuthTimeNotFoundError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.authTimeNotFoundError.code, ClientAuthErrorMessage.authTimeNotFoundError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when too much time has elapsed since the last end-user authentication\r\n */\r\n ClientAuthError.createMaxAgeTranspiredError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.maxAgeTranspiredError.code, ClientAuthErrorMessage.maxAgeTranspiredError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the mnonce is not present\r\n * @param missingNonce\r\n */\r\n ClientAuthError.createNonceNotFoundError = function (missingNonce) {\r\n return new ClientAuthError(ClientAuthErrorMessage.nonceNotFoundError.code, ClientAuthErrorMessage.nonceNotFoundError.desc + \": \" + missingNonce);\r\n };\r\n /**\r\n * Throws error when multiple tokens are in cache.\r\n */\r\n ClientAuthError.createMultipleMatchingTokensInCacheError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.multipleMatchingTokens.code, ClientAuthErrorMessage.multipleMatchingTokens.desc + \".\");\r\n };\r\n /**\r\n * Throws error when multiple accounts are in cache for the given params\r\n */\r\n ClientAuthError.createMultipleMatchingAccountsInCacheError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.multipleMatchingAccounts.code, ClientAuthErrorMessage.multipleMatchingAccounts.desc);\r\n };\r\n /**\r\n * Throws error when multiple appMetada are in cache for the given clientId.\r\n */\r\n ClientAuthError.createMultipleMatchingAppMetadataInCacheError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.multipleMatchingAppMetadata.code, ClientAuthErrorMessage.multipleMatchingAppMetadata.desc);\r\n };\r\n /**\r\n * Throws error when no auth code or refresh token is given to ServerTokenRequestParameters.\r\n */\r\n ClientAuthError.createTokenRequestCannotBeMadeError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.tokenRequestCannotBeMade.code, ClientAuthErrorMessage.tokenRequestCannotBeMade.desc);\r\n };\r\n /**\r\n * Throws error when attempting to append a null, undefined or empty scope to a set\r\n * @param givenScope\r\n */\r\n ClientAuthError.createAppendEmptyScopeToSetError = function (givenScope) {\r\n return new ClientAuthError(ClientAuthErrorMessage.appendEmptyScopeError.code, ClientAuthErrorMessage.appendEmptyScopeError.desc + \" Given Scope: \" + givenScope);\r\n };\r\n /**\r\n * Throws error when attempting to append a null, undefined or empty scope to a set\r\n * @param givenScope\r\n */\r\n ClientAuthError.createRemoveEmptyScopeFromSetError = function (givenScope) {\r\n return new ClientAuthError(ClientAuthErrorMessage.removeEmptyScopeError.code, ClientAuthErrorMessage.removeEmptyScopeError.desc + \" Given Scope: \" + givenScope);\r\n };\r\n /**\r\n * Throws error when attempting to append null or empty ScopeSet.\r\n * @param appendError\r\n */\r\n ClientAuthError.createAppendScopeSetError = function (appendError) {\r\n return new ClientAuthError(ClientAuthErrorMessage.appendScopeSetError.code, ClientAuthErrorMessage.appendScopeSetError.desc + \" Detail Error: \" + appendError);\r\n };\r\n /**\r\n * Throws error if ScopeSet is null or undefined.\r\n * @param givenScopeSet\r\n */\r\n ClientAuthError.createEmptyInputScopeSetError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.emptyInputScopeSetError.code, \"\" + ClientAuthErrorMessage.emptyInputScopeSetError.desc);\r\n };\r\n /**\r\n * Throws error if user sets CancellationToken.cancel = true during polling of token endpoint during device code flow\r\n */\r\n ClientAuthError.createDeviceCodeCancelledError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.DeviceCodePollingCancelled.code, \"\" + ClientAuthErrorMessage.DeviceCodePollingCancelled.desc);\r\n };\r\n /**\r\n * Throws error if device code is expired\r\n */\r\n ClientAuthError.createDeviceCodeExpiredError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.DeviceCodeExpired.code, \"\" + ClientAuthErrorMessage.DeviceCodeExpired.desc);\r\n };\r\n /**\r\n * Throws error if device code is expired\r\n */\r\n ClientAuthError.createDeviceCodeUnknownError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.DeviceCodeUnknownError.code, \"\" + ClientAuthErrorMessage.DeviceCodeUnknownError.desc);\r\n };\r\n /**\r\n * Throws error when silent requests are made without an account object\r\n */\r\n ClientAuthError.createNoAccountInSilentRequestError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.NoAccountInSilentRequest.code, \"\" + ClientAuthErrorMessage.NoAccountInSilentRequest.desc);\r\n };\r\n /**\r\n * Throws error when cache record is null or undefined.\r\n */\r\n ClientAuthError.createNullOrUndefinedCacheRecord = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.invalidCacheRecord.code, ClientAuthErrorMessage.invalidCacheRecord.desc);\r\n };\r\n /**\r\n * Throws error when provided environment is not part of the CloudDiscoveryMetadata object\r\n */\r\n ClientAuthError.createInvalidCacheEnvironmentError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.invalidCacheEnvironment.code, ClientAuthErrorMessage.invalidCacheEnvironment.desc);\r\n };\r\n /**\r\n * Throws error when account is not found in cache.\r\n */\r\n ClientAuthError.createNoAccountFoundError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.noAccountFound.code, ClientAuthErrorMessage.noAccountFound.desc);\r\n };\r\n /**\r\n * Throws error if ICachePlugin not set on CacheManager.\r\n */\r\n ClientAuthError.createCachePluginError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.CachePluginError.code, \"\" + ClientAuthErrorMessage.CachePluginError.desc);\r\n };\r\n /**\r\n * Throws error if crypto object not found.\r\n * @param operationName\r\n */\r\n ClientAuthError.createNoCryptoObjectError = function (operationName) {\r\n return new ClientAuthError(ClientAuthErrorMessage.noCryptoObj.code, \"\" + ClientAuthErrorMessage.noCryptoObj.desc + operationName);\r\n };\r\n /**\r\n * Throws error if cache type is invalid.\r\n */\r\n ClientAuthError.createInvalidCacheTypeError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.invalidCacheType.code, \"\" + ClientAuthErrorMessage.invalidCacheType.desc);\r\n };\r\n /**\r\n * Throws error if unexpected account type.\r\n */\r\n ClientAuthError.createUnexpectedAccountTypeError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.unexpectedAccountType.code, \"\" + ClientAuthErrorMessage.unexpectedAccountType.desc);\r\n };\r\n /**\r\n * Throws error if unexpected credential type.\r\n */\r\n ClientAuthError.createUnexpectedCredentialTypeError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.unexpectedCredentialType.code, \"\" + ClientAuthErrorMessage.unexpectedCredentialType.desc);\r\n };\r\n /**\r\n * Throws error if client assertion is not valid.\r\n */\r\n ClientAuthError.createInvalidAssertionError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.invalidAssertion.code, \"\" + ClientAuthErrorMessage.invalidAssertion.desc);\r\n };\r\n /**\r\n * Throws error if client assertion is not valid.\r\n */\r\n ClientAuthError.createInvalidCredentialError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.invalidClientCredential.code, \"\" + ClientAuthErrorMessage.invalidClientCredential.desc);\r\n };\r\n /**\r\n * Throws error if token cannot be retrieved from cache due to refresh being required.\r\n */\r\n ClientAuthError.createRefreshRequiredError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.tokenRefreshRequired.code, ClientAuthErrorMessage.tokenRefreshRequired.desc);\r\n };\r\n /**\r\n * Throws error if the user defined timeout is reached.\r\n */\r\n ClientAuthError.createUserTimeoutReachedError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.userTimeoutReached.code, ClientAuthErrorMessage.userTimeoutReached.desc);\r\n };\r\n /*\r\n * Throws error if token claims are not populated for a signed jwt generation\r\n */\r\n ClientAuthError.createTokenClaimsRequiredError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.tokenClaimsRequired.code, ClientAuthErrorMessage.tokenClaimsRequired.desc);\r\n };\r\n /**\r\n * Throws error when the authorization code is missing from the server response\r\n */\r\n ClientAuthError.createNoAuthCodeInServerResponseError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.noAuthorizationCodeFromServer.code, ClientAuthErrorMessage.noAuthorizationCodeFromServer.desc);\r\n };\r\n ClientAuthError.createBindingKeyNotRemovedError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.bindingKeyNotRemovedError.code, ClientAuthErrorMessage.bindingKeyNotRemovedError.desc);\r\n };\r\n /**\r\n * Thrown when logout is attempted for an authority that doesnt have an end_session_endpoint\r\n */\r\n ClientAuthError.createLogoutNotSupportedError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.logoutNotSupported.code, ClientAuthErrorMessage.logoutNotSupported.desc);\r\n };\r\n /**\r\n * Create an error when kid attribute is missing from a PoP token's cache record\r\n */\r\n ClientAuthError.createKeyIdMissingError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.keyIdMissing.code, ClientAuthErrorMessage.keyIdMissing.desc);\r\n };\r\n /**\r\n * Create an error when the client does not have network connectivity\r\n */\r\n ClientAuthError.createNoNetworkConnectivityError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.noNetworkConnectivity.code, ClientAuthErrorMessage.noNetworkConnectivity.desc);\r\n };\r\n /**\r\n * Create an error when the user cancels the flow\r\n */\r\n ClientAuthError.createUserCanceledError = function () {\r\n return new ClientAuthError(ClientAuthErrorMessage.userCanceledError.code, ClientAuthErrorMessage.userCanceledError.desc);\r\n };\r\n return ClientAuthError;\r\n}(AuthError));\n\nexport { ClientAuthError, ClientAuthErrorMessage };\n//# sourceMappingURL=ClientAuthError.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * @hidden\r\n */\r\nvar StringUtils = /** @class */ (function () {\r\n function StringUtils() {\r\n }\r\n /**\r\n * decode a JWT\r\n *\r\n * @param authToken\r\n */\r\n StringUtils.decodeAuthToken = function (authToken) {\r\n if (StringUtils.isEmpty(authToken)) {\r\n throw ClientAuthError.createTokenNullOrEmptyError(authToken);\r\n }\r\n var tokenPartsRegex = /^([^\\.\\s]*)\\.([^\\.\\s]+)\\.([^\\.\\s]*)$/;\r\n var matches = tokenPartsRegex.exec(authToken);\r\n if (!matches || matches.length < 4) {\r\n throw ClientAuthError.createTokenParsingError(\"Given token is malformed: \" + JSON.stringify(authToken));\r\n }\r\n var crackedToken = {\r\n header: matches[1],\r\n JWSPayload: matches[2],\r\n JWSSig: matches[3]\r\n };\r\n return crackedToken;\r\n };\r\n /**\r\n * Check if a string is empty.\r\n *\r\n * @param str\r\n */\r\n StringUtils.isEmpty = function (str) {\r\n return (typeof str === \"undefined\" || !str || 0 === str.length);\r\n };\r\n /**\r\n * Check if stringified object is empty\r\n * @param strObj\r\n */\r\n StringUtils.isEmptyObj = function (strObj) {\r\n if (strObj && !StringUtils.isEmpty(strObj)) {\r\n try {\r\n var obj = JSON.parse(strObj);\r\n return Object.keys(obj).length === 0;\r\n }\r\n catch (e) { }\r\n }\r\n return true;\r\n };\r\n StringUtils.startsWith = function (str, search) {\r\n return str.indexOf(search) === 0;\r\n };\r\n StringUtils.endsWith = function (str, search) {\r\n return (str.length >= search.length) && (str.lastIndexOf(search) === (str.length - search.length));\r\n };\r\n /**\r\n * Parses string into an object.\r\n *\r\n * @param query\r\n */\r\n StringUtils.queryStringToObject = function (query) {\r\n var obj = {};\r\n var params = query.split(\"&\");\r\n var decode = function (s) { return decodeURIComponent(s.replace(/\\+/g, \" \")); };\r\n params.forEach(function (pair) {\r\n if (pair.trim()) {\r\n var _a = pair.split(/=(.+)/g, 2), key = _a[0], value = _a[1]; // Split on the first occurence of the '=' character\r\n if (key && value) {\r\n obj[decode(key)] = decode(value);\r\n }\r\n }\r\n });\r\n return obj;\r\n };\r\n /**\r\n * Trims entries in an array.\r\n *\r\n * @param arr\r\n */\r\n StringUtils.trimArrayEntries = function (arr) {\r\n return arr.map(function (entry) { return entry.trim(); });\r\n };\r\n /**\r\n * Removes empty strings from array\r\n * @param arr\r\n */\r\n StringUtils.removeEmptyStringsFromArray = function (arr) {\r\n return arr.filter(function (entry) {\r\n return !StringUtils.isEmpty(entry);\r\n });\r\n };\r\n /**\r\n * Attempts to parse a string into JSON\r\n * @param str\r\n */\r\n StringUtils.jsonParseHelper = function (str) {\r\n try {\r\n return JSON.parse(str);\r\n }\r\n catch (e) {\r\n return null;\r\n }\r\n };\r\n /**\r\n * Tests if a given string matches a given pattern, with support for wildcards and queries.\r\n * @param pattern Wildcard pattern to string match. Supports \"*\" for wildcards and \"?\" for queries\r\n * @param input String to match against\r\n */\r\n StringUtils.matchPattern = function (pattern, input) {\r\n /**\r\n * Wildcard support: https://stackoverflow.com/a/3117248/4888559\r\n * Queries: replaces \"?\" in string with escaped \"\\?\" for regex test\r\n */\r\n var regex = new RegExp(pattern.replace(/\\\\/g, \"\\\\\\\\\").replace(/\\*/g, \"[^ ]*\").replace(/\\?/g, \"\\\\\\?\")); // eslint-disable-line security/detect-non-literal-regexp\r\n return regex.test(input);\r\n };\r\n return StringUtils;\r\n}());\n\nexport { StringUtils };\n//# sourceMappingURL=StringUtils.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { StringUtils, AuthError } from '@azure/msal-common';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * BrowserAuthErrorMessage class containing string constants used by error codes and messages.\r\n */\r\nvar BrowserAuthErrorMessage = {\r\n pkceNotGenerated: {\r\n code: \"pkce_not_created\",\r\n desc: \"The PKCE code challenge and verifier could not be generated.\"\r\n },\r\n cryptoDoesNotExist: {\r\n code: \"crypto_nonexistent\",\r\n desc: \"The crypto object or function is not available.\"\r\n },\r\n httpMethodNotImplementedError: {\r\n code: \"http_method_not_implemented\",\r\n desc: \"The HTTP method given has not been implemented in this library.\"\r\n },\r\n emptyNavigateUriError: {\r\n code: \"empty_navigate_uri\",\r\n desc: \"Navigation URI is empty. Please check stack trace for more info.\"\r\n },\r\n hashEmptyError: {\r\n code: \"hash_empty_error\",\r\n desc: \"Hash value cannot be processed because it is empty. Please verify that your redirectUri is not clearing the hash. For more visit: aka.ms/msaljs/browser-errors.\"\r\n },\r\n hashDoesNotContainStateError: {\r\n code: \"no_state_in_hash\",\r\n desc: \"Hash does not contain state. Please verify that the request originated from msal.\"\r\n },\r\n hashDoesNotContainKnownPropertiesError: {\r\n code: \"hash_does_not_contain_known_properties\",\r\n desc: \"Hash does not contain known properites. Please verify that your redirectUri is not changing the hash. For more visit: aka.ms/msaljs/browser-errors.\"\r\n },\r\n unableToParseStateError: {\r\n code: \"unable_to_parse_state\",\r\n desc: \"Unable to parse state. Please verify that the request originated from msal.\"\r\n },\r\n stateInteractionTypeMismatchError: {\r\n code: \"state_interaction_type_mismatch\",\r\n desc: \"Hash contains state but the interaction type does not match the caller.\"\r\n },\r\n interactionInProgress: {\r\n code: \"interaction_in_progress\",\r\n desc: \"Interaction is currently in progress. Please ensure that this interaction has been completed before calling an interactive API. For more visit: aka.ms/msaljs/browser-errors.\"\r\n },\r\n popupWindowError: {\r\n code: \"popup_window_error\",\r\n desc: \"Error opening popup window. This can happen if you are using IE or if popups are blocked in the browser.\"\r\n },\r\n emptyWindowError: {\r\n code: \"empty_window_error\",\r\n desc: \"window.open returned null or undefined window object.\"\r\n },\r\n userCancelledError: {\r\n code: \"user_cancelled\",\r\n desc: \"User cancelled the flow.\"\r\n },\r\n monitorPopupTimeoutError: {\r\n code: \"monitor_window_timeout\",\r\n desc: \"Token acquisition in popup failed due to timeout. For more visit: aka.ms/msaljs/browser-errors.\"\r\n },\r\n monitorIframeTimeoutError: {\r\n code: \"monitor_window_timeout\",\r\n desc: \"Token acquisition in iframe failed due to timeout. For more visit: aka.ms/msaljs/browser-errors.\"\r\n },\r\n redirectInIframeError: {\r\n code: \"redirect_in_iframe\",\r\n desc: \"Redirects are not supported for iframed or brokered applications. Please ensure you are using MSAL.js in a top frame of the window if using the redirect APIs, or use the popup APIs.\"\r\n },\r\n blockTokenRequestsInHiddenIframeError: {\r\n code: \"block_iframe_reload\",\r\n desc: \"Request was blocked inside an iframe because MSAL detected an authentication response. For more visit: aka.ms/msaljs/browser-errors\"\r\n },\r\n blockAcquireTokenInPopupsError: {\r\n code: \"block_nested_popups\",\r\n desc: \"Request was blocked inside a popup because MSAL detected it was running in a popup.\"\r\n },\r\n iframeClosedPrematurelyError: {\r\n code: \"iframe_closed_prematurely\",\r\n desc: \"The iframe being monitored was closed prematurely.\"\r\n },\r\n silentLogoutUnsupportedError: {\r\n code: \"silent_logout_unsupported\",\r\n desc: \"Silent logout not supported. Please call logoutRedirect or logoutPopup instead.\"\r\n },\r\n noAccountError: {\r\n code: \"no_account_error\",\r\n desc: \"No account object provided to acquireTokenSilent and no active account has been set. Please call setActiveAccount or provide an account on the request.\"\r\n },\r\n silentPromptValueError: {\r\n code: \"silent_prompt_value_error\",\r\n desc: \"The value given for the prompt value is not valid for silent requests - must be set to 'none' or 'no_session'.\"\r\n },\r\n noTokenRequestCacheError: {\r\n code: \"no_token_request_cache_error\",\r\n desc: \"No token request found in cache.\"\r\n },\r\n unableToParseTokenRequestCacheError: {\r\n code: \"unable_to_parse_token_request_cache_error\",\r\n desc: \"The cached token request could not be parsed.\"\r\n },\r\n noCachedAuthorityError: {\r\n code: \"no_cached_authority_error\",\r\n desc: \"No cached authority found.\"\r\n },\r\n authRequestNotSet: {\r\n code: \"auth_request_not_set_error\",\r\n desc: \"Auth Request not set. Please ensure initiateAuthRequest was called from the InteractionHandler\"\r\n },\r\n invalidCacheType: {\r\n code: \"invalid_cache_type\",\r\n desc: \"Invalid cache type\"\r\n },\r\n notInBrowserEnvironment: {\r\n code: \"non_browser_environment\",\r\n desc: \"Login and token requests are not supported in non-browser environments.\"\r\n },\r\n databaseNotOpen: {\r\n code: \"database_not_open\",\r\n desc: \"Database is not open!\"\r\n },\r\n noNetworkConnectivity: {\r\n code: \"no_network_connectivity\",\r\n desc: \"No network connectivity. Check your internet connection.\"\r\n },\r\n postRequestFailed: {\r\n code: \"post_request_failed\",\r\n desc: \"Network request failed: If the browser threw a CORS error, check that the redirectUri is registered in the Azure App Portal as type 'SPA'\"\r\n },\r\n getRequestFailed: {\r\n code: \"get_request_failed\",\r\n desc: \"Network request failed. Please check the network trace to determine root cause.\"\r\n },\r\n failedToParseNetworkResponse: {\r\n code: \"failed_to_parse_response\",\r\n desc: \"Failed to parse network response. Check network trace.\"\r\n },\r\n unableToLoadTokenError: {\r\n code: \"unable_to_load_token\",\r\n desc: \"Error loading token to cache.\"\r\n },\r\n signingKeyNotFoundInStorage: {\r\n code: \"crypto_key_not_found\",\r\n desc: \"Cryptographic Key or Keypair not found in browser storage.\"\r\n },\r\n authCodeRequired: {\r\n code: \"auth_code_required\",\r\n desc: \"An authorization code must be provided (as the `code` property on the request) to this flow.\"\r\n },\r\n authCodeOrNativeAccountRequired: {\r\n code: \"auth_code_or_nativeAccountId_required\",\r\n desc: \"An authorization code or nativeAccountId must be provided to this flow.\"\r\n },\r\n spaCodeAndNativeAccountPresent: {\r\n code: \"spa_code_and_nativeAccountId_present\",\r\n desc: \"Request cannot contain both spa code and native account id.\"\r\n },\r\n databaseUnavailable: {\r\n code: \"database_unavailable\",\r\n desc: \"IndexedDB, which is required for persistent cryptographic key storage, is unavailable. This may be caused by browser privacy features which block persistent storage in third-party contexts.\"\r\n },\r\n unableToAcquireTokenFromNativePlatform: {\r\n code: \"unable_to_acquire_token_from_native_platform\",\r\n desc: \"Unable to acquire token from native platform. For a list of possible reasons visit aka.ms/msaljs/browser-errors.\"\r\n },\r\n nativeHandshakeTimeout: {\r\n code: \"native_handshake_timeout\",\r\n desc: \"Timed out while attempting to establish connection to browser extension\"\r\n },\r\n nativeExtensionNotInstalled: {\r\n code: \"native_extension_not_installed\",\r\n desc: \"Native extension is not installed. If you think this is a mistake call the initialize function.\"\r\n },\r\n nativeConnectionNotEstablished: {\r\n code: \"native_connection_not_established\",\r\n desc: \"Connection to native platform has not been established. Please install a compatible browser extension and run initialize(). For more please visit aka.ms/msaljs/browser-errors.\"\r\n },\r\n nativeBrokerCalledBeforeInitialize: {\r\n code: \"native_broker_called_before_initialize\",\r\n desc: \"You must call and await the initialize function before attempting to call any other MSAL API when native brokering is enabled. For more please visit aka.ms/msaljs/browser-errors.\"\r\n },\r\n nativePromptNotSupported: {\r\n code: \"native_prompt_not_supported\",\r\n desc: \"The provided prompt is not supported by the native platform. This request should be routed to the web based flow.\"\r\n }\r\n};\r\n/**\r\n * Browser library error class thrown by the MSAL.js library for SPAs\r\n */\r\nvar BrowserAuthError = /** @class */ (function (_super) {\r\n __extends(BrowserAuthError, _super);\r\n function BrowserAuthError(errorCode, errorMessage) {\r\n var _this = _super.call(this, errorCode, errorMessage) || this;\r\n Object.setPrototypeOf(_this, BrowserAuthError.prototype);\r\n _this.name = \"BrowserAuthError\";\r\n return _this;\r\n }\r\n /**\r\n * Creates an error thrown when PKCE is not implemented.\r\n * @param errDetail\r\n */\r\n BrowserAuthError.createPkceNotGeneratedError = function (errDetail) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.pkceNotGenerated.code, BrowserAuthErrorMessage.pkceNotGenerated.desc + \" Detail:\" + errDetail);\r\n };\r\n /**\r\n * Creates an error thrown when the crypto object is unavailable.\r\n * @param errDetail\r\n */\r\n BrowserAuthError.createCryptoNotAvailableError = function (errDetail) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.cryptoDoesNotExist.code, BrowserAuthErrorMessage.cryptoDoesNotExist.desc + \" Detail:\" + errDetail);\r\n };\r\n /**\r\n * Creates an error thrown when an HTTP method hasn't been implemented by the browser class.\r\n * @param method\r\n */\r\n BrowserAuthError.createHttpMethodNotImplementedError = function (method) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.httpMethodNotImplementedError.code, BrowserAuthErrorMessage.httpMethodNotImplementedError.desc + \" Given Method: \" + method);\r\n };\r\n /**\r\n * Creates an error thrown when the navigation URI is empty.\r\n */\r\n BrowserAuthError.createEmptyNavigationUriError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.emptyNavigateUriError.code, BrowserAuthErrorMessage.emptyNavigateUriError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the hash string value is unexpectedly empty.\r\n * @param hashValue\r\n */\r\n BrowserAuthError.createEmptyHashError = function (hashValue) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.hashEmptyError.code, BrowserAuthErrorMessage.hashEmptyError.desc + \" Given Url: \" + hashValue);\r\n };\r\n /**\r\n * Creates an error thrown when the hash string value is unexpectedly empty.\r\n */\r\n BrowserAuthError.createHashDoesNotContainStateError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.hashDoesNotContainStateError.code, BrowserAuthErrorMessage.hashDoesNotContainStateError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the hash string value does not contain known properties\r\n */\r\n BrowserAuthError.createHashDoesNotContainKnownPropertiesError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.hashDoesNotContainKnownPropertiesError.code, BrowserAuthErrorMessage.hashDoesNotContainKnownPropertiesError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the hash string value is unexpectedly empty.\r\n */\r\n BrowserAuthError.createUnableToParseStateError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.unableToParseStateError.code, BrowserAuthErrorMessage.unableToParseStateError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the state value in the hash does not match the interaction type of the API attempting to consume it.\r\n */\r\n BrowserAuthError.createStateInteractionTypeMismatchError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.stateInteractionTypeMismatchError.code, BrowserAuthErrorMessage.stateInteractionTypeMismatchError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when a browser interaction (redirect or popup) is in progress.\r\n */\r\n BrowserAuthError.createInteractionInProgressError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.interactionInProgress.code, BrowserAuthErrorMessage.interactionInProgress.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the popup window could not be opened.\r\n * @param errDetail\r\n */\r\n BrowserAuthError.createPopupWindowError = function (errDetail) {\r\n var errorMessage = BrowserAuthErrorMessage.popupWindowError.desc;\r\n errorMessage = !StringUtils.isEmpty(errDetail) ? errorMessage + \" Details: \" + errDetail : errorMessage;\r\n return new BrowserAuthError(BrowserAuthErrorMessage.popupWindowError.code, errorMessage);\r\n };\r\n /**\r\n * Creates an error thrown when window.open returns an empty window object.\r\n * @param errDetail\r\n */\r\n BrowserAuthError.createEmptyWindowCreatedError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.emptyWindowError.code, BrowserAuthErrorMessage.emptyWindowError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the user closes a popup.\r\n */\r\n BrowserAuthError.createUserCancelledError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.userCancelledError.code, BrowserAuthErrorMessage.userCancelledError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when monitorPopupFromHash times out for a given popup.\r\n */\r\n BrowserAuthError.createMonitorPopupTimeoutError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.monitorPopupTimeoutError.code, BrowserAuthErrorMessage.monitorPopupTimeoutError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when monitorIframeFromHash times out for a given iframe.\r\n */\r\n BrowserAuthError.createMonitorIframeTimeoutError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.monitorIframeTimeoutError.code, BrowserAuthErrorMessage.monitorIframeTimeoutError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when navigateWindow is called inside an iframe or brokered applications.\r\n * @param windowParentCheck\r\n */\r\n BrowserAuthError.createRedirectInIframeError = function (windowParentCheck) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.redirectInIframeError.code, BrowserAuthErrorMessage.redirectInIframeError.desc + \" (window.parent !== window) => \" + windowParentCheck);\r\n };\r\n /**\r\n * Creates an error thrown when an auth reload is done inside an iframe.\r\n */\r\n BrowserAuthError.createBlockReloadInHiddenIframeError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.blockTokenRequestsInHiddenIframeError.code, BrowserAuthErrorMessage.blockTokenRequestsInHiddenIframeError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when a popup attempts to call an acquireToken API\r\n * @returns\r\n */\r\n BrowserAuthError.createBlockAcquireTokenInPopupsError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.blockAcquireTokenInPopupsError.code, BrowserAuthErrorMessage.blockAcquireTokenInPopupsError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when an iframe is found to be closed before the timeout is reached.\r\n */\r\n BrowserAuthError.createIframeClosedPrematurelyError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.iframeClosedPrematurelyError.code, BrowserAuthErrorMessage.iframeClosedPrematurelyError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the logout API is called on any of the silent interaction clients\r\n */\r\n BrowserAuthError.createSilentLogoutUnsupportedError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.silentLogoutUnsupportedError.code, BrowserAuthErrorMessage.silentLogoutUnsupportedError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the account object is not provided in the acquireTokenSilent API.\r\n */\r\n BrowserAuthError.createNoAccountError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.noAccountError.code, BrowserAuthErrorMessage.noAccountError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when a given prompt value is invalid for silent requests.\r\n */\r\n BrowserAuthError.createSilentPromptValueError = function (givenPrompt) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.silentPromptValueError.code, BrowserAuthErrorMessage.silentPromptValueError.desc + \" Given value: \" + givenPrompt);\r\n };\r\n /**\r\n * Creates an error thrown when the cached token request could not be retrieved from the cache\r\n */\r\n BrowserAuthError.createUnableToParseTokenRequestCacheError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.unableToParseTokenRequestCacheError.code, BrowserAuthErrorMessage.unableToParseTokenRequestCacheError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the token request could not be retrieved from the cache\r\n */\r\n BrowserAuthError.createNoTokenRequestCacheError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.noTokenRequestCacheError.code, BrowserAuthErrorMessage.noTokenRequestCacheError.desc);\r\n };\r\n /**\r\n * Creates an error thrown when handleCodeResponse is called before initiateAuthRequest (InteractionHandler)\r\n */\r\n BrowserAuthError.createAuthRequestNotSetError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.authRequestNotSet.code, BrowserAuthErrorMessage.authRequestNotSet.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the authority could not be retrieved from the cache\r\n */\r\n BrowserAuthError.createNoCachedAuthorityError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.noCachedAuthorityError.code, BrowserAuthErrorMessage.noCachedAuthorityError.desc);\r\n };\r\n /**\r\n * Creates an error thrown if cache type is invalid.\r\n */\r\n BrowserAuthError.createInvalidCacheTypeError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.invalidCacheType.code, \"\" + BrowserAuthErrorMessage.invalidCacheType.desc);\r\n };\r\n /**\r\n * Create an error thrown when login and token requests are made from a non-browser environment\r\n */\r\n BrowserAuthError.createNonBrowserEnvironmentError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.notInBrowserEnvironment.code, BrowserAuthErrorMessage.notInBrowserEnvironment.desc);\r\n };\r\n /**\r\n * Create an error thrown when indexDB database is not open\r\n */\r\n BrowserAuthError.createDatabaseNotOpenError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.databaseNotOpen.code, BrowserAuthErrorMessage.databaseNotOpen.desc);\r\n };\r\n /**\r\n * Create an error thrown when token fetch fails due to no internet\r\n */\r\n BrowserAuthError.createNoNetworkConnectivityError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.noNetworkConnectivity.code, BrowserAuthErrorMessage.noNetworkConnectivity.desc);\r\n };\r\n /**\r\n * Create an error thrown when token fetch fails due to reasons other than internet connectivity\r\n */\r\n BrowserAuthError.createPostRequestFailedError = function (errorDesc, endpoint) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.postRequestFailed.code, BrowserAuthErrorMessage.postRequestFailed.desc + \" | Network client threw: \" + errorDesc + \" | Attempted to reach: \" + endpoint.split(\"?\")[0]);\r\n };\r\n /**\r\n * Create an error thrown when get request fails due to reasons other than internet connectivity\r\n */\r\n BrowserAuthError.createGetRequestFailedError = function (errorDesc, endpoint) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.getRequestFailed.code, BrowserAuthErrorMessage.getRequestFailed.desc + \" | Network client threw: \" + errorDesc + \" | Attempted to reach: \" + endpoint.split(\"?\")[0]);\r\n };\r\n /**\r\n * Create an error thrown when network client fails to parse network response\r\n */\r\n BrowserAuthError.createFailedToParseNetworkResponseError = function (endpoint) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.failedToParseNetworkResponse.code, BrowserAuthErrorMessage.failedToParseNetworkResponse.desc + \" | Attempted to reach: \" + endpoint.split(\"?\")[0]);\r\n };\r\n /**\r\n * Create an error thrown when the necessary information is not available to sideload tokens\r\n */\r\n BrowserAuthError.createUnableToLoadTokenError = function (errorDetail) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.unableToLoadTokenError.code, BrowserAuthErrorMessage.unableToLoadTokenError.desc + \" | \" + errorDetail);\r\n };\r\n /**\r\n * Create an error thrown when the queried cryptographic key is not found in IndexedDB\r\n */\r\n BrowserAuthError.createSigningKeyNotFoundInStorageError = function (keyId) {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.signingKeyNotFoundInStorage.code, BrowserAuthErrorMessage.signingKeyNotFoundInStorage.desc + \" | No match found for KeyId: \" + keyId);\r\n };\r\n /**\r\n * Create an error when an authorization code is required but not provided\r\n */\r\n BrowserAuthError.createAuthCodeRequiredError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.authCodeRequired.code, BrowserAuthErrorMessage.authCodeRequired.desc);\r\n };\r\n /**\r\n * Create an error when an authorization code or native account ID is required but not provided\r\n */\r\n BrowserAuthError.createAuthCodeOrNativeAccountIdRequiredError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.authCodeOrNativeAccountRequired.code, BrowserAuthErrorMessage.authCodeOrNativeAccountRequired.desc);\r\n };\r\n /**\r\n * Create an error when both authorization code and native account ID are provided\r\n */\r\n BrowserAuthError.createSpaCodeAndNativeAccountIdPresentError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.spaCodeAndNativeAccountPresent.code, BrowserAuthErrorMessage.spaCodeAndNativeAccountPresent.desc);\r\n };\r\n /**\r\n * Create an error when IndexedDB is unavailable\r\n */\r\n BrowserAuthError.createDatabaseUnavailableError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.databaseUnavailable.code, BrowserAuthErrorMessage.databaseUnavailable.desc);\r\n };\r\n /**\r\n * Create an error when native token acquisition is not possible\r\n */\r\n BrowserAuthError.createUnableToAcquireTokenFromNativePlatformError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.unableToAcquireTokenFromNativePlatform.code, BrowserAuthErrorMessage.unableToAcquireTokenFromNativePlatform.desc);\r\n };\r\n /**\r\n * Create an error thrown when Handshake with browser extension times out\r\n */\r\n BrowserAuthError.createNativeHandshakeTimeoutError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.nativeHandshakeTimeout.code, BrowserAuthErrorMessage.nativeHandshakeTimeout.desc);\r\n };\r\n /**\r\n * Create an error thrown when browser extension is not installed\r\n */\r\n BrowserAuthError.createNativeExtensionNotInstalledError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.nativeExtensionNotInstalled.code, BrowserAuthErrorMessage.nativeExtensionNotInstalled.desc);\r\n };\r\n /**\r\n * Create an error when native connection has not been established\r\n * @returns\r\n */\r\n BrowserAuthError.createNativeConnectionNotEstablishedError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.nativeConnectionNotEstablished.code, BrowserAuthErrorMessage.nativeConnectionNotEstablished.desc);\r\n };\r\n /**\r\n * Create an error thrown when the initialize function hasn't been called\r\n */\r\n BrowserAuthError.createNativeBrokerCalledBeforeInitialize = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.nativeBrokerCalledBeforeInitialize.code, BrowserAuthErrorMessage.nativeBrokerCalledBeforeInitialize.desc);\r\n };\r\n /**\r\n * Create an error thrown when requesting a token directly from the native platform with an unsupported prompt parameter e.g. select_account, login or create\r\n * These requests must go through eSTS to ensure eSTS is aware of the new account\r\n */\r\n BrowserAuthError.createNativePromptParameterNotSupportedError = function () {\r\n return new BrowserAuthError(BrowserAuthErrorMessage.nativePromptNotSupported.code, BrowserAuthErrorMessage.nativePromptNotSupported.desc);\r\n };\r\n return BrowserAuthError;\r\n}(AuthError));\n\nexport { BrowserAuthError, BrowserAuthErrorMessage };\n//# sourceMappingURL=BrowserAuthError.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { Base64Encode } from '../encode/Base64Encode.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n// Constant byte array length\r\nvar RANDOM_BYTE_ARR_LENGTH = 32;\r\n/**\r\n * Class which exposes APIs to generate PKCE codes and code verifiers.\r\n */\r\nvar PkceGenerator = /** @class */ (function () {\r\n function PkceGenerator(cryptoObj) {\r\n this.base64Encode = new Base64Encode();\r\n this.cryptoObj = cryptoObj;\r\n }\r\n /**\r\n * Generates PKCE Codes. See the RFC for more information: https://tools.ietf.org/html/rfc7636\r\n */\r\n PkceGenerator.prototype.generateCodes = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var codeVerifier, codeChallenge;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n codeVerifier = this.generateCodeVerifier();\r\n return [4 /*yield*/, this.generateCodeChallengeFromVerifier(codeVerifier)];\r\n case 1:\r\n codeChallenge = _a.sent();\r\n return [2 /*return*/, {\r\n verifier: codeVerifier,\r\n challenge: codeChallenge\r\n }];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Generates a random 32 byte buffer and returns the base64\r\n * encoded string to be used as a PKCE Code Verifier\r\n */\r\n PkceGenerator.prototype.generateCodeVerifier = function () {\r\n try {\r\n // Generate random values as utf-8\r\n var buffer = new Uint8Array(RANDOM_BYTE_ARR_LENGTH);\r\n this.cryptoObj.getRandomValues(buffer);\r\n // encode verifier as base64\r\n var pkceCodeVerifierB64 = this.base64Encode.urlEncodeArr(buffer);\r\n return pkceCodeVerifierB64;\r\n }\r\n catch (e) {\r\n throw BrowserAuthError.createPkceNotGeneratedError(e);\r\n }\r\n };\r\n /**\r\n * Creates a base64 encoded PKCE Code Challenge string from the\r\n * hash created from the PKCE Code Verifier supplied\r\n */\r\n PkceGenerator.prototype.generateCodeChallengeFromVerifier = function (pkceCodeVerifier) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var pkceHashedCodeVerifier, e_1;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n _a.trys.push([0, 2, , 3]);\r\n return [4 /*yield*/, this.cryptoObj.sha256Digest(pkceCodeVerifier)];\r\n case 1:\r\n pkceHashedCodeVerifier = _a.sent();\r\n // encode hash as base64\r\n return [2 /*return*/, this.base64Encode.urlEncodeArr(new Uint8Array(pkceHashedCodeVerifier))];\r\n case 2:\r\n e_1 = _a.sent();\r\n throw BrowserAuthError.createPkceNotGeneratedError(e_1);\r\n case 3: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n return PkceGenerator;\r\n}());\n\nexport { PkceGenerator };\n//# sourceMappingURL=PkceGenerator.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { KEY_FORMAT_JWK } from '../utils/BrowserConstants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar ModernBrowserCrypto = /** @class */ (function () {\r\n function ModernBrowserCrypto() {\r\n }\r\n ModernBrowserCrypto.prototype.getRandomValues = function (dataBuffer) {\r\n return window.crypto.getRandomValues(dataBuffer);\r\n };\r\n ModernBrowserCrypto.prototype.generateKey = function (algorithm, extractable, keyUsages) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.crypto.subtle.generateKey(algorithm, extractable, keyUsages)];\r\n });\r\n });\r\n };\r\n ModernBrowserCrypto.prototype.exportKey = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.crypto.subtle.exportKey(KEY_FORMAT_JWK, key)];\r\n });\r\n });\r\n };\r\n ModernBrowserCrypto.prototype.importKey = function (keyData, algorithm, extractable, keyUsages) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.crypto.subtle.importKey(KEY_FORMAT_JWK, keyData, algorithm, extractable, keyUsages)];\r\n });\r\n });\r\n };\r\n ModernBrowserCrypto.prototype.sign = function (algorithm, key, data) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.crypto.subtle.sign(algorithm, key, data)];\r\n });\r\n });\r\n };\r\n ModernBrowserCrypto.prototype.digest = function (algorithm, data) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.crypto.subtle.digest(algorithm, data)];\r\n });\r\n });\r\n };\r\n return ModernBrowserCrypto;\r\n}());\n\nexport { ModernBrowserCrypto };\n//# sourceMappingURL=ModernBrowserCrypto.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __spread, __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { KEY_FORMAT_JWK } from '../utils/BrowserConstants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar MsrBrowserCrypto = /** @class */ (function () {\r\n function MsrBrowserCrypto() {\r\n }\r\n MsrBrowserCrypto.prototype.initPrng = function (entropy) {\r\n // Turn into array, as initPrng seems to not always like Uint8Array (even though it should support both)\r\n return window.msrCrypto.initPrng(__spread(entropy));\r\n };\r\n MsrBrowserCrypto.prototype.getRandomValues = function (dataBuffer) {\r\n return window.msrCrypto.getRandomValues(dataBuffer);\r\n };\r\n MsrBrowserCrypto.prototype.generateKey = function (algorithm, extractable, keyUsages) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.msrCrypto.subtle.generateKey(algorithm, extractable, keyUsages)];\r\n });\r\n });\r\n };\r\n MsrBrowserCrypto.prototype.exportKey = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.msrCrypto.subtle.exportKey(KEY_FORMAT_JWK, key)];\r\n });\r\n });\r\n };\r\n MsrBrowserCrypto.prototype.importKey = function (keyData, algorithm, extractable, keyUsages) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.msrCrypto.subtle.importKey(KEY_FORMAT_JWK, keyData, algorithm, extractable, keyUsages)];\r\n });\r\n });\r\n };\r\n MsrBrowserCrypto.prototype.sign = function (algorithm, key, data) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.msrCrypto.subtle.sign(algorithm, key, data)];\r\n });\r\n });\r\n };\r\n MsrBrowserCrypto.prototype.digest = function (algorithm, data) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, window.msrCrypto.subtle.digest(algorithm, data)];\r\n });\r\n });\r\n };\r\n return MsrBrowserCrypto;\r\n}());\n\nexport { MsrBrowserCrypto };\n//# sourceMappingURL=MsrBrowserCrypto.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { Constants } from '@azure/msal-common';\nimport { KEY_FORMAT_JWK } from '../utils/BrowserConstants.js';\nimport { BrowserStringUtils } from '../utils/BrowserStringUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar MsBrowserCrypto = /** @class */ (function () {\r\n function MsBrowserCrypto() {\r\n }\r\n MsBrowserCrypto.prototype.getRandomValues = function (dataBuffer) {\r\n return window[\"msCrypto\"].getRandomValues(dataBuffer);\r\n };\r\n MsBrowserCrypto.prototype.generateKey = function (algorithm, extractable, keyUsages) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n var msGenerateKey = window[\"msCrypto\"].subtle.generateKey(algorithm, extractable, keyUsages);\r\n msGenerateKey.addEventListener(\"complete\", function (e) {\r\n resolve(e.target.result);\r\n });\r\n msGenerateKey.addEventListener(\"error\", function (error) {\r\n reject(error);\r\n });\r\n })];\r\n });\r\n });\r\n };\r\n MsBrowserCrypto.prototype.exportKey = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n var msExportKey = window[\"msCrypto\"].subtle.exportKey(KEY_FORMAT_JWK, key);\r\n msExportKey.addEventListener(\"complete\", function (e) {\r\n var resultBuffer = e.target.result;\r\n var resultString = BrowserStringUtils.utf8ArrToString(new Uint8Array(resultBuffer))\r\n .replace(/\\r/g, Constants.EMPTY_STRING)\r\n .replace(/\\n/g, Constants.EMPTY_STRING)\r\n .replace(/\\t/g, Constants.EMPTY_STRING)\r\n .split(\" \").join(Constants.EMPTY_STRING)\r\n .replace(\"\\u0000\", Constants.EMPTY_STRING);\r\n try {\r\n resolve(JSON.parse(resultString));\r\n }\r\n catch (e) {\r\n reject(e);\r\n }\r\n });\r\n msExportKey.addEventListener(\"error\", function (error) {\r\n reject(error);\r\n });\r\n })];\r\n });\r\n });\r\n };\r\n MsBrowserCrypto.prototype.importKey = function (keyData, algorithm, extractable, keyUsages) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var keyString, keyBuffer;\r\n return __generator(this, function (_a) {\r\n keyString = BrowserStringUtils.getSortedObjectString(keyData);\r\n keyBuffer = BrowserStringUtils.stringToArrayBuffer(keyString);\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n var msImportKey = window[\"msCrypto\"].subtle.importKey(KEY_FORMAT_JWK, keyBuffer, algorithm, extractable, keyUsages);\r\n msImportKey.addEventListener(\"complete\", function (e) {\r\n resolve(e.target.result);\r\n });\r\n msImportKey.addEventListener(\"error\", function (error) {\r\n reject(error);\r\n });\r\n })];\r\n });\r\n });\r\n };\r\n MsBrowserCrypto.prototype.sign = function (algorithm, key, data) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n var msSign = window[\"msCrypto\"].subtle.sign(algorithm, key, data);\r\n msSign.addEventListener(\"complete\", function (e) {\r\n resolve(e.target.result);\r\n });\r\n msSign.addEventListener(\"error\", function (error) {\r\n reject(error);\r\n });\r\n })];\r\n });\r\n });\r\n };\r\n MsBrowserCrypto.prototype.digest = function (algorithm, data) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n var digestOperation = window[\"msCrypto\"].subtle.digest(algorithm, data.buffer);\r\n digestOperation.addEventListener(\"complete\", function (e) {\r\n resolve(e.target.result);\r\n });\r\n digestOperation.addEventListener(\"error\", function (error) {\r\n reject(error);\r\n });\r\n })];\r\n });\r\n });\r\n };\r\n return MsBrowserCrypto;\r\n}());\n\nexport { MsBrowserCrypto };\n//# sourceMappingURL=MsBrowserCrypto.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { AuthError } from '@azure/msal-common';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * BrowserAuthErrorMessage class containing string constants used by error codes and messages.\r\n */\r\nvar BrowserConfigurationAuthErrorMessage = {\r\n redirectUriNotSet: {\r\n code: \"redirect_uri_empty\",\r\n desc: \"A redirect URI is required for all calls, and none has been set.\"\r\n },\r\n postLogoutUriNotSet: {\r\n code: \"post_logout_uri_empty\",\r\n desc: \"A post logout redirect has not been set.\"\r\n },\r\n storageNotSupportedError: {\r\n code: \"storage_not_supported\",\r\n desc: \"Given storage configuration option was not supported.\"\r\n },\r\n noRedirectCallbacksSet: {\r\n code: \"no_redirect_callbacks\",\r\n desc: \"No redirect callbacks have been set. Please call setRedirectCallbacks() with the appropriate function arguments before continuing. \" +\r\n \"More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics.\"\r\n },\r\n invalidCallbackObject: {\r\n code: \"invalid_callback_object\",\r\n desc: \"The object passed for the callback was invalid. \" +\r\n \"More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics.\"\r\n },\r\n stubPcaInstanceCalled: {\r\n code: \"stubbed_public_client_application_called\",\r\n desc: \"Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors\"\r\n },\r\n inMemRedirectUnavailable: {\r\n code: \"in_mem_redirect_unavailable\",\r\n desc: \"Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true.\"\r\n },\r\n entropyNotProvided: {\r\n code: \"entropy_not_provided\",\r\n desc: \"The available browser crypto interface requires entropy set via system.cryptoOptions.entropy configuration option.\"\r\n }\r\n};\r\n/**\r\n * Browser library error class thrown by the MSAL.js library for SPAs\r\n */\r\nvar BrowserConfigurationAuthError = /** @class */ (function (_super) {\r\n __extends(BrowserConfigurationAuthError, _super);\r\n function BrowserConfigurationAuthError(errorCode, errorMessage) {\r\n var _this = _super.call(this, errorCode, errorMessage) || this;\r\n _this.name = \"BrowserConfigurationAuthError\";\r\n Object.setPrototypeOf(_this, BrowserConfigurationAuthError.prototype);\r\n return _this;\r\n }\r\n /**\r\n * Creates an error thrown when the redirect uri is empty (not set by caller)\r\n */\r\n BrowserConfigurationAuthError.createRedirectUriEmptyError = function () {\r\n return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.redirectUriNotSet.code, BrowserConfigurationAuthErrorMessage.redirectUriNotSet.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the post-logout redirect uri is empty (not set by caller)\r\n */\r\n BrowserConfigurationAuthError.createPostLogoutRedirectUriEmptyError = function () {\r\n return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.code, BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.desc);\r\n };\r\n /**\r\n * Creates error thrown when given storage location is not supported.\r\n * @param givenStorageLocation\r\n */\r\n BrowserConfigurationAuthError.createStorageNotSupportedError = function (givenStorageLocation) {\r\n return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.storageNotSupportedError.code, BrowserConfigurationAuthErrorMessage.storageNotSupportedError.desc + \" Given Location: \" + givenStorageLocation);\r\n };\r\n /**\r\n * Creates error thrown when redirect callbacks are not set before calling loginRedirect() or acquireTokenRedirect().\r\n */\r\n BrowserConfigurationAuthError.createRedirectCallbacksNotSetError = function () {\r\n return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.code, BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.desc);\r\n };\r\n /**\r\n * Creates error thrown when the stub instance of PublicClientApplication is called.\r\n */\r\n BrowserConfigurationAuthError.createStubPcaInstanceCalledError = function () {\r\n return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.code, BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.desc);\r\n };\r\n /*\r\n * Create an error thrown when in-memory storage is used and storeAuthStateInCookie=false.\r\n */\r\n BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError = function () {\r\n return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.code, BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.desc);\r\n };\r\n /**\r\n * Creates an error thrown when a crypto interface that requires entropy is initialized without entropy\r\n */\r\n BrowserConfigurationAuthError.createEntropyNotProvided = function () {\r\n return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.entropyNotProvided.code, BrowserConfigurationAuthErrorMessage.entropyNotProvided.desc);\r\n };\r\n return BrowserConfigurationAuthError;\r\n}(AuthError));\n\nexport { BrowserConfigurationAuthError, BrowserConfigurationAuthErrorMessage };\n//# sourceMappingURL=BrowserConfigurationAuthError.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { BrowserStringUtils } from '../utils/BrowserStringUtils.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { ModernBrowserCrypto } from './ModernBrowserCrypto.js';\nimport { MsrBrowserCrypto } from './MsrBrowserCrypto.js';\nimport { MsBrowserCrypto } from './MsBrowserCrypto.js';\nimport { BrowserConfigurationAuthError } from '../error/BrowserConfigurationAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * See here for more info on RsaHashedKeyGenParams: https://developer.mozilla.org/en-US/docs/Web/API/RsaHashedKeyGenParams\r\n */\r\n// RSA KeyGen Algorithm\r\nvar PKCS1_V15_KEYGEN_ALG = \"RSASSA-PKCS1-v1_5\";\r\n// SHA-256 hashing algorithm\r\nvar S256_HASH_ALG = \"SHA-256\";\r\n// MOD length for PoP tokens\r\nvar MODULUS_LENGTH = 2048;\r\n// Public Exponent\r\nvar PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);\r\n/**\r\n * This class implements functions used by the browser library to perform cryptography operations such as\r\n * hashing and encoding. It also has helper functions to validate the availability of specific APIs.\r\n */\r\nvar BrowserCrypto = /** @class */ (function () {\r\n function BrowserCrypto(logger, cryptoOptions) {\r\n var _a, _b;\r\n this.logger = logger;\r\n this.cryptoOptions = cryptoOptions;\r\n if (this.hasBrowserCrypto()) {\r\n // Use standard modern web crypto if available\r\n this.logger.verbose(\"BrowserCrypto: modern crypto interface available\");\r\n this.subtleCrypto = new ModernBrowserCrypto();\r\n }\r\n else if (this.hasIECrypto()) {\r\n // For IE11, use msCrypto interface\r\n this.logger.verbose(\"BrowserCrypto: MS crypto interface available\");\r\n this.subtleCrypto = new MsBrowserCrypto();\r\n }\r\n else if (this.hasMsrCrypto() && ((_a = this.cryptoOptions) === null || _a === void 0 ? void 0 : _a.useMsrCrypto)) {\r\n // For other browsers, use MSR Crypto if found\r\n this.logger.verbose(\"BrowserCrypto: MSR crypto interface available\");\r\n this.subtleCrypto = new MsrBrowserCrypto();\r\n }\r\n else {\r\n if (this.hasMsrCrypto()) {\r\n this.logger.info(\"BrowserCrypto: MSR Crypto interface available but system.cryptoOptions.useMsrCrypto not enabled\");\r\n }\r\n this.logger.error(\"BrowserCrypto: No crypto interfaces available.\");\r\n throw BrowserAuthError.createCryptoNotAvailableError(\"Browser crypto, msCrypto, or msrCrypto interfaces not available.\");\r\n }\r\n // Mainly needed for MSR Crypto: https://github.com/microsoft/MSR-JavaScript-Crypto#random-number-generator-prng\r\n if (this.subtleCrypto.initPrng) {\r\n this.logger.verbose(\"BrowserCrypto: Interface requires entropy\");\r\n if (!((_b = this.cryptoOptions) === null || _b === void 0 ? void 0 : _b.entropy)) {\r\n this.logger.error(\"BrowserCrypto: Interface requires entropy but none provided.\");\r\n throw BrowserConfigurationAuthError.createEntropyNotProvided();\r\n }\r\n this.logger.verbose(\"BrowserCrypto: Entropy provided\");\r\n this.subtleCrypto.initPrng(this.cryptoOptions.entropy);\r\n }\r\n this.keygenAlgorithmOptions = {\r\n name: PKCS1_V15_KEYGEN_ALG,\r\n hash: S256_HASH_ALG,\r\n modulusLength: MODULUS_LENGTH,\r\n publicExponent: PUBLIC_EXPONENT\r\n };\r\n }\r\n /**\r\n * Check whether IE crypto or other browser cryptography is available.\r\n */\r\n BrowserCrypto.prototype.hasIECrypto = function () {\r\n return \"msCrypto\" in window;\r\n };\r\n /**\r\n * Check whether browser crypto is available.\r\n */\r\n BrowserCrypto.prototype.hasBrowserCrypto = function () {\r\n return \"crypto\" in window;\r\n };\r\n /**\r\n * Check whether MSR crypto polyfill is available\r\n */\r\n BrowserCrypto.prototype.hasMsrCrypto = function () {\r\n return \"msrCrypto\" in window;\r\n };\r\n /**\r\n * Returns a sha-256 hash of the given dataString as an ArrayBuffer.\r\n * @param dataString\r\n */\r\n BrowserCrypto.prototype.sha256Digest = function (dataString) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var data;\r\n return __generator(this, function (_a) {\r\n data = BrowserStringUtils.stringToUtf8Arr(dataString);\r\n // MSR Crypto wants object with name property, instead of string\r\n return [2 /*return*/, this.subtleCrypto.digest({ name: S256_HASH_ALG }, data)];\r\n });\r\n });\r\n };\r\n /**\r\n * Populates buffer with cryptographically random values.\r\n * @param dataBuffer\r\n */\r\n BrowserCrypto.prototype.getRandomValues = function (dataBuffer) {\r\n return this.subtleCrypto.getRandomValues(dataBuffer);\r\n };\r\n /**\r\n * Generates a keypair based on current keygen algorithm config.\r\n * @param extractable\r\n * @param usages\r\n */\r\n BrowserCrypto.prototype.generateKeyPair = function (extractable, usages) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, this.subtleCrypto.generateKey(this.keygenAlgorithmOptions, extractable, usages)];\r\n });\r\n });\r\n };\r\n /**\r\n * Export key as Json Web Key (JWK)\r\n * @param key\r\n * @param format\r\n */\r\n BrowserCrypto.prototype.exportJwk = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, this.subtleCrypto.exportKey(key)];\r\n });\r\n });\r\n };\r\n /**\r\n * Imports key as Json Web Key (JWK), can set extractable and usages.\r\n * @param key\r\n * @param format\r\n * @param extractable\r\n * @param usages\r\n */\r\n BrowserCrypto.prototype.importJwk = function (key, extractable, usages) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, this.subtleCrypto.importKey(key, this.keygenAlgorithmOptions, extractable, usages)];\r\n });\r\n });\r\n };\r\n /**\r\n * Signs given data with given key\r\n * @param key\r\n * @param data\r\n */\r\n BrowserCrypto.prototype.sign = function (key, data) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, this.subtleCrypto.sign(this.keygenAlgorithmOptions, key, data)];\r\n });\r\n });\r\n };\r\n return BrowserCrypto;\r\n}());\n\nexport { BrowserCrypto };\n//# sourceMappingURL=BrowserCrypto.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { DB_NAME, DB_VERSION, DB_TABLE_NAME } from '../utils/BrowserConstants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Storage wrapper for IndexedDB storage in browsers: https://developer.mozilla.org/en-US/docs/Web/API/IndexedDB_API\r\n */\r\nvar DatabaseStorage = /** @class */ (function () {\r\n function DatabaseStorage() {\r\n this.dbName = DB_NAME;\r\n this.version = DB_VERSION;\r\n this.tableName = DB_TABLE_NAME;\r\n this.dbOpen = false;\r\n }\r\n /**\r\n * Opens IndexedDB instance.\r\n */\r\n DatabaseStorage.prototype.open = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n var openDB = window.indexedDB.open(_this.dbName, _this.version);\r\n openDB.addEventListener(\"upgradeneeded\", function (e) {\r\n var event = e;\r\n event.target.result.createObjectStore(_this.tableName);\r\n });\r\n openDB.addEventListener(\"success\", function (e) {\r\n var event = e;\r\n _this.db = event.target.result;\r\n _this.dbOpen = true;\r\n resolve();\r\n });\r\n openDB.addEventListener(\"error\", function () { return reject(BrowserAuthError.createDatabaseUnavailableError()); });\r\n })];\r\n });\r\n });\r\n };\r\n /**\r\n * Closes the connection to IndexedDB database when all pending transactions\r\n * complete.\r\n */\r\n DatabaseStorage.prototype.closeConnection = function () {\r\n var db = this.db;\r\n if (db && this.dbOpen) {\r\n db.close();\r\n this.dbOpen = false;\r\n }\r\n };\r\n /**\r\n * Opens database if it's not already open\r\n */\r\n DatabaseStorage.prototype.validateDbIsOpen = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n if (!!this.dbOpen) return [3 /*break*/, 2];\r\n return [4 /*yield*/, this.open()];\r\n case 1: return [2 /*return*/, _a.sent()];\r\n case 2: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Retrieves item from IndexedDB instance.\r\n * @param key\r\n */\r\n DatabaseStorage.prototype.getItem = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.validateDbIsOpen()];\r\n case 1:\r\n _a.sent();\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n // TODO: Add timeouts?\r\n if (!_this.db) {\r\n return reject(BrowserAuthError.createDatabaseNotOpenError());\r\n }\r\n var transaction = _this.db.transaction([_this.tableName], \"readonly\");\r\n var objectStore = transaction.objectStore(_this.tableName);\r\n var dbGet = objectStore.get(key);\r\n dbGet.addEventListener(\"success\", function (e) {\r\n var event = e;\r\n _this.closeConnection();\r\n resolve(event.target.result);\r\n });\r\n dbGet.addEventListener(\"error\", function (e) {\r\n _this.closeConnection();\r\n reject(e);\r\n });\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Adds item to IndexedDB under given key\r\n * @param key\r\n * @param payload\r\n */\r\n DatabaseStorage.prototype.setItem = function (key, payload) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.validateDbIsOpen()];\r\n case 1:\r\n _a.sent();\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n // TODO: Add timeouts?\r\n if (!_this.db) {\r\n return reject(BrowserAuthError.createDatabaseNotOpenError());\r\n }\r\n var transaction = _this.db.transaction([_this.tableName], \"readwrite\");\r\n var objectStore = transaction.objectStore(_this.tableName);\r\n var dbPut = objectStore.put(payload, key);\r\n dbPut.addEventListener(\"success\", function () {\r\n _this.closeConnection();\r\n resolve();\r\n });\r\n dbPut.addEventListener(\"error\", function (e) {\r\n _this.closeConnection();\r\n reject(e);\r\n });\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Removes item from IndexedDB under given key\r\n * @param key\r\n */\r\n DatabaseStorage.prototype.removeItem = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.validateDbIsOpen()];\r\n case 1:\r\n _a.sent();\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n if (!_this.db) {\r\n return reject(BrowserAuthError.createDatabaseNotOpenError());\r\n }\r\n var transaction = _this.db.transaction([_this.tableName], \"readwrite\");\r\n var objectStore = transaction.objectStore(_this.tableName);\r\n var dbDelete = objectStore.delete(key);\r\n dbDelete.addEventListener(\"success\", function () {\r\n _this.closeConnection();\r\n resolve();\r\n });\r\n dbDelete.addEventListener(\"error\", function (e) {\r\n _this.closeConnection();\r\n reject(e);\r\n });\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Get all the keys from the storage object as an iterable array of strings.\r\n */\r\n DatabaseStorage.prototype.getKeys = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.validateDbIsOpen()];\r\n case 1:\r\n _a.sent();\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n if (!_this.db) {\r\n return reject(BrowserAuthError.createDatabaseNotOpenError());\r\n }\r\n var transaction = _this.db.transaction([_this.tableName], \"readonly\");\r\n var objectStore = transaction.objectStore(_this.tableName);\r\n var dbGetKeys = objectStore.getAllKeys();\r\n dbGetKeys.addEventListener(\"success\", function (e) {\r\n var event = e;\r\n _this.closeConnection();\r\n resolve(event.target.result);\r\n });\r\n dbGetKeys.addEventListener(\"error\", function (e) {\r\n _this.closeConnection();\r\n reject(e);\r\n });\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n *\r\n * Checks whether there is an object under the search key in the object store\r\n */\r\n DatabaseStorage.prototype.containsKey = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.validateDbIsOpen()];\r\n case 1:\r\n _a.sent();\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n if (!_this.db) {\r\n return reject(BrowserAuthError.createDatabaseNotOpenError());\r\n }\r\n var transaction = _this.db.transaction([_this.tableName], \"readonly\");\r\n var objectStore = transaction.objectStore(_this.tableName);\r\n var dbContainsKey = objectStore.count(key);\r\n dbContainsKey.addEventListener(\"success\", function (e) {\r\n var event = e;\r\n _this.closeConnection();\r\n resolve(event.target.result === 1);\r\n });\r\n dbContainsKey.addEventListener(\"error\", function (e) {\r\n _this.closeConnection();\r\n reject(e);\r\n });\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Deletes the MSAL database. The database is deleted rather than cleared to make it possible\r\n * for client applications to downgrade to a previous MSAL version without worrying about forward compatibility issues\r\n * with IndexedDB database versions.\r\n */\r\n DatabaseStorage.prototype.deleteDatabase = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n // Check if database being deleted exists\r\n if (this.db && this.dbOpen) {\r\n this.closeConnection();\r\n }\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n var deleteDbRequest = window.indexedDB.deleteDatabase(DB_NAME);\r\n deleteDbRequest.addEventListener(\"success\", function () { return resolve(true); });\r\n deleteDbRequest.addEventListener(\"blocked\", function () { return resolve(true); });\r\n deleteDbRequest.addEventListener(\"error\", function () { return reject(false); });\r\n })];\r\n });\r\n });\r\n };\r\n return DatabaseStorage;\r\n}());\n\nexport { DatabaseStorage };\n//# sourceMappingURL=DatabaseStorage.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar MemoryStorage = /** @class */ (function () {\r\n function MemoryStorage() {\r\n this.cache = new Map();\r\n }\r\n MemoryStorage.prototype.getItem = function (key) {\r\n return this.cache.get(key) || null;\r\n };\r\n MemoryStorage.prototype.setItem = function (key, value) {\r\n this.cache.set(key, value);\r\n };\r\n MemoryStorage.prototype.removeItem = function (key) {\r\n this.cache.delete(key);\r\n };\r\n MemoryStorage.prototype.getKeys = function () {\r\n var cacheKeys = [];\r\n this.cache.forEach(function (value, key) {\r\n cacheKeys.push(key);\r\n });\r\n return cacheKeys;\r\n };\r\n MemoryStorage.prototype.containsKey = function (key) {\r\n return this.cache.has(key);\r\n };\r\n MemoryStorage.prototype.clear = function () {\r\n this.cache.clear();\r\n };\r\n return MemoryStorage;\r\n}());\n\nexport { MemoryStorage };\n//# sourceMappingURL=MemoryStorage.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { BrowserAuthError, BrowserAuthErrorMessage } from '../error/BrowserAuthError.js';\nimport { DatabaseStorage } from './DatabaseStorage.js';\nimport { MemoryStorage } from './MemoryStorage.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This class allows MSAL to store artifacts asynchronously using the DatabaseStorage IndexedDB wrapper,\r\n * backed up with the more volatile MemoryStorage object for cases in which IndexedDB may be unavailable.\r\n */\r\nvar AsyncMemoryStorage = /** @class */ (function () {\r\n function AsyncMemoryStorage(logger, storeName) {\r\n this.inMemoryCache = new MemoryStorage();\r\n this.indexedDBCache = new DatabaseStorage();\r\n this.logger = logger;\r\n this.storeName = storeName;\r\n }\r\n AsyncMemoryStorage.prototype.handleDatabaseAccessError = function (error) {\r\n if (error instanceof BrowserAuthError && error.errorCode === BrowserAuthErrorMessage.databaseUnavailable.code) {\r\n this.logger.error(\"Could not access persistent storage. This may be caused by browser privacy features which block persistent storage in third-party contexts.\");\r\n }\r\n else {\r\n throw error;\r\n }\r\n };\r\n /**\r\n * Get the item matching the given key. Tries in-memory cache first, then in the asynchronous\r\n * storage object if item isn't found in-memory.\r\n * @param key\r\n */\r\n AsyncMemoryStorage.prototype.getItem = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var item, e_1;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n item = this.inMemoryCache.getItem(key);\r\n if (!!item) return [3 /*break*/, 4];\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n this.logger.verbose(\"Queried item not found in in-memory cache, now querying persistent storage.\");\r\n return [4 /*yield*/, this.indexedDBCache.getItem(key)];\r\n case 2: return [2 /*return*/, _a.sent()];\r\n case 3:\r\n e_1 = _a.sent();\r\n this.handleDatabaseAccessError(e_1);\r\n return [3 /*break*/, 4];\r\n case 4: return [2 /*return*/, item];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Sets the item in the in-memory cache and then tries to set it in the asynchronous\r\n * storage object with the given key.\r\n * @param key\r\n * @param value\r\n */\r\n AsyncMemoryStorage.prototype.setItem = function (key, value) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var e_2;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.inMemoryCache.setItem(key, value);\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.indexedDBCache.setItem(key, value)];\r\n case 2:\r\n _a.sent();\r\n return [3 /*break*/, 4];\r\n case 3:\r\n e_2 = _a.sent();\r\n this.handleDatabaseAccessError(e_2);\r\n return [3 /*break*/, 4];\r\n case 4: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Removes the item matching the key from the in-memory cache, then tries to remove it from the asynchronous storage object.\r\n * @param key\r\n */\r\n AsyncMemoryStorage.prototype.removeItem = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var e_3;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.inMemoryCache.removeItem(key);\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.indexedDBCache.removeItem(key)];\r\n case 2:\r\n _a.sent();\r\n return [3 /*break*/, 4];\r\n case 3:\r\n e_3 = _a.sent();\r\n this.handleDatabaseAccessError(e_3);\r\n return [3 /*break*/, 4];\r\n case 4: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Get all the keys from the in-memory cache as an iterable array of strings. If no keys are found, query the keys in the\r\n * asynchronous storage object.\r\n */\r\n AsyncMemoryStorage.prototype.getKeys = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var cacheKeys, e_4;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n cacheKeys = this.inMemoryCache.getKeys();\r\n if (!(cacheKeys.length === 0)) return [3 /*break*/, 4];\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n this.logger.verbose(\"In-memory cache is empty, now querying persistent storage.\");\r\n return [4 /*yield*/, this.indexedDBCache.getKeys()];\r\n case 2: return [2 /*return*/, _a.sent()];\r\n case 3:\r\n e_4 = _a.sent();\r\n this.handleDatabaseAccessError(e_4);\r\n return [3 /*break*/, 4];\r\n case 4: return [2 /*return*/, cacheKeys];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Returns true or false if the given key is present in the cache.\r\n * @param key\r\n */\r\n AsyncMemoryStorage.prototype.containsKey = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var containsKey, e_5;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n containsKey = this.inMemoryCache.containsKey(key);\r\n if (!!containsKey) return [3 /*break*/, 4];\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n this.logger.verbose(\"Key not found in in-memory cache, now querying persistent storage.\");\r\n return [4 /*yield*/, this.indexedDBCache.containsKey(key)];\r\n case 2: return [2 /*return*/, _a.sent()];\r\n case 3:\r\n e_5 = _a.sent();\r\n this.handleDatabaseAccessError(e_5);\r\n return [3 /*break*/, 4];\r\n case 4: return [2 /*return*/, containsKey];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Clears in-memory Map\r\n */\r\n AsyncMemoryStorage.prototype.clearInMemory = function () {\r\n // InMemory cache is a Map instance, clear is straightforward\r\n this.logger.verbose(\"Deleting in-memory keystore \" + this.storeName);\r\n this.inMemoryCache.clear();\r\n this.logger.verbose(\"In-memory keystore \" + this.storeName + \" deleted\");\r\n };\r\n /**\r\n * Tries to delete the IndexedDB database\r\n * @returns\r\n */\r\n AsyncMemoryStorage.prototype.clearPersistent = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var dbDeleted, e_6;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n _a.trys.push([0, 2, , 3]);\r\n this.logger.verbose(\"Deleting persistent keystore\");\r\n return [4 /*yield*/, this.indexedDBCache.deleteDatabase()];\r\n case 1:\r\n dbDeleted = _a.sent();\r\n if (dbDeleted) {\r\n this.logger.verbose(\"Persistent keystore deleted\");\r\n }\r\n return [2 /*return*/, dbDeleted];\r\n case 2:\r\n e_6 = _a.sent();\r\n this.handleDatabaseAccessError(e_6);\r\n return [2 /*return*/, false];\r\n case 3: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n return AsyncMemoryStorage;\r\n}());\n\nexport { AsyncMemoryStorage };\n//# sourceMappingURL=AsyncMemoryStorage.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { Constants } from '../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Log message level.\r\n */\r\nvar LogLevel;\r\n(function (LogLevel) {\r\n LogLevel[LogLevel[\"Error\"] = 0] = \"Error\";\r\n LogLevel[LogLevel[\"Warning\"] = 1] = \"Warning\";\r\n LogLevel[LogLevel[\"Info\"] = 2] = \"Info\";\r\n LogLevel[LogLevel[\"Verbose\"] = 3] = \"Verbose\";\r\n LogLevel[LogLevel[\"Trace\"] = 4] = \"Trace\";\r\n})(LogLevel || (LogLevel = {}));\r\n/**\r\n * Class which facilitates logging of messages to a specific place.\r\n */\r\nvar Logger = /** @class */ (function () {\r\n function Logger(loggerOptions, packageName, packageVersion) {\r\n // Current log level, defaults to info.\r\n this.level = LogLevel.Info;\r\n var defaultLoggerCallback = function () {\r\n return;\r\n };\r\n var setLoggerOptions = loggerOptions || Logger.createDefaultLoggerOptions();\r\n this.localCallback = setLoggerOptions.loggerCallback || defaultLoggerCallback;\r\n this.piiLoggingEnabled = setLoggerOptions.piiLoggingEnabled || false;\r\n this.level = typeof (setLoggerOptions.logLevel) === \"number\" ? setLoggerOptions.logLevel : LogLevel.Info;\r\n this.correlationId = setLoggerOptions.correlationId || Constants.EMPTY_STRING;\r\n this.packageName = packageName || Constants.EMPTY_STRING;\r\n this.packageVersion = packageVersion || Constants.EMPTY_STRING;\r\n }\r\n Logger.createDefaultLoggerOptions = function () {\r\n return {\r\n loggerCallback: function () {\r\n // allow users to not set loggerCallback\r\n },\r\n piiLoggingEnabled: false,\r\n logLevel: LogLevel.Info\r\n };\r\n };\r\n /**\r\n * Create new Logger with existing configurations.\r\n */\r\n Logger.prototype.clone = function (packageName, packageVersion, correlationId) {\r\n return new Logger({ loggerCallback: this.localCallback, piiLoggingEnabled: this.piiLoggingEnabled, logLevel: this.level, correlationId: correlationId || this.correlationId }, packageName, packageVersion);\r\n };\r\n /**\r\n * Log message with required options.\r\n */\r\n Logger.prototype.logMessage = function (logMessage, options) {\r\n if ((options.logLevel > this.level) || (!this.piiLoggingEnabled && options.containsPii)) {\r\n return;\r\n }\r\n var timestamp = new Date().toUTCString();\r\n // Add correlationId to logs if set, correlationId provided on log messages take precedence\r\n var logHeader;\r\n if (!StringUtils.isEmpty(options.correlationId)) {\r\n logHeader = \"[\" + timestamp + \"] : [\" + options.correlationId + \"]\";\r\n }\r\n else if (!StringUtils.isEmpty(this.correlationId)) {\r\n logHeader = \"[\" + timestamp + \"] : [\" + this.correlationId + \"]\";\r\n }\r\n else {\r\n logHeader = \"[\" + timestamp + \"]\";\r\n }\r\n var log = logHeader + \" : \" + this.packageName + \"@\" + this.packageVersion + \" : \" + LogLevel[options.logLevel] + \" - \" + logMessage;\r\n // debug(`msal:${LogLevel[options.logLevel]}${options.containsPii ? \"-Pii\": Constants.EMPTY_STRING}${options.context ? `:${options.context}` : Constants.EMPTY_STRING}`)(logMessage);\r\n this.executeCallback(options.logLevel, log, options.containsPii || false);\r\n };\r\n /**\r\n * Execute callback with message.\r\n */\r\n Logger.prototype.executeCallback = function (level, message, containsPii) {\r\n if (this.localCallback) {\r\n this.localCallback(level, message, containsPii);\r\n }\r\n };\r\n /**\r\n * Logs error messages.\r\n */\r\n Logger.prototype.error = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Error,\r\n containsPii: false,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs error messages with PII.\r\n */\r\n Logger.prototype.errorPii = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Error,\r\n containsPii: true,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs warning messages.\r\n */\r\n Logger.prototype.warning = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Warning,\r\n containsPii: false,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs warning messages with PII.\r\n */\r\n Logger.prototype.warningPii = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Warning,\r\n containsPii: true,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs info messages.\r\n */\r\n Logger.prototype.info = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Info,\r\n containsPii: false,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs info messages with PII.\r\n */\r\n Logger.prototype.infoPii = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Info,\r\n containsPii: true,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs verbose messages.\r\n */\r\n Logger.prototype.verbose = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Verbose,\r\n containsPii: false,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs verbose messages with PII.\r\n */\r\n Logger.prototype.verbosePii = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Verbose,\r\n containsPii: true,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs trace messages.\r\n */\r\n Logger.prototype.trace = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Trace,\r\n containsPii: false,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Logs trace messages with PII.\r\n */\r\n Logger.prototype.tracePii = function (message, correlationId) {\r\n this.logMessage(message, {\r\n logLevel: LogLevel.Trace,\r\n containsPii: true,\r\n correlationId: correlationId || Constants.EMPTY_STRING\r\n });\r\n };\r\n /**\r\n * Returns whether PII Logging is enabled or not.\r\n */\r\n Logger.prototype.isPiiLoggingEnabled = function () {\r\n return this.piiLoggingEnabled || false;\r\n };\r\n return Logger;\r\n}());\n\nexport { LogLevel, Logger };\n//# sourceMappingURL=Logger.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { PerformanceEvents, JoseHeader } from '@azure/msal-common';\nimport { GuidGenerator } from './GuidGenerator.js';\nimport { Base64Encode } from '../encode/Base64Encode.js';\nimport { Base64Decode } from '../encode/Base64Decode.js';\nimport { PkceGenerator } from './PkceGenerator.js';\nimport { BrowserCrypto } from './BrowserCrypto.js';\nimport { BrowserStringUtils } from '../utils/BrowserStringUtils.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { CryptoKeyStore } from '../cache/CryptoKeyStore.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and\r\n * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).\r\n */\r\nvar CryptoOps = /** @class */ (function () {\r\n function CryptoOps(logger, performanceClient, cryptoConfig) {\r\n this.logger = logger;\r\n // Browser crypto needs to be validated first before any other classes can be set.\r\n this.browserCrypto = new BrowserCrypto(this.logger, cryptoConfig);\r\n this.b64Encode = new Base64Encode();\r\n this.b64Decode = new Base64Decode();\r\n this.guidGenerator = new GuidGenerator(this.browserCrypto);\r\n this.pkceGenerator = new PkceGenerator(this.browserCrypto);\r\n this.cache = new CryptoKeyStore(this.logger);\r\n this.performanceClient = performanceClient;\r\n }\r\n /**\r\n * Creates a new random GUID - used to populate state and nonce.\r\n * @returns string (GUID)\r\n */\r\n CryptoOps.prototype.createNewGuid = function () {\r\n return this.guidGenerator.generateGuid();\r\n };\r\n /**\r\n * Encodes input string to base64.\r\n * @param input\r\n */\r\n CryptoOps.prototype.base64Encode = function (input) {\r\n return this.b64Encode.encode(input);\r\n };\r\n /**\r\n * Decodes input string from base64.\r\n * @param input\r\n */\r\n CryptoOps.prototype.base64Decode = function (input) {\r\n return this.b64Decode.decode(input);\r\n };\r\n /**\r\n * Generates PKCE codes used in Authorization Code Flow.\r\n */\r\n CryptoOps.prototype.generatePkceCodes = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, this.pkceGenerator.generateCodes()];\r\n });\r\n });\r\n };\r\n /**\r\n * Generates a keypair, stores it and returns a thumbprint\r\n * @param request\r\n */\r\n CryptoOps.prototype.getPublicKeyThumbprint = function (request) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var publicKeyThumbMeasurement, keyPair, publicKeyJwk, pubKeyThumprintObj, publicJwkString, publicJwkHash, privateKeyJwk, unextractablePrivateKey;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n publicKeyThumbMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(PerformanceEvents.CryptoOptsGetPublicKeyThumbprint, request.correlationId);\r\n return [4 /*yield*/, this.browserCrypto.generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES)];\r\n case 1:\r\n keyPair = _b.sent();\r\n return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.publicKey)];\r\n case 2:\r\n publicKeyJwk = _b.sent();\r\n pubKeyThumprintObj = {\r\n e: publicKeyJwk.e,\r\n kty: publicKeyJwk.kty,\r\n n: publicKeyJwk.n\r\n };\r\n publicJwkString = BrowserStringUtils.getSortedObjectString(pubKeyThumprintObj);\r\n return [4 /*yield*/, this.hashString(publicJwkString)];\r\n case 3:\r\n publicJwkHash = _b.sent();\r\n return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.privateKey)];\r\n case 4:\r\n privateKeyJwk = _b.sent();\r\n return [4 /*yield*/, this.browserCrypto.importJwk(privateKeyJwk, false, [\"sign\"])];\r\n case 5:\r\n unextractablePrivateKey = _b.sent();\r\n // Store Keypair data in keystore\r\n return [4 /*yield*/, this.cache.asymmetricKeys.setItem(publicJwkHash, {\r\n privateKey: unextractablePrivateKey,\r\n publicKey: keyPair.publicKey,\r\n requestMethod: request.resourceRequestMethod,\r\n requestUri: request.resourceRequestUri\r\n })];\r\n case 6:\r\n // Store Keypair data in keystore\r\n _b.sent();\r\n if (publicKeyThumbMeasurement) {\r\n publicKeyThumbMeasurement.endMeasurement({\r\n success: true\r\n });\r\n }\r\n return [2 /*return*/, publicJwkHash];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Removes cryptographic keypair from key store matching the keyId passed in\r\n * @param kid\r\n */\r\n CryptoOps.prototype.removeTokenBindingKey = function (kid) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var keyFound;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.cache.asymmetricKeys.removeItem(kid)];\r\n case 1:\r\n _a.sent();\r\n return [4 /*yield*/, this.cache.asymmetricKeys.containsKey(kid)];\r\n case 2:\r\n keyFound = _a.sent();\r\n return [2 /*return*/, !keyFound];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Removes all cryptographic keys from IndexedDB storage\r\n */\r\n CryptoOps.prototype.clearKeystore = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.cache.clear()];\r\n case 1: return [2 /*return*/, _a.sent()];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Signs the given object as a jwt payload with private key retrieved by given kid.\r\n * @param payload\r\n * @param kid\r\n */\r\n CryptoOps.prototype.signJwt = function (payload, kid, correlationId) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var signJwtMeasurement, cachedKeyPair, publicKeyJwk, publicKeyJwkString, encodedKeyIdThumbprint, shrHeader, encodedShrHeader, encodedPayload, tokenString, tokenBuffer, signatureBuffer, encodedSignature, signedJwt;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n signJwtMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(PerformanceEvents.CryptoOptsSignJwt, correlationId);\r\n return [4 /*yield*/, this.cache.asymmetricKeys.getItem(kid)];\r\n case 1:\r\n cachedKeyPair = _b.sent();\r\n if (!cachedKeyPair) {\r\n throw BrowserAuthError.createSigningKeyNotFoundInStorageError(kid);\r\n }\r\n return [4 /*yield*/, this.browserCrypto.exportJwk(cachedKeyPair.publicKey)];\r\n case 2:\r\n publicKeyJwk = _b.sent();\r\n publicKeyJwkString = BrowserStringUtils.getSortedObjectString(publicKeyJwk);\r\n encodedKeyIdThumbprint = this.b64Encode.urlEncode(JSON.stringify({ kid: kid }));\r\n shrHeader = JoseHeader.getShrHeaderString({ kid: encodedKeyIdThumbprint, alg: publicKeyJwk.alg });\r\n encodedShrHeader = this.b64Encode.urlEncode(shrHeader);\r\n // Generate payload\r\n payload.cnf = {\r\n jwk: JSON.parse(publicKeyJwkString)\r\n };\r\n encodedPayload = this.b64Encode.urlEncode(JSON.stringify(payload));\r\n tokenString = encodedShrHeader + \".\" + encodedPayload;\r\n tokenBuffer = BrowserStringUtils.stringToArrayBuffer(tokenString);\r\n return [4 /*yield*/, this.browserCrypto.sign(cachedKeyPair.privateKey, tokenBuffer)];\r\n case 3:\r\n signatureBuffer = _b.sent();\r\n encodedSignature = this.b64Encode.urlEncodeArr(new Uint8Array(signatureBuffer));\r\n signedJwt = tokenString + \".\" + encodedSignature;\r\n if (signJwtMeasurement) {\r\n signJwtMeasurement.endMeasurement({\r\n success: true\r\n });\r\n }\r\n return [2 /*return*/, signedJwt];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Returns the SHA-256 hash of an input string\r\n * @param plainText\r\n */\r\n CryptoOps.prototype.hashString = function (plainText) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var hashBuffer, hashBytes;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.browserCrypto.sha256Digest(plainText)];\r\n case 1:\r\n hashBuffer = _a.sent();\r\n hashBytes = new Uint8Array(hashBuffer);\r\n return [2 /*return*/, this.b64Encode.urlEncodeArr(hashBytes)];\r\n }\r\n });\r\n });\r\n };\r\n CryptoOps.POP_KEY_USAGES = [\"sign\", \"verify\"];\r\n CryptoOps.EXTRACTABLE = true;\r\n return CryptoOps;\r\n}());\n\nexport { CryptoOps };\n//# sourceMappingURL=CryptoOps.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Authority types supported by MSAL.\r\n */\r\nvar AuthorityType;\r\n(function (AuthorityType) {\r\n AuthorityType[AuthorityType[\"Default\"] = 0] = \"Default\";\r\n AuthorityType[AuthorityType[\"Adfs\"] = 1] = \"Adfs\";\r\n AuthorityType[AuthorityType[\"Dsts\"] = 2] = \"Dsts\";\r\n AuthorityType[AuthorityType[\"Ciam\"] = 3] = \"Ciam\";\r\n})(AuthorityType || (AuthorityType = {}));\n\nexport { AuthorityType };\n//# sourceMappingURL=AuthorityType.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __assign } from '../../_virtual/_tslib.js';\nimport { IntFields, PerformanceEventStatus } from './PerformanceEvent.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar PerformanceClient = /** @class */ (function () {\r\n /**\r\n * Creates an instance of PerformanceClient,\r\n * an abstract class containing core performance telemetry logic.\r\n *\r\n * @constructor\r\n * @param {string} clientId Client ID of the application\r\n * @param {string} authority Authority used by the application\r\n * @param {Logger} logger Logger used by the application\r\n * @param {string} libraryName Name of the library\r\n * @param {string} libraryVersion Version of the library\r\n */\r\n function PerformanceClient(clientId, authority, logger, libraryName, libraryVersion, applicationTelemetry) {\r\n this.authority = authority;\r\n this.libraryName = libraryName;\r\n this.libraryVersion = libraryVersion;\r\n this.applicationTelemetry = applicationTelemetry;\r\n this.clientId = clientId;\r\n this.logger = logger;\r\n this.callbacks = new Map();\r\n this.eventsByCorrelationId = new Map();\r\n this.queueMeasurements = new Map();\r\n this.preQueueTimeByCorrelationId = new Map();\r\n }\r\n /**\r\n * Starts and returns an platform-specific implementation of IPerformanceMeasurement.\r\n * Note: this function can be changed to abstract at the next major version bump.\r\n *\r\n * @param {string} measureName\r\n * @param {string} correlationId\r\n * @returns {IPerformanceMeasurement}\r\n */\r\n /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\r\n PerformanceClient.prototype.startPerformanceMeasurement = function (measureName, correlationId) {\r\n return {};\r\n };\r\n /**\r\n * Starts and returns an platform-specific implementation of IPerformanceMeasurement.\r\n * Note: this incorrectly-named function will be removed at the next major version bump.\r\n *\r\n * @param {string} measureName\r\n * @param {string} correlationId\r\n * @returns {IPerformanceMeasurement}\r\n */\r\n /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\r\n PerformanceClient.prototype.startPerformanceMeasuremeant = function (measureName, correlationId) {\r\n return {};\r\n };\r\n /**\r\n * Get integral fields.\r\n * Override to change the set.\r\n */\r\n PerformanceClient.prototype.getIntFields = function () {\r\n return IntFields;\r\n };\r\n /**\r\n * Gets map of pre-queue times by correlation Id\r\n *\r\n * @param {PerformanceEvents} eventName\r\n * @param {string} correlationId\r\n * @returns {number}\r\n */\r\n PerformanceClient.prototype.getPreQueueTime = function (eventName, correlationId) {\r\n var preQueueEvent = this.preQueueTimeByCorrelationId.get(correlationId);\r\n if (!preQueueEvent) {\r\n this.logger.trace(\"PerformanceClient.getPreQueueTime: no pre-queue times found for correlationId: \" + correlationId + \", unable to add queue measurement\");\r\n return;\r\n }\r\n else if (preQueueEvent.name !== eventName) {\r\n this.logger.trace(\"PerformanceClient.getPreQueueTime: no pre-queue time found for \" + eventName + \", unable to add queue measurement\");\r\n return;\r\n }\r\n return preQueueEvent.time;\r\n };\r\n /**\r\n * Calculates the difference between current time and time when function was queued.\r\n * Note: It is possible to have 0 as the queue time if the current time and the queued time was the same.\r\n *\r\n * @param {number} preQueueTime\r\n * @param {number} currentTime\r\n * @returns {number}\r\n */\r\n PerformanceClient.prototype.calculateQueuedTime = function (preQueueTime, currentTime) {\r\n if (preQueueTime < 1) {\r\n this.logger.trace(\"PerformanceClient: preQueueTime should be a positive integer and not \" + preQueueTime);\r\n return 0;\r\n }\r\n if (currentTime < 1) {\r\n this.logger.trace(\"PerformanceClient: currentTime should be a positive integer and not \" + currentTime);\r\n return 0;\r\n }\r\n if (currentTime < preQueueTime) {\r\n this.logger.trace(\"PerformanceClient: currentTime is less than preQueueTime, check how time is being retrieved\");\r\n return 0;\r\n }\r\n return currentTime - preQueueTime;\r\n };\r\n /**\r\n * Adds queue measurement time to QueueMeasurements array for given correlation ID.\r\n *\r\n * @param {PerformanceEvents} eventName\r\n * @param {?string} correlationId\r\n * @param {?number} queueTime\r\n * @param {?boolean} manuallyCompleted - indicator for manually completed queue measurements\r\n * @returns\r\n */\r\n PerformanceClient.prototype.addQueueMeasurement = function (eventName, correlationId, queueTime, manuallyCompleted) {\r\n if (!correlationId) {\r\n this.logger.trace(\"PerformanceClient.addQueueMeasurement: correlationId not provided for \" + eventName + \", cannot add queue measurement\");\r\n return;\r\n }\r\n if (queueTime === 0) {\r\n // Possible for there to be no queue time after calculation\r\n this.logger.trace(\"PerformanceClient.addQueueMeasurement: queue time provided for \" + eventName + \" is \" + queueTime);\r\n }\r\n else if (!queueTime) {\r\n this.logger.trace(\"PerformanceClient.addQueueMeasurement: no queue time provided for \" + eventName);\r\n return;\r\n }\r\n var queueMeasurement = { eventName: eventName, queueTime: queueTime, manuallyCompleted: manuallyCompleted };\r\n // Adds to existing correlation Id if present in queueMeasurements\r\n var existingMeasurements = this.queueMeasurements.get(correlationId);\r\n if (existingMeasurements) {\r\n existingMeasurements.push(queueMeasurement);\r\n this.queueMeasurements.set(correlationId, existingMeasurements);\r\n }\r\n else {\r\n // Sets new correlation Id if not present in queueMeasurements\r\n this.logger.trace(\"PerformanceClient.addQueueMeasurement: adding correlationId \" + correlationId + \" to queue measurements\");\r\n var measurementArray = [queueMeasurement];\r\n this.queueMeasurements.set(correlationId, measurementArray);\r\n }\r\n // Delete processed pre-queue event.\r\n this.preQueueTimeByCorrelationId.delete(correlationId);\r\n };\r\n /**\r\n * Starts measuring performance for a given operation. Returns a function that should be used to end the measurement.\r\n *\r\n * @param {PerformanceEvents} measureName\r\n * @param {?string} [correlationId]\r\n * @returns {InProgressPerformanceEvent}\r\n */\r\n PerformanceClient.prototype.startMeasurement = function (measureName, correlationId) {\r\n var _this = this;\r\n var _a, _b;\r\n // Generate a placeholder correlation if the request does not provide one\r\n var eventCorrelationId = correlationId || this.generateId();\r\n if (!correlationId) {\r\n this.logger.info(\"PerformanceClient: No correlation id provided for \" + measureName + \", generating\", eventCorrelationId);\r\n }\r\n // Duplicate code to address spelling error will be removed at the next major version bump.\r\n this.logger.trace(\"PerformanceClient: Performance measurement started for \" + measureName, eventCorrelationId);\r\n var performanceMeasurement = this.startPerformanceMeasuremeant(measureName, eventCorrelationId);\r\n performanceMeasurement.startMeasurement();\r\n var inProgressEvent = {\r\n eventId: this.generateId(),\r\n status: PerformanceEventStatus.InProgress,\r\n authority: this.authority,\r\n libraryName: this.libraryName,\r\n libraryVersion: this.libraryVersion,\r\n clientId: this.clientId,\r\n name: measureName,\r\n startTimeMs: Date.now(),\r\n correlationId: eventCorrelationId,\r\n appName: (_a = this.applicationTelemetry) === null || _a === void 0 ? void 0 : _a.appName,\r\n appVersion: (_b = this.applicationTelemetry) === null || _b === void 0 ? void 0 : _b.appVersion,\r\n };\r\n // Store in progress events so they can be discarded if not ended properly\r\n this.cacheEventByCorrelationId(inProgressEvent);\r\n // Return the event and functions the caller can use to properly end/flush the measurement\r\n return {\r\n endMeasurement: function (event) {\r\n return _this.endMeasurement(__assign(__assign({}, inProgressEvent), event), performanceMeasurement);\r\n },\r\n discardMeasurement: function () {\r\n return _this.discardMeasurements(inProgressEvent.correlationId);\r\n },\r\n addStaticFields: function (fields) {\r\n return _this.addStaticFields(fields, inProgressEvent.correlationId);\r\n },\r\n increment: function (counters) {\r\n return _this.increment(counters, inProgressEvent.correlationId);\r\n },\r\n measurement: performanceMeasurement,\r\n event: inProgressEvent\r\n };\r\n };\r\n /**\r\n * Stops measuring the performance for an operation. Should only be called directly by PerformanceClient classes,\r\n * as consumers should instead use the function returned by startMeasurement.\r\n * Adds a new field named as \"[event name]DurationMs\" for sub-measurements, completes and emits an event\r\n * otherwise.\r\n *\r\n * @param {PerformanceEvent} event\r\n * @param {IPerformanceMeasurement} measurement\r\n * @returns {(PerformanceEvent | null)}\r\n */\r\n PerformanceClient.prototype.endMeasurement = function (event, measurement) {\r\n var _this = this;\r\n var _a, _b;\r\n var rootEvent = this.eventsByCorrelationId.get(event.correlationId);\r\n if (!rootEvent) {\r\n this.logger.trace(\"PerformanceClient: Measurement not found for \" + event.eventId, event.correlationId);\r\n return null;\r\n }\r\n var isRoot = event.eventId === rootEvent.eventId;\r\n var queueInfo = {\r\n totalQueueTime: 0,\r\n totalQueueCount: 0,\r\n manuallyCompletedCount: 0\r\n };\r\n if (isRoot) {\r\n queueInfo = this.getQueueInfo(event.correlationId);\r\n this.discardCache(rootEvent.correlationId);\r\n }\r\n else {\r\n (_a = rootEvent.incompleteSubMeasurements) === null || _a === void 0 ? void 0 : _a.delete(event.eventId);\r\n }\r\n measurement === null || measurement === void 0 ? void 0 : measurement.endMeasurement();\r\n var durationMs = measurement === null || measurement === void 0 ? void 0 : measurement.flushMeasurement();\r\n // null indicates no measurement was taken (e.g. needed performance APIs not present)\r\n if (!durationMs) {\r\n this.logger.trace(\"PerformanceClient: Performance measurement not taken\", rootEvent.correlationId);\r\n return null;\r\n }\r\n this.logger.trace(\"PerformanceClient: Performance measurement ended for \" + event.name + \": \" + durationMs + \" ms\", event.correlationId);\r\n // Add sub-measurement attribute to root event.\r\n if (!isRoot) {\r\n rootEvent[event.name + \"DurationMs\"] = Math.floor(durationMs);\r\n return __assign({}, rootEvent);\r\n }\r\n var finalEvent = __assign(__assign({}, rootEvent), event);\r\n var incompleteSubsCount = 0;\r\n // Incomplete sub-measurements are discarded. They are likely an instrumentation bug that should be fixed.\r\n (_b = finalEvent.incompleteSubMeasurements) === null || _b === void 0 ? void 0 : _b.forEach(function (subMeasurement) {\r\n _this.logger.trace(\"PerformanceClient: Incomplete submeasurement \" + subMeasurement.name + \" found for \" + event.name, finalEvent.correlationId);\r\n incompleteSubsCount++;\r\n });\r\n finalEvent.incompleteSubMeasurements = undefined;\r\n finalEvent = __assign(__assign({}, finalEvent), { durationMs: Math.round(durationMs), queuedTimeMs: queueInfo.totalQueueTime, queuedCount: queueInfo.totalQueueCount, queuedManuallyCompletedCount: queueInfo.manuallyCompletedCount, status: PerformanceEventStatus.Completed, incompleteSubsCount: incompleteSubsCount });\r\n this.truncateIntegralFields(finalEvent, this.getIntFields());\r\n this.emitEvents([finalEvent], event.correlationId);\r\n return finalEvent;\r\n };\r\n /**\r\n * Saves extra information to be emitted when the measurements are flushed\r\n * @param fields\r\n * @param correlationId\r\n */\r\n PerformanceClient.prototype.addStaticFields = function (fields, correlationId) {\r\n this.logger.trace(\"PerformanceClient: Updating static fields\");\r\n var event = this.eventsByCorrelationId.get(correlationId);\r\n if (event) {\r\n this.eventsByCorrelationId.set(correlationId, __assign(__assign({}, event), fields));\r\n }\r\n else {\r\n this.logger.trace(\"PerformanceClient: Event not found for\", correlationId);\r\n }\r\n };\r\n /**\r\n * Increment counters to be emitted when the measurements are flushed\r\n * @param counters {Counters}\r\n * @param correlationId {string} correlation identifier\r\n */\r\n PerformanceClient.prototype.increment = function (counters, correlationId) {\r\n this.logger.trace(\"PerformanceClient: Updating counters\");\r\n var event = this.eventsByCorrelationId.get(correlationId);\r\n if (event) {\r\n for (var counter in counters) {\r\n if (!event.hasOwnProperty(counter)) {\r\n event[counter] = 0;\r\n }\r\n event[counter] += counters[counter];\r\n }\r\n }\r\n else {\r\n this.logger.trace(\"PerformanceClient: Event not found for\", correlationId);\r\n }\r\n };\r\n /**\r\n * Upserts event into event cache.\r\n * First key is the correlation id, second key is the event id.\r\n * Allows for events to be grouped by correlation id,\r\n * and to easily allow for properties on them to be updated.\r\n *\r\n * @private\r\n * @param {PerformanceEvent} event\r\n */\r\n PerformanceClient.prototype.cacheEventByCorrelationId = function (event) {\r\n var rootEvent = this.eventsByCorrelationId.get(event.correlationId);\r\n if (rootEvent) {\r\n this.logger.trace(\"PerformanceClient: Performance measurement for \" + event.name + \" added/updated\", event.correlationId);\r\n rootEvent.incompleteSubMeasurements = rootEvent.incompleteSubMeasurements || new Map();\r\n rootEvent.incompleteSubMeasurements.set(event.eventId, { name: event.name, startTimeMs: event.startTimeMs });\r\n }\r\n else {\r\n this.logger.trace(\"PerformanceClient: Performance measurement for \" + event.name + \" started\", event.correlationId);\r\n this.eventsByCorrelationId.set(event.correlationId, __assign({}, event));\r\n }\r\n };\r\n PerformanceClient.prototype.getQueueInfo = function (correlationId) {\r\n var queueMeasurementForCorrelationId = this.queueMeasurements.get(correlationId);\r\n if (!queueMeasurementForCorrelationId) {\r\n this.logger.trace(\"PerformanceClient: no queue measurements found for for correlationId: \" + correlationId);\r\n }\r\n var totalQueueTime = 0;\r\n var totalQueueCount = 0;\r\n var manuallyCompletedCount = 0;\r\n queueMeasurementForCorrelationId === null || queueMeasurementForCorrelationId === void 0 ? void 0 : queueMeasurementForCorrelationId.forEach(function (measurement) {\r\n totalQueueTime += measurement.queueTime;\r\n totalQueueCount++;\r\n manuallyCompletedCount += measurement.manuallyCompleted ? 1 : 0;\r\n });\r\n return {\r\n totalQueueTime: totalQueueTime,\r\n totalQueueCount: totalQueueCount,\r\n manuallyCompletedCount: manuallyCompletedCount\r\n };\r\n };\r\n /**\r\n * Removes measurements for a given correlation id.\r\n *\r\n * @param {string} correlationId\r\n */\r\n PerformanceClient.prototype.discardMeasurements = function (correlationId) {\r\n this.logger.trace(\"PerformanceClient: Performance measurements discarded\", correlationId);\r\n this.eventsByCorrelationId.delete(correlationId);\r\n };\r\n /**\r\n * Removes cache for a given correlation id.\r\n *\r\n * @param {string} correlationId correlation identifier\r\n */\r\n PerformanceClient.prototype.discardCache = function (correlationId) {\r\n this.discardMeasurements(correlationId);\r\n this.logger.trace(\"PerformanceClient: QueueMeasurements discarded\", correlationId);\r\n this.queueMeasurements.delete(correlationId);\r\n this.logger.trace(\"PerformanceClient: Pre-queue times discarded\", correlationId);\r\n this.preQueueTimeByCorrelationId.delete(correlationId);\r\n };\r\n /**\r\n * Registers a callback function to receive performance events.\r\n *\r\n * @param {PerformanceCallbackFunction} callback\r\n * @returns {string}\r\n */\r\n PerformanceClient.prototype.addPerformanceCallback = function (callback) {\r\n var callbackId = this.generateId();\r\n this.callbacks.set(callbackId, callback);\r\n this.logger.verbose(\"PerformanceClient: Performance callback registered with id: \" + callbackId);\r\n return callbackId;\r\n };\r\n /**\r\n * Removes a callback registered with addPerformanceCallback.\r\n *\r\n * @param {string} callbackId\r\n * @returns {boolean}\r\n */\r\n PerformanceClient.prototype.removePerformanceCallback = function (callbackId) {\r\n var result = this.callbacks.delete(callbackId);\r\n if (result) {\r\n this.logger.verbose(\"PerformanceClient: Performance callback \" + callbackId + \" removed.\");\r\n }\r\n else {\r\n this.logger.verbose(\"PerformanceClient: Performance callback \" + callbackId + \" not removed.\");\r\n }\r\n return result;\r\n };\r\n /**\r\n * Emits events to all registered callbacks.\r\n *\r\n * @param {PerformanceEvent[]} events\r\n * @param {?string} [correlationId]\r\n */\r\n PerformanceClient.prototype.emitEvents = function (events, correlationId) {\r\n var _this = this;\r\n this.logger.verbose(\"PerformanceClient: Emitting performance events\", correlationId);\r\n this.callbacks.forEach(function (callback, callbackId) {\r\n _this.logger.trace(\"PerformanceClient: Emitting event to callback \" + callbackId, correlationId);\r\n callback.apply(null, [events]);\r\n });\r\n };\r\n /**\r\n * Enforce truncation of integral fields in performance event.\r\n * @param {PerformanceEvent} event performance event to update.\r\n * @param {Set} intFields integral fields.\r\n */\r\n PerformanceClient.prototype.truncateIntegralFields = function (event, intFields) {\r\n intFields.forEach(function (key) {\r\n if (key in event && typeof event[key] === \"number\") {\r\n event[key] = Math.floor(event[key]);\r\n }\r\n });\r\n };\r\n return PerformanceClient;\r\n}());\n\nexport { PerformanceClient };\n//# sourceMappingURL=PerformanceClient.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../../_virtual/_tslib.js';\nimport { PerformanceClient } from './PerformanceClient.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar StubPerformanceMeasurement = /** @class */ (function () {\r\n function StubPerformanceMeasurement() {\r\n }\r\n /* eslint-disable-next-line @typescript-eslint/no-empty-function */\r\n StubPerformanceMeasurement.prototype.startMeasurement = function () { };\r\n /* eslint-disable-next-line @typescript-eslint/no-empty-function */\r\n StubPerformanceMeasurement.prototype.endMeasurement = function () { };\r\n StubPerformanceMeasurement.prototype.flushMeasurement = function () {\r\n return null;\r\n };\r\n return StubPerformanceMeasurement;\r\n}());\r\nvar StubPerformanceClient = /** @class */ (function (_super) {\r\n __extends(StubPerformanceClient, _super);\r\n function StubPerformanceClient() {\r\n return _super !== null && _super.apply(this, arguments) || this;\r\n }\r\n StubPerformanceClient.prototype.generateId = function () {\r\n return \"callback-id\";\r\n };\r\n StubPerformanceClient.prototype.startPerformanceMeasuremeant = function () {\r\n return new StubPerformanceMeasurement();\r\n };\r\n StubPerformanceClient.prototype.startPerformanceMeasurement = function () {\r\n return new StubPerformanceMeasurement();\r\n };\r\n /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\r\n StubPerformanceClient.prototype.calculateQueuedTime = function (preQueueTime, currentTime) {\r\n return 0;\r\n };\r\n /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\r\n StubPerformanceClient.prototype.addQueueMeasurement = function (eventName, correlationId, queueTime) {\r\n return;\r\n };\r\n /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\r\n StubPerformanceClient.prototype.setPreQueueTime = function (eventName, correlationId) {\r\n return;\r\n };\r\n return StubPerformanceClient;\r\n}(PerformanceClient));\n\nexport { StubPerformanceClient, StubPerformanceMeasurement };\n//# sourceMappingURL=StubPerformanceClient.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { AuthError } from '../error/AuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar DEFAULT_CRYPTO_IMPLEMENTATION = {\r\n createNewGuid: function () {\r\n var notImplErr = \"Crypto interface - createNewGuid() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n },\r\n base64Decode: function () {\r\n var notImplErr = \"Crypto interface - base64Decode() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n },\r\n base64Encode: function () {\r\n var notImplErr = \"Crypto interface - base64Encode() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n },\r\n generatePkceCodes: function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Crypto interface - generatePkceCodes() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n },\r\n getPublicKeyThumbprint: function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Crypto interface - getPublicKeyThumbprint() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n },\r\n removeTokenBindingKey: function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Crypto interface - removeTokenBindingKey() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n },\r\n clearKeystore: function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Crypto interface - clearKeystore() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n },\r\n signJwt: function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Crypto interface - signJwt() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n },\r\n hashString: function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Crypto interface - hashString() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n }\r\n};\n\nexport { DEFAULT_CRYPTO_IMPLEMENTATION };\n//# sourceMappingURL=ICrypto.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { CredentialType, CacheType, Separators, Constants, AuthenticationScheme } from '../../utils/Constants.js';\nimport { ClientAuthError } from '../../error/ClientAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Base type for credentials to be stored in the cache: eg: ACCESS_TOKEN, ID_TOKEN etc\r\n *\r\n * Key:Value Schema:\r\n *\r\n * Key: -------\r\n *\r\n * Value Schema:\r\n * {\r\n * homeAccountId: home account identifier for the auth scheme,\r\n * environment: entity that issued the token, represented as a full host\r\n * credentialType: Type of credential as a string, can be one of the following: RefreshToken, AccessToken, IdToken, Password, Cookie, Certificate, Other\r\n * clientId: client ID of the application\r\n * secret: Actual credential as a string\r\n * familyId: Family ID identifier, usually only used for refresh tokens\r\n * realm: Full tenant or organizational identifier that the account belongs to\r\n * target: Permissions that are included in the token, or for refresh tokens, the resource identifier.\r\n * tokenType: Matches the authentication scheme for which the token was issued (i.e. Bearer or pop)\r\n * requestedClaimsHash: Matches the SHA 256 hash of the claims object included in the token request\r\n * userAssertionHash: Matches the SHA 256 hash of the obo_assertion for the OBO flow\r\n * }\r\n */\r\nvar CredentialEntity = /** @class */ (function () {\r\n function CredentialEntity() {\r\n }\r\n /**\r\n * Generate Account Id key component as per the schema: -\r\n */\r\n CredentialEntity.prototype.generateAccountId = function () {\r\n return CredentialEntity.generateAccountIdForCacheKey(this.homeAccountId, this.environment);\r\n };\r\n /**\r\n * Generate Credential Id key component as per the schema: --\r\n */\r\n CredentialEntity.prototype.generateCredentialId = function () {\r\n return CredentialEntity.generateCredentialIdForCacheKey(this.credentialType, this.clientId, this.realm, this.familyId);\r\n };\r\n /**\r\n * Generate target key component as per schema: \r\n */\r\n CredentialEntity.prototype.generateTarget = function () {\r\n return CredentialEntity.generateTargetForCacheKey(this.target);\r\n };\r\n /**\r\n * generates credential key\r\n */\r\n CredentialEntity.prototype.generateCredentialKey = function () {\r\n return CredentialEntity.generateCredentialCacheKey(this.homeAccountId, this.environment, this.credentialType, this.clientId, this.realm, this.target, this.familyId, this.tokenType, this.requestedClaimsHash);\r\n };\r\n /**\r\n * returns the type of the cache (in this case credential)\r\n */\r\n CredentialEntity.prototype.generateType = function () {\r\n switch (this.credentialType) {\r\n case CredentialType.ID_TOKEN:\r\n return CacheType.ID_TOKEN;\r\n case CredentialType.ACCESS_TOKEN:\r\n case CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME:\r\n return CacheType.ACCESS_TOKEN;\r\n case CredentialType.REFRESH_TOKEN:\r\n return CacheType.REFRESH_TOKEN;\r\n default: {\r\n throw ClientAuthError.createUnexpectedCredentialTypeError();\r\n }\r\n }\r\n };\r\n /**\r\n * generates credential key\r\n * -\\-----\r\n */\r\n CredentialEntity.generateCredentialCacheKey = function (homeAccountId, environment, credentialType, clientId, realm, target, familyId, tokenType, requestedClaimsHash) {\r\n var credentialKey = [\r\n this.generateAccountIdForCacheKey(homeAccountId, environment),\r\n this.generateCredentialIdForCacheKey(credentialType, clientId, realm, familyId),\r\n this.generateTargetForCacheKey(target),\r\n this.generateClaimsHashForCacheKey(requestedClaimsHash),\r\n this.generateSchemeForCacheKey(tokenType)\r\n ];\r\n return credentialKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();\r\n };\r\n /**\r\n * generates Account Id for keys\r\n * @param homeAccountId\r\n * @param environment\r\n */\r\n CredentialEntity.generateAccountIdForCacheKey = function (homeAccountId, environment) {\r\n var accountId = [homeAccountId, environment];\r\n return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();\r\n };\r\n /**\r\n * Generates Credential Id for keys\r\n * @param credentialType\r\n * @param realm\r\n * @param clientId\r\n * @param familyId\r\n */\r\n CredentialEntity.generateCredentialIdForCacheKey = function (credentialType, clientId, realm, familyId) {\r\n var clientOrFamilyId = credentialType === CredentialType.REFRESH_TOKEN\r\n ? familyId || clientId\r\n : clientId;\r\n var credentialId = [\r\n credentialType,\r\n clientOrFamilyId,\r\n realm || Constants.EMPTY_STRING,\r\n ];\r\n return credentialId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();\r\n };\r\n /**\r\n * Generate target key component as per schema: \r\n */\r\n CredentialEntity.generateTargetForCacheKey = function (scopes) {\r\n return (scopes || Constants.EMPTY_STRING).toLowerCase();\r\n };\r\n /**\r\n * Generate requested claims key component as per schema: \r\n */\r\n CredentialEntity.generateClaimsHashForCacheKey = function (requestedClaimsHash) {\r\n return (requestedClaimsHash || Constants.EMPTY_STRING).toLowerCase();\r\n };\r\n /**\r\n * Generate scheme key componenet as per schema: \r\n */\r\n CredentialEntity.generateSchemeForCacheKey = function (tokenType) {\r\n /*\r\n * PoP Tokens and SSH certs include scheme in cache key\r\n * Cast to lowercase to handle \"bearer\" from ADFS\r\n */\r\n return (tokenType && tokenType.toLowerCase() !== AuthenticationScheme.BEARER.toLowerCase()) ? tokenType.toLowerCase() : Constants.EMPTY_STRING;\r\n };\r\n return CredentialEntity;\r\n}());\n\nexport { CredentialEntity };\n//# sourceMappingURL=CredentialEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../../_virtual/_tslib.js';\nimport { CredentialEntity } from './CredentialEntity.js';\nimport { CredentialType } from '../../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * ID_TOKEN Cache\r\n *\r\n * Key:Value Schema:\r\n *\r\n * Key Example: uid.utid-login.microsoftonline.com-idtoken-clientId-contoso.com-\r\n *\r\n * Value Schema:\r\n * {\r\n * homeAccountId: home account identifier for the auth scheme,\r\n * environment: entity that issued the token, represented as a full host\r\n * credentialType: Type of credential as a string, can be one of the following: RefreshToken, AccessToken, IdToken, Password, Cookie, Certificate, Other\r\n * clientId: client ID of the application\r\n * secret: Actual credential as a string\r\n * realm: Full tenant or organizational identifier that the account belongs to\r\n * }\r\n */\r\nvar IdTokenEntity = /** @class */ (function (_super) {\r\n __extends(IdTokenEntity, _super);\r\n function IdTokenEntity() {\r\n return _super !== null && _super.apply(this, arguments) || this;\r\n }\r\n /**\r\n * Create IdTokenEntity\r\n * @param homeAccountId\r\n * @param authenticationResult\r\n * @param clientId\r\n * @param authority\r\n */\r\n IdTokenEntity.createIdTokenEntity = function (homeAccountId, environment, idToken, clientId, tenantId) {\r\n var idTokenEntity = new IdTokenEntity();\r\n idTokenEntity.credentialType = CredentialType.ID_TOKEN;\r\n idTokenEntity.homeAccountId = homeAccountId;\r\n idTokenEntity.environment = environment;\r\n idTokenEntity.clientId = clientId;\r\n idTokenEntity.secret = idToken;\r\n idTokenEntity.realm = tenantId;\r\n return idTokenEntity;\r\n };\r\n /**\r\n * Validates an entity: checks for all expected params\r\n * @param entity\r\n */\r\n IdTokenEntity.isIdTokenEntity = function (entity) {\r\n if (!entity) {\r\n return false;\r\n }\r\n return (entity.hasOwnProperty(\"homeAccountId\") &&\r\n entity.hasOwnProperty(\"environment\") &&\r\n entity.hasOwnProperty(\"credentialType\") &&\r\n entity.hasOwnProperty(\"realm\") &&\r\n entity.hasOwnProperty(\"clientId\") &&\r\n entity.hasOwnProperty(\"secret\") &&\r\n entity[\"credentialType\"] === CredentialType.ID_TOKEN);\r\n };\r\n return IdTokenEntity;\r\n}(CredentialEntity));\n\nexport { IdTokenEntity };\n//# sourceMappingURL=IdTokenEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { ClientAuthError } from './ClientAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * ClientConfigurationErrorMessage class containing string constants used by error codes and messages.\r\n */\r\nvar ClientConfigurationErrorMessage = {\r\n redirectUriNotSet: {\r\n code: \"redirect_uri_empty\",\r\n desc: \"A redirect URI is required for all calls, and none has been set.\"\r\n },\r\n postLogoutUriNotSet: {\r\n code: \"post_logout_uri_empty\",\r\n desc: \"A post logout redirect has not been set.\"\r\n },\r\n claimsRequestParsingError: {\r\n code: \"claims_request_parsing_error\",\r\n desc: \"Could not parse the given claims request object.\"\r\n },\r\n authorityUriInsecure: {\r\n code: \"authority_uri_insecure\",\r\n desc: \"Authority URIs must use https. Please see here for valid authority configuration options: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-js-initializing-client-applications#configuration-options\"\r\n },\r\n urlParseError: {\r\n code: \"url_parse_error\",\r\n desc: \"URL could not be parsed into appropriate segments.\"\r\n },\r\n urlEmptyError: {\r\n code: \"empty_url_error\",\r\n desc: \"URL was empty or null.\"\r\n },\r\n emptyScopesError: {\r\n code: \"empty_input_scopes_error\",\r\n desc: \"Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.\"\r\n },\r\n nonArrayScopesError: {\r\n code: \"nonarray_input_scopes_error\",\r\n desc: \"Scopes cannot be passed as non-array.\"\r\n },\r\n clientIdSingleScopeError: {\r\n code: \"clientid_input_scopes_error\",\r\n desc: \"Client ID can only be provided as a single scope.\"\r\n },\r\n invalidPrompt: {\r\n code: \"invalid_prompt_value\",\r\n desc: \"Supported prompt values are 'login', 'select_account', 'consent', 'create', 'none' and 'no_session'. Please see here for valid configuration options: https://azuread.github.io/microsoft-authentication-library-for-js/ref/modules/_azure_msal_common.html#commonauthorizationurlrequest\",\r\n },\r\n invalidClaimsRequest: {\r\n code: \"invalid_claims\",\r\n desc: \"Given claims parameter must be a stringified JSON object.\"\r\n },\r\n tokenRequestEmptyError: {\r\n code: \"token_request_empty\",\r\n desc: \"Token request was empty and not found in cache.\"\r\n },\r\n logoutRequestEmptyError: {\r\n code: \"logout_request_empty\",\r\n desc: \"The logout request was null or undefined.\"\r\n },\r\n invalidCodeChallengeMethod: {\r\n code: \"invalid_code_challenge_method\",\r\n desc: \"code_challenge_method passed is invalid. Valid values are \\\"plain\\\" and \\\"S256\\\".\"\r\n },\r\n invalidCodeChallengeParams: {\r\n code: \"pkce_params_missing\",\r\n desc: \"Both params: code_challenge and code_challenge_method are to be passed if to be sent in the request\"\r\n },\r\n invalidCloudDiscoveryMetadata: {\r\n code: \"invalid_cloud_discovery_metadata\",\r\n desc: \"Invalid cloudDiscoveryMetadata provided. Must be a stringified JSON object containing tenant_discovery_endpoint and metadata fields\"\r\n },\r\n invalidAuthorityMetadata: {\r\n code: \"invalid_authority_metadata\",\r\n desc: \"Invalid authorityMetadata provided. Must by a stringified JSON object containing authorization_endpoint, token_endpoint, issuer fields.\"\r\n },\r\n untrustedAuthority: {\r\n code: \"untrusted_authority\",\r\n desc: \"The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter.\"\r\n },\r\n invalidAzureCloudInstance: {\r\n code: \"invalid_azure_cloud_instance\",\r\n desc: \"Invalid AzureCloudInstance provided. Please refer MSAL JS docs: aks.ms/msaljs/azure_cloud_instance for valid values\"\r\n },\r\n missingSshJwk: {\r\n code: \"missing_ssh_jwk\",\r\n desc: \"Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme.\"\r\n },\r\n missingSshKid: {\r\n code: \"missing_ssh_kid\",\r\n desc: \"Missing sshKid in SSH certificate request. A string that uniquely identifies the public SSH key is required when using the SSH authentication scheme.\"\r\n },\r\n missingNonceAuthenticationHeader: {\r\n code: \"missing_nonce_authentication_header\",\r\n desc: \"Unable to find an authentication header containing server nonce. Either the Authentication-Info or WWW-Authenticate headers must be present in order to obtain a server nonce.\"\r\n },\r\n invalidAuthenticationHeader: {\r\n code: \"invalid_authentication_header\",\r\n desc: \"Invalid authentication header provided\"\r\n },\r\n authorityMismatch: {\r\n code: \"authority_mismatch\",\r\n desc: \"Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.\"\r\n }\r\n};\r\n/**\r\n * Error thrown when there is an error in configuration of the MSAL.js library.\r\n */\r\nvar ClientConfigurationError = /** @class */ (function (_super) {\r\n __extends(ClientConfigurationError, _super);\r\n function ClientConfigurationError(errorCode, errorMessage) {\r\n var _this = _super.call(this, errorCode, errorMessage) || this;\r\n _this.name = \"ClientConfigurationError\";\r\n Object.setPrototypeOf(_this, ClientConfigurationError.prototype);\r\n return _this;\r\n }\r\n /**\r\n * Creates an error thrown when the redirect uri is empty (not set by caller)\r\n */\r\n ClientConfigurationError.createRedirectUriEmptyError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.redirectUriNotSet.code, ClientConfigurationErrorMessage.redirectUriNotSet.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the post-logout redirect uri is empty (not set by caller)\r\n */\r\n ClientConfigurationError.createPostLogoutRedirectUriEmptyError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.postLogoutUriNotSet.code, ClientConfigurationErrorMessage.postLogoutUriNotSet.desc);\r\n };\r\n /**\r\n * Creates an error thrown when the claims request could not be successfully parsed\r\n */\r\n ClientConfigurationError.createClaimsRequestParsingError = function (claimsRequestParseError) {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.claimsRequestParsingError.code, ClientConfigurationErrorMessage.claimsRequestParsingError.desc + \" Given value: \" + claimsRequestParseError);\r\n };\r\n /**\r\n * Creates an error thrown if authority uri is given an insecure protocol.\r\n * @param urlString\r\n */\r\n ClientConfigurationError.createInsecureAuthorityUriError = function (urlString) {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.authorityUriInsecure.code, ClientConfigurationErrorMessage.authorityUriInsecure.desc + \" Given URI: \" + urlString);\r\n };\r\n /**\r\n * Creates an error thrown if URL string does not parse into separate segments.\r\n * @param urlString\r\n */\r\n ClientConfigurationError.createUrlParseError = function (urlParseError) {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.urlParseError.code, ClientConfigurationErrorMessage.urlParseError.desc + \" Given Error: \" + urlParseError);\r\n };\r\n /**\r\n * Creates an error thrown if URL string is empty or null.\r\n * @param urlString\r\n */\r\n ClientConfigurationError.createUrlEmptyError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.urlEmptyError.code, ClientConfigurationErrorMessage.urlEmptyError.desc);\r\n };\r\n /**\r\n * Error thrown when scopes are empty.\r\n * @param scopesValue\r\n */\r\n ClientConfigurationError.createEmptyScopesArrayError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.emptyScopesError.code, \"\" + ClientConfigurationErrorMessage.emptyScopesError.desc);\r\n };\r\n /**\r\n * Error thrown when client id scope is not provided as single scope.\r\n * @param inputScopes\r\n */\r\n ClientConfigurationError.createClientIdSingleScopeError = function (inputScopes) {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.clientIdSingleScopeError.code, ClientConfigurationErrorMessage.clientIdSingleScopeError.desc + \" Given Scopes: \" + inputScopes);\r\n };\r\n /**\r\n * Error thrown when prompt is not an allowed type.\r\n * @param promptValue\r\n */\r\n ClientConfigurationError.createInvalidPromptError = function (promptValue) {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidPrompt.code, ClientConfigurationErrorMessage.invalidPrompt.desc + \" Given value: \" + promptValue);\r\n };\r\n /**\r\n * Creates error thrown when claims parameter is not a stringified JSON object\r\n */\r\n ClientConfigurationError.createInvalidClaimsRequestError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidClaimsRequest.code, ClientConfigurationErrorMessage.invalidClaimsRequest.desc);\r\n };\r\n /**\r\n * Throws error when token request is empty and nothing cached in storage.\r\n */\r\n ClientConfigurationError.createEmptyLogoutRequestError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.logoutRequestEmptyError.code, ClientConfigurationErrorMessage.logoutRequestEmptyError.desc);\r\n };\r\n /**\r\n * Throws error when token request is empty and nothing cached in storage.\r\n */\r\n ClientConfigurationError.createEmptyTokenRequestError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.tokenRequestEmptyError.code, ClientConfigurationErrorMessage.tokenRequestEmptyError.desc);\r\n };\r\n /**\r\n * Throws error when an invalid code_challenge_method is passed by the user\r\n */\r\n ClientConfigurationError.createInvalidCodeChallengeMethodError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidCodeChallengeMethod.code, ClientConfigurationErrorMessage.invalidCodeChallengeMethod.desc);\r\n };\r\n /**\r\n * Throws error when both params: code_challenge and code_challenge_method are not passed together\r\n */\r\n ClientConfigurationError.createInvalidCodeChallengeParamsError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidCodeChallengeParams.code, ClientConfigurationErrorMessage.invalidCodeChallengeParams.desc);\r\n };\r\n /**\r\n * Throws an error when the user passes invalid cloudDiscoveryMetadata\r\n */\r\n ClientConfigurationError.createInvalidCloudDiscoveryMetadataError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidCloudDiscoveryMetadata.code, ClientConfigurationErrorMessage.invalidCloudDiscoveryMetadata.desc);\r\n };\r\n /**\r\n * Throws an error when the user passes invalid cloudDiscoveryMetadata\r\n */\r\n ClientConfigurationError.createInvalidAuthorityMetadataError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidAuthorityMetadata.code, ClientConfigurationErrorMessage.invalidAuthorityMetadata.desc);\r\n };\r\n /**\r\n * Throws error when provided authority is not a member of the trusted host list\r\n */\r\n ClientConfigurationError.createUntrustedAuthorityError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.untrustedAuthority.code, ClientConfigurationErrorMessage.untrustedAuthority.desc);\r\n };\r\n /**\r\n * Throws error when the AzureCloudInstance is set to an invalid value\r\n */\r\n ClientConfigurationError.createInvalidAzureCloudInstanceError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidAzureCloudInstance.code, ClientConfigurationErrorMessage.invalidAzureCloudInstance.desc);\r\n };\r\n /**\r\n * Throws an error when the authentication scheme is set to SSH but the SSH public key is omitted from the request\r\n */\r\n ClientConfigurationError.createMissingSshJwkError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.missingSshJwk.code, ClientConfigurationErrorMessage.missingSshJwk.desc);\r\n };\r\n /**\r\n * Throws an error when the authentication scheme is set to SSH but the SSH public key ID is omitted from the request\r\n */\r\n ClientConfigurationError.createMissingSshKidError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.missingSshKid.code, ClientConfigurationErrorMessage.missingSshKid.desc);\r\n };\r\n /**\r\n * Throws error when provided headers don't contain a header that a server nonce can be extracted from\r\n */\r\n ClientConfigurationError.createMissingNonceAuthenticationHeadersError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.missingNonceAuthenticationHeader.code, ClientConfigurationErrorMessage.missingNonceAuthenticationHeader.desc);\r\n };\r\n /**\r\n * Throws error when a provided header is invalid in any way\r\n */\r\n ClientConfigurationError.createInvalidAuthenticationHeaderError = function (invalidHeaderName, details) {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidAuthenticationHeader.code, ClientConfigurationErrorMessage.invalidAuthenticationHeader.desc + \". Invalid header: \" + invalidHeaderName + \". Details: \" + details);\r\n };\r\n /**\r\n * Create an error when the authority provided in request does not match authority provided in account or MSAL.js configuration.\r\n */\r\n ClientConfigurationError.createAuthorityMismatchError = function () {\r\n return new ClientConfigurationError(ClientConfigurationErrorMessage.authorityMismatch.code, ClientConfigurationErrorMessage.authorityMismatch.desc);\r\n };\r\n return ClientConfigurationError;\r\n}(ClientAuthError));\n\nexport { ClientConfigurationError, ClientConfigurationErrorMessage };\n//# sourceMappingURL=ClientConfigurationError.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __spreadArrays } from '../_virtual/_tslib.js';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { Constants, OIDC_SCOPES } from '../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * The ScopeSet class creates a set of scopes. Scopes are case-insensitive, unique values, so the Set object in JS makes\r\n * the most sense to implement for this class. All scopes are trimmed and converted to lower case strings in intersection and union functions\r\n * to ensure uniqueness of strings.\r\n */\r\nvar ScopeSet = /** @class */ (function () {\r\n function ScopeSet(inputScopes) {\r\n var _this = this;\r\n // Filter empty string and null/undefined array items\r\n var scopeArr = inputScopes ? StringUtils.trimArrayEntries(__spreadArrays(inputScopes)) : [];\r\n var filteredInput = scopeArr ? StringUtils.removeEmptyStringsFromArray(scopeArr) : [];\r\n // Validate and filter scopes (validate function throws if validation fails)\r\n this.validateInputScopes(filteredInput);\r\n this.scopes = new Set(); // Iterator in constructor not supported by IE11\r\n filteredInput.forEach(function (scope) { return _this.scopes.add(scope); });\r\n }\r\n /**\r\n * Factory method to create ScopeSet from space-delimited string\r\n * @param inputScopeString\r\n * @param appClientId\r\n * @param scopesRequired\r\n */\r\n ScopeSet.fromString = function (inputScopeString) {\r\n var scopeString = inputScopeString || Constants.EMPTY_STRING;\r\n var inputScopes = scopeString.split(\" \");\r\n return new ScopeSet(inputScopes);\r\n };\r\n /**\r\n * Creates the set of scopes to search for in cache lookups\r\n * @param inputScopeString\r\n * @returns\r\n */\r\n ScopeSet.createSearchScopes = function (inputScopeString) {\r\n var scopeSet = new ScopeSet(inputScopeString);\r\n if (!scopeSet.containsOnlyOIDCScopes()) {\r\n scopeSet.removeOIDCScopes();\r\n }\r\n else {\r\n scopeSet.removeScope(Constants.OFFLINE_ACCESS_SCOPE);\r\n }\r\n return scopeSet;\r\n };\r\n /**\r\n * Used to validate the scopes input parameter requested by the developer.\r\n * @param {Array} inputScopes - Developer requested permissions. Not all scopes are guaranteed to be included in the access token returned.\r\n * @param {boolean} scopesRequired - Boolean indicating whether the scopes array is required or not\r\n */\r\n ScopeSet.prototype.validateInputScopes = function (inputScopes) {\r\n // Check if scopes are required but not given or is an empty array\r\n if (!inputScopes || inputScopes.length < 1) {\r\n throw ClientConfigurationError.createEmptyScopesArrayError();\r\n }\r\n };\r\n /**\r\n * Check if a given scope is present in this set of scopes.\r\n * @param scope\r\n */\r\n ScopeSet.prototype.containsScope = function (scope) {\r\n var lowerCaseScopes = this.printScopesLowerCase().split(\" \");\r\n var lowerCaseScopesSet = new ScopeSet(lowerCaseScopes);\r\n // compare lowercase scopes\r\n return !StringUtils.isEmpty(scope) ? lowerCaseScopesSet.scopes.has(scope.toLowerCase()) : false;\r\n };\r\n /**\r\n * Check if a set of scopes is present in this set of scopes.\r\n * @param scopeSet\r\n */\r\n ScopeSet.prototype.containsScopeSet = function (scopeSet) {\r\n var _this = this;\r\n if (!scopeSet || scopeSet.scopes.size <= 0) {\r\n return false;\r\n }\r\n return (this.scopes.size >= scopeSet.scopes.size && scopeSet.asArray().every(function (scope) { return _this.containsScope(scope); }));\r\n };\r\n /**\r\n * Check if set of scopes contains only the defaults\r\n */\r\n ScopeSet.prototype.containsOnlyOIDCScopes = function () {\r\n var _this = this;\r\n var defaultScopeCount = 0;\r\n OIDC_SCOPES.forEach(function (defaultScope) {\r\n if (_this.containsScope(defaultScope)) {\r\n defaultScopeCount += 1;\r\n }\r\n });\r\n return this.scopes.size === defaultScopeCount;\r\n };\r\n /**\r\n * Appends single scope if passed\r\n * @param newScope\r\n */\r\n ScopeSet.prototype.appendScope = function (newScope) {\r\n if (!StringUtils.isEmpty(newScope)) {\r\n this.scopes.add(newScope.trim());\r\n }\r\n };\r\n /**\r\n * Appends multiple scopes if passed\r\n * @param newScopes\r\n */\r\n ScopeSet.prototype.appendScopes = function (newScopes) {\r\n var _this = this;\r\n try {\r\n newScopes.forEach(function (newScope) { return _this.appendScope(newScope); });\r\n }\r\n catch (e) {\r\n throw ClientAuthError.createAppendScopeSetError(e);\r\n }\r\n };\r\n /**\r\n * Removes element from set of scopes.\r\n * @param scope\r\n */\r\n ScopeSet.prototype.removeScope = function (scope) {\r\n if (StringUtils.isEmpty(scope)) {\r\n throw ClientAuthError.createRemoveEmptyScopeFromSetError(scope);\r\n }\r\n this.scopes.delete(scope.trim());\r\n };\r\n /**\r\n * Removes default scopes from set of scopes\r\n * Primarily used to prevent cache misses if the default scopes are not returned from the server\r\n */\r\n ScopeSet.prototype.removeOIDCScopes = function () {\r\n var _this = this;\r\n OIDC_SCOPES.forEach(function (defaultScope) {\r\n _this.scopes.delete(defaultScope);\r\n });\r\n };\r\n /**\r\n * Combines an array of scopes with the current set of scopes.\r\n * @param otherScopes\r\n */\r\n ScopeSet.prototype.unionScopeSets = function (otherScopes) {\r\n if (!otherScopes) {\r\n throw ClientAuthError.createEmptyInputScopeSetError();\r\n }\r\n var unionScopes = new Set(); // Iterator in constructor not supported in IE11\r\n otherScopes.scopes.forEach(function (scope) { return unionScopes.add(scope.toLowerCase()); });\r\n this.scopes.forEach(function (scope) { return unionScopes.add(scope.toLowerCase()); });\r\n return unionScopes;\r\n };\r\n /**\r\n * Check if scopes intersect between this set and another.\r\n * @param otherScopes\r\n */\r\n ScopeSet.prototype.intersectingScopeSets = function (otherScopes) {\r\n if (!otherScopes) {\r\n throw ClientAuthError.createEmptyInputScopeSetError();\r\n }\r\n // Do not allow OIDC scopes to be the only intersecting scopes\r\n if (!otherScopes.containsOnlyOIDCScopes()) {\r\n otherScopes.removeOIDCScopes();\r\n }\r\n var unionScopes = this.unionScopeSets(otherScopes);\r\n var sizeOtherScopes = otherScopes.getScopeCount();\r\n var sizeThisScopes = this.getScopeCount();\r\n var sizeUnionScopes = unionScopes.size;\r\n return sizeUnionScopes < (sizeThisScopes + sizeOtherScopes);\r\n };\r\n /**\r\n * Returns size of set of scopes.\r\n */\r\n ScopeSet.prototype.getScopeCount = function () {\r\n return this.scopes.size;\r\n };\r\n /**\r\n * Returns the scopes as an array of string values\r\n */\r\n ScopeSet.prototype.asArray = function () {\r\n var array = [];\r\n this.scopes.forEach(function (val) { return array.push(val); });\r\n return array;\r\n };\r\n /**\r\n * Prints scopes into a space-delimited string\r\n */\r\n ScopeSet.prototype.printScopes = function () {\r\n if (this.scopes) {\r\n var scopeArr = this.asArray();\r\n return scopeArr.join(\" \");\r\n }\r\n return Constants.EMPTY_STRING;\r\n };\r\n /**\r\n * Prints scopes into a space-delimited lower-case string (used for caching)\r\n */\r\n ScopeSet.prototype.printScopesLowerCase = function () {\r\n return this.printScopes().toLowerCase();\r\n };\r\n return ScopeSet;\r\n}());\n\nexport { ScopeSet };\n//# sourceMappingURL=ScopeSet.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { Separators, Constants } from '../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Function to build a client info object from server clientInfo string\r\n * @param rawClientInfo\r\n * @param crypto\r\n */\r\nfunction buildClientInfo(rawClientInfo, crypto) {\r\n if (StringUtils.isEmpty(rawClientInfo)) {\r\n throw ClientAuthError.createClientInfoEmptyError();\r\n }\r\n try {\r\n var decodedClientInfo = crypto.base64Decode(rawClientInfo);\r\n return JSON.parse(decodedClientInfo);\r\n }\r\n catch (e) {\r\n throw ClientAuthError.createClientInfoDecodingError(e.message);\r\n }\r\n}\r\n/**\r\n * Function to build a client info object from cached homeAccountId string\r\n * @param homeAccountId\r\n */\r\nfunction buildClientInfoFromHomeAccountId(homeAccountId) {\r\n if (StringUtils.isEmpty(homeAccountId)) {\r\n throw ClientAuthError.createClientInfoDecodingError(\"Home account ID was empty.\");\r\n }\r\n var clientInfoParts = homeAccountId.split(Separators.CLIENT_INFO_SEPARATOR, 2);\r\n return {\r\n uid: clientInfoParts[0],\r\n utid: clientInfoParts.length < 2 ? Constants.EMPTY_STRING : clientInfoParts[1]\r\n };\r\n}\n\nexport { buildClientInfo, buildClientInfoFromHomeAccountId };\n//# sourceMappingURL=ClientInfo.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { Separators, CacheAccountType, CacheType, Constants } from '../../utils/Constants.js';\nimport { buildClientInfo } from '../../account/ClientInfo.js';\nimport { StringUtils } from '../../utils/StringUtils.js';\nimport { ClientAuthError } from '../../error/ClientAuthError.js';\nimport { AuthorityType } from '../../authority/AuthorityType.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Type that defines required and optional parameters for an Account field (based on universal cache schema implemented by all MSALs).\r\n *\r\n * Key : Value Schema\r\n *\r\n * Key: --\r\n *\r\n * Value Schema:\r\n * {\r\n * homeAccountId: home account identifier for the auth scheme,\r\n * environment: entity that issued the token, represented as a full host\r\n * realm: Full tenant or organizational identifier that the account belongs to\r\n * localAccountId: Original tenant-specific accountID, usually used for legacy cases\r\n * username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt\r\n * authorityType: Accounts authority type as a string\r\n * name: Full name for the account, including given name and family name,\r\n * clientInfo: Full base64 encoded client info received from ESTS\r\n * lastModificationTime: last time this entity was modified in the cache\r\n * lastModificationApp:\r\n * idTokenClaims: Object containing claims parsed from ID token\r\n * nativeAccountId: Account identifier on the native device\r\n * }\r\n */\r\nvar AccountEntity = /** @class */ (function () {\r\n function AccountEntity() {\r\n }\r\n /**\r\n * Generate Account Id key component as per the schema: -\r\n */\r\n AccountEntity.prototype.generateAccountId = function () {\r\n var accountId = [this.homeAccountId, this.environment];\r\n return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();\r\n };\r\n /**\r\n * Generate Account Cache Key as per the schema: --\r\n */\r\n AccountEntity.prototype.generateAccountKey = function () {\r\n return AccountEntity.generateAccountCacheKey({\r\n homeAccountId: this.homeAccountId,\r\n environment: this.environment,\r\n tenantId: this.realm,\r\n username: this.username,\r\n localAccountId: this.localAccountId\r\n });\r\n };\r\n /**\r\n * returns the type of the cache (in this case account)\r\n */\r\n AccountEntity.prototype.generateType = function () {\r\n switch (this.authorityType) {\r\n case CacheAccountType.ADFS_ACCOUNT_TYPE:\r\n return CacheType.ADFS;\r\n case CacheAccountType.MSAV1_ACCOUNT_TYPE:\r\n return CacheType.MSA;\r\n case CacheAccountType.MSSTS_ACCOUNT_TYPE:\r\n return CacheType.MSSTS;\r\n case CacheAccountType.GENERIC_ACCOUNT_TYPE:\r\n return CacheType.GENERIC;\r\n default: {\r\n throw ClientAuthError.createUnexpectedAccountTypeError();\r\n }\r\n }\r\n };\r\n /**\r\n * Returns the AccountInfo interface for this account.\r\n */\r\n AccountEntity.prototype.getAccountInfo = function () {\r\n return {\r\n homeAccountId: this.homeAccountId,\r\n environment: this.environment,\r\n tenantId: this.realm,\r\n username: this.username,\r\n localAccountId: this.localAccountId,\r\n name: this.name,\r\n idTokenClaims: this.idTokenClaims,\r\n nativeAccountId: this.nativeAccountId\r\n };\r\n };\r\n /**\r\n * Generates account key from interface\r\n * @param accountInterface\r\n */\r\n AccountEntity.generateAccountCacheKey = function (accountInterface) {\r\n var accountKey = [\r\n accountInterface.homeAccountId,\r\n accountInterface.environment || Constants.EMPTY_STRING,\r\n accountInterface.tenantId || Constants.EMPTY_STRING,\r\n ];\r\n return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();\r\n };\r\n /**\r\n * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.\r\n * @param clientInfo\r\n * @param authority\r\n * @param idToken\r\n * @param policy\r\n */\r\n AccountEntity.createAccount = function (clientInfo, homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment, nativeAccountId) {\r\n var _a, _b, _c, _d, _e, _f;\r\n var account = new AccountEntity();\r\n account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;\r\n account.clientInfo = clientInfo;\r\n account.homeAccountId = homeAccountId;\r\n account.nativeAccountId = nativeAccountId;\r\n var env = environment || (authority && authority.getPreferredCache());\r\n if (!env) {\r\n throw ClientAuthError.createInvalidCacheEnvironmentError();\r\n }\r\n account.environment = env;\r\n // non AAD scenarios can have empty realm\r\n account.realm = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.tid) || Constants.EMPTY_STRING;\r\n if (idToken) {\r\n account.idTokenClaims = idToken.claims;\r\n // How do you account for MSA CID here?\r\n account.localAccountId = ((_b = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _b === void 0 ? void 0 : _b.oid) || ((_c = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _c === void 0 ? void 0 : _c.sub) || Constants.EMPTY_STRING;\r\n /*\r\n * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.\r\n * In most cases it will contain a single email. This field should not be relied upon if a custom\r\n * policy is configured to return more than 1 email.\r\n */\r\n var preferredUsername = (_d = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _d === void 0 ? void 0 : _d.preferred_username;\r\n var email = ((_e = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _e === void 0 ? void 0 : _e.emails) ? idToken.claims.emails[0] : null;\r\n account.username = preferredUsername || email || Constants.EMPTY_STRING;\r\n account.name = (_f = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _f === void 0 ? void 0 : _f.name;\r\n }\r\n account.cloudGraphHostName = cloudGraphHostName;\r\n account.msGraphHost = msGraphHost;\r\n return account;\r\n };\r\n /**\r\n * Builds non-AAD/ADFS account.\r\n * @param authority\r\n * @param idToken\r\n */\r\n AccountEntity.createGenericAccount = function (homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment) {\r\n var _a, _b, _c, _d;\r\n var account = new AccountEntity();\r\n account.authorityType = (authority &&\r\n authority.authorityType === AuthorityType.Adfs) ? CacheAccountType.ADFS_ACCOUNT_TYPE : CacheAccountType.GENERIC_ACCOUNT_TYPE;\r\n account.homeAccountId = homeAccountId;\r\n // non AAD scenarios can have empty realm\r\n account.realm = Constants.EMPTY_STRING;\r\n var env = environment || authority && authority.getPreferredCache();\r\n if (!env) {\r\n throw ClientAuthError.createInvalidCacheEnvironmentError();\r\n }\r\n if (idToken) {\r\n // How do you account for MSA CID here?\r\n account.localAccountId = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.oid) || ((_b = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _b === void 0 ? void 0 : _b.sub) || Constants.EMPTY_STRING;\r\n // upn claim for most ADFS scenarios\r\n account.username = ((_c = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _c === void 0 ? void 0 : _c.upn) || Constants.EMPTY_STRING;\r\n account.name = ((_d = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _d === void 0 ? void 0 : _d.name) || Constants.EMPTY_STRING;\r\n account.idTokenClaims = idToken === null || idToken === void 0 ? void 0 : idToken.claims;\r\n }\r\n account.environment = env;\r\n account.cloudGraphHostName = cloudGraphHostName;\r\n account.msGraphHost = msGraphHost;\r\n /*\r\n * add uniqueName to claims\r\n * account.name = idToken.claims.uniqueName;\r\n */\r\n return account;\r\n };\r\n /**\r\n * Generate HomeAccountId from server response\r\n * @param serverClientInfo\r\n * @param authType\r\n */\r\n AccountEntity.generateHomeAccountId = function (serverClientInfo, authType, logger, cryptoObj, idToken) {\r\n var _a;\r\n var accountId = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.sub) ? idToken.claims.sub : Constants.EMPTY_STRING;\r\n // since ADFS does not have tid and does not set client_info\r\n if (authType === AuthorityType.Adfs || authType === AuthorityType.Dsts) {\r\n return accountId;\r\n }\r\n // for cases where there is clientInfo\r\n if (serverClientInfo) {\r\n try {\r\n var clientInfo = buildClientInfo(serverClientInfo, cryptoObj);\r\n if (!StringUtils.isEmpty(clientInfo.uid) && !StringUtils.isEmpty(clientInfo.utid)) {\r\n return \"\" + clientInfo.uid + Separators.CLIENT_INFO_SEPARATOR + clientInfo.utid;\r\n }\r\n }\r\n catch (e) { }\r\n }\r\n // default to \"sub\" claim\r\n logger.verbose(\"No client info in response\");\r\n return accountId;\r\n };\r\n /**\r\n * Validates an entity: checks for all expected params\r\n * @param entity\r\n */\r\n AccountEntity.isAccountEntity = function (entity) {\r\n if (!entity) {\r\n return false;\r\n }\r\n return (entity.hasOwnProperty(\"homeAccountId\") &&\r\n entity.hasOwnProperty(\"environment\") &&\r\n entity.hasOwnProperty(\"realm\") &&\r\n entity.hasOwnProperty(\"localAccountId\") &&\r\n entity.hasOwnProperty(\"username\") &&\r\n entity.hasOwnProperty(\"authorityType\"));\r\n };\r\n /**\r\n * Helper function to determine whether 2 accountInfo objects represent the same account\r\n * @param accountA\r\n * @param accountB\r\n * @param compareClaims - If set to true idTokenClaims will also be compared to determine account equality\r\n */\r\n AccountEntity.accountInfoIsEqual = function (accountA, accountB, compareClaims) {\r\n if (!accountA || !accountB) {\r\n return false;\r\n }\r\n var claimsMatch = true; // default to true so as to not fail comparison below if compareClaims: false\r\n if (compareClaims) {\r\n var accountAClaims = (accountA.idTokenClaims || {});\r\n var accountBClaims = (accountB.idTokenClaims || {});\r\n // issued at timestamp and nonce are expected to change each time a new id token is acquired\r\n claimsMatch = (accountAClaims.iat === accountBClaims.iat) &&\r\n (accountAClaims.nonce === accountBClaims.nonce);\r\n }\r\n return (accountA.homeAccountId === accountB.homeAccountId) &&\r\n (accountA.localAccountId === accountB.localAccountId) &&\r\n (accountA.username === accountB.username) &&\r\n (accountA.tenantId === accountB.tenantId) &&\r\n (accountA.environment === accountB.environment) &&\r\n (accountA.nativeAccountId === accountB.nativeAccountId) &&\r\n claimsMatch;\r\n };\r\n return AccountEntity;\r\n}());\n\nexport { AccountEntity };\n//# sourceMappingURL=AccountEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar CcsCredentialType;\r\n(function (CcsCredentialType) {\r\n CcsCredentialType[\"HOME_ACCOUNT_ID\"] = \"home_account_id\";\r\n CcsCredentialType[\"UPN\"] = \"UPN\";\r\n})(CcsCredentialType || (CcsCredentialType = {}));\n\nexport { CcsCredentialType };\n//# sourceMappingURL=CcsCredential.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { StringUtils } from '../utils/StringUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * JWT Token representation class. Parses token string and generates claims object.\r\n */\r\nvar AuthToken = /** @class */ (function () {\r\n function AuthToken(rawToken, crypto) {\r\n if (StringUtils.isEmpty(rawToken)) {\r\n throw ClientAuthError.createTokenNullOrEmptyError(rawToken);\r\n }\r\n this.rawToken = rawToken;\r\n this.claims = AuthToken.extractTokenClaims(rawToken, crypto);\r\n }\r\n /**\r\n * Extract token by decoding the rawToken\r\n *\r\n * @param encodedToken\r\n */\r\n AuthToken.extractTokenClaims = function (encodedToken, crypto) {\r\n var decodedToken = StringUtils.decodeAuthToken(encodedToken);\r\n // token will be decoded to get the username\r\n try {\r\n var base64TokenPayload = decodedToken.JWSPayload;\r\n // base64Decode() should throw an error if there is an issue\r\n var base64Decoded = crypto.base64Decode(base64TokenPayload);\r\n return JSON.parse(base64Decoded);\r\n }\r\n catch (err) {\r\n throw ClientAuthError.createTokenParsingError(err);\r\n }\r\n };\r\n /**\r\n * Determine if the token's max_age has transpired\r\n */\r\n AuthToken.checkMaxAge = function (authTime, maxAge) {\r\n /*\r\n * per https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest\r\n * To force an immediate re-authentication: If an app requires that a user re-authenticate prior to access,\r\n * provide a value of 0 for the max_age parameter and the AS will force a fresh login.\r\n */\r\n var fiveMinuteSkew = 300000; // five minutes in milliseconds\r\n if ((maxAge === 0) || ((Date.now() - fiveMinuteSkew) > (authTime + maxAge))) {\r\n throw ClientAuthError.createMaxAgeTranspiredError();\r\n }\r\n };\r\n return AuthToken;\r\n}());\n\nexport { AuthToken };\n//# sourceMappingURL=AuthToken.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/* eslint-disable header/header */\r\nvar name = \"@azure/msal-common\";\r\nvar version = \"13.3.1\";\n\nexport { name, version };\n//# sourceMappingURL=packageMetadata.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator, __assign, __extends } from '../_virtual/_tslib.js';\nimport { Separators, CredentialType, AuthenticationScheme, THE_FAMILY_ID, APP_METADATA, AUTHORITY_METADATA_CONSTANTS } from '../utils/Constants.js';\nimport { ScopeSet } from '../request/ScopeSet.js';\nimport { AccountEntity } from './entities/AccountEntity.js';\nimport { AuthError } from '../error/AuthError.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { AuthToken } from '../account/AuthToken.js';\nimport { name, version } from '../packageMetadata.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Interface class which implement cache storage functions used by MSAL to perform validity checks, and store tokens.\r\n */\r\nvar CacheManager = /** @class */ (function () {\r\n function CacheManager(clientId, cryptoImpl, logger) {\r\n this.clientId = clientId;\r\n this.cryptoImpl = cryptoImpl;\r\n this.commonLogger = logger.clone(name, version);\r\n }\r\n /**\r\n * Returns all accounts in cache\r\n */\r\n CacheManager.prototype.getAllAccounts = function () {\r\n var _this = this;\r\n var allAccountKeys = this.getAccountKeys();\r\n if (allAccountKeys.length < 1) {\r\n return [];\r\n }\r\n var accountEntities = allAccountKeys.reduce(function (accounts, key) {\r\n var entity = _this.getAccount(key);\r\n if (!entity) {\r\n return accounts;\r\n }\r\n accounts.push(entity);\r\n return accounts;\r\n }, []);\r\n if (accountEntities.length < 1) {\r\n return [];\r\n }\r\n else {\r\n var allAccounts = accountEntities.map(function (accountEntity) {\r\n return _this.getAccountInfoFromEntity(accountEntity);\r\n });\r\n return allAccounts;\r\n }\r\n };\r\n /**\r\n * Gets accountInfo object based on provided filters\r\n */\r\n CacheManager.prototype.getAccountInfoFilteredBy = function (accountFilter) {\r\n var allAccounts = this.getAccountsFilteredBy(accountFilter);\r\n if (allAccounts.length > 0) {\r\n return this.getAccountInfoFromEntity(allAccounts[0]);\r\n }\r\n else {\r\n return null;\r\n }\r\n };\r\n CacheManager.prototype.getAccountInfoFromEntity = function (accountEntity) {\r\n var accountInfo = accountEntity.getAccountInfo();\r\n var idToken = this.getIdToken(accountInfo);\r\n if (idToken) {\r\n accountInfo.idToken = idToken.secret;\r\n accountInfo.idTokenClaims = new AuthToken(idToken.secret, this.cryptoImpl).claims;\r\n }\r\n return accountInfo;\r\n };\r\n /**\r\n * saves a cache record\r\n * @param cacheRecord\r\n */\r\n CacheManager.prototype.saveCacheRecord = function (cacheRecord) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n if (!cacheRecord) {\r\n throw ClientAuthError.createNullOrUndefinedCacheRecord();\r\n }\r\n if (!!cacheRecord.account) {\r\n this.setAccount(cacheRecord.account);\r\n }\r\n if (!!cacheRecord.idToken) {\r\n this.setIdTokenCredential(cacheRecord.idToken);\r\n }\r\n if (!!!cacheRecord.accessToken) return [3 /*break*/, 2];\r\n return [4 /*yield*/, this.saveAccessToken(cacheRecord.accessToken)];\r\n case 1:\r\n _a.sent();\r\n _a.label = 2;\r\n case 2:\r\n if (!!cacheRecord.refreshToken) {\r\n this.setRefreshTokenCredential(cacheRecord.refreshToken);\r\n }\r\n if (!!cacheRecord.appMetadata) {\r\n this.setAppMetadata(cacheRecord.appMetadata);\r\n }\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * saves access token credential\r\n * @param credential\r\n */\r\n CacheManager.prototype.saveAccessToken = function (credential) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var accessTokenFilter, tokenKeys, currentScopes, removedAccessTokens;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n accessTokenFilter = {\r\n clientId: credential.clientId,\r\n credentialType: credential.credentialType,\r\n environment: credential.environment,\r\n homeAccountId: credential.homeAccountId,\r\n realm: credential.realm,\r\n tokenType: credential.tokenType,\r\n requestedClaimsHash: credential.requestedClaimsHash\r\n };\r\n tokenKeys = this.getTokenKeys();\r\n currentScopes = ScopeSet.fromString(credential.target);\r\n removedAccessTokens = [];\r\n tokenKeys.accessToken.forEach(function (key) {\r\n if (!_this.accessTokenKeyMatchesFilter(key, accessTokenFilter, false)) {\r\n return;\r\n }\r\n var tokenEntity = _this.getAccessTokenCredential(key);\r\n if (tokenEntity && _this.credentialMatchesFilter(tokenEntity, accessTokenFilter)) {\r\n var tokenScopeSet = ScopeSet.fromString(tokenEntity.target);\r\n if (tokenScopeSet.intersectingScopeSets(currentScopes)) {\r\n removedAccessTokens.push(_this.removeAccessToken(key));\r\n }\r\n }\r\n });\r\n return [4 /*yield*/, Promise.all(removedAccessTokens)];\r\n case 1:\r\n _a.sent();\r\n this.setAccessTokenCredential(credential);\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * retrieve accounts matching all provided filters; if no filter is set, get all accounts\r\n * not checking for casing as keys are all generated in lower case, remember to convert to lower case if object properties are compared\r\n * @param homeAccountId\r\n * @param environment\r\n * @param realm\r\n */\r\n CacheManager.prototype.getAccountsFilteredBy = function (accountFilter) {\r\n var _this = this;\r\n var allAccountKeys = this.getAccountKeys();\r\n var matchingAccounts = [];\r\n allAccountKeys.forEach(function (cacheKey) {\r\n if (!_this.isAccountKey(cacheKey, accountFilter.homeAccountId, accountFilter.realm)) {\r\n // Don't parse value if the key doesn't match the account filters\r\n return;\r\n }\r\n var entity = _this.getAccount(cacheKey);\r\n if (!entity) {\r\n return;\r\n }\r\n if (!!accountFilter.homeAccountId && !_this.matchHomeAccountId(entity, accountFilter.homeAccountId)) {\r\n return;\r\n }\r\n if (!!accountFilter.localAccountId && !_this.matchLocalAccountId(entity, accountFilter.localAccountId)) {\r\n return;\r\n }\r\n if (!!accountFilter.username && !_this.matchUsername(entity, accountFilter.username)) {\r\n return;\r\n }\r\n if (!!accountFilter.environment && !_this.matchEnvironment(entity, accountFilter.environment)) {\r\n return;\r\n }\r\n if (!!accountFilter.realm && !_this.matchRealm(entity, accountFilter.realm)) {\r\n return;\r\n }\r\n if (!!accountFilter.nativeAccountId && !_this.matchNativeAccountId(entity, accountFilter.nativeAccountId)) {\r\n return;\r\n }\r\n matchingAccounts.push(entity);\r\n });\r\n return matchingAccounts;\r\n };\r\n /**\r\n * Returns true if the given key matches our account key schema. Also matches homeAccountId and/or tenantId if provided\r\n * @param key\r\n * @param homeAccountId\r\n * @param tenantId\r\n * @returns\r\n */\r\n CacheManager.prototype.isAccountKey = function (key, homeAccountId, tenantId) {\r\n if (key.split(Separators.CACHE_KEY_SEPARATOR).length < 3) {\r\n // Account cache keys contain 3 items separated by '-' (each item may also contain '-')\r\n return false;\r\n }\r\n if (homeAccountId && !key.toLowerCase().includes(homeAccountId.toLowerCase())) {\r\n return false;\r\n }\r\n if (tenantId && !key.toLowerCase().includes(tenantId.toLowerCase())) {\r\n return false;\r\n }\r\n // Do not check environment as aliasing can cause false negatives\r\n return true;\r\n };\r\n /**\r\n * Returns true if the given key matches our credential key schema.\r\n * @param key\r\n */\r\n CacheManager.prototype.isCredentialKey = function (key) {\r\n if (key.split(Separators.CACHE_KEY_SEPARATOR).length < 6) {\r\n // Credential cache keys contain 6 items separated by '-' (each item may also contain '-')\r\n return false;\r\n }\r\n var lowerCaseKey = key.toLowerCase();\r\n // Credential keys must indicate what credential type they represent\r\n if (lowerCaseKey.indexOf(CredentialType.ID_TOKEN.toLowerCase()) === -1 &&\r\n lowerCaseKey.indexOf(CredentialType.ACCESS_TOKEN.toLowerCase()) === -1 &&\r\n lowerCaseKey.indexOf(CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME.toLowerCase()) === -1 &&\r\n lowerCaseKey.indexOf(CredentialType.REFRESH_TOKEN.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n if (lowerCaseKey.indexOf(CredentialType.REFRESH_TOKEN.toLowerCase()) > -1) {\r\n // Refresh tokens must contain the client id or family id\r\n var clientIdValidation = \"\" + CredentialType.REFRESH_TOKEN + Separators.CACHE_KEY_SEPARATOR + this.clientId + Separators.CACHE_KEY_SEPARATOR;\r\n var familyIdValidation = \"\" + CredentialType.REFRESH_TOKEN + Separators.CACHE_KEY_SEPARATOR + THE_FAMILY_ID + Separators.CACHE_KEY_SEPARATOR;\r\n if (lowerCaseKey.indexOf(clientIdValidation.toLowerCase()) === -1 && lowerCaseKey.indexOf(familyIdValidation.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n }\r\n else if (lowerCaseKey.indexOf(this.clientId.toLowerCase()) === -1) {\r\n // Tokens must contain the clientId\r\n return false;\r\n }\r\n return true;\r\n };\r\n /**\r\n * Returns whether or not the given credential entity matches the filter\r\n * @param entity\r\n * @param filter\r\n * @returns\r\n */\r\n CacheManager.prototype.credentialMatchesFilter = function (entity, filter) {\r\n if (!!filter.clientId && !this.matchClientId(entity, filter.clientId)) {\r\n return false;\r\n }\r\n if (!!filter.userAssertionHash && !this.matchUserAssertionHash(entity, filter.userAssertionHash)) {\r\n return false;\r\n }\r\n /*\r\n * homeAccountId can be undefined, and we want to filter out cached items that have a homeAccountId of \"\"\r\n * because we don't want a client_credential request to return a cached token that has a homeAccountId\r\n */\r\n if ((typeof filter.homeAccountId === \"string\") && !this.matchHomeAccountId(entity, filter.homeAccountId)) {\r\n return false;\r\n }\r\n if (!!filter.environment && !this.matchEnvironment(entity, filter.environment)) {\r\n return false;\r\n }\r\n if (!!filter.realm && !this.matchRealm(entity, filter.realm)) {\r\n return false;\r\n }\r\n if (!!filter.credentialType && !this.matchCredentialType(entity, filter.credentialType)) {\r\n return false;\r\n }\r\n if (!!filter.familyId && !this.matchFamilyId(entity, filter.familyId)) {\r\n return false;\r\n }\r\n /*\r\n * idTokens do not have \"target\", target specific refreshTokens do exist for some types of authentication\r\n * Resource specific refresh tokens case will be added when the support is deemed necessary\r\n */\r\n if (!!filter.target && !this.matchTarget(entity, filter.target)) {\r\n return false;\r\n }\r\n // If request OR cached entity has requested Claims Hash, check if they match\r\n if (filter.requestedClaimsHash || entity.requestedClaimsHash) {\r\n // Don't match if either is undefined or they are different\r\n if (entity.requestedClaimsHash !== filter.requestedClaimsHash) {\r\n return false;\r\n }\r\n }\r\n // Access Token with Auth Scheme specific matching\r\n if (entity.credentialType === CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME) {\r\n if (!!filter.tokenType && !this.matchTokenType(entity, filter.tokenType)) {\r\n return false;\r\n }\r\n // KeyId (sshKid) in request must match cached SSH certificate keyId because SSH cert is bound to a specific key\r\n if (filter.tokenType === AuthenticationScheme.SSH) {\r\n if (filter.keyId && !this.matchKeyId(entity, filter.keyId)) {\r\n return false;\r\n }\r\n }\r\n }\r\n return true;\r\n };\r\n /**\r\n * retrieve appMetadata matching all provided filters; if no filter is set, get all appMetadata\r\n * @param filter\r\n */\r\n CacheManager.prototype.getAppMetadataFilteredBy = function (filter) {\r\n return this.getAppMetadataFilteredByInternal(filter.environment, filter.clientId);\r\n };\r\n /**\r\n * Support function to help match appMetadata\r\n * @param environment\r\n * @param clientId\r\n */\r\n CacheManager.prototype.getAppMetadataFilteredByInternal = function (environment, clientId) {\r\n var _this = this;\r\n var allCacheKeys = this.getKeys();\r\n var matchingAppMetadata = {};\r\n allCacheKeys.forEach(function (cacheKey) {\r\n // don't parse any non-appMetadata type cache entities\r\n if (!_this.isAppMetadata(cacheKey)) {\r\n return;\r\n }\r\n // Attempt retrieval\r\n var entity = _this.getAppMetadata(cacheKey);\r\n if (!entity) {\r\n return;\r\n }\r\n if (!!environment && !_this.matchEnvironment(entity, environment)) {\r\n return;\r\n }\r\n if (!!clientId && !_this.matchClientId(entity, clientId)) {\r\n return;\r\n }\r\n matchingAppMetadata[cacheKey] = entity;\r\n });\r\n return matchingAppMetadata;\r\n };\r\n /**\r\n * retrieve authorityMetadata that contains a matching alias\r\n * @param filter\r\n */\r\n CacheManager.prototype.getAuthorityMetadataByAlias = function (host) {\r\n var _this = this;\r\n var allCacheKeys = this.getAuthorityMetadataKeys();\r\n var matchedEntity = null;\r\n allCacheKeys.forEach(function (cacheKey) {\r\n // don't parse any non-authorityMetadata type cache entities\r\n if (!_this.isAuthorityMetadata(cacheKey) || cacheKey.indexOf(_this.clientId) === -1) {\r\n return;\r\n }\r\n // Attempt retrieval\r\n var entity = _this.getAuthorityMetadata(cacheKey);\r\n if (!entity) {\r\n return;\r\n }\r\n if (entity.aliases.indexOf(host) === -1) {\r\n return;\r\n }\r\n matchedEntity = entity;\r\n });\r\n return matchedEntity;\r\n };\r\n /**\r\n * Removes all accounts and related tokens from cache.\r\n */\r\n CacheManager.prototype.removeAllAccounts = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var allAccountKeys, removedAccounts;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n allAccountKeys = this.getAccountKeys();\r\n removedAccounts = [];\r\n allAccountKeys.forEach(function (cacheKey) {\r\n removedAccounts.push(_this.removeAccount(cacheKey));\r\n });\r\n return [4 /*yield*/, Promise.all(removedAccounts)];\r\n case 1:\r\n _a.sent();\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Removes the account and related tokens for a given account key\r\n * @param account\r\n */\r\n CacheManager.prototype.removeAccount = function (accountKey) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var account;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n account = this.getAccount(accountKey);\r\n if (!account) {\r\n throw ClientAuthError.createNoAccountFoundError();\r\n }\r\n return [4 /*yield*/, this.removeAccountContext(account)];\r\n case 1:\r\n _a.sent();\r\n this.removeItem(accountKey);\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Removes credentials associated with the provided account\r\n * @param account\r\n */\r\n CacheManager.prototype.removeAccountContext = function (account) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var allTokenKeys, accountId, removedCredentials;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n allTokenKeys = this.getTokenKeys();\r\n accountId = account.generateAccountId();\r\n removedCredentials = [];\r\n allTokenKeys.idToken.forEach(function (key) {\r\n if (key.indexOf(accountId) === 0) {\r\n _this.removeIdToken(key);\r\n }\r\n });\r\n allTokenKeys.accessToken.forEach(function (key) {\r\n if (key.indexOf(accountId) === 0) {\r\n removedCredentials.push(_this.removeAccessToken(key));\r\n }\r\n });\r\n allTokenKeys.refreshToken.forEach(function (key) {\r\n if (key.indexOf(accountId) === 0) {\r\n _this.removeRefreshToken(key);\r\n }\r\n });\r\n return [4 /*yield*/, Promise.all(removedCredentials)];\r\n case 1:\r\n _a.sent();\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * returns a boolean if the given credential is removed\r\n * @param credential\r\n */\r\n CacheManager.prototype.removeAccessToken = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var credential, accessTokenWithAuthSchemeEntity, kid;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n credential = this.getAccessTokenCredential(key);\r\n if (!credential) {\r\n return [2 /*return*/];\r\n }\r\n if (!(credential.credentialType.toLowerCase() === CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME.toLowerCase())) return [3 /*break*/, 4];\r\n if (!(credential.tokenType === AuthenticationScheme.POP)) return [3 /*break*/, 4];\r\n accessTokenWithAuthSchemeEntity = credential;\r\n kid = accessTokenWithAuthSchemeEntity.keyId;\r\n if (!kid) return [3 /*break*/, 4];\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.cryptoImpl.removeTokenBindingKey(kid)];\r\n case 2:\r\n _a.sent();\r\n return [3 /*break*/, 4];\r\n case 3:\r\n _a.sent();\r\n throw ClientAuthError.createBindingKeyNotRemovedError();\r\n case 4: return [2 /*return*/, this.removeItem(key)];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Removes all app metadata objects from cache.\r\n */\r\n CacheManager.prototype.removeAppMetadata = function () {\r\n var _this = this;\r\n var allCacheKeys = this.getKeys();\r\n allCacheKeys.forEach(function (cacheKey) {\r\n if (_this.isAppMetadata(cacheKey)) {\r\n _this.removeItem(cacheKey);\r\n }\r\n });\r\n return true;\r\n };\r\n /**\r\n * Retrieve the cached credentials into a cacherecord\r\n * @param account\r\n * @param clientId\r\n * @param scopes\r\n * @param environment\r\n * @param authScheme\r\n */\r\n CacheManager.prototype.readCacheRecord = function (account, request, environment) {\r\n var tokenKeys = this.getTokenKeys();\r\n var cachedAccount = this.readAccountFromCache(account);\r\n var cachedIdToken = this.getIdToken(account, tokenKeys);\r\n var cachedAccessToken = this.getAccessToken(account, request, tokenKeys);\r\n var cachedRefreshToken = this.getRefreshToken(account, false, tokenKeys);\r\n var cachedAppMetadata = this.readAppMetadataFromCache(environment);\r\n if (cachedAccount && cachedIdToken) {\r\n cachedAccount.idTokenClaims = new AuthToken(cachedIdToken.secret, this.cryptoImpl).claims;\r\n }\r\n return {\r\n account: cachedAccount,\r\n idToken: cachedIdToken,\r\n accessToken: cachedAccessToken,\r\n refreshToken: cachedRefreshToken,\r\n appMetadata: cachedAppMetadata,\r\n };\r\n };\r\n /**\r\n * Retrieve AccountEntity from cache\r\n * @param account\r\n */\r\n CacheManager.prototype.readAccountFromCache = function (account) {\r\n var accountKey = AccountEntity.generateAccountCacheKey(account);\r\n return this.getAccount(accountKey);\r\n };\r\n /**\r\n * Retrieve IdTokenEntity from cache\r\n * @param clientId\r\n * @param account\r\n * @param inputRealm\r\n */\r\n CacheManager.prototype.getIdToken = function (account, tokenKeys) {\r\n var _this = this;\r\n this.commonLogger.trace(\"CacheManager - getIdToken called\");\r\n var idTokenFilter = {\r\n homeAccountId: account.homeAccountId,\r\n environment: account.environment,\r\n credentialType: CredentialType.ID_TOKEN,\r\n clientId: this.clientId,\r\n realm: account.tenantId,\r\n };\r\n var idTokens = this.getIdTokensByFilter(idTokenFilter, tokenKeys);\r\n var numIdTokens = idTokens.length;\r\n if (numIdTokens < 1) {\r\n this.commonLogger.info(\"CacheManager:getIdToken - No token found\");\r\n return null;\r\n }\r\n else if (numIdTokens > 1) {\r\n this.commonLogger.info(\"CacheManager:getIdToken - Multiple id tokens found, clearing them\");\r\n idTokens.forEach(function (idToken) {\r\n _this.removeIdToken(idToken.generateCredentialKey());\r\n });\r\n return null;\r\n }\r\n this.commonLogger.info(\"CacheManager:getIdToken - Returning id token\");\r\n return idTokens[0];\r\n };\r\n /**\r\n * Gets all idTokens matching the given filter\r\n * @param filter\r\n * @returns\r\n */\r\n CacheManager.prototype.getIdTokensByFilter = function (filter, tokenKeys) {\r\n var _this = this;\r\n var idTokenKeys = tokenKeys && tokenKeys.idToken || this.getTokenKeys().idToken;\r\n var idTokens = [];\r\n idTokenKeys.forEach(function (key) {\r\n if (!_this.idTokenKeyMatchesFilter(key, __assign({ clientId: _this.clientId }, filter))) {\r\n return;\r\n }\r\n var idToken = _this.getIdTokenCredential(key);\r\n if (idToken && _this.credentialMatchesFilter(idToken, filter)) {\r\n idTokens.push(idToken);\r\n }\r\n });\r\n return idTokens;\r\n };\r\n /**\r\n * Validate the cache key against filter before retrieving and parsing cache value\r\n * @param key\r\n * @param filter\r\n * @returns\r\n */\r\n CacheManager.prototype.idTokenKeyMatchesFilter = function (inputKey, filter) {\r\n var key = inputKey.toLowerCase();\r\n if (filter.clientId && key.indexOf(filter.clientId.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n if (filter.homeAccountId && key.indexOf(filter.homeAccountId.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n return true;\r\n };\r\n /**\r\n * Removes idToken from the cache\r\n * @param key\r\n */\r\n CacheManager.prototype.removeIdToken = function (key) {\r\n this.removeItem(key);\r\n };\r\n /**\r\n * Removes refresh token from the cache\r\n * @param key\r\n */\r\n CacheManager.prototype.removeRefreshToken = function (key) {\r\n this.removeItem(key);\r\n };\r\n /**\r\n * Retrieve AccessTokenEntity from cache\r\n * @param clientId\r\n * @param account\r\n * @param scopes\r\n * @param authScheme\r\n */\r\n CacheManager.prototype.getAccessToken = function (account, request, tokenKeys) {\r\n var _this = this;\r\n this.commonLogger.trace(\"CacheManager - getAccessToken called\");\r\n var scopes = ScopeSet.createSearchScopes(request.scopes);\r\n var authScheme = request.authenticationScheme || AuthenticationScheme.BEARER;\r\n /*\r\n * Distinguish between Bearer and PoP/SSH token cache types\r\n * Cast to lowercase to handle \"bearer\" from ADFS\r\n */\r\n var credentialType = (authScheme && authScheme.toLowerCase() !== AuthenticationScheme.BEARER.toLowerCase()) ? CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME : CredentialType.ACCESS_TOKEN;\r\n var accessTokenFilter = {\r\n homeAccountId: account.homeAccountId,\r\n environment: account.environment,\r\n credentialType: credentialType,\r\n clientId: this.clientId,\r\n realm: account.tenantId,\r\n target: scopes,\r\n tokenType: authScheme,\r\n keyId: request.sshKid,\r\n requestedClaimsHash: request.requestedClaimsHash,\r\n };\r\n var accessTokenKeys = tokenKeys && tokenKeys.accessToken || this.getTokenKeys().accessToken;\r\n var accessTokens = [];\r\n accessTokenKeys.forEach(function (key) {\r\n // Validate key\r\n if (_this.accessTokenKeyMatchesFilter(key, accessTokenFilter, true)) {\r\n var accessToken = _this.getAccessTokenCredential(key);\r\n // Validate value\r\n if (accessToken && _this.credentialMatchesFilter(accessToken, accessTokenFilter)) {\r\n accessTokens.push(accessToken);\r\n }\r\n }\r\n });\r\n var numAccessTokens = accessTokens.length;\r\n if (numAccessTokens < 1) {\r\n this.commonLogger.info(\"CacheManager:getAccessToken - No token found\");\r\n return null;\r\n }\r\n else if (numAccessTokens > 1) {\r\n this.commonLogger.info(\"CacheManager:getAccessToken - Multiple access tokens found, clearing them\");\r\n accessTokens.forEach(function (accessToken) {\r\n _this.removeAccessToken(accessToken.generateCredentialKey());\r\n });\r\n return null;\r\n }\r\n this.commonLogger.info(\"CacheManager:getAccessToken - Returning access token\");\r\n return accessTokens[0];\r\n };\r\n /**\r\n * Validate the cache key against filter before retrieving and parsing cache value\r\n * @param key\r\n * @param filter\r\n * @param keyMustContainAllScopes\r\n * @returns\r\n */\r\n CacheManager.prototype.accessTokenKeyMatchesFilter = function (inputKey, filter, keyMustContainAllScopes) {\r\n var key = inputKey.toLowerCase();\r\n if (filter.clientId && key.indexOf(filter.clientId.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n if (filter.homeAccountId && key.indexOf(filter.homeAccountId.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n if (filter.realm && key.indexOf(filter.realm.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n if (filter.requestedClaimsHash && key.indexOf(filter.requestedClaimsHash.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n if (filter.target) {\r\n var scopes = filter.target.asArray();\r\n for (var i = 0; i < scopes.length; i++) {\r\n if (keyMustContainAllScopes && !key.includes(scopes[i].toLowerCase())) {\r\n // When performing a cache lookup a missing scope would be a cache miss\r\n return false;\r\n }\r\n else if (!keyMustContainAllScopes && key.includes(scopes[i].toLowerCase())) {\r\n // When performing a cache write, any token with a subset of requested scopes should be replaced\r\n return true;\r\n }\r\n }\r\n }\r\n return true;\r\n };\r\n /**\r\n * Gets all access tokens matching the filter\r\n * @param filter\r\n * @returns\r\n */\r\n CacheManager.prototype.getAccessTokensByFilter = function (filter) {\r\n var _this = this;\r\n var tokenKeys = this.getTokenKeys();\r\n var accessTokens = [];\r\n tokenKeys.accessToken.forEach(function (key) {\r\n if (!_this.accessTokenKeyMatchesFilter(key, filter, true)) {\r\n return;\r\n }\r\n var accessToken = _this.getAccessTokenCredential(key);\r\n if (accessToken && _this.credentialMatchesFilter(accessToken, filter)) {\r\n accessTokens.push(accessToken);\r\n }\r\n });\r\n return accessTokens;\r\n };\r\n /**\r\n * Helper to retrieve the appropriate refresh token from cache\r\n * @param clientId\r\n * @param account\r\n * @param familyRT\r\n */\r\n CacheManager.prototype.getRefreshToken = function (account, familyRT, tokenKeys) {\r\n var _this = this;\r\n this.commonLogger.trace(\"CacheManager - getRefreshToken called\");\r\n var id = familyRT ? THE_FAMILY_ID : undefined;\r\n var refreshTokenFilter = {\r\n homeAccountId: account.homeAccountId,\r\n environment: account.environment,\r\n credentialType: CredentialType.REFRESH_TOKEN,\r\n clientId: this.clientId,\r\n familyId: id,\r\n };\r\n var refreshTokenKeys = tokenKeys && tokenKeys.refreshToken || this.getTokenKeys().refreshToken;\r\n var refreshTokens = [];\r\n refreshTokenKeys.forEach(function (key) {\r\n // Validate key\r\n if (_this.refreshTokenKeyMatchesFilter(key, refreshTokenFilter)) {\r\n var refreshToken = _this.getRefreshTokenCredential(key);\r\n // Validate value\r\n if (refreshToken && _this.credentialMatchesFilter(refreshToken, refreshTokenFilter)) {\r\n refreshTokens.push(refreshToken);\r\n }\r\n }\r\n });\r\n var numRefreshTokens = refreshTokens.length;\r\n if (numRefreshTokens < 1) {\r\n this.commonLogger.info(\"CacheManager:getRefreshToken - No refresh token found.\");\r\n return null;\r\n }\r\n // address the else case after remove functions address environment aliases\r\n this.commonLogger.info(\"CacheManager:getRefreshToken - returning refresh token\");\r\n return refreshTokens[0];\r\n };\r\n /**\r\n * Validate the cache key against filter before retrieving and parsing cache value\r\n * @param key\r\n * @param filter\r\n */\r\n CacheManager.prototype.refreshTokenKeyMatchesFilter = function (inputKey, filter) {\r\n var key = inputKey.toLowerCase();\r\n if (filter.familyId && key.indexOf(filter.familyId.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n // If familyId is used, clientId is not in the key\r\n if (!filter.familyId && filter.clientId && key.indexOf(filter.clientId.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n if (filter.homeAccountId && key.indexOf(filter.homeAccountId.toLowerCase()) === -1) {\r\n return false;\r\n }\r\n return true;\r\n };\r\n /**\r\n * Retrieve AppMetadataEntity from cache\r\n */\r\n CacheManager.prototype.readAppMetadataFromCache = function (environment) {\r\n var appMetadataFilter = {\r\n environment: environment,\r\n clientId: this.clientId,\r\n };\r\n var appMetadata = this.getAppMetadataFilteredBy(appMetadataFilter);\r\n var appMetadataEntries = Object.keys(appMetadata).map(function (key) { return appMetadata[key]; });\r\n var numAppMetadata = appMetadataEntries.length;\r\n if (numAppMetadata < 1) {\r\n return null;\r\n }\r\n else if (numAppMetadata > 1) {\r\n throw ClientAuthError.createMultipleMatchingAppMetadataInCacheError();\r\n }\r\n return appMetadataEntries[0];\r\n };\r\n /**\r\n * Return the family_id value associated with FOCI\r\n * @param environment\r\n * @param clientId\r\n */\r\n CacheManager.prototype.isAppMetadataFOCI = function (environment) {\r\n var appMetadata = this.readAppMetadataFromCache(environment);\r\n return !!(appMetadata && appMetadata.familyId === THE_FAMILY_ID);\r\n };\r\n /**\r\n * helper to match account ids\r\n * @param value\r\n * @param homeAccountId\r\n */\r\n CacheManager.prototype.matchHomeAccountId = function (entity, homeAccountId) {\r\n return !!((typeof entity.homeAccountId === \"string\") && (homeAccountId === entity.homeAccountId));\r\n };\r\n /**\r\n * helper to match account ids\r\n * @param entity\r\n * @param localAccountId\r\n * @returns\r\n */\r\n CacheManager.prototype.matchLocalAccountId = function (entity, localAccountId) {\r\n return !!((typeof entity.localAccountId === \"string\") && (localAccountId === entity.localAccountId));\r\n };\r\n /**\r\n * helper to match usernames\r\n * @param entity\r\n * @param username\r\n * @returns\r\n */\r\n CacheManager.prototype.matchUsername = function (entity, username) {\r\n return !!((typeof entity.username === \"string\") && (username.toLowerCase() === entity.username.toLowerCase()));\r\n };\r\n /**\r\n * helper to match assertion\r\n * @param value\r\n * @param oboAssertion\r\n */\r\n CacheManager.prototype.matchUserAssertionHash = function (entity, userAssertionHash) {\r\n return !!(entity.userAssertionHash && userAssertionHash === entity.userAssertionHash);\r\n };\r\n /**\r\n * helper to match environment\r\n * @param value\r\n * @param environment\r\n */\r\n CacheManager.prototype.matchEnvironment = function (entity, environment) {\r\n var cloudMetadata = this.getAuthorityMetadataByAlias(environment);\r\n if (cloudMetadata && cloudMetadata.aliases.indexOf(entity.environment) > -1) {\r\n return true;\r\n }\r\n return false;\r\n };\r\n /**\r\n * helper to match credential type\r\n * @param entity\r\n * @param credentialType\r\n */\r\n CacheManager.prototype.matchCredentialType = function (entity, credentialType) {\r\n return (entity.credentialType && credentialType.toLowerCase() === entity.credentialType.toLowerCase());\r\n };\r\n /**\r\n * helper to match client ids\r\n * @param entity\r\n * @param clientId\r\n */\r\n CacheManager.prototype.matchClientId = function (entity, clientId) {\r\n return !!(entity.clientId && clientId === entity.clientId);\r\n };\r\n /**\r\n * helper to match family ids\r\n * @param entity\r\n * @param familyId\r\n */\r\n CacheManager.prototype.matchFamilyId = function (entity, familyId) {\r\n return !!(entity.familyId && familyId === entity.familyId);\r\n };\r\n /**\r\n * helper to match realm\r\n * @param entity\r\n * @param realm\r\n */\r\n CacheManager.prototype.matchRealm = function (entity, realm) {\r\n return !!(entity.realm && realm === entity.realm);\r\n };\r\n /**\r\n * helper to match nativeAccountId\r\n * @param entity\r\n * @param nativeAccountId\r\n * @returns boolean indicating the match result\r\n */\r\n CacheManager.prototype.matchNativeAccountId = function (entity, nativeAccountId) {\r\n return !!(entity.nativeAccountId && nativeAccountId === entity.nativeAccountId);\r\n };\r\n /**\r\n * Returns true if the target scopes are a subset of the current entity's scopes, false otherwise.\r\n * @param entity\r\n * @param target\r\n */\r\n CacheManager.prototype.matchTarget = function (entity, target) {\r\n var isNotAccessTokenCredential = (entity.credentialType !== CredentialType.ACCESS_TOKEN && entity.credentialType !== CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME);\r\n if (isNotAccessTokenCredential || !entity.target) {\r\n return false;\r\n }\r\n var entityScopeSet = ScopeSet.fromString(entity.target);\r\n return entityScopeSet.containsScopeSet(target);\r\n };\r\n /**\r\n * Returns true if the credential's tokenType or Authentication Scheme matches the one in the request, false otherwise\r\n * @param entity\r\n * @param tokenType\r\n */\r\n CacheManager.prototype.matchTokenType = function (entity, tokenType) {\r\n return !!(entity.tokenType && entity.tokenType === tokenType);\r\n };\r\n /**\r\n * Returns true if the credential's keyId matches the one in the request, false otherwise\r\n * @param entity\r\n * @param tokenType\r\n */\r\n CacheManager.prototype.matchKeyId = function (entity, keyId) {\r\n return !!(entity.keyId && entity.keyId === keyId);\r\n };\r\n /**\r\n * returns if a given cache entity is of the type appmetadata\r\n * @param key\r\n */\r\n CacheManager.prototype.isAppMetadata = function (key) {\r\n return key.indexOf(APP_METADATA) !== -1;\r\n };\r\n /**\r\n * returns if a given cache entity is of the type authoritymetadata\r\n * @param key\r\n */\r\n CacheManager.prototype.isAuthorityMetadata = function (key) {\r\n return key.indexOf(AUTHORITY_METADATA_CONSTANTS.CACHE_KEY) !== -1;\r\n };\r\n /**\r\n * returns cache key used for cloud instance metadata\r\n */\r\n CacheManager.prototype.generateAuthorityMetadataCacheKey = function (authority) {\r\n return AUTHORITY_METADATA_CONSTANTS.CACHE_KEY + \"-\" + this.clientId + \"-\" + authority;\r\n };\r\n /**\r\n * Helper to convert serialized data to object\r\n * @param obj\r\n * @param json\r\n */\r\n CacheManager.toObject = function (obj, json) {\r\n for (var propertyName in json) {\r\n obj[propertyName] = json[propertyName];\r\n }\r\n return obj;\r\n };\r\n return CacheManager;\r\n}());\r\nvar DefaultStorageClass = /** @class */ (function (_super) {\r\n __extends(DefaultStorageClass, _super);\r\n function DefaultStorageClass() {\r\n return _super !== null && _super.apply(this, arguments) || this;\r\n }\r\n DefaultStorageClass.prototype.setAccount = function () {\r\n var notImplErr = \"Storage interface - setAccount() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getAccount = function () {\r\n var notImplErr = \"Storage interface - getAccount() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.setIdTokenCredential = function () {\r\n var notImplErr = \"Storage interface - setIdTokenCredential() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getIdTokenCredential = function () {\r\n var notImplErr = \"Storage interface - getIdTokenCredential() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.setAccessTokenCredential = function () {\r\n var notImplErr = \"Storage interface - setAccessTokenCredential() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getAccessTokenCredential = function () {\r\n var notImplErr = \"Storage interface - getAccessTokenCredential() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.setRefreshTokenCredential = function () {\r\n var notImplErr = \"Storage interface - setRefreshTokenCredential() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getRefreshTokenCredential = function () {\r\n var notImplErr = \"Storage interface - getRefreshTokenCredential() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.setAppMetadata = function () {\r\n var notImplErr = \"Storage interface - setAppMetadata() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getAppMetadata = function () {\r\n var notImplErr = \"Storage interface - getAppMetadata() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.setServerTelemetry = function () {\r\n var notImplErr = \"Storage interface - setServerTelemetry() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getServerTelemetry = function () {\r\n var notImplErr = \"Storage interface - getServerTelemetry() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.setAuthorityMetadata = function () {\r\n var notImplErr = \"Storage interface - setAuthorityMetadata() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getAuthorityMetadata = function () {\r\n var notImplErr = \"Storage interface - getAuthorityMetadata() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getAuthorityMetadataKeys = function () {\r\n var notImplErr = \"Storage interface - getAuthorityMetadataKeys() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.setThrottlingCache = function () {\r\n var notImplErr = \"Storage interface - setThrottlingCache() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getThrottlingCache = function () {\r\n var notImplErr = \"Storage interface - getThrottlingCache() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.removeItem = function () {\r\n var notImplErr = \"Storage interface - removeItem() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.containsKey = function () {\r\n var notImplErr = \"Storage interface - containsKey() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getKeys = function () {\r\n var notImplErr = \"Storage interface - getKeys() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getAccountKeys = function () {\r\n var notImplErr = \"Storage interface - getAccountKeys() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.getTokenKeys = function () {\r\n var notImplErr = \"Storage interface - getTokenKeys() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n DefaultStorageClass.prototype.clear = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Storage interface - clear() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n };\r\n DefaultStorageClass.prototype.updateCredentialCacheKey = function () {\r\n var notImplErr = \"Storage interface - updateCredentialCacheKey() has not been implemented for the cacheStorage interface.\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n };\r\n return DefaultStorageClass;\r\n}(CacheManager));\n\nexport { CacheManager, DefaultStorageClass };\n//# sourceMappingURL=CacheManager.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Utility class which exposes functions for managing date and time operations.\r\n */\r\nvar TimeUtils = /** @class */ (function () {\r\n function TimeUtils() {\r\n }\r\n /**\r\n * return the current time in Unix time (seconds).\r\n */\r\n TimeUtils.nowSeconds = function () {\r\n // Date.getTime() returns in milliseconds.\r\n return Math.round(new Date().getTime() / 1000.0);\r\n };\r\n /**\r\n * check if a token is expired based on given UTC time in seconds.\r\n * @param expiresOn\r\n */\r\n TimeUtils.isTokenExpired = function (expiresOn, offset) {\r\n // check for access token expiry\r\n var expirationSec = Number(expiresOn) || 0;\r\n var offsetCurrentTimeSec = TimeUtils.nowSeconds() + offset;\r\n // If current time + offset is greater than token expiration time, then token is expired.\r\n return (offsetCurrentTimeSec > expirationSec);\r\n };\r\n /**\r\n * If the current time is earlier than the time that a token was cached at, we must discard the token\r\n * i.e. The system clock was turned back after acquiring the cached token\r\n * @param cachedAt\r\n * @param offset\r\n */\r\n TimeUtils.wasClockTurnedBack = function (cachedAt) {\r\n var cachedAtSec = Number(cachedAt);\r\n return cachedAtSec > TimeUtils.nowSeconds();\r\n };\r\n /**\r\n * Waits for t number of milliseconds\r\n * @param t number\r\n * @param value T\r\n */\r\n TimeUtils.delay = function (t, value) {\r\n return new Promise(function (resolve) { return setTimeout(function () { return resolve(value); }, t); });\r\n };\r\n return TimeUtils;\r\n}());\n\nexport { TimeUtils };\n//# sourceMappingURL=TimeUtils.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../../_virtual/_tslib.js';\nimport { CredentialEntity } from './CredentialEntity.js';\nimport { CredentialType, AuthenticationScheme } from '../../utils/Constants.js';\nimport { TimeUtils } from '../../utils/TimeUtils.js';\nimport { StringUtils } from '../../utils/StringUtils.js';\nimport { AuthToken } from '../../account/AuthToken.js';\nimport { ClientAuthError } from '../../error/ClientAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * ACCESS_TOKEN Credential Type\r\n *\r\n * Key:Value Schema:\r\n *\r\n * Key Example: uid.utid-login.microsoftonline.com-accesstoken-clientId-contoso.com-user.read\r\n *\r\n * Value Schema:\r\n * {\r\n * homeAccountId: home account identifier for the auth scheme,\r\n * environment: entity that issued the token, represented as a full host\r\n * credentialType: Type of credential as a string, can be one of the following: RefreshToken, AccessToken, IdToken, Password, Cookie, Certificate, Other\r\n * clientId: client ID of the application\r\n * secret: Actual credential as a string\r\n * familyId: Family ID identifier, usually only used for refresh tokens\r\n * realm: Full tenant or organizational identifier that the account belongs to\r\n * target: Permissions that are included in the token, or for refresh tokens, the resource identifier.\r\n * cachedAt: Absolute device time when entry was created in the cache.\r\n * expiresOn: Token expiry time, calculated based on current UTC time in seconds. Represented as a string.\r\n * extendedExpiresOn: Additional extended expiry time until when token is valid in case of server-side outage. Represented as string in UTC seconds.\r\n * keyId: used for POP and SSH tokenTypes\r\n * tokenType: Type of the token issued. Usually \"Bearer\"\r\n * }\r\n */\r\nvar AccessTokenEntity = /** @class */ (function (_super) {\r\n __extends(AccessTokenEntity, _super);\r\n function AccessTokenEntity() {\r\n return _super !== null && _super.apply(this, arguments) || this;\r\n }\r\n /**\r\n * Create AccessTokenEntity\r\n * @param homeAccountId\r\n * @param environment\r\n * @param accessToken\r\n * @param clientId\r\n * @param tenantId\r\n * @param scopes\r\n * @param expiresOn\r\n * @param extExpiresOn\r\n */\r\n AccessTokenEntity.createAccessTokenEntity = function (homeAccountId, environment, accessToken, clientId, tenantId, scopes, expiresOn, extExpiresOn, cryptoUtils, refreshOn, tokenType, userAssertionHash, keyId, requestedClaims, requestedClaimsHash) {\r\n var _a, _b;\r\n var atEntity = new AccessTokenEntity();\r\n atEntity.homeAccountId = homeAccountId;\r\n atEntity.credentialType = CredentialType.ACCESS_TOKEN;\r\n atEntity.secret = accessToken;\r\n var currentTime = TimeUtils.nowSeconds();\r\n atEntity.cachedAt = currentTime.toString();\r\n /*\r\n * Token expiry time.\r\n * This value should be  calculated based on the current UTC time measured locally and the value  expires_in Represented as a string in JSON.\r\n */\r\n atEntity.expiresOn = expiresOn.toString();\r\n atEntity.extendedExpiresOn = extExpiresOn.toString();\r\n if (refreshOn) {\r\n atEntity.refreshOn = refreshOn.toString();\r\n }\r\n atEntity.environment = environment;\r\n atEntity.clientId = clientId;\r\n atEntity.realm = tenantId;\r\n atEntity.target = scopes;\r\n atEntity.userAssertionHash = userAssertionHash;\r\n atEntity.tokenType = StringUtils.isEmpty(tokenType) ? AuthenticationScheme.BEARER : tokenType;\r\n if (requestedClaims) {\r\n atEntity.requestedClaims = requestedClaims;\r\n atEntity.requestedClaimsHash = requestedClaimsHash;\r\n }\r\n /*\r\n * Create Access Token With Auth Scheme instead of regular access token\r\n * Cast to lower to handle \"bearer\" from ADFS\r\n */\r\n if (((_a = atEntity.tokenType) === null || _a === void 0 ? void 0 : _a.toLowerCase()) !== AuthenticationScheme.BEARER.toLowerCase()) {\r\n atEntity.credentialType = CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME;\r\n switch (atEntity.tokenType) {\r\n case AuthenticationScheme.POP:\r\n // Make sure keyId is present and add it to credential\r\n var tokenClaims = AuthToken.extractTokenClaims(accessToken, cryptoUtils);\r\n if (!((_b = tokenClaims === null || tokenClaims === void 0 ? void 0 : tokenClaims.cnf) === null || _b === void 0 ? void 0 : _b.kid)) {\r\n throw ClientAuthError.createTokenClaimsRequiredError();\r\n }\r\n atEntity.keyId = tokenClaims.cnf.kid;\r\n break;\r\n case AuthenticationScheme.SSH:\r\n atEntity.keyId = keyId;\r\n }\r\n }\r\n return atEntity;\r\n };\r\n /**\r\n * Validates an entity: checks for all expected params\r\n * @param entity\r\n */\r\n AccessTokenEntity.isAccessTokenEntity = function (entity) {\r\n if (!entity) {\r\n return false;\r\n }\r\n return (entity.hasOwnProperty(\"homeAccountId\") &&\r\n entity.hasOwnProperty(\"environment\") &&\r\n entity.hasOwnProperty(\"credentialType\") &&\r\n entity.hasOwnProperty(\"realm\") &&\r\n entity.hasOwnProperty(\"clientId\") &&\r\n entity.hasOwnProperty(\"secret\") &&\r\n entity.hasOwnProperty(\"target\") &&\r\n (entity[\"credentialType\"] === CredentialType.ACCESS_TOKEN || entity[\"credentialType\"] === CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME));\r\n };\r\n return AccessTokenEntity;\r\n}(CredentialEntity));\n\nexport { AccessTokenEntity };\n//# sourceMappingURL=AccessTokenEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends } from '../../_virtual/_tslib.js';\nimport { CredentialEntity } from './CredentialEntity.js';\nimport { CredentialType } from '../../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * REFRESH_TOKEN Cache\r\n *\r\n * Key:Value Schema:\r\n *\r\n * Key Example: uid.utid-login.microsoftonline.com-refreshtoken-clientId--\r\n *\r\n * Value:\r\n * {\r\n * homeAccountId: home account identifier for the auth scheme,\r\n * environment: entity that issued the token, represented as a full host\r\n * credentialType: Type of credential as a string, can be one of the following: RefreshToken, AccessToken, IdToken, Password, Cookie, Certificate, Other\r\n * clientId: client ID of the application\r\n * secret: Actual credential as a string\r\n * familyId: Family ID identifier, '1' represents Microsoft Family\r\n * realm: Full tenant or organizational identifier that the account belongs to\r\n * target: Permissions that are included in the token, or for refresh tokens, the resource identifier.\r\n * }\r\n */\r\nvar RefreshTokenEntity = /** @class */ (function (_super) {\r\n __extends(RefreshTokenEntity, _super);\r\n function RefreshTokenEntity() {\r\n return _super !== null && _super.apply(this, arguments) || this;\r\n }\r\n /**\r\n * Create RefreshTokenEntity\r\n * @param homeAccountId\r\n * @param authenticationResult\r\n * @param clientId\r\n * @param authority\r\n */\r\n RefreshTokenEntity.createRefreshTokenEntity = function (homeAccountId, environment, refreshToken, clientId, familyId, userAssertionHash) {\r\n var rtEntity = new RefreshTokenEntity();\r\n rtEntity.clientId = clientId;\r\n rtEntity.credentialType = CredentialType.REFRESH_TOKEN;\r\n rtEntity.environment = environment;\r\n rtEntity.homeAccountId = homeAccountId;\r\n rtEntity.secret = refreshToken;\r\n rtEntity.userAssertionHash = userAssertionHash;\r\n if (familyId)\r\n rtEntity.familyId = familyId;\r\n return rtEntity;\r\n };\r\n /**\r\n * Validates an entity: checks for all expected params\r\n * @param entity\r\n */\r\n RefreshTokenEntity.isRefreshTokenEntity = function (entity) {\r\n if (!entity) {\r\n return false;\r\n }\r\n return (entity.hasOwnProperty(\"homeAccountId\") &&\r\n entity.hasOwnProperty(\"environment\") &&\r\n entity.hasOwnProperty(\"credentialType\") &&\r\n entity.hasOwnProperty(\"clientId\") &&\r\n entity.hasOwnProperty(\"secret\") &&\r\n entity[\"credentialType\"] === CredentialType.REFRESH_TOKEN);\r\n };\r\n return RefreshTokenEntity;\r\n}(CredentialEntity));\n\nexport { RefreshTokenEntity };\n//# sourceMappingURL=RefreshTokenEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { Separators, APP_METADATA } from '../../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * APP_METADATA Cache\r\n *\r\n * Key:Value Schema:\r\n *\r\n * Key: appmetadata--\r\n *\r\n * Value:\r\n * {\r\n * clientId: client ID of the application\r\n * environment: entity that issued the token, represented as a full host\r\n * familyId: Family ID identifier, '1' represents Microsoft Family\r\n * }\r\n */\r\nvar AppMetadataEntity = /** @class */ (function () {\r\n function AppMetadataEntity() {\r\n }\r\n /**\r\n * Generate AppMetadata Cache Key as per the schema: appmetadata--\r\n */\r\n AppMetadataEntity.prototype.generateAppMetadataKey = function () {\r\n return AppMetadataEntity.generateAppMetadataCacheKey(this.environment, this.clientId);\r\n };\r\n /**\r\n * Generate AppMetadata Cache Key\r\n */\r\n AppMetadataEntity.generateAppMetadataCacheKey = function (environment, clientId) {\r\n var appMetaDataKeyArray = [\r\n APP_METADATA,\r\n environment,\r\n clientId,\r\n ];\r\n return appMetaDataKeyArray.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();\r\n };\r\n /**\r\n * Creates AppMetadataEntity\r\n * @param clientId\r\n * @param environment\r\n * @param familyId\r\n */\r\n AppMetadataEntity.createAppMetadataEntity = function (clientId, environment, familyId) {\r\n var appMetadata = new AppMetadataEntity();\r\n appMetadata.clientId = clientId;\r\n appMetadata.environment = environment;\r\n if (familyId) {\r\n appMetadata.familyId = familyId;\r\n }\r\n return appMetadata;\r\n };\r\n /**\r\n * Validates an entity: checks for all expected params\r\n * @param entity\r\n */\r\n AppMetadataEntity.isAppMetadataEntity = function (key, entity) {\r\n if (!entity) {\r\n return false;\r\n }\r\n return (key.indexOf(APP_METADATA) === 0 &&\r\n entity.hasOwnProperty(\"clientId\") &&\r\n entity.hasOwnProperty(\"environment\"));\r\n };\r\n return AppMetadataEntity;\r\n}());\n\nexport { AppMetadataEntity };\n//# sourceMappingURL=AppMetadataEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { SERVER_TELEM_CONSTANTS } from '../../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar ServerTelemetryEntity = /** @class */ (function () {\r\n function ServerTelemetryEntity() {\r\n this.failedRequests = [];\r\n this.errors = [];\r\n this.cacheHits = 0;\r\n }\r\n /**\r\n * validates if a given cache entry is \"Telemetry\", parses \r\n * @param key\r\n * @param entity\r\n */\r\n ServerTelemetryEntity.isServerTelemetryEntity = function (key, entity) {\r\n var validateKey = key.indexOf(SERVER_TELEM_CONSTANTS.CACHE_KEY) === 0;\r\n var validateEntity = true;\r\n if (entity) {\r\n validateEntity =\r\n entity.hasOwnProperty(\"failedRequests\") &&\r\n entity.hasOwnProperty(\"errors\") &&\r\n entity.hasOwnProperty(\"cacheHits\");\r\n }\r\n return validateKey && validateEntity;\r\n };\r\n return ServerTelemetryEntity;\r\n}());\n\nexport { ServerTelemetryEntity };\n//# sourceMappingURL=ServerTelemetryEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { AUTHORITY_METADATA_CONSTANTS } from '../../utils/Constants.js';\nimport { TimeUtils } from '../../utils/TimeUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar AuthorityMetadataEntity = /** @class */ (function () {\r\n function AuthorityMetadataEntity() {\r\n this.expiresAt = TimeUtils.nowSeconds() + AUTHORITY_METADATA_CONSTANTS.REFRESH_TIME_SECONDS;\r\n }\r\n /**\r\n * Update the entity with new aliases, preferred_cache and preferred_network values\r\n * @param metadata\r\n * @param fromNetwork\r\n */\r\n AuthorityMetadataEntity.prototype.updateCloudDiscoveryMetadata = function (metadata, fromNetwork) {\r\n this.aliases = metadata.aliases;\r\n this.preferred_cache = metadata.preferred_cache;\r\n this.preferred_network = metadata.preferred_network;\r\n this.aliasesFromNetwork = fromNetwork;\r\n };\r\n /**\r\n * Update the entity with new endpoints\r\n * @param metadata\r\n * @param fromNetwork\r\n */\r\n AuthorityMetadataEntity.prototype.updateEndpointMetadata = function (metadata, fromNetwork) {\r\n this.authorization_endpoint = metadata.authorization_endpoint;\r\n this.token_endpoint = metadata.token_endpoint;\r\n this.end_session_endpoint = metadata.end_session_endpoint;\r\n this.issuer = metadata.issuer;\r\n this.endpointsFromNetwork = fromNetwork;\r\n this.jwks_uri = metadata.jwks_uri;\r\n };\r\n /**\r\n * Save the authority that was used to create this cache entry\r\n * @param authority\r\n */\r\n AuthorityMetadataEntity.prototype.updateCanonicalAuthority = function (authority) {\r\n this.canonical_authority = authority;\r\n };\r\n /**\r\n * Reset the exiresAt value\r\n */\r\n AuthorityMetadataEntity.prototype.resetExpiresAt = function () {\r\n this.expiresAt = TimeUtils.nowSeconds() + AUTHORITY_METADATA_CONSTANTS.REFRESH_TIME_SECONDS;\r\n };\r\n /**\r\n * Returns whether or not the data needs to be refreshed\r\n */\r\n AuthorityMetadataEntity.prototype.isExpired = function () {\r\n return this.expiresAt <= TimeUtils.nowSeconds();\r\n };\r\n /**\r\n * Validates an entity: checks for all expected params\r\n * @param entity\r\n */\r\n AuthorityMetadataEntity.isAuthorityMetadataEntity = function (key, entity) {\r\n if (!entity) {\r\n return false;\r\n }\r\n return (key.indexOf(AUTHORITY_METADATA_CONSTANTS.CACHE_KEY) === 0 &&\r\n entity.hasOwnProperty(\"aliases\") &&\r\n entity.hasOwnProperty(\"preferred_cache\") &&\r\n entity.hasOwnProperty(\"preferred_network\") &&\r\n entity.hasOwnProperty(\"canonical_authority\") &&\r\n entity.hasOwnProperty(\"authorization_endpoint\") &&\r\n entity.hasOwnProperty(\"token_endpoint\") &&\r\n entity.hasOwnProperty(\"issuer\") &&\r\n entity.hasOwnProperty(\"aliasesFromNetwork\") &&\r\n entity.hasOwnProperty(\"endpointsFromNetwork\") &&\r\n entity.hasOwnProperty(\"expiresAt\") &&\r\n entity.hasOwnProperty(\"jwks_uri\"));\r\n };\r\n return AuthorityMetadataEntity;\r\n}());\n\nexport { AuthorityMetadataEntity };\n//# sourceMappingURL=AuthorityMetadataEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { ThrottlingConstants } from '../../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar ThrottlingEntity = /** @class */ (function () {\r\n function ThrottlingEntity() {\r\n }\r\n /**\r\n * validates if a given cache entry is \"Throttling\", parses \r\n * @param key\r\n * @param entity\r\n */\r\n ThrottlingEntity.isThrottlingEntity = function (key, entity) {\r\n var validateKey = false;\r\n if (key) {\r\n validateKey = key.indexOf(ThrottlingConstants.THROTTLING_PREFIX) === 0;\r\n }\r\n var validateEntity = true;\r\n if (entity) {\r\n validateEntity = entity.hasOwnProperty(\"throttleTime\");\r\n }\r\n return validateKey && validateEntity;\r\n };\r\n return ThrottlingEntity;\r\n}());\n\nexport { ThrottlingEntity };\n//# sourceMappingURL=ThrottlingEntity.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { StringUtils } from './StringUtils.js';\nimport { Constants } from './Constants.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Class which provides helpers for OAuth 2.0 protocol specific values\r\n */\r\nvar ProtocolUtils = /** @class */ (function () {\r\n function ProtocolUtils() {\r\n }\r\n /**\r\n * Appends user state with random guid, or returns random guid.\r\n * @param userState\r\n * @param randomGuid\r\n */\r\n ProtocolUtils.setRequestState = function (cryptoObj, userState, meta) {\r\n var libraryState = ProtocolUtils.generateLibraryState(cryptoObj, meta);\r\n return !StringUtils.isEmpty(userState) ? \"\" + libraryState + Constants.RESOURCE_DELIM + userState : libraryState;\r\n };\r\n /**\r\n * Generates the state value used by the common library.\r\n * @param randomGuid\r\n * @param cryptoObj\r\n */\r\n ProtocolUtils.generateLibraryState = function (cryptoObj, meta) {\r\n if (!cryptoObj) {\r\n throw ClientAuthError.createNoCryptoObjectError(\"generateLibraryState\");\r\n }\r\n // Create a state object containing a unique id and the timestamp of the request creation\r\n var stateObj = {\r\n id: cryptoObj.createNewGuid()\r\n };\r\n if (meta) {\r\n stateObj.meta = meta;\r\n }\r\n var stateString = JSON.stringify(stateObj);\r\n return cryptoObj.base64Encode(stateString);\r\n };\r\n /**\r\n * Parses the state into the RequestStateObject, which contains the LibraryState info and the state passed by the user.\r\n * @param state\r\n * @param cryptoObj\r\n */\r\n ProtocolUtils.parseRequestState = function (cryptoObj, state) {\r\n if (!cryptoObj) {\r\n throw ClientAuthError.createNoCryptoObjectError(\"parseRequestState\");\r\n }\r\n if (StringUtils.isEmpty(state)) {\r\n throw ClientAuthError.createInvalidStateError(state, \"Null, undefined or empty state\");\r\n }\r\n try {\r\n // Split the state between library state and user passed state and decode them separately\r\n var splitState = state.split(Constants.RESOURCE_DELIM);\r\n var libraryState = splitState[0];\r\n var userState = splitState.length > 1 ? splitState.slice(1).join(Constants.RESOURCE_DELIM) : Constants.EMPTY_STRING;\r\n var libraryStateString = cryptoObj.base64Decode(libraryState);\r\n var libraryStateObj = JSON.parse(libraryStateString);\r\n return {\r\n userRequestState: !StringUtils.isEmpty(userState) ? userState : Constants.EMPTY_STRING,\r\n libraryState: libraryStateObj\r\n };\r\n }\r\n catch (e) {\r\n throw ClientAuthError.createInvalidStateError(state, e);\r\n }\r\n };\r\n return ProtocolUtils;\r\n}());\n\nexport { ProtocolUtils };\n//# sourceMappingURL=ProtocolUtils.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { BrowserConfigurationAuthError } from '../error/BrowserConfigurationAuthError.js';\nimport { BrowserCacheLocation } from '../utils/BrowserConstants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar BrowserStorage = /** @class */ (function () {\r\n function BrowserStorage(cacheLocation) {\r\n this.validateWindowStorage(cacheLocation);\r\n this.windowStorage = window[cacheLocation];\r\n }\r\n BrowserStorage.prototype.validateWindowStorage = function (cacheLocation) {\r\n if (cacheLocation !== BrowserCacheLocation.LocalStorage && cacheLocation !== BrowserCacheLocation.SessionStorage) {\r\n throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);\r\n }\r\n var storageSupported = !!window[cacheLocation];\r\n if (!storageSupported) {\r\n throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);\r\n }\r\n };\r\n BrowserStorage.prototype.getItem = function (key) {\r\n return this.windowStorage.getItem(key);\r\n };\r\n BrowserStorage.prototype.setItem = function (key, value) {\r\n this.windowStorage.setItem(key, value);\r\n };\r\n BrowserStorage.prototype.removeItem = function (key) {\r\n this.windowStorage.removeItem(key);\r\n };\r\n BrowserStorage.prototype.getKeys = function () {\r\n return Object.keys(this.windowStorage);\r\n };\r\n BrowserStorage.prototype.containsKey = function (key) {\r\n return this.windowStorage.hasOwnProperty(key);\r\n };\r\n return BrowserStorage;\r\n}());\n\nexport { BrowserStorage };\n//# sourceMappingURL=BrowserStorage.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Protocol modes supported by MSAL.\r\n */\r\nvar ProtocolMode;\r\n(function (ProtocolMode) {\r\n ProtocolMode[\"AAD\"] = \"AAD\";\r\n ProtocolMode[\"OIDC\"] = \"OIDC\";\r\n})(ProtocolMode || (ProtocolMode = {}));\n\nexport { ProtocolMode };\n//# sourceMappingURL=ProtocolMode.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar AzureCloudInstance;\r\n(function (AzureCloudInstance) {\r\n // AzureCloudInstance is not specified.\r\n AzureCloudInstance[AzureCloudInstance[\"None\"] = 0] = \"None\";\r\n // Microsoft Azure public cloud\r\n AzureCloudInstance[\"AzurePublic\"] = \"https://login.microsoftonline.com\";\r\n // Microsoft PPE\r\n AzureCloudInstance[\"AzurePpe\"] = \"https://login.windows-ppe.net\";\r\n // Microsoft Chinese national cloud\r\n AzureCloudInstance[\"AzureChina\"] = \"https://login.chinacloudapi.cn\";\r\n // Microsoft German national cloud (\"Black Forest\")\r\n AzureCloudInstance[\"AzureGermany\"] = \"https://login.microsoftonline.de\";\r\n // US Government cloud\r\n AzureCloudInstance[\"AzureUsGovernment\"] = \"https://login.microsoftonline.us\";\r\n})(AzureCloudInstance || (AzureCloudInstance = {}));\n\nexport { AzureCloudInstance };\n//# sourceMappingURL=AuthorityOptions.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { AADAuthorityConstants, Constants } from '../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Url object class which can perform various transformations on url strings.\r\n */\r\nvar UrlString = /** @class */ (function () {\r\n function UrlString(url) {\r\n this._urlString = url;\r\n if (StringUtils.isEmpty(this._urlString)) {\r\n // Throws error if url is empty\r\n throw ClientConfigurationError.createUrlEmptyError();\r\n }\r\n if (StringUtils.isEmpty(this.getHash())) {\r\n this._urlString = UrlString.canonicalizeUri(url);\r\n }\r\n }\r\n Object.defineProperty(UrlString.prototype, \"urlString\", {\r\n get: function () {\r\n return this._urlString;\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n /**\r\n * Ensure urls are lower case and end with a / character.\r\n * @param url\r\n */\r\n UrlString.canonicalizeUri = function (url) {\r\n if (url) {\r\n var lowerCaseUrl = url.toLowerCase();\r\n if (StringUtils.endsWith(lowerCaseUrl, \"?\")) {\r\n lowerCaseUrl = lowerCaseUrl.slice(0, -1);\r\n }\r\n else if (StringUtils.endsWith(lowerCaseUrl, \"?/\")) {\r\n lowerCaseUrl = lowerCaseUrl.slice(0, -2);\r\n }\r\n if (!StringUtils.endsWith(lowerCaseUrl, \"/\")) {\r\n lowerCaseUrl += \"/\";\r\n }\r\n return lowerCaseUrl;\r\n }\r\n return url;\r\n };\r\n /**\r\n * Throws if urlString passed is not a valid authority URI string.\r\n */\r\n UrlString.prototype.validateAsUri = function () {\r\n // Attempts to parse url for uri components\r\n var components;\r\n try {\r\n components = this.getUrlComponents();\r\n }\r\n catch (e) {\r\n throw ClientConfigurationError.createUrlParseError(e);\r\n }\r\n // Throw error if URI or path segments are not parseable.\r\n if (!components.HostNameAndPort || !components.PathSegments) {\r\n throw ClientConfigurationError.createUrlParseError(\"Given url string: \" + this.urlString);\r\n }\r\n // Throw error if uri is insecure.\r\n if (!components.Protocol || components.Protocol.toLowerCase() !== \"https:\") {\r\n throw ClientConfigurationError.createInsecureAuthorityUriError(this.urlString);\r\n }\r\n };\r\n /**\r\n * Given a url and a query string return the url with provided query string appended\r\n * @param url\r\n * @param queryString\r\n */\r\n UrlString.appendQueryString = function (url, queryString) {\r\n if (StringUtils.isEmpty(queryString)) {\r\n return url;\r\n }\r\n return url.indexOf(\"?\") < 0 ? url + \"?\" + queryString : url + \"&\" + queryString;\r\n };\r\n /**\r\n * Returns a url with the hash removed\r\n * @param url\r\n */\r\n UrlString.removeHashFromUrl = function (url) {\r\n return UrlString.canonicalizeUri(url.split(\"#\")[0]);\r\n };\r\n /**\r\n * Given a url like https://a:b/common/d?e=f#g, and a tenantId, returns https://a:b/tenantId/d\r\n * @param href The url\r\n * @param tenantId The tenant id to replace\r\n */\r\n UrlString.prototype.replaceTenantPath = function (tenantId) {\r\n var urlObject = this.getUrlComponents();\r\n var pathArray = urlObject.PathSegments;\r\n if (tenantId && (pathArray.length !== 0 && (pathArray[0] === AADAuthorityConstants.COMMON || pathArray[0] === AADAuthorityConstants.ORGANIZATIONS))) {\r\n pathArray[0] = tenantId;\r\n }\r\n return UrlString.constructAuthorityUriFromObject(urlObject);\r\n };\r\n /**\r\n * Returns the anchor part(#) of the URL\r\n */\r\n UrlString.prototype.getHash = function () {\r\n return UrlString.parseHash(this.urlString);\r\n };\r\n /**\r\n * Parses out the components from a url string.\r\n * @returns An object with the various components. Please cache this value insted of calling this multiple times on the same url.\r\n */\r\n UrlString.prototype.getUrlComponents = function () {\r\n // https://gist.github.com/curtisz/11139b2cfcaef4a261e0\r\n var regEx = RegExp(\"^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\\\?([^#]*))?(#(.*))?\");\r\n // If url string does not match regEx, we throw an error\r\n var match = this.urlString.match(regEx);\r\n if (!match) {\r\n throw ClientConfigurationError.createUrlParseError(\"Given url string: \" + this.urlString);\r\n }\r\n // Url component object\r\n var urlComponents = {\r\n Protocol: match[1],\r\n HostNameAndPort: match[4],\r\n AbsolutePath: match[5],\r\n QueryString: match[7]\r\n };\r\n var pathSegments = urlComponents.AbsolutePath.split(\"/\");\r\n pathSegments = pathSegments.filter(function (val) { return val && val.length > 0; }); // remove empty elements\r\n urlComponents.PathSegments = pathSegments;\r\n if (!StringUtils.isEmpty(urlComponents.QueryString) && urlComponents.QueryString.endsWith(\"/\")) {\r\n urlComponents.QueryString = urlComponents.QueryString.substring(0, urlComponents.QueryString.length - 1);\r\n }\r\n return urlComponents;\r\n };\r\n UrlString.getDomainFromUrl = function (url) {\r\n var regEx = RegExp(\"^([^:/?#]+://)?([^/?#]*)\");\r\n var match = url.match(regEx);\r\n if (!match) {\r\n throw ClientConfigurationError.createUrlParseError(\"Given url string: \" + url);\r\n }\r\n return match[2];\r\n };\r\n UrlString.getAbsoluteUrl = function (relativeUrl, baseUrl) {\r\n if (relativeUrl[0] === Constants.FORWARD_SLASH) {\r\n var url = new UrlString(baseUrl);\r\n var baseComponents = url.getUrlComponents();\r\n return baseComponents.Protocol + \"//\" + baseComponents.HostNameAndPort + relativeUrl;\r\n }\r\n return relativeUrl;\r\n };\r\n /**\r\n * Parses hash string from given string. Returns empty string if no hash symbol is found.\r\n * @param hashString\r\n */\r\n UrlString.parseHash = function (hashString) {\r\n var hashIndex1 = hashString.indexOf(\"#\");\r\n var hashIndex2 = hashString.indexOf(\"#/\");\r\n if (hashIndex2 > -1) {\r\n return hashString.substring(hashIndex2 + 2);\r\n }\r\n else if (hashIndex1 > -1) {\r\n return hashString.substring(hashIndex1 + 1);\r\n }\r\n return Constants.EMPTY_STRING;\r\n };\r\n /**\r\n * Parses query string from given string. Returns empty string if no query symbol is found.\r\n * @param queryString\r\n */\r\n UrlString.parseQueryString = function (queryString) {\r\n var queryIndex1 = queryString.indexOf(\"?\");\r\n var queryIndex2 = queryString.indexOf(\"/?\");\r\n if (queryIndex2 > -1) {\r\n return queryString.substring(queryIndex2 + 2);\r\n }\r\n else if (queryIndex1 > -1) {\r\n return queryString.substring(queryIndex1 + 1);\r\n }\r\n return Constants.EMPTY_STRING;\r\n };\r\n UrlString.constructAuthorityUriFromObject = function (urlObject) {\r\n return new UrlString(urlObject.Protocol + \"//\" + urlObject.HostNameAndPort + \"/\" + urlObject.PathSegments.join(\"/\"));\r\n };\r\n /**\r\n * Returns URL hash as server auth code response object.\r\n */\r\n UrlString.getDeserializedHash = function (hash) {\r\n // Check if given hash is empty\r\n if (StringUtils.isEmpty(hash)) {\r\n return {};\r\n }\r\n // Strip the # symbol if present\r\n var parsedHash = UrlString.parseHash(hash);\r\n // If # symbol was not present, above will return empty string, so give original hash value\r\n var deserializedHash = StringUtils.queryStringToObject(StringUtils.isEmpty(parsedHash) ? hash : parsedHash);\r\n // Check if deserialization didn't work\r\n if (!deserializedHash) {\r\n throw ClientAuthError.createHashNotDeserializedError(JSON.stringify(deserializedHash));\r\n }\r\n return deserializedHash;\r\n };\r\n /**\r\n * Returns URL query string as server auth code response object.\r\n */\r\n UrlString.getDeserializedQueryString = function (query) {\r\n // Check if given query is empty\r\n if (StringUtils.isEmpty(query)) {\r\n return {};\r\n }\r\n // Strip the ? symbol if present\r\n var parsedQueryString = UrlString.parseQueryString(query);\r\n // If ? symbol was not present, above will return empty string, so give original query value\r\n var deserializedQueryString = StringUtils.queryStringToObject(StringUtils.isEmpty(parsedQueryString) ? query : parsedQueryString);\r\n // Check if deserialization didn't work\r\n if (!deserializedQueryString) {\r\n throw ClientAuthError.createHashNotDeserializedError(JSON.stringify(deserializedQueryString));\r\n }\r\n return deserializedQueryString;\r\n };\r\n /**\r\n * Check if the hash of the URL string contains known properties\r\n */\r\n UrlString.hashContainsKnownProperties = function (hash) {\r\n if (StringUtils.isEmpty(hash) || hash.indexOf(\"=\") < 0) {\r\n // Hash doesn't contain key/value pairs\r\n return false;\r\n }\r\n var parameters = UrlString.getDeserializedHash(hash);\r\n return !!(parameters.code ||\r\n parameters.error_description ||\r\n parameters.error ||\r\n parameters.state);\r\n };\r\n return UrlString;\r\n}());\n\nexport { UrlString };\n//# sourceMappingURL=UrlString.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { StringUtils, ProtocolUtils, ClientAuthError, UrlString } from '@azure/msal-common';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar BrowserProtocolUtils = /** @class */ (function () {\r\n function BrowserProtocolUtils() {\r\n }\r\n /**\r\n * Extracts the BrowserStateObject from the state string.\r\n * @param browserCrypto\r\n * @param state\r\n */\r\n BrowserProtocolUtils.extractBrowserRequestState = function (browserCrypto, state) {\r\n if (StringUtils.isEmpty(state)) {\r\n return null;\r\n }\r\n try {\r\n var requestStateObj = ProtocolUtils.parseRequestState(browserCrypto, state);\r\n return requestStateObj.libraryState.meta;\r\n }\r\n catch (e) {\r\n throw ClientAuthError.createInvalidStateError(state, e);\r\n }\r\n };\r\n /**\r\n * Parses properties of server response from url hash\r\n * @param locationHash Hash from url\r\n */\r\n BrowserProtocolUtils.parseServerResponseFromHash = function (locationHash) {\r\n if (!locationHash) {\r\n return {};\r\n }\r\n var hashUrlString = new UrlString(locationHash);\r\n return UrlString.getDeserializedHash(hashUrlString.getHash());\r\n };\r\n return BrowserProtocolUtils;\r\n}());\n\nexport { BrowserProtocolUtils };\n//# sourceMappingURL=BrowserProtocolUtils.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __spread } from '../_virtual/_tslib.js';\nimport { CredentialType, RefreshTokenEntity, CacheManager, AccessTokenEntity, IdTokenEntity, AccountEntity, ClientAuthError, AppMetadataEntity, ServerTelemetryEntity, AuthorityMetadataEntity, Constants, PersistentCacheKeys, ThrottlingEntity, StringUtils, ProtocolUtils, CcsCredentialType, IdToken, DEFAULT_CRYPTO_IMPLEMENTATION } from '@azure/msal-common';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { BrowserCacheLocation, StaticCacheKeys, InMemoryCacheKeys, TemporaryCacheKeys } from '../utils/BrowserConstants.js';\nimport { BrowserStorage } from './BrowserStorage.js';\nimport { MemoryStorage } from './MemoryStorage.js';\nimport { BrowserProtocolUtils } from '../utils/BrowserProtocolUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This class implements the cache storage interface for MSAL through browser local or session storage.\r\n * Cookies are only used if storeAuthStateInCookie is true, and are only used for\r\n * parameters such as state and nonce, generally.\r\n */\r\nvar BrowserCacheManager = /** @class */ (function (_super) {\r\n __extends(BrowserCacheManager, _super);\r\n function BrowserCacheManager(clientId, cacheConfig, cryptoImpl, logger) {\r\n var _this = _super.call(this, clientId, cryptoImpl, logger) || this;\r\n // Cookie life calculation (hours * minutes * seconds * ms)\r\n _this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;\r\n _this.cacheConfig = cacheConfig;\r\n _this.logger = logger;\r\n _this.internalStorage = new MemoryStorage();\r\n _this.browserStorage = _this.setupBrowserStorage(_this.cacheConfig.cacheLocation);\r\n _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.temporaryCacheLocation, _this.cacheConfig.cacheLocation);\r\n // Migrate cache entries from older versions of MSAL.\r\n if (cacheConfig.cacheMigrationEnabled) {\r\n _this.migrateCacheEntries();\r\n _this.createKeyMaps();\r\n }\r\n return _this;\r\n }\r\n /**\r\n * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.\r\n * @param cacheLocation\r\n */\r\n BrowserCacheManager.prototype.setupBrowserStorage = function (cacheLocation) {\r\n switch (cacheLocation) {\r\n case BrowserCacheLocation.LocalStorage:\r\n case BrowserCacheLocation.SessionStorage:\r\n try {\r\n return new BrowserStorage(cacheLocation);\r\n }\r\n catch (e) {\r\n this.logger.verbose(e);\r\n break;\r\n }\r\n }\r\n this.cacheConfig.cacheLocation = BrowserCacheLocation.MemoryStorage;\r\n return new MemoryStorage();\r\n };\r\n /**\r\n * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured temporaryCacheLocation.\r\n * @param temporaryCacheLocation\r\n * @param cacheLocation\r\n */\r\n BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (temporaryCacheLocation, cacheLocation) {\r\n switch (cacheLocation) {\r\n case BrowserCacheLocation.LocalStorage:\r\n case BrowserCacheLocation.SessionStorage:\r\n try {\r\n /*\r\n * When users do not explicitly choose their own temporaryCacheLocation,\r\n * temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs\r\n */\r\n return new BrowserStorage(temporaryCacheLocation || BrowserCacheLocation.SessionStorage);\r\n }\r\n catch (e) {\r\n this.logger.verbose(e);\r\n return this.internalStorage;\r\n }\r\n case BrowserCacheLocation.MemoryStorage:\r\n default:\r\n return this.internalStorage;\r\n }\r\n };\r\n /**\r\n * Migrate all old cache entries to new schema. No rollback supported.\r\n * @param storeAuthStateInCookie\r\n */\r\n BrowserCacheManager.prototype.migrateCacheEntries = function () {\r\n var _this = this;\r\n var idTokenKey = Constants.CACHE_PREFIX + \".\" + PersistentCacheKeys.ID_TOKEN;\r\n var clientInfoKey = Constants.CACHE_PREFIX + \".\" + PersistentCacheKeys.CLIENT_INFO;\r\n var errorKey = Constants.CACHE_PREFIX + \".\" + PersistentCacheKeys.ERROR;\r\n var errorDescKey = Constants.CACHE_PREFIX + \".\" + PersistentCacheKeys.ERROR_DESC;\r\n var idTokenValue = this.browserStorage.getItem(idTokenKey);\r\n var clientInfoValue = this.browserStorage.getItem(clientInfoKey);\r\n var errorValue = this.browserStorage.getItem(errorKey);\r\n var errorDescValue = this.browserStorage.getItem(errorDescKey);\r\n var values = [idTokenValue, clientInfoValue, errorValue, errorDescValue];\r\n var keysToMigrate = [PersistentCacheKeys.ID_TOKEN, PersistentCacheKeys.CLIENT_INFO, PersistentCacheKeys.ERROR, PersistentCacheKeys.ERROR_DESC];\r\n keysToMigrate.forEach(function (cacheKey, index) { return _this.migrateCacheEntry(cacheKey, values[index]); });\r\n };\r\n /**\r\n * Utility function to help with migration.\r\n * @param newKey\r\n * @param value\r\n * @param storeAuthStateInCookie\r\n */\r\n BrowserCacheManager.prototype.migrateCacheEntry = function (newKey, value) {\r\n if (value) {\r\n this.setTemporaryCache(newKey, value, true);\r\n }\r\n };\r\n /**\r\n * Searches all cache entries for MSAL accounts and creates the account key map\r\n * This is used to migrate users from older versions of MSAL which did not create the map.\r\n * @returns\r\n */\r\n BrowserCacheManager.prototype.createKeyMaps = function () {\r\n var _this = this;\r\n this.logger.trace(\"BrowserCacheManager - createKeyMaps called.\");\r\n var accountKeys = this.getItem(StaticCacheKeys.ACCOUNT_KEYS);\r\n var tokenKeys = this.getItem(StaticCacheKeys.TOKEN_KEYS + \".\" + this.clientId);\r\n if (accountKeys && tokenKeys) {\r\n this.logger.verbose(\"BrowserCacheManager:createKeyMaps - account and token key maps already exist, skipping migration.\");\r\n // Key maps already exist, no need to iterate through cache\r\n return;\r\n }\r\n var allKeys = this.browserStorage.getKeys();\r\n allKeys.forEach(function (key) {\r\n if (_this.isCredentialKey(key)) {\r\n // Get item, parse, validate and write key to map\r\n var value = _this.getItem(key);\r\n if (value) {\r\n var credObj = _this.validateAndParseJson(value);\r\n if (credObj && credObj.hasOwnProperty(\"credentialType\")) {\r\n switch (credObj[\"credentialType\"]) {\r\n case CredentialType.ID_TOKEN:\r\n if (IdTokenEntity.isIdTokenEntity(credObj)) {\r\n _this.logger.trace(\"BrowserCacheManager:createKeyMaps - idToken found, saving key to token key map\");\r\n _this.logger.tracePii(\"BrowserCacheManager:createKeyMaps - idToken with key: \" + key + \" found, saving key to token key map\");\r\n var idTokenEntity = CacheManager.toObject(new IdTokenEntity(), credObj);\r\n var newKey = _this.updateCredentialCacheKey(key, idTokenEntity);\r\n _this.addTokenKey(newKey, CredentialType.ID_TOKEN);\r\n return;\r\n }\r\n else {\r\n _this.logger.trace(\"BrowserCacheManager:createKeyMaps - key found matching idToken schema with value containing idToken credentialType field but value failed IdTokenEntity validation, skipping.\");\r\n _this.logger.tracePii(\"BrowserCacheManager:createKeyMaps - failed idToken validation on key: \" + key);\r\n }\r\n break;\r\n case CredentialType.ACCESS_TOKEN:\r\n case CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME:\r\n if (AccessTokenEntity.isAccessTokenEntity(credObj)) {\r\n _this.logger.trace(\"BrowserCacheManager:createKeyMaps - accessToken found, saving key to token key map\");\r\n _this.logger.tracePii(\"BrowserCacheManager:createKeyMaps - accessToken with key: \" + key + \" found, saving key to token key map\");\r\n var accessTokenEntity = CacheManager.toObject(new AccessTokenEntity(), credObj);\r\n var newKey = _this.updateCredentialCacheKey(key, accessTokenEntity);\r\n _this.addTokenKey(newKey, CredentialType.ACCESS_TOKEN);\r\n return;\r\n }\r\n else {\r\n _this.logger.trace(\"BrowserCacheManager:createKeyMaps - key found matching accessToken schema with value containing accessToken credentialType field but value failed AccessTokenEntity validation, skipping.\");\r\n _this.logger.tracePii(\"BrowserCacheManager:createKeyMaps - failed accessToken validation on key: \" + key);\r\n }\r\n break;\r\n case CredentialType.REFRESH_TOKEN:\r\n if (RefreshTokenEntity.isRefreshTokenEntity(credObj)) {\r\n _this.logger.trace(\"BrowserCacheManager:createKeyMaps - refreshToken found, saving key to token key map\");\r\n _this.logger.tracePii(\"BrowserCacheManager:createKeyMaps - refreshToken with key: \" + key + \" found, saving key to token key map\");\r\n var refreshTokenEntity = CacheManager.toObject(new RefreshTokenEntity(), credObj);\r\n var newKey = _this.updateCredentialCacheKey(key, refreshTokenEntity);\r\n _this.addTokenKey(newKey, CredentialType.REFRESH_TOKEN);\r\n return;\r\n }\r\n else {\r\n _this.logger.trace(\"BrowserCacheManager:createKeyMaps - key found matching refreshToken schema with value containing refreshToken credentialType field but value failed RefreshTokenEntity validation, skipping.\");\r\n _this.logger.tracePii(\"BrowserCacheManager:createKeyMaps - failed refreshToken validation on key: \" + key);\r\n }\r\n break;\r\n // If credentialType isn't one of our predefined ones, it may not be an MSAL cache value. Ignore.\r\n }\r\n }\r\n }\r\n }\r\n if (_this.isAccountKey(key)) {\r\n var value = _this.getItem(key);\r\n if (value) {\r\n var accountObj = _this.validateAndParseJson(value);\r\n if (accountObj && AccountEntity.isAccountEntity(accountObj)) {\r\n _this.logger.trace(\"BrowserCacheManager:createKeyMaps - account found, saving key to account key map\");\r\n _this.logger.tracePii(\"BrowserCacheManager:createKeyMaps - account with key: \" + key + \" found, saving key to account key map\");\r\n _this.addAccountKeyToMap(key);\r\n }\r\n }\r\n }\r\n });\r\n };\r\n /**\r\n * Parses passed value as JSON object, JSON.parse() will throw an error.\r\n * @param input\r\n */\r\n BrowserCacheManager.prototype.validateAndParseJson = function (jsonValue) {\r\n try {\r\n var parsedJson = JSON.parse(jsonValue);\r\n /**\r\n * There are edge cases in which JSON.parse will successfully parse a non-valid JSON object\r\n * (e.g. JSON.parse will parse an escaped string into an unescaped string), so adding a type check\r\n * of the parsed value is necessary in order to be certain that the string represents a valid JSON object.\r\n *\r\n */\r\n return (parsedJson && typeof parsedJson === \"object\") ? parsedJson : null;\r\n }\r\n catch (error) {\r\n return null;\r\n }\r\n };\r\n /**\r\n * fetches the entry from the browser storage based off the key\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.getItem = function (key) {\r\n return this.browserStorage.getItem(key);\r\n };\r\n /**\r\n * sets the entry in the browser storage\r\n * @param key\r\n * @param value\r\n */\r\n BrowserCacheManager.prototype.setItem = function (key, value) {\r\n this.browserStorage.setItem(key, value);\r\n };\r\n /**\r\n * fetch the account entity from the platform cache\r\n * @param accountKey\r\n */\r\n BrowserCacheManager.prototype.getAccount = function (accountKey) {\r\n this.logger.trace(\"BrowserCacheManager.getAccount called\");\r\n var account = this.getItem(accountKey);\r\n if (!account) {\r\n this.removeAccountKeyFromMap(accountKey);\r\n return null;\r\n }\r\n var parsedAccount = this.validateAndParseJson(account);\r\n if (!parsedAccount || !AccountEntity.isAccountEntity(parsedAccount)) {\r\n this.removeAccountKeyFromMap(accountKey);\r\n return null;\r\n }\r\n return CacheManager.toObject(new AccountEntity(), parsedAccount);\r\n };\r\n /**\r\n * set account entity in the platform cache\r\n * @param key\r\n * @param value\r\n */\r\n BrowserCacheManager.prototype.setAccount = function (account) {\r\n this.logger.trace(\"BrowserCacheManager.setAccount called\");\r\n var key = account.generateAccountKey();\r\n this.setItem(key, JSON.stringify(account));\r\n this.addAccountKeyToMap(key);\r\n };\r\n /**\r\n * Returns the array of account keys currently cached\r\n * @returns\r\n */\r\n BrowserCacheManager.prototype.getAccountKeys = function () {\r\n this.logger.trace(\"BrowserCacheManager.getAccountKeys called\");\r\n var accountKeys = this.getItem(StaticCacheKeys.ACCOUNT_KEYS);\r\n if (accountKeys) {\r\n return JSON.parse(accountKeys);\r\n }\r\n this.logger.verbose(\"BrowserCacheManager.getAccountKeys - No account keys found\");\r\n return [];\r\n };\r\n /**\r\n * Add a new account to the key map\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.addAccountKeyToMap = function (key) {\r\n this.logger.trace(\"BrowserCacheManager.addAccountKeyToMap called\");\r\n this.logger.tracePii(\"BrowserCacheManager.addAccountKeyToMap called with key: \" + key);\r\n var accountKeys = this.getAccountKeys();\r\n if (accountKeys.indexOf(key) === -1) {\r\n // Only add key if it does not already exist in the map\r\n accountKeys.push(key);\r\n this.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));\r\n this.logger.verbose(\"BrowserCacheManager.addAccountKeyToMap account key added\");\r\n }\r\n else {\r\n this.logger.verbose(\"BrowserCacheManager.addAccountKeyToMap account key already exists in map\");\r\n }\r\n };\r\n /**\r\n * Remove an account from the key map\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.removeAccountKeyFromMap = function (key) {\r\n this.logger.trace(\"BrowserCacheManager.removeAccountKeyFromMap called\");\r\n this.logger.tracePii(\"BrowserCacheManager.removeAccountKeyFromMap called with key: \" + key);\r\n var accountKeys = this.getAccountKeys();\r\n var removalIndex = accountKeys.indexOf(key);\r\n if (removalIndex > -1) {\r\n accountKeys.splice(removalIndex, 1);\r\n this.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));\r\n this.logger.trace(\"BrowserCacheManager.removeAccountKeyFromMap account key removed\");\r\n }\r\n else {\r\n this.logger.trace(\"BrowserCacheManager.removeAccountKeyFromMap key not found in existing map\");\r\n }\r\n };\r\n /**\r\n * Extends inherited removeAccount function to include removal of the account key from the map\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.removeAccount = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n _super.prototype.removeAccount.call(this, key);\r\n this.removeAccountKeyFromMap(key);\r\n return [2 /*return*/];\r\n });\r\n });\r\n };\r\n /**\r\n * Removes given idToken from the cache and from the key map\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.removeIdToken = function (key) {\r\n _super.prototype.removeIdToken.call(this, key);\r\n this.removeTokenKey(key, CredentialType.ID_TOKEN);\r\n };\r\n /**\r\n * Removes given accessToken from the cache and from the key map\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.removeAccessToken = function (key) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n _super.prototype.removeAccessToken.call(this, key);\r\n this.removeTokenKey(key, CredentialType.ACCESS_TOKEN);\r\n return [2 /*return*/];\r\n });\r\n });\r\n };\r\n /**\r\n * Removes given refreshToken from the cache and from the key map\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.removeRefreshToken = function (key) {\r\n _super.prototype.removeRefreshToken.call(this, key);\r\n this.removeTokenKey(key, CredentialType.REFRESH_TOKEN);\r\n };\r\n /**\r\n * Gets the keys for the cached tokens associated with this clientId\r\n * @returns\r\n */\r\n BrowserCacheManager.prototype.getTokenKeys = function () {\r\n this.logger.trace(\"BrowserCacheManager.getTokenKeys called\");\r\n var item = this.getItem(StaticCacheKeys.TOKEN_KEYS + \".\" + this.clientId);\r\n if (item) {\r\n var tokenKeys = this.validateAndParseJson(item);\r\n if (tokenKeys &&\r\n tokenKeys.hasOwnProperty(\"idToken\") &&\r\n tokenKeys.hasOwnProperty(\"accessToken\") &&\r\n tokenKeys.hasOwnProperty(\"refreshToken\")) {\r\n return tokenKeys;\r\n }\r\n else {\r\n this.logger.error(\"BrowserCacheManager.getTokenKeys - Token keys found but in an unknown format. Returning empty key map.\");\r\n }\r\n }\r\n else {\r\n this.logger.verbose(\"BrowserCacheManager.getTokenKeys - No token keys found\");\r\n }\r\n return {\r\n idToken: [],\r\n accessToken: [],\r\n refreshToken: []\r\n };\r\n };\r\n /**\r\n * Adds the given key to the token key map\r\n * @param key\r\n * @param type\r\n */\r\n BrowserCacheManager.prototype.addTokenKey = function (key, type) {\r\n this.logger.trace(\"BrowserCacheManager addTokenKey called\");\r\n var tokenKeys = this.getTokenKeys();\r\n switch (type) {\r\n case CredentialType.ID_TOKEN:\r\n if (tokenKeys.idToken.indexOf(key) === -1) {\r\n this.logger.info(\"BrowserCacheManager: addTokenKey - idToken added to map\");\r\n tokenKeys.idToken.push(key);\r\n }\r\n break;\r\n case CredentialType.ACCESS_TOKEN:\r\n if (tokenKeys.accessToken.indexOf(key) === -1) {\r\n this.logger.info(\"BrowserCacheManager: addTokenKey - accessToken added to map\");\r\n tokenKeys.accessToken.push(key);\r\n }\r\n break;\r\n case CredentialType.REFRESH_TOKEN:\r\n if (tokenKeys.refreshToken.indexOf(key) === -1) {\r\n this.logger.info(\"BrowserCacheManager: addTokenKey - refreshToken added to map\");\r\n tokenKeys.refreshToken.push(key);\r\n }\r\n break;\r\n default:\r\n this.logger.error(\"BrowserCacheManager:addTokenKey - CredentialType provided invalid. CredentialType: \" + type);\r\n ClientAuthError.createUnexpectedCredentialTypeError();\r\n }\r\n this.setItem(StaticCacheKeys.TOKEN_KEYS + \".\" + this.clientId, JSON.stringify(tokenKeys));\r\n };\r\n /**\r\n * Removes the given key from the token key map\r\n * @param key\r\n * @param type\r\n */\r\n BrowserCacheManager.prototype.removeTokenKey = function (key, type) {\r\n this.logger.trace(\"BrowserCacheManager removeTokenKey called\");\r\n var tokenKeys = this.getTokenKeys();\r\n switch (type) {\r\n case CredentialType.ID_TOKEN:\r\n this.logger.infoPii(\"BrowserCacheManager: removeTokenKey - attempting to remove idToken with key: \" + key + \" from map\");\r\n var idRemoval = tokenKeys.idToken.indexOf(key);\r\n if (idRemoval > -1) {\r\n this.logger.info(\"BrowserCacheManager: removeTokenKey - idToken removed from map\");\r\n tokenKeys.idToken.splice(idRemoval, 1);\r\n }\r\n else {\r\n this.logger.info(\"BrowserCacheManager: removeTokenKey - idToken does not exist in map. Either it was previously removed or it was never added.\");\r\n }\r\n break;\r\n case CredentialType.ACCESS_TOKEN:\r\n this.logger.infoPii(\"BrowserCacheManager: removeTokenKey - attempting to remove accessToken with key: \" + key + \" from map\");\r\n var accessRemoval = tokenKeys.accessToken.indexOf(key);\r\n if (accessRemoval > -1) {\r\n this.logger.info(\"BrowserCacheManager: removeTokenKey - accessToken removed from map\");\r\n tokenKeys.accessToken.splice(accessRemoval, 1);\r\n }\r\n else {\r\n this.logger.info(\"BrowserCacheManager: removeTokenKey - accessToken does not exist in map. Either it was previously removed or it was never added.\");\r\n }\r\n break;\r\n case CredentialType.REFRESH_TOKEN:\r\n this.logger.infoPii(\"BrowserCacheManager: removeTokenKey - attempting to remove refreshToken with key: \" + key + \" from map\");\r\n var refreshRemoval = tokenKeys.refreshToken.indexOf(key);\r\n if (refreshRemoval > -1) {\r\n this.logger.info(\"BrowserCacheManager: removeTokenKey - refreshToken removed from map\");\r\n tokenKeys.refreshToken.splice(refreshRemoval, 1);\r\n }\r\n else {\r\n this.logger.info(\"BrowserCacheManager: removeTokenKey - refreshToken does not exist in map. Either it was previously removed or it was never added.\");\r\n }\r\n break;\r\n default:\r\n this.logger.error(\"BrowserCacheManager:removeTokenKey - CredentialType provided invalid. CredentialType: \" + type);\r\n ClientAuthError.createUnexpectedCredentialTypeError();\r\n }\r\n this.setItem(StaticCacheKeys.TOKEN_KEYS + \".\" + this.clientId, JSON.stringify(tokenKeys));\r\n };\r\n /**\r\n * generates idToken entity from a string\r\n * @param idTokenKey\r\n */\r\n BrowserCacheManager.prototype.getIdTokenCredential = function (idTokenKey) {\r\n var value = this.getItem(idTokenKey);\r\n if (!value) {\r\n this.logger.trace(\"BrowserCacheManager.getIdTokenCredential: called, no cache hit\");\r\n this.removeTokenKey(idTokenKey, CredentialType.ID_TOKEN);\r\n return null;\r\n }\r\n var parsedIdToken = this.validateAndParseJson(value);\r\n if (!parsedIdToken || !IdTokenEntity.isIdTokenEntity(parsedIdToken)) {\r\n this.logger.trace(\"BrowserCacheManager.getIdTokenCredential: called, no cache hit\");\r\n this.removeTokenKey(idTokenKey, CredentialType.ID_TOKEN);\r\n return null;\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getIdTokenCredential: cache hit\");\r\n return CacheManager.toObject(new IdTokenEntity(), parsedIdToken);\r\n };\r\n /**\r\n * set IdToken credential to the platform cache\r\n * @param idToken\r\n */\r\n BrowserCacheManager.prototype.setIdTokenCredential = function (idToken) {\r\n this.logger.trace(\"BrowserCacheManager.setIdTokenCredential called\");\r\n var idTokenKey = idToken.generateCredentialKey();\r\n this.setItem(idTokenKey, JSON.stringify(idToken));\r\n this.addTokenKey(idTokenKey, CredentialType.ID_TOKEN);\r\n };\r\n /**\r\n * generates accessToken entity from a string\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.getAccessTokenCredential = function (accessTokenKey) {\r\n var value = this.getItem(accessTokenKey);\r\n if (!value) {\r\n this.logger.trace(\"BrowserCacheManager.getAccessTokenCredential: called, no cache hit\");\r\n this.removeTokenKey(accessTokenKey, CredentialType.ACCESS_TOKEN);\r\n return null;\r\n }\r\n var parsedAccessToken = this.validateAndParseJson(value);\r\n if (!parsedAccessToken || !AccessTokenEntity.isAccessTokenEntity(parsedAccessToken)) {\r\n this.logger.trace(\"BrowserCacheManager.getAccessTokenCredential: called, no cache hit\");\r\n this.removeTokenKey(accessTokenKey, CredentialType.ACCESS_TOKEN);\r\n return null;\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getAccessTokenCredential: cache hit\");\r\n return CacheManager.toObject(new AccessTokenEntity(), parsedAccessToken);\r\n };\r\n /**\r\n * set accessToken credential to the platform cache\r\n * @param accessToken\r\n */\r\n BrowserCacheManager.prototype.setAccessTokenCredential = function (accessToken) {\r\n this.logger.trace(\"BrowserCacheManager.setAccessTokenCredential called\");\r\n var accessTokenKey = accessToken.generateCredentialKey();\r\n this.setItem(accessTokenKey, JSON.stringify(accessToken));\r\n this.addTokenKey(accessTokenKey, CredentialType.ACCESS_TOKEN);\r\n };\r\n /**\r\n * generates refreshToken entity from a string\r\n * @param refreshTokenKey\r\n */\r\n BrowserCacheManager.prototype.getRefreshTokenCredential = function (refreshTokenKey) {\r\n var value = this.getItem(refreshTokenKey);\r\n if (!value) {\r\n this.logger.trace(\"BrowserCacheManager.getRefreshTokenCredential: called, no cache hit\");\r\n this.removeTokenKey(refreshTokenKey, CredentialType.REFRESH_TOKEN);\r\n return null;\r\n }\r\n var parsedRefreshToken = this.validateAndParseJson(value);\r\n if (!parsedRefreshToken || !RefreshTokenEntity.isRefreshTokenEntity(parsedRefreshToken)) {\r\n this.logger.trace(\"BrowserCacheManager.getRefreshTokenCredential: called, no cache hit\");\r\n this.removeTokenKey(refreshTokenKey, CredentialType.REFRESH_TOKEN);\r\n return null;\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getRefreshTokenCredential: cache hit\");\r\n return CacheManager.toObject(new RefreshTokenEntity(), parsedRefreshToken);\r\n };\r\n /**\r\n * set refreshToken credential to the platform cache\r\n * @param refreshToken\r\n */\r\n BrowserCacheManager.prototype.setRefreshTokenCredential = function (refreshToken) {\r\n this.logger.trace(\"BrowserCacheManager.setRefreshTokenCredential called\");\r\n var refreshTokenKey = refreshToken.generateCredentialKey();\r\n this.setItem(refreshTokenKey, JSON.stringify(refreshToken));\r\n this.addTokenKey(refreshTokenKey, CredentialType.REFRESH_TOKEN);\r\n };\r\n /**\r\n * fetch appMetadata entity from the platform cache\r\n * @param appMetadataKey\r\n */\r\n BrowserCacheManager.prototype.getAppMetadata = function (appMetadataKey) {\r\n var value = this.getItem(appMetadataKey);\r\n if (!value) {\r\n this.logger.trace(\"BrowserCacheManager.getAppMetadata: called, no cache hit\");\r\n return null;\r\n }\r\n var parsedMetadata = this.validateAndParseJson(value);\r\n if (!parsedMetadata || !AppMetadataEntity.isAppMetadataEntity(appMetadataKey, parsedMetadata)) {\r\n this.logger.trace(\"BrowserCacheManager.getAppMetadata: called, no cache hit\");\r\n return null;\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getAppMetadata: cache hit\");\r\n return CacheManager.toObject(new AppMetadataEntity(), parsedMetadata);\r\n };\r\n /**\r\n * set appMetadata entity to the platform cache\r\n * @param appMetadata\r\n */\r\n BrowserCacheManager.prototype.setAppMetadata = function (appMetadata) {\r\n this.logger.trace(\"BrowserCacheManager.setAppMetadata called\");\r\n var appMetadataKey = appMetadata.generateAppMetadataKey();\r\n this.setItem(appMetadataKey, JSON.stringify(appMetadata));\r\n };\r\n /**\r\n * fetch server telemetry entity from the platform cache\r\n * @param serverTelemetryKey\r\n */\r\n BrowserCacheManager.prototype.getServerTelemetry = function (serverTelemetryKey) {\r\n var value = this.getItem(serverTelemetryKey);\r\n if (!value) {\r\n this.logger.trace(\"BrowserCacheManager.getServerTelemetry: called, no cache hit\");\r\n return null;\r\n }\r\n var parsedMetadata = this.validateAndParseJson(value);\r\n if (!parsedMetadata || !ServerTelemetryEntity.isServerTelemetryEntity(serverTelemetryKey, parsedMetadata)) {\r\n this.logger.trace(\"BrowserCacheManager.getServerTelemetry: called, no cache hit\");\r\n return null;\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getServerTelemetry: cache hit\");\r\n return CacheManager.toObject(new ServerTelemetryEntity(), parsedMetadata);\r\n };\r\n /**\r\n * set server telemetry entity to the platform cache\r\n * @param serverTelemetryKey\r\n * @param serverTelemetry\r\n */\r\n BrowserCacheManager.prototype.setServerTelemetry = function (serverTelemetryKey, serverTelemetry) {\r\n this.logger.trace(\"BrowserCacheManager.setServerTelemetry called\");\r\n this.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));\r\n };\r\n /**\r\n *\r\n */\r\n BrowserCacheManager.prototype.getAuthorityMetadata = function (key) {\r\n var value = this.internalStorage.getItem(key);\r\n if (!value) {\r\n this.logger.trace(\"BrowserCacheManager.getAuthorityMetadata: called, no cache hit\");\r\n return null;\r\n }\r\n var parsedMetadata = this.validateAndParseJson(value);\r\n if (parsedMetadata && AuthorityMetadataEntity.isAuthorityMetadataEntity(key, parsedMetadata)) {\r\n this.logger.trace(\"BrowserCacheManager.getAuthorityMetadata: cache hit\");\r\n return CacheManager.toObject(new AuthorityMetadataEntity(), parsedMetadata);\r\n }\r\n return null;\r\n };\r\n /**\r\n *\r\n */\r\n BrowserCacheManager.prototype.getAuthorityMetadataKeys = function () {\r\n var _this = this;\r\n var allKeys = this.internalStorage.getKeys();\r\n return allKeys.filter(function (key) {\r\n return _this.isAuthorityMetadata(key);\r\n });\r\n };\r\n /**\r\n * Sets wrapper metadata in memory\r\n * @param wrapperSKU\r\n * @param wrapperVersion\r\n */\r\n BrowserCacheManager.prototype.setWrapperMetadata = function (wrapperSKU, wrapperVersion) {\r\n this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_SKU, wrapperSKU);\r\n this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_VER, wrapperVersion);\r\n };\r\n /**\r\n * Returns wrapper metadata from in-memory storage\r\n */\r\n BrowserCacheManager.prototype.getWrapperMetadata = function () {\r\n var sku = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_SKU) || Constants.EMPTY_STRING;\r\n var version = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_VER) || Constants.EMPTY_STRING;\r\n return [sku, version];\r\n };\r\n /**\r\n *\r\n * @param entity\r\n */\r\n BrowserCacheManager.prototype.setAuthorityMetadata = function (key, entity) {\r\n this.logger.trace(\"BrowserCacheManager.setAuthorityMetadata called\");\r\n this.internalStorage.setItem(key, JSON.stringify(entity));\r\n };\r\n /**\r\n * Gets the active account\r\n */\r\n BrowserCacheManager.prototype.getActiveAccount = function () {\r\n var activeAccountKeyFilters = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);\r\n var activeAccountValueFilters = this.getItem(activeAccountKeyFilters);\r\n if (!activeAccountValueFilters) {\r\n // if new active account cache type isn't found, it's an old version, so look for that instead\r\n this.logger.trace(\"BrowserCacheManager.getActiveAccount: No active account filters cache schema found, looking for legacy schema\");\r\n var activeAccountKeyLocal = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);\r\n var activeAccountValueLocal = this.getItem(activeAccountKeyLocal);\r\n if (!activeAccountValueLocal) {\r\n this.logger.trace(\"BrowserCacheManager.getActiveAccount: No active account found\");\r\n return null;\r\n }\r\n var activeAccount = this.getAccountInfoByFilter({ localAccountId: activeAccountValueLocal })[0] || null;\r\n if (activeAccount) {\r\n this.logger.trace(\"BrowserCacheManager.getActiveAccount: Legacy active account cache schema found\");\r\n this.logger.trace(\"BrowserCacheManager.getActiveAccount: Adding active account filters cache schema\");\r\n this.setActiveAccount(activeAccount);\r\n return activeAccount;\r\n }\r\n return null;\r\n }\r\n var activeAccountValueObj = this.validateAndParseJson(activeAccountValueFilters);\r\n if (activeAccountValueObj) {\r\n this.logger.trace(\"BrowserCacheManager.getActiveAccount: Active account filters schema found\");\r\n return this.getAccountInfoByFilter({\r\n homeAccountId: activeAccountValueObj.homeAccountId,\r\n localAccountId: activeAccountValueObj.localAccountId\r\n })[0] || null;\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getActiveAccount: No active account found\");\r\n return null;\r\n };\r\n /**\r\n * Sets the active account's localAccountId in cache\r\n * @param account\r\n */\r\n BrowserCacheManager.prototype.setActiveAccount = function (account) {\r\n var activeAccountKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);\r\n var activeAccountKeyLocal = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);\r\n if (account) {\r\n this.logger.verbose(\"setActiveAccount: Active account set\");\r\n var activeAccountValue = {\r\n homeAccountId: account.homeAccountId,\r\n localAccountId: account.localAccountId\r\n };\r\n this.browserStorage.setItem(activeAccountKey, JSON.stringify(activeAccountValue));\r\n this.browserStorage.setItem(activeAccountKeyLocal, account.localAccountId);\r\n }\r\n else {\r\n this.logger.verbose(\"setActiveAccount: No account passed, active account not set\");\r\n this.browserStorage.removeItem(activeAccountKey);\r\n this.browserStorage.removeItem(activeAccountKeyLocal);\r\n }\r\n };\r\n /**\r\n * Gets a list of accounts that match all of the filters provided\r\n * @param account\r\n */\r\n BrowserCacheManager.prototype.getAccountInfoByFilter = function (accountFilter) {\r\n var allAccounts = this.getAllAccounts();\r\n this.logger.trace(\"BrowserCacheManager.getAccountInfoByFilter: total \" + allAccounts.length + \" accounts found\");\r\n return allAccounts.filter(function (accountObj) {\r\n if (accountFilter.username && accountFilter.username.toLowerCase() !== accountObj.username.toLowerCase()) {\r\n return false;\r\n }\r\n if (accountFilter.homeAccountId && accountFilter.homeAccountId !== accountObj.homeAccountId) {\r\n return false;\r\n }\r\n if (accountFilter.localAccountId && accountFilter.localAccountId !== accountObj.localAccountId) {\r\n return false;\r\n }\r\n if (accountFilter.tenantId && accountFilter.tenantId !== accountObj.tenantId) {\r\n return false;\r\n }\r\n if (accountFilter.environment && accountFilter.environment !== accountObj.environment) {\r\n return false;\r\n }\r\n return true;\r\n });\r\n };\r\n /**\r\n * Checks the cache for accounts matching loginHint or SID\r\n * @param loginHint\r\n * @param sid\r\n */\r\n BrowserCacheManager.prototype.getAccountInfoByHints = function (loginHint, sid) {\r\n var matchingAccounts = this.getAllAccounts().filter(function (accountInfo) {\r\n if (sid) {\r\n var accountSid = accountInfo.idTokenClaims && accountInfo.idTokenClaims[\"sid\"];\r\n return sid === accountSid;\r\n }\r\n if (loginHint) {\r\n return loginHint === accountInfo.username;\r\n }\r\n return false;\r\n });\r\n if (matchingAccounts.length === 1) {\r\n return matchingAccounts[0];\r\n }\r\n else if (matchingAccounts.length > 1) {\r\n throw ClientAuthError.createMultipleMatchingAccountsInCacheError();\r\n }\r\n return null;\r\n };\r\n /**\r\n * fetch throttling entity from the platform cache\r\n * @param throttlingCacheKey\r\n */\r\n BrowserCacheManager.prototype.getThrottlingCache = function (throttlingCacheKey) {\r\n var value = this.getItem(throttlingCacheKey);\r\n if (!value) {\r\n this.logger.trace(\"BrowserCacheManager.getThrottlingCache: called, no cache hit\");\r\n return null;\r\n }\r\n var parsedThrottlingCache = this.validateAndParseJson(value);\r\n if (!parsedThrottlingCache || !ThrottlingEntity.isThrottlingEntity(throttlingCacheKey, parsedThrottlingCache)) {\r\n this.logger.trace(\"BrowserCacheManager.getThrottlingCache: called, no cache hit\");\r\n return null;\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getThrottlingCache: cache hit\");\r\n return CacheManager.toObject(new ThrottlingEntity(), parsedThrottlingCache);\r\n };\r\n /**\r\n * set throttling entity to the platform cache\r\n * @param throttlingCacheKey\r\n * @param throttlingCache\r\n */\r\n BrowserCacheManager.prototype.setThrottlingCache = function (throttlingCacheKey, throttlingCache) {\r\n this.logger.trace(\"BrowserCacheManager.setThrottlingCache called\");\r\n this.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));\r\n };\r\n /**\r\n * Gets cache item with given key.\r\n * Will retrieve from cookies if storeAuthStateInCookie is set to true.\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.getTemporaryCache = function (cacheKey, generateKey) {\r\n var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;\r\n if (this.cacheConfig.storeAuthStateInCookie) {\r\n var itemCookie = this.getItemCookie(key);\r\n if (itemCookie) {\r\n this.logger.trace(\"BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies\");\r\n return itemCookie;\r\n }\r\n }\r\n var value = this.temporaryCacheStorage.getItem(key);\r\n if (!value) {\r\n // If temp cache item not found in session/memory, check local storage for items set by old versions\r\n if (this.cacheConfig.cacheLocation === BrowserCacheLocation.LocalStorage) {\r\n var item = this.browserStorage.getItem(key);\r\n if (item) {\r\n this.logger.trace(\"BrowserCacheManager.getTemporaryCache: Temporary cache item found in local storage\");\r\n return item;\r\n }\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getTemporaryCache: No cache item found in local storage\");\r\n return null;\r\n }\r\n this.logger.trace(\"BrowserCacheManager.getTemporaryCache: Temporary cache item returned\");\r\n return value;\r\n };\r\n /**\r\n * Sets the cache item with the key and value given.\r\n * Stores in cookie if storeAuthStateInCookie is set to true.\r\n * This can cause cookie overflow if used incorrectly.\r\n * @param key\r\n * @param value\r\n */\r\n BrowserCacheManager.prototype.setTemporaryCache = function (cacheKey, value, generateKey) {\r\n var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;\r\n this.temporaryCacheStorage.setItem(key, value);\r\n if (this.cacheConfig.storeAuthStateInCookie) {\r\n this.logger.trace(\"BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie\");\r\n this.setItemCookie(key, value);\r\n }\r\n };\r\n /**\r\n * Removes the cache item with the given key.\r\n * Will also clear the cookie item if storeAuthStateInCookie is set to true.\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.removeItem = function (key) {\r\n this.browserStorage.removeItem(key);\r\n this.temporaryCacheStorage.removeItem(key);\r\n if (this.cacheConfig.storeAuthStateInCookie) {\r\n this.logger.trace(\"BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie\");\r\n this.clearItemCookie(key);\r\n }\r\n };\r\n /**\r\n * Checks whether key is in cache.\r\n * @param key\r\n */\r\n BrowserCacheManager.prototype.containsKey = function (key) {\r\n return this.browserStorage.containsKey(key) || this.temporaryCacheStorage.containsKey(key);\r\n };\r\n /**\r\n * Gets all keys in window.\r\n */\r\n BrowserCacheManager.prototype.getKeys = function () {\r\n return __spread(this.browserStorage.getKeys(), this.temporaryCacheStorage.getKeys());\r\n };\r\n /**\r\n * Clears all cache entries created by MSAL.\r\n */\r\n BrowserCacheManager.prototype.clear = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: \r\n // Removes all accounts and their credentials\r\n return [4 /*yield*/, this.removeAllAccounts()];\r\n case 1:\r\n // Removes all accounts and their credentials\r\n _a.sent();\r\n this.removeAppMetadata();\r\n // Removes all remaining MSAL cache items\r\n this.getKeys().forEach(function (cacheKey) {\r\n // Check if key contains msal prefix; For now, we are clearing all the cache items created by MSAL.js\r\n if ((_this.browserStorage.containsKey(cacheKey) || _this.temporaryCacheStorage.containsKey(cacheKey)) && ((cacheKey.indexOf(Constants.CACHE_PREFIX) !== -1) || (cacheKey.indexOf(_this.clientId) !== -1))) {\r\n _this.removeItem(cacheKey);\r\n }\r\n });\r\n this.internalStorage.clear();\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Clears all access tokes that have claims prior to saving the current one\r\n * @param credential\r\n * @returns\r\n */\r\n BrowserCacheManager.prototype.clearTokensAndKeysWithClaims = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var tokenKeys, removedAccessTokens;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.trace(\"BrowserCacheManager.clearTokensAndKeysWithClaims called\");\r\n tokenKeys = this.getTokenKeys();\r\n removedAccessTokens = [];\r\n tokenKeys.accessToken.forEach(function (key) {\r\n // if the access token has claims in its key, remove the token key and the token\r\n var credential = _this.getAccessTokenCredential(key);\r\n if ((credential === null || credential === void 0 ? void 0 : credential.requestedClaimsHash) && key.includes(credential.requestedClaimsHash.toLowerCase())) {\r\n removedAccessTokens.push(_this.removeAccessToken(key));\r\n }\r\n });\r\n return [4 /*yield*/, Promise.all(removedAccessTokens)];\r\n case 1:\r\n _a.sent();\r\n // warn if any access tokens are removed\r\n if (removedAccessTokens.length > 0) {\r\n this.logger.warning(removedAccessTokens.length + \" access tokens with claims in the cache keys have been removed from the cache.\");\r\n }\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Add value to cookies\r\n * @param cookieName\r\n * @param cookieValue\r\n * @param expires\r\n */\r\n BrowserCacheManager.prototype.setItemCookie = function (cookieName, cookieValue, expires) {\r\n var cookieStr = encodeURIComponent(cookieName) + \"=\" + encodeURIComponent(cookieValue) + \";path=/;SameSite=Lax;\";\r\n if (expires) {\r\n var expireTime = this.getCookieExpirationTime(expires);\r\n cookieStr += \"expires=\" + expireTime + \";\";\r\n }\r\n if (this.cacheConfig.secureCookies) {\r\n cookieStr += \"Secure;\";\r\n }\r\n document.cookie = cookieStr;\r\n };\r\n /**\r\n * Get one item by key from cookies\r\n * @param cookieName\r\n */\r\n BrowserCacheManager.prototype.getItemCookie = function (cookieName) {\r\n var name = encodeURIComponent(cookieName) + \"=\";\r\n var cookieList = document.cookie.split(\";\");\r\n for (var i = 0; i < cookieList.length; i++) {\r\n var cookie = cookieList[i];\r\n while (cookie.charAt(0) === \" \") {\r\n cookie = cookie.substring(1);\r\n }\r\n if (cookie.indexOf(name) === 0) {\r\n return decodeURIComponent(cookie.substring(name.length, cookie.length));\r\n }\r\n }\r\n return Constants.EMPTY_STRING;\r\n };\r\n /**\r\n * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.\r\n */\r\n BrowserCacheManager.prototype.clearMsalCookies = function () {\r\n var _this = this;\r\n var cookiePrefix = Constants.CACHE_PREFIX + \".\" + this.clientId;\r\n var cookieList = document.cookie.split(\";\");\r\n cookieList.forEach(function (cookie) {\r\n while (cookie.charAt(0) === \" \") {\r\n // eslint-disable-next-line no-param-reassign\r\n cookie = cookie.substring(1);\r\n }\r\n if (cookie.indexOf(cookiePrefix) === 0) {\r\n var cookieKey = cookie.split(\"=\")[0];\r\n _this.clearItemCookie(cookieKey);\r\n }\r\n });\r\n };\r\n /**\r\n * Clear an item in the cookies by key\r\n * @param cookieName\r\n */\r\n BrowserCacheManager.prototype.clearItemCookie = function (cookieName) {\r\n this.setItemCookie(cookieName, Constants.EMPTY_STRING, -1);\r\n };\r\n /**\r\n * Get cookie expiration time\r\n * @param cookieLifeDays\r\n */\r\n BrowserCacheManager.prototype.getCookieExpirationTime = function (cookieLifeDays) {\r\n var today = new Date();\r\n var expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);\r\n return expr.toUTCString();\r\n };\r\n /**\r\n * Gets the cache object referenced by the browser\r\n */\r\n BrowserCacheManager.prototype.getCache = function () {\r\n return this.browserStorage;\r\n };\r\n /**\r\n * interface compat, we cannot overwrite browser cache; Functionality is supported by individual entities in browser\r\n */\r\n BrowserCacheManager.prototype.setCache = function () {\r\n // sets nothing\r\n };\r\n /**\r\n * Prepend msal. to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)\r\n * @param key\r\n * @param addInstanceId\r\n */\r\n BrowserCacheManager.prototype.generateCacheKey = function (key) {\r\n var generatedKey = this.validateAndParseJson(key);\r\n if (!generatedKey) {\r\n if (StringUtils.startsWith(key, Constants.CACHE_PREFIX) || StringUtils.startsWith(key, PersistentCacheKeys.ADAL_ID_TOKEN)) {\r\n return key;\r\n }\r\n return Constants.CACHE_PREFIX + \".\" + this.clientId + \".\" + key;\r\n }\r\n return JSON.stringify(key);\r\n };\r\n /**\r\n * Create authorityKey to cache authority\r\n * @param state\r\n */\r\n BrowserCacheManager.prototype.generateAuthorityKey = function (stateString) {\r\n var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;\r\n return this.generateCacheKey(TemporaryCacheKeys.AUTHORITY + \".\" + stateId);\r\n };\r\n /**\r\n * Create Nonce key to cache nonce\r\n * @param state\r\n */\r\n BrowserCacheManager.prototype.generateNonceKey = function (stateString) {\r\n var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;\r\n return this.generateCacheKey(TemporaryCacheKeys.NONCE_IDTOKEN + \".\" + stateId);\r\n };\r\n /**\r\n * Creates full cache key for the request state\r\n * @param stateString State string for the request\r\n */\r\n BrowserCacheManager.prototype.generateStateKey = function (stateString) {\r\n // Use the library state id to key temp storage for uniqueness for multiple concurrent requests\r\n var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;\r\n return this.generateCacheKey(TemporaryCacheKeys.REQUEST_STATE + \".\" + stateId);\r\n };\r\n /**\r\n * Gets the cached authority based on the cached state. Returns empty if no cached state found.\r\n */\r\n BrowserCacheManager.prototype.getCachedAuthority = function (cachedState) {\r\n var stateCacheKey = this.generateStateKey(cachedState);\r\n var state = this.getTemporaryCache(stateCacheKey);\r\n if (!state) {\r\n return null;\r\n }\r\n var authorityCacheKey = this.generateAuthorityKey(state);\r\n return this.getTemporaryCache(authorityCacheKey);\r\n };\r\n /**\r\n * Updates account, authority, and state in cache\r\n * @param serverAuthenticationRequest\r\n * @param account\r\n */\r\n BrowserCacheManager.prototype.updateCacheEntries = function (state, nonce, authorityInstance, loginHint, account) {\r\n this.logger.trace(\"BrowserCacheManager.updateCacheEntries called\");\r\n // Cache the request state\r\n var stateCacheKey = this.generateStateKey(state);\r\n this.setTemporaryCache(stateCacheKey, state, false);\r\n // Cache the nonce\r\n var nonceCacheKey = this.generateNonceKey(state);\r\n this.setTemporaryCache(nonceCacheKey, nonce, false);\r\n // Cache authorityKey\r\n var authorityCacheKey = this.generateAuthorityKey(state);\r\n this.setTemporaryCache(authorityCacheKey, authorityInstance, false);\r\n if (account) {\r\n var ccsCredential = {\r\n credential: account.homeAccountId,\r\n type: CcsCredentialType.HOME_ACCOUNT_ID\r\n };\r\n this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);\r\n }\r\n else if (!StringUtils.isEmpty(loginHint)) {\r\n var ccsCredential = {\r\n credential: loginHint,\r\n type: CcsCredentialType.UPN\r\n };\r\n this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);\r\n }\r\n };\r\n /**\r\n * Reset all temporary cache items\r\n * @param state\r\n */\r\n BrowserCacheManager.prototype.resetRequestCache = function (state) {\r\n var _this = this;\r\n this.logger.trace(\"BrowserCacheManager.resetRequestCache called\");\r\n // check state and remove associated cache items\r\n if (!StringUtils.isEmpty(state)) {\r\n this.getKeys().forEach(function (key) {\r\n if (key.indexOf(state) !== -1) {\r\n _this.removeItem(key);\r\n }\r\n });\r\n }\r\n // delete generic interactive request parameters\r\n if (state) {\r\n this.removeItem(this.generateStateKey(state));\r\n this.removeItem(this.generateNonceKey(state));\r\n this.removeItem(this.generateAuthorityKey(state));\r\n }\r\n this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));\r\n this.removeItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));\r\n this.removeItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));\r\n this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));\r\n this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));\r\n this.removeItem(this.generateCacheKey(TemporaryCacheKeys.NATIVE_REQUEST));\r\n this.setInteractionInProgress(false);\r\n };\r\n /**\r\n * Removes temporary cache for the provided state\r\n * @param stateString\r\n */\r\n BrowserCacheManager.prototype.cleanRequestByState = function (stateString) {\r\n this.logger.trace(\"BrowserCacheManager.cleanRequestByState called\");\r\n // Interaction is completed - remove interaction status.\r\n if (stateString) {\r\n var stateKey = this.generateStateKey(stateString);\r\n var cachedState = this.temporaryCacheStorage.getItem(stateKey);\r\n this.logger.infoPii(\"BrowserCacheManager.cleanRequestByState: Removing temporary cache items for state: \" + cachedState);\r\n this.resetRequestCache(cachedState || Constants.EMPTY_STRING);\r\n }\r\n this.clearMsalCookies();\r\n };\r\n /**\r\n * Looks in temporary cache for any state values with the provided interactionType and removes all temporary cache items for that state\r\n * Used in scenarios where temp cache needs to be cleaned but state is not known, such as clicking browser back button.\r\n * @param interactionType\r\n */\r\n BrowserCacheManager.prototype.cleanRequestByInteractionType = function (interactionType) {\r\n var _this = this;\r\n this.logger.trace(\"BrowserCacheManager.cleanRequestByInteractionType called\");\r\n // Loop through all keys to find state key\r\n this.getKeys().forEach(function (key) {\r\n // If this key is not the state key, move on\r\n if (key.indexOf(TemporaryCacheKeys.REQUEST_STATE) === -1) {\r\n return;\r\n }\r\n // Retrieve state value, return if not a valid value\r\n var stateValue = _this.temporaryCacheStorage.getItem(key);\r\n if (!stateValue) {\r\n return;\r\n }\r\n // Extract state and ensure it matches given InteractionType, then clean request cache\r\n var parsedState = BrowserProtocolUtils.extractBrowserRequestState(_this.cryptoImpl, stateValue);\r\n if (parsedState && parsedState.interactionType === interactionType) {\r\n _this.logger.infoPii(\"BrowserCacheManager.cleanRequestByInteractionType: Removing temporary cache items for state: \" + stateValue);\r\n _this.resetRequestCache(stateValue);\r\n }\r\n });\r\n this.clearMsalCookies();\r\n this.setInteractionInProgress(false);\r\n };\r\n BrowserCacheManager.prototype.cacheCodeRequest = function (authCodeRequest, browserCrypto) {\r\n this.logger.trace(\"BrowserCacheManager.cacheCodeRequest called\");\r\n var encodedValue = browserCrypto.base64Encode(JSON.stringify(authCodeRequest));\r\n this.setTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);\r\n };\r\n /**\r\n * Gets the token exchange parameters from the cache. Throws an error if nothing is found.\r\n */\r\n BrowserCacheManager.prototype.getCachedRequest = function (state, browserCrypto) {\r\n this.logger.trace(\"BrowserCacheManager.getCachedRequest called\");\r\n // Get token request from cache and parse as TokenExchangeParameters.\r\n var encodedTokenRequest = this.getTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, true);\r\n if (!encodedTokenRequest) {\r\n throw BrowserAuthError.createNoTokenRequestCacheError();\r\n }\r\n var parsedRequest = this.validateAndParseJson(browserCrypto.base64Decode(encodedTokenRequest));\r\n if (!parsedRequest) {\r\n throw BrowserAuthError.createUnableToParseTokenRequestCacheError();\r\n }\r\n this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));\r\n // Get cached authority and use if no authority is cached with request.\r\n if (StringUtils.isEmpty(parsedRequest.authority)) {\r\n var authorityCacheKey = this.generateAuthorityKey(state);\r\n var cachedAuthority = this.getTemporaryCache(authorityCacheKey);\r\n if (!cachedAuthority) {\r\n throw BrowserAuthError.createNoCachedAuthorityError();\r\n }\r\n parsedRequest.authority = cachedAuthority;\r\n }\r\n return parsedRequest;\r\n };\r\n /**\r\n * Gets cached native request for redirect flows\r\n */\r\n BrowserCacheManager.prototype.getCachedNativeRequest = function () {\r\n this.logger.trace(\"BrowserCacheManager.getCachedNativeRequest called\");\r\n var cachedRequest = this.getTemporaryCache(TemporaryCacheKeys.NATIVE_REQUEST, true);\r\n if (!cachedRequest) {\r\n this.logger.trace(\"BrowserCacheManager.getCachedNativeRequest: No cached native request found\");\r\n return null;\r\n }\r\n var parsedRequest = this.validateAndParseJson(cachedRequest);\r\n if (!parsedRequest) {\r\n this.logger.error(\"BrowserCacheManager.getCachedNativeRequest: Unable to parse native request\");\r\n return null;\r\n }\r\n return parsedRequest;\r\n };\r\n BrowserCacheManager.prototype.isInteractionInProgress = function (matchClientId) {\r\n var clientId = this.getInteractionInProgress();\r\n if (matchClientId) {\r\n return clientId === this.clientId;\r\n }\r\n else {\r\n return !!clientId;\r\n }\r\n };\r\n BrowserCacheManager.prototype.getInteractionInProgress = function () {\r\n var key = Constants.CACHE_PREFIX + \".\" + TemporaryCacheKeys.INTERACTION_STATUS_KEY;\r\n return this.getTemporaryCache(key, false);\r\n };\r\n BrowserCacheManager.prototype.setInteractionInProgress = function (inProgress) {\r\n // Ensure we don't overwrite interaction in progress for a different clientId\r\n var key = Constants.CACHE_PREFIX + \".\" + TemporaryCacheKeys.INTERACTION_STATUS_KEY;\r\n if (inProgress) {\r\n if (this.getInteractionInProgress()) {\r\n throw BrowserAuthError.createInteractionInProgressError();\r\n }\r\n else {\r\n // No interaction is in progress\r\n this.setTemporaryCache(key, this.clientId, false);\r\n }\r\n }\r\n else if (!inProgress && this.getInteractionInProgress() === this.clientId) {\r\n this.removeItem(key);\r\n }\r\n };\r\n /**\r\n * Returns username retrieved from ADAL or MSAL v1 idToken\r\n */\r\n BrowserCacheManager.prototype.getLegacyLoginHint = function () {\r\n // Only check for adal/msal token if no SSO params are being used\r\n var adalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ADAL_ID_TOKEN);\r\n if (adalIdTokenString) {\r\n this.browserStorage.removeItem(PersistentCacheKeys.ADAL_ID_TOKEN);\r\n this.logger.verbose(\"Cached ADAL id token retrieved.\");\r\n }\r\n // Check for cached MSAL v1 id token\r\n var msalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ID_TOKEN, true);\r\n if (msalIdTokenString) {\r\n this.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));\r\n this.logger.verbose(\"Cached MSAL.js v1 id token retrieved\");\r\n }\r\n var cachedIdTokenString = msalIdTokenString || adalIdTokenString;\r\n if (cachedIdTokenString) {\r\n var cachedIdToken = new IdToken(cachedIdTokenString, this.cryptoImpl);\r\n if (cachedIdToken.claims && cachedIdToken.claims.preferred_username) {\r\n this.logger.verbose(\"No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 preferred_username as loginHint\");\r\n return cachedIdToken.claims.preferred_username;\r\n }\r\n else if (cachedIdToken.claims && cachedIdToken.claims.upn) {\r\n this.logger.verbose(\"No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 upn as loginHint\");\r\n return cachedIdToken.claims.upn;\r\n }\r\n else {\r\n this.logger.verbose(\"No SSO params used and ADAL/MSAL v1 token retrieved, however, no account hint claim found. Enable preferred_username or upn id token claim to get SSO.\");\r\n }\r\n }\r\n return null;\r\n };\r\n /**\r\n * Updates a credential's cache key if the current cache key is outdated\r\n */\r\n BrowserCacheManager.prototype.updateCredentialCacheKey = function (currentCacheKey, credential) {\r\n var updatedCacheKey = credential.generateCredentialKey();\r\n if (currentCacheKey !== updatedCacheKey) {\r\n var cacheItem = this.getItem(currentCacheKey);\r\n if (cacheItem) {\r\n this.removeItem(currentCacheKey);\r\n this.setItem(updatedCacheKey, cacheItem);\r\n this.logger.verbose(\"Updated an outdated \" + credential.credentialType + \" cache key\");\r\n return updatedCacheKey;\r\n }\r\n else {\r\n this.logger.error(\"Attempted to update an outdated \" + credential.credentialType + \" cache key but no item matching the outdated key was found in storage\");\r\n }\r\n }\r\n return currentCacheKey;\r\n };\r\n /**\r\n * Returns application id as redirect context during AcquireTokenRedirect flow.\r\n */\r\n BrowserCacheManager.prototype.getRedirectRequestContext = function () {\r\n return this.getTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, true);\r\n };\r\n /**\r\n * Sets application id as the redirect context during AcquireTokenRedirect flow.\r\n * @param value\r\n */\r\n BrowserCacheManager.prototype.setRedirectRequestContext = function (value) {\r\n this.setTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, value, true);\r\n };\r\n return BrowserCacheManager;\r\n}(CacheManager));\r\nvar DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {\r\n var cacheOptions = {\r\n cacheLocation: BrowserCacheLocation.MemoryStorage,\r\n temporaryCacheLocation: BrowserCacheLocation.MemoryStorage,\r\n storeAuthStateInCookie: false,\r\n secureCookies: false,\r\n cacheMigrationEnabled: false,\r\n claimsBasedCachingEnabled: true\r\n };\r\n return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger);\r\n};\n\nexport { BrowserCacheManager, DEFAULT_BROWSER_CACHE_MANAGER };\n//# sourceMappingURL=BrowserCacheManager.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __assign, __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { DEFAULT_CRYPTO_IMPLEMENTATION } from '../crypto/ICrypto.js';\nimport { AuthError } from '../error/AuthError.js';\nimport { Logger, LogLevel } from '../logger/Logger.js';\nimport { Constants } from '../utils/Constants.js';\nimport { version } from '../packageMetadata.js';\nimport { AzureCloudInstance } from '../authority/AuthorityOptions.js';\nimport { DefaultStorageClass } from '../cache/CacheManager.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n// Token renewal offset default in seconds\r\nvar DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;\r\nvar DEFAULT_SYSTEM_OPTIONS = {\r\n tokenRenewalOffsetSeconds: DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,\r\n preventCorsPreflight: false\r\n};\r\nvar DEFAULT_LOGGER_IMPLEMENTATION = {\r\n loggerCallback: function () {\r\n // allow users to not set loggerCallback\r\n },\r\n piiLoggingEnabled: false,\r\n logLevel: LogLevel.Info,\r\n correlationId: Constants.EMPTY_STRING\r\n};\r\nvar DEFAULT_CACHE_OPTIONS = {\r\n claimsBasedCachingEnabled: true\r\n};\r\nvar DEFAULT_NETWORK_IMPLEMENTATION = {\r\n sendGetRequestAsync: function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Network interface - sendGetRequestAsync() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n },\r\n sendPostRequestAsync: function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var notImplErr;\r\n return __generator(this, function (_a) {\r\n notImplErr = \"Network interface - sendPostRequestAsync() has not been implemented\";\r\n throw AuthError.createUnexpectedError(notImplErr);\r\n });\r\n });\r\n }\r\n};\r\nvar DEFAULT_LIBRARY_INFO = {\r\n sku: Constants.SKU,\r\n version: version,\r\n cpu: Constants.EMPTY_STRING,\r\n os: Constants.EMPTY_STRING\r\n};\r\nvar DEFAULT_CLIENT_CREDENTIALS = {\r\n clientSecret: Constants.EMPTY_STRING,\r\n clientAssertion: undefined\r\n};\r\nvar DEFAULT_AZURE_CLOUD_OPTIONS = {\r\n azureCloudInstance: AzureCloudInstance.None,\r\n tenant: \"\" + Constants.DEFAULT_COMMON_TENANT\r\n};\r\nvar DEFAULT_TELEMETRY_OPTIONS = {\r\n application: {\r\n appName: \"\",\r\n appVersion: \"\"\r\n }\r\n};\r\n/**\r\n * Function that sets the default options when not explicitly configured from app developer\r\n *\r\n * @param Configuration\r\n *\r\n * @returns Configuration\r\n */\r\nfunction buildClientConfiguration(_a) {\r\n var userAuthOptions = _a.authOptions, userSystemOptions = _a.systemOptions, userLoggerOption = _a.loggerOptions, userCacheOptions = _a.cacheOptions, storageImplementation = _a.storageInterface, networkImplementation = _a.networkInterface, cryptoImplementation = _a.cryptoInterface, clientCredentials = _a.clientCredentials, libraryInfo = _a.libraryInfo, telemetry = _a.telemetry, serverTelemetryManager = _a.serverTelemetryManager, persistencePlugin = _a.persistencePlugin, serializableCache = _a.serializableCache;\r\n var loggerOptions = __assign(__assign({}, DEFAULT_LOGGER_IMPLEMENTATION), userLoggerOption);\r\n return {\r\n authOptions: buildAuthOptions(userAuthOptions),\r\n systemOptions: __assign(__assign({}, DEFAULT_SYSTEM_OPTIONS), userSystemOptions),\r\n loggerOptions: loggerOptions,\r\n cacheOptions: __assign(__assign({}, DEFAULT_CACHE_OPTIONS), userCacheOptions),\r\n storageInterface: storageImplementation || new DefaultStorageClass(userAuthOptions.clientId, DEFAULT_CRYPTO_IMPLEMENTATION, new Logger(loggerOptions)),\r\n networkInterface: networkImplementation || DEFAULT_NETWORK_IMPLEMENTATION,\r\n cryptoInterface: cryptoImplementation || DEFAULT_CRYPTO_IMPLEMENTATION,\r\n clientCredentials: clientCredentials || DEFAULT_CLIENT_CREDENTIALS,\r\n libraryInfo: __assign(__assign({}, DEFAULT_LIBRARY_INFO), libraryInfo),\r\n telemetry: __assign(__assign({}, DEFAULT_TELEMETRY_OPTIONS), telemetry),\r\n serverTelemetryManager: serverTelemetryManager || null,\r\n persistencePlugin: persistencePlugin || null,\r\n serializableCache: serializableCache || null,\r\n };\r\n}\r\n/**\r\n * Construct authoptions from the client and platform passed values\r\n * @param authOptions\r\n */\r\nfunction buildAuthOptions(authOptions) {\r\n return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);\r\n}\n\nexport { DEFAULT_SYSTEM_OPTIONS, buildClientConfiguration };\n//# sourceMappingURL=ClientConfiguration.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { AuthError } from '../error/AuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar StubbedNetworkModule = {\r\n sendGetRequestAsync: function () {\r\n var notImplErr = \"Network interface - sendGetRequestAsync() has not been implemented for the Network interface.\";\r\n return Promise.reject(AuthError.createUnexpectedError(notImplErr));\r\n },\r\n sendPostRequestAsync: function () {\r\n var notImplErr = \"Network interface - sendPostRequestAsync() has not been implemented for the Network interface.\";\r\n return Promise.reject(AuthError.createUnexpectedError(notImplErr));\r\n }\r\n};\n\nexport { StubbedNetworkModule };\n//# sourceMappingURL=INetworkModule.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { Constants } from '@azure/msal-common';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { HTTP_REQUEST_TYPE } from '../utils/BrowserConstants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This class implements the Fetch API for GET and POST requests. See more here: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API\r\n */\r\nvar FetchClient = /** @class */ (function () {\r\n function FetchClient() {\r\n }\r\n /**\r\n * Fetch Client for REST endpoints - Get request\r\n * @param url\r\n * @param headers\r\n * @param body\r\n */\r\n FetchClient.prototype.sendGetRequestAsync = function (url, options) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var response, e_1, _a;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n _b.trys.push([0, 2, , 3]);\r\n return [4 /*yield*/, fetch(url, {\r\n method: HTTP_REQUEST_TYPE.GET,\r\n headers: this.getFetchHeaders(options)\r\n })];\r\n case 1:\r\n response = _b.sent();\r\n return [3 /*break*/, 3];\r\n case 2:\r\n e_1 = _b.sent();\r\n if (window.navigator.onLine) {\r\n throw BrowserAuthError.createGetRequestFailedError(e_1, url);\r\n }\r\n else {\r\n throw BrowserAuthError.createNoNetworkConnectivityError();\r\n }\r\n case 3:\r\n _b.trys.push([3, 5, , 6]);\r\n _a = {\r\n headers: this.getHeaderDict(response.headers)\r\n };\r\n return [4 /*yield*/, response.json()];\r\n case 4: return [2 /*return*/, (_a.body = (_b.sent()),\r\n _a.status = response.status,\r\n _a)];\r\n case 5:\r\n _b.sent();\r\n throw BrowserAuthError.createFailedToParseNetworkResponseError(url);\r\n case 6: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Fetch Client for REST endpoints - Post request\r\n * @param url\r\n * @param headers\r\n * @param body\r\n */\r\n FetchClient.prototype.sendPostRequestAsync = function (url, options) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var reqBody, response, e_3, _a;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n reqBody = (options && options.body) || Constants.EMPTY_STRING;\r\n _b.label = 1;\r\n case 1:\r\n _b.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, fetch(url, {\r\n method: HTTP_REQUEST_TYPE.POST,\r\n headers: this.getFetchHeaders(options),\r\n body: reqBody\r\n })];\r\n case 2:\r\n response = _b.sent();\r\n return [3 /*break*/, 4];\r\n case 3:\r\n e_3 = _b.sent();\r\n if (window.navigator.onLine) {\r\n throw BrowserAuthError.createPostRequestFailedError(e_3, url);\r\n }\r\n else {\r\n throw BrowserAuthError.createNoNetworkConnectivityError();\r\n }\r\n case 4:\r\n _b.trys.push([4, 6, , 7]);\r\n _a = {\r\n headers: this.getHeaderDict(response.headers)\r\n };\r\n return [4 /*yield*/, response.json()];\r\n case 5: return [2 /*return*/, (_a.body = (_b.sent()),\r\n _a.status = response.status,\r\n _a)];\r\n case 6:\r\n _b.sent();\r\n throw BrowserAuthError.createFailedToParseNetworkResponseError(url);\r\n case 7: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Get Fetch API Headers object from string map\r\n * @param inputHeaders\r\n */\r\n FetchClient.prototype.getFetchHeaders = function (options) {\r\n var headers = new Headers();\r\n if (!(options && options.headers)) {\r\n return headers;\r\n }\r\n var optionsHeaders = options.headers;\r\n Object.keys(optionsHeaders).forEach(function (key) {\r\n headers.append(key, optionsHeaders[key]);\r\n });\r\n return headers;\r\n };\r\n FetchClient.prototype.getHeaderDict = function (headers) {\r\n var headerDict = {};\r\n headers.forEach(function (value, key) {\r\n headerDict[key] = value;\r\n });\r\n return headerDict;\r\n };\r\n return FetchClient;\r\n}());\n\nexport { FetchClient };\n//# sourceMappingURL=FetchClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { HTTP_REQUEST_TYPE } from '../utils/BrowserConstants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This client implements the XMLHttpRequest class to send GET and POST requests.\r\n */\r\nvar XhrClient = /** @class */ (function () {\r\n function XhrClient() {\r\n }\r\n /**\r\n * XhrClient for REST endpoints - Get request\r\n * @param url\r\n * @param headers\r\n * @param body\r\n */\r\n XhrClient.prototype.sendGetRequestAsync = function (url, options) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.GET, options)];\r\n });\r\n });\r\n };\r\n /**\r\n * XhrClient for REST endpoints - Post request\r\n * @param url\r\n * @param headers\r\n * @param body\r\n */\r\n XhrClient.prototype.sendPostRequestAsync = function (url, options) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.POST, options)];\r\n });\r\n });\r\n };\r\n /**\r\n * Helper for XhrClient requests.\r\n * @param url\r\n * @param method\r\n * @param options\r\n */\r\n XhrClient.prototype.sendRequestAsync = function (url, method, options) {\r\n var _this = this;\r\n return new Promise(function (resolve, reject) {\r\n var xhr = new XMLHttpRequest();\r\n xhr.open(method, url, /* async: */ true);\r\n _this.setXhrHeaders(xhr, options);\r\n xhr.onload = function () {\r\n if (xhr.status < 200 || xhr.status >= 300) {\r\n if (method === HTTP_REQUEST_TYPE.POST) {\r\n reject(BrowserAuthError.createPostRequestFailedError(\"Failed with status \" + xhr.status, url));\r\n }\r\n else {\r\n reject(BrowserAuthError.createGetRequestFailedError(\"Failed with status \" + xhr.status, url));\r\n }\r\n }\r\n try {\r\n var jsonResponse = JSON.parse(xhr.responseText);\r\n var networkResponse = {\r\n headers: _this.getHeaderDict(xhr),\r\n body: jsonResponse,\r\n status: xhr.status\r\n };\r\n resolve(networkResponse);\r\n }\r\n catch (e) {\r\n reject(BrowserAuthError.createFailedToParseNetworkResponseError(url));\r\n }\r\n };\r\n xhr.onerror = function () {\r\n if (window.navigator.onLine) {\r\n if (method === HTTP_REQUEST_TYPE.POST) {\r\n reject(BrowserAuthError.createPostRequestFailedError(\"Failed with status \" + xhr.status, url));\r\n }\r\n else {\r\n reject(BrowserAuthError.createGetRequestFailedError(\"Failed with status \" + xhr.status, url));\r\n }\r\n }\r\n else {\r\n reject(BrowserAuthError.createNoNetworkConnectivityError());\r\n }\r\n };\r\n if (method === HTTP_REQUEST_TYPE.POST && options && options.body) {\r\n xhr.send(options.body);\r\n }\r\n else if (method === HTTP_REQUEST_TYPE.GET) {\r\n xhr.send();\r\n }\r\n else {\r\n throw BrowserAuthError.createHttpMethodNotImplementedError(method);\r\n }\r\n });\r\n };\r\n /**\r\n * Helper to set XHR headers for request.\r\n * @param xhr\r\n * @param options\r\n */\r\n XhrClient.prototype.setXhrHeaders = function (xhr, options) {\r\n if (options && options.headers) {\r\n var headers_1 = options.headers;\r\n Object.keys(headers_1).forEach(function (key) {\r\n xhr.setRequestHeader(key, headers_1[key]);\r\n });\r\n }\r\n };\r\n /**\r\n * Gets a string map of the headers received in the response.\r\n *\r\n * Algorithm comes from https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/getAllResponseHeaders\r\n * @param xhr\r\n */\r\n XhrClient.prototype.getHeaderDict = function (xhr) {\r\n var headerString = xhr.getAllResponseHeaders();\r\n var headerArr = headerString.trim().split(/[\\r\\n]+/);\r\n var headerDict = {};\r\n headerArr.forEach(function (value) {\r\n var parts = value.split(\": \");\r\n var headerName = parts.shift();\r\n var headerVal = parts.join(\": \");\r\n if (headerName && headerVal) {\r\n headerDict[headerName] = headerVal;\r\n }\r\n });\r\n return headerDict;\r\n };\r\n return XhrClient;\r\n}());\n\nexport { XhrClient };\n//# sourceMappingURL=XhrClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { Constants, UrlString } from '@azure/msal-common';\nimport { FetchClient } from '../network/FetchClient.js';\nimport { XhrClient } from '../network/XhrClient.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { BrowserConstants, InteractionType } from './BrowserConstants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Utility class for browser specific functions\r\n */\r\nvar BrowserUtils = /** @class */ (function () {\r\n function BrowserUtils() {\r\n }\r\n // #region Window Navigation and URL management\r\n /**\r\n * Clears hash from window url.\r\n */\r\n BrowserUtils.clearHash = function (contentWindow) {\r\n // Office.js sets history.replaceState to null\r\n contentWindow.location.hash = Constants.EMPTY_STRING;\r\n if (typeof contentWindow.history.replaceState === \"function\") {\r\n // Full removes \"#\" from url\r\n contentWindow.history.replaceState(null, Constants.EMPTY_STRING, \"\" + contentWindow.location.origin + contentWindow.location.pathname + contentWindow.location.search);\r\n }\r\n };\r\n /**\r\n * Replaces current hash with hash from provided url\r\n */\r\n BrowserUtils.replaceHash = function (url) {\r\n var urlParts = url.split(\"#\");\r\n urlParts.shift(); // Remove part before the hash\r\n window.location.hash = urlParts.length > 0 ? urlParts.join(\"#\") : Constants.EMPTY_STRING;\r\n };\r\n /**\r\n * Returns boolean of whether the current window is in an iframe or not.\r\n */\r\n BrowserUtils.isInIframe = function () {\r\n return window.parent !== window;\r\n };\r\n /**\r\n * Returns boolean of whether or not the current window is a popup opened by msal\r\n */\r\n BrowserUtils.isInPopup = function () {\r\n return typeof window !== \"undefined\" && !!window.opener &&\r\n window.opener !== window &&\r\n typeof window.name === \"string\" &&\r\n window.name.indexOf(BrowserConstants.POPUP_NAME_PREFIX + \".\") === 0;\r\n };\r\n // #endregion\r\n /**\r\n * Returns current window URL as redirect uri\r\n */\r\n BrowserUtils.getCurrentUri = function () {\r\n return window.location.href.split(\"?\")[0].split(\"#\")[0];\r\n };\r\n /**\r\n * Gets the homepage url for the current window location.\r\n */\r\n BrowserUtils.getHomepage = function () {\r\n var currentUrl = new UrlString(window.location.href);\r\n var urlComponents = currentUrl.getUrlComponents();\r\n return urlComponents.Protocol + \"//\" + urlComponents.HostNameAndPort + \"/\";\r\n };\r\n /**\r\n * Returns best compatible network client object.\r\n */\r\n BrowserUtils.getBrowserNetworkClient = function () {\r\n if (window.fetch && window.Headers) {\r\n return new FetchClient();\r\n }\r\n else {\r\n return new XhrClient();\r\n }\r\n };\r\n /**\r\n * Throws error if we have completed an auth and are\r\n * attempting another auth request inside an iframe.\r\n */\r\n BrowserUtils.blockReloadInHiddenIframes = function () {\r\n var isResponseHash = UrlString.hashContainsKnownProperties(window.location.hash);\r\n // return an error if called from the hidden iframe created by the msal js silent calls\r\n if (isResponseHash && BrowserUtils.isInIframe()) {\r\n throw BrowserAuthError.createBlockReloadInHiddenIframeError();\r\n }\r\n };\r\n /**\r\n * Block redirect operations in iframes unless explicitly allowed\r\n * @param interactionType Interaction type for the request\r\n * @param allowRedirectInIframe Config value to allow redirects when app is inside an iframe\r\n */\r\n BrowserUtils.blockRedirectInIframe = function (interactionType, allowRedirectInIframe) {\r\n var isIframedApp = BrowserUtils.isInIframe();\r\n if (interactionType === InteractionType.Redirect && isIframedApp && !allowRedirectInIframe) {\r\n // If we are not in top frame, we shouldn't redirect. This is also handled by the service.\r\n throw BrowserAuthError.createRedirectInIframeError(isIframedApp);\r\n }\r\n };\r\n /**\r\n * Block redirectUri loaded in popup from calling AcquireToken APIs\r\n */\r\n BrowserUtils.blockAcquireTokenInPopups = function () {\r\n // Popups opened by msal popup APIs are given a name that starts with \"msal.\"\r\n if (BrowserUtils.isInPopup()) {\r\n throw BrowserAuthError.createBlockAcquireTokenInPopupsError();\r\n }\r\n };\r\n /**\r\n * Throws error if token requests are made in non-browser environment\r\n * @param isBrowserEnvironment Flag indicating if environment is a browser.\r\n */\r\n BrowserUtils.blockNonBrowserEnvironment = function (isBrowserEnvironment) {\r\n if (!isBrowserEnvironment) {\r\n throw BrowserAuthError.createNonBrowserEnvironmentError();\r\n }\r\n };\r\n /**\r\n * Throws error if native brokering is enabled but initialize hasn't been called\r\n * @param allowNativeBroker\r\n * @param initialized\r\n */\r\n BrowserUtils.blockNativeBrokerCalledBeforeInitialized = function (allowNativeBroker, initialized) {\r\n if (allowNativeBroker && !initialized) {\r\n throw BrowserAuthError.createNativeBrokerCalledBeforeInitialize();\r\n }\r\n };\r\n /**\r\n * Returns boolean of whether current browser is an Internet Explorer or Edge browser.\r\n */\r\n BrowserUtils.detectIEOrEdge = function () {\r\n var ua = window.navigator.userAgent;\r\n var msie = ua.indexOf(\"MSIE \");\r\n var msie11 = ua.indexOf(\"Trident/\");\r\n var msedge = ua.indexOf(\"Edge/\");\r\n var isIE = msie > 0 || msie11 > 0;\r\n var isEdge = msedge > 0;\r\n return isIE || isEdge;\r\n };\r\n return BrowserUtils;\r\n}());\n\nexport { BrowserUtils };\n//# sourceMappingURL=BrowserUtils.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar NavigationClient = /** @class */ (function () {\r\n function NavigationClient() {\r\n }\r\n /**\r\n * Navigates to other pages within the same web application\r\n * @param url\r\n * @param options\r\n */\r\n NavigationClient.prototype.navigateInternal = function (url, options) {\r\n return NavigationClient.defaultNavigateWindow(url, options);\r\n };\r\n /**\r\n * Navigates to other pages outside the web application i.e. the Identity Provider\r\n * @param url\r\n * @param options\r\n */\r\n NavigationClient.prototype.navigateExternal = function (url, options) {\r\n return NavigationClient.defaultNavigateWindow(url, options);\r\n };\r\n /**\r\n * Default navigation implementation invoked by the internal and external functions\r\n * @param url\r\n * @param options\r\n */\r\n NavigationClient.defaultNavigateWindow = function (url, options) {\r\n if (options.noHistory) {\r\n window.location.replace(url);\r\n }\r\n else {\r\n window.location.assign(url);\r\n }\r\n return new Promise(function (resolve) {\r\n setTimeout(function () {\r\n resolve(true);\r\n }, options.timeout);\r\n });\r\n };\r\n return NavigationClient;\r\n}());\n\nexport { NavigationClient };\n//# sourceMappingURL=NavigationClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __assign } from '../_virtual/_tslib.js';\nimport { DEFAULT_SYSTEM_OPTIONS, StubbedNetworkModule, Constants, ProtocolMode, AzureCloudInstance, LogLevel } from '@azure/msal-common';\nimport { BrowserUtils } from '../utils/BrowserUtils.js';\nimport { BrowserConstants, BrowserCacheLocation } from '../utils/BrowserConstants.js';\nimport { NavigationClient } from '../navigation/NavigationClient.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n// Default timeout for popup windows and iframes in milliseconds\r\nvar DEFAULT_POPUP_TIMEOUT_MS = 60000;\r\nvar DEFAULT_IFRAME_TIMEOUT_MS = 6000;\r\nvar DEFAULT_REDIRECT_TIMEOUT_MS = 30000;\r\nvar DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS = 2000;\r\n/**\r\n * MSAL function that sets the default options when not explicitly configured from app developer\r\n *\r\n * @param auth\r\n * @param cache\r\n * @param system\r\n *\r\n * @returns Configuration object\r\n */\r\nfunction buildConfiguration(_a, isBrowserEnvironment) {\r\n var userInputAuth = _a.auth, userInputCache = _a.cache, userInputSystem = _a.system, userInputTelemetry = _a.telemetry;\r\n // Default auth options for browser\r\n var DEFAULT_AUTH_OPTIONS = {\r\n clientId: Constants.EMPTY_STRING,\r\n authority: \"\" + Constants.DEFAULT_AUTHORITY,\r\n knownAuthorities: [],\r\n cloudDiscoveryMetadata: Constants.EMPTY_STRING,\r\n authorityMetadata: Constants.EMPTY_STRING,\r\n redirectUri: Constants.EMPTY_STRING,\r\n postLogoutRedirectUri: Constants.EMPTY_STRING,\r\n navigateToLoginRequestUrl: true,\r\n clientCapabilities: [],\r\n protocolMode: ProtocolMode.AAD,\r\n azureCloudOptions: {\r\n azureCloudInstance: AzureCloudInstance.None,\r\n tenant: Constants.EMPTY_STRING\r\n },\r\n skipAuthorityMetadataCache: false,\r\n };\r\n // Default cache options for browser\r\n var DEFAULT_CACHE_OPTIONS = {\r\n cacheLocation: BrowserCacheLocation.SessionStorage,\r\n temporaryCacheLocation: BrowserCacheLocation.SessionStorage,\r\n storeAuthStateInCookie: false,\r\n secureCookies: false,\r\n // Default cache migration to true if cache location is localStorage since entries are preserved across tabs/windows. Migration has little to no benefit in sessionStorage and memoryStorage\r\n cacheMigrationEnabled: userInputCache && userInputCache.cacheLocation === BrowserCacheLocation.LocalStorage ? true : false,\r\n claimsBasedCachingEnabled: true\r\n };\r\n // Default logger options for browser\r\n var DEFAULT_LOGGER_OPTIONS = {\r\n // eslint-disable-next-line @typescript-eslint/no-empty-function\r\n loggerCallback: function () {\r\n // allow users to not set logger call back \r\n },\r\n logLevel: LogLevel.Info,\r\n piiLoggingEnabled: false\r\n };\r\n // Default system options for browser\r\n var DEFAULT_BROWSER_SYSTEM_OPTIONS = __assign(__assign({}, DEFAULT_SYSTEM_OPTIONS), { loggerOptions: DEFAULT_LOGGER_OPTIONS, networkClient: isBrowserEnvironment ? BrowserUtils.getBrowserNetworkClient() : StubbedNetworkModule, navigationClient: new NavigationClient(), loadFrameTimeout: 0, \r\n // If loadFrameTimeout is provided, use that as default.\r\n windowHashTimeout: (userInputSystem === null || userInputSystem === void 0 ? void 0 : userInputSystem.loadFrameTimeout) || DEFAULT_POPUP_TIMEOUT_MS, iframeHashTimeout: (userInputSystem === null || userInputSystem === void 0 ? void 0 : userInputSystem.loadFrameTimeout) || DEFAULT_IFRAME_TIMEOUT_MS, navigateFrameWait: isBrowserEnvironment && BrowserUtils.detectIEOrEdge() ? 500 : 0, redirectNavigationTimeout: DEFAULT_REDIRECT_TIMEOUT_MS, asyncPopups: false, allowRedirectInIframe: false, allowNativeBroker: false, nativeBrokerHandshakeTimeout: (userInputSystem === null || userInputSystem === void 0 ? void 0 : userInputSystem.nativeBrokerHandshakeTimeout) || DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS, pollIntervalMilliseconds: BrowserConstants.DEFAULT_POLL_INTERVAL_MS, cryptoOptions: {\r\n useMsrCrypto: false,\r\n entropy: undefined\r\n } });\r\n var providedSystemOptions = __assign(__assign({}, userInputSystem), { loggerOptions: (userInputSystem === null || userInputSystem === void 0 ? void 0 : userInputSystem.loggerOptions) || DEFAULT_LOGGER_OPTIONS });\r\n var DEFAULT_TELEMETRY_OPTIONS = {\r\n application: {\r\n appName: Constants.EMPTY_STRING,\r\n appVersion: Constants.EMPTY_STRING\r\n }\r\n };\r\n var overlayedConfig = {\r\n auth: __assign(__assign({}, DEFAULT_AUTH_OPTIONS), userInputAuth),\r\n cache: __assign(__assign({}, DEFAULT_CACHE_OPTIONS), userInputCache),\r\n system: __assign(__assign({}, DEFAULT_BROWSER_SYSTEM_OPTIONS), providedSystemOptions),\r\n telemetry: __assign(__assign({}, DEFAULT_TELEMETRY_OPTIONS), userInputTelemetry)\r\n };\r\n return overlayedConfig;\r\n}\n\nexport { DEFAULT_IFRAME_TIMEOUT_MS, DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS, DEFAULT_POPUP_TIMEOUT_MS, DEFAULT_REDIRECT_TIMEOUT_MS, buildConfiguration };\n//# sourceMappingURL=Configuration.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\n/* eslint-disable header/header */\r\nvar name = \"@azure/msal-browser\";\r\nvar version = \"2.38.4\";\n\nexport { name, version };\n//# sourceMappingURL=packageMetadata.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar EventType;\r\n(function (EventType) {\r\n EventType[\"INITIALIZE_START\"] = \"msal:initializeStart\";\r\n EventType[\"INITIALIZE_END\"] = \"msal:initializeEnd\";\r\n EventType[\"ACCOUNT_ADDED\"] = \"msal:accountAdded\";\r\n EventType[\"ACCOUNT_REMOVED\"] = \"msal:accountRemoved\";\r\n EventType[\"LOGIN_START\"] = \"msal:loginStart\";\r\n EventType[\"LOGIN_SUCCESS\"] = \"msal:loginSuccess\";\r\n EventType[\"LOGIN_FAILURE\"] = \"msal:loginFailure\";\r\n EventType[\"ACQUIRE_TOKEN_START\"] = \"msal:acquireTokenStart\";\r\n EventType[\"ACQUIRE_TOKEN_SUCCESS\"] = \"msal:acquireTokenSuccess\";\r\n EventType[\"ACQUIRE_TOKEN_FAILURE\"] = \"msal:acquireTokenFailure\";\r\n EventType[\"ACQUIRE_TOKEN_NETWORK_START\"] = \"msal:acquireTokenFromNetworkStart\";\r\n EventType[\"SSO_SILENT_START\"] = \"msal:ssoSilentStart\";\r\n EventType[\"SSO_SILENT_SUCCESS\"] = \"msal:ssoSilentSuccess\";\r\n EventType[\"SSO_SILENT_FAILURE\"] = \"msal:ssoSilentFailure\";\r\n EventType[\"ACQUIRE_TOKEN_BY_CODE_START\"] = \"msal:acquireTokenByCodeStart\";\r\n EventType[\"ACQUIRE_TOKEN_BY_CODE_SUCCESS\"] = \"msal:acquireTokenByCodeSuccess\";\r\n EventType[\"ACQUIRE_TOKEN_BY_CODE_FAILURE\"] = \"msal:acquireTokenByCodeFailure\";\r\n EventType[\"HANDLE_REDIRECT_START\"] = \"msal:handleRedirectStart\";\r\n EventType[\"HANDLE_REDIRECT_END\"] = \"msal:handleRedirectEnd\";\r\n EventType[\"POPUP_OPENED\"] = \"msal:popupOpened\";\r\n EventType[\"LOGOUT_START\"] = \"msal:logoutStart\";\r\n EventType[\"LOGOUT_SUCCESS\"] = \"msal:logoutSuccess\";\r\n EventType[\"LOGOUT_FAILURE\"] = \"msal:logoutFailure\";\r\n EventType[\"LOGOUT_END\"] = \"msal:logoutEnd\";\r\n EventType[\"RESTORE_FROM_BFCACHE\"] = \"msal:restoreFromBFCache\";\r\n})(EventType || (EventType = {}));\n\nexport { EventType };\n//# sourceMappingURL=EventType.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { AccountEntity, CacheManager } from '@azure/msal-common';\nimport { EventType } from './EventType.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar EventHandler = /** @class */ (function () {\r\n function EventHandler(logger, browserCrypto) {\r\n this.eventCallbacks = new Map();\r\n this.logger = logger;\r\n this.browserCrypto = browserCrypto;\r\n this.listeningToStorageEvents = false;\r\n this.handleAccountCacheChange = this.handleAccountCacheChange.bind(this);\r\n }\r\n /**\r\n * Adds event callbacks to array\r\n * @param callback\r\n */\r\n EventHandler.prototype.addEventCallback = function (callback) {\r\n if (typeof window !== \"undefined\") {\r\n var callbackId = this.browserCrypto.createNewGuid();\r\n this.eventCallbacks.set(callbackId, callback);\r\n this.logger.verbose(\"Event callback registered with id: \" + callbackId);\r\n return callbackId;\r\n }\r\n return null;\r\n };\r\n /**\r\n * Removes callback with provided id from callback array\r\n * @param callbackId\r\n */\r\n EventHandler.prototype.removeEventCallback = function (callbackId) {\r\n this.eventCallbacks.delete(callbackId);\r\n this.logger.verbose(\"Event callback \" + callbackId + \" removed.\");\r\n };\r\n /**\r\n * Adds event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window\r\n */\r\n EventHandler.prototype.enableAccountStorageEvents = function () {\r\n if (typeof window === \"undefined\") {\r\n return;\r\n }\r\n if (!this.listeningToStorageEvents) {\r\n this.logger.verbose(\"Adding account storage listener.\");\r\n this.listeningToStorageEvents = true;\r\n window.addEventListener(\"storage\", this.handleAccountCacheChange);\r\n }\r\n else {\r\n this.logger.verbose(\"Account storage listener already registered.\");\r\n }\r\n };\r\n /**\r\n * Removes event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window\r\n */\r\n EventHandler.prototype.disableAccountStorageEvents = function () {\r\n if (typeof window === \"undefined\") {\r\n return;\r\n }\r\n if (this.listeningToStorageEvents) {\r\n this.logger.verbose(\"Removing account storage listener.\");\r\n window.removeEventListener(\"storage\", this.handleAccountCacheChange);\r\n this.listeningToStorageEvents = false;\r\n }\r\n else {\r\n this.logger.verbose(\"No account storage listener registered.\");\r\n }\r\n };\r\n /**\r\n * Emits events by calling callback with event message\r\n * @param eventType\r\n * @param interactionType\r\n * @param payload\r\n * @param error\r\n */\r\n EventHandler.prototype.emitEvent = function (eventType, interactionType, payload, error) {\r\n var _this = this;\r\n if (typeof window !== \"undefined\") {\r\n var message_1 = {\r\n eventType: eventType,\r\n interactionType: interactionType || null,\r\n payload: payload || null,\r\n error: error || null,\r\n timestamp: Date.now()\r\n };\r\n this.logger.info(\"Emitting event: \" + eventType);\r\n this.eventCallbacks.forEach(function (callback, callbackId) {\r\n _this.logger.verbose(\"Emitting event to callback \" + callbackId + \": \" + eventType);\r\n callback.apply(null, [message_1]);\r\n });\r\n }\r\n };\r\n /**\r\n * Emit account added/removed events when cached accounts are changed in a different tab or frame\r\n */\r\n EventHandler.prototype.handleAccountCacheChange = function (e) {\r\n try {\r\n var cacheValue = e.newValue || e.oldValue;\r\n if (!cacheValue) {\r\n return;\r\n }\r\n var parsedValue = JSON.parse(cacheValue);\r\n if (typeof parsedValue !== \"object\" || !AccountEntity.isAccountEntity(parsedValue)) {\r\n return;\r\n }\r\n var accountEntity = CacheManager.toObject(new AccountEntity(), parsedValue);\r\n var accountInfo = accountEntity.getAccountInfo();\r\n if (!e.oldValue && e.newValue) {\r\n this.logger.info(\"Account was added to cache in a different window\");\r\n this.emitEvent(EventType.ACCOUNT_ADDED, undefined, accountInfo);\r\n }\r\n else if (!e.newValue && e.oldValue) {\r\n this.logger.info(\"Account was removed from cache in a different window\");\r\n this.emitEvent(EventType.ACCOUNT_REMOVED, undefined, accountInfo);\r\n }\r\n }\r\n catch (e) {\r\n return;\r\n }\r\n };\r\n return EventHandler;\r\n}());\n\nexport { EventHandler };\n//# sourceMappingURL=EventHandler.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { TimeUtils } from '../utils/TimeUtils.js';\nimport { UrlString } from '../url/UrlString.js';\nimport { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar KeyLocation;\r\n(function (KeyLocation) {\r\n KeyLocation[\"SW\"] = \"sw\";\r\n KeyLocation[\"UHW\"] = \"uhw\";\r\n})(KeyLocation || (KeyLocation = {}));\r\nvar PopTokenGenerator = /** @class */ (function () {\r\n function PopTokenGenerator(cryptoUtils, performanceClient) {\r\n this.cryptoUtils = cryptoUtils;\r\n this.performanceClient = performanceClient;\r\n }\r\n /**\r\n * Generates the req_cnf validated at the RP in the POP protocol for SHR parameters\r\n * and returns an object containing the keyid, the full req_cnf string and the req_cnf string hash\r\n * @param request\r\n * @returns\r\n */\r\n PopTokenGenerator.prototype.generateCnf = function (request) {\r\n var _a, _b;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var reqCnf, reqCnfString, _c;\r\n return __generator(this, function (_d) {\r\n switch (_d.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.PopTokenGenerateKid, request.correlationId);\r\n return [4 /*yield*/, this.generateKid(request)];\r\n case 1:\r\n reqCnf = _d.sent();\r\n reqCnfString = this.cryptoUtils.base64Encode(JSON.stringify(reqCnf));\r\n _c = {\r\n kid: reqCnf.kid,\r\n reqCnfString: reqCnfString\r\n };\r\n return [4 /*yield*/, this.cryptoUtils.hashString(reqCnfString)];\r\n case 2: return [2 /*return*/, (_c.reqCnfHash = _d.sent(),\r\n _c)];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Generates key_id for a SHR token request\r\n * @param request\r\n * @returns\r\n */\r\n PopTokenGenerator.prototype.generateKid = function (request) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var kidThumbprint;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.PopTokenGenerateKid, request.correlationId);\r\n return [4 /*yield*/, this.cryptoUtils.getPublicKeyThumbprint(request)];\r\n case 1:\r\n kidThumbprint = _b.sent();\r\n return [2 /*return*/, {\r\n kid: kidThumbprint,\r\n xms_ksl: KeyLocation.SW\r\n }];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Signs the POP access_token with the local generated key-pair\r\n * @param accessToken\r\n * @param request\r\n * @returns\r\n */\r\n PopTokenGenerator.prototype.signPopToken = function (accessToken, keyId, request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n return [2 /*return*/, this.signPayload(accessToken, keyId, request)];\r\n });\r\n });\r\n };\r\n /**\r\n * Utility function to generate the signed JWT for an access_token\r\n * @param payload\r\n * @param kid\r\n * @param request\r\n * @param claims\r\n * @returns\r\n */\r\n PopTokenGenerator.prototype.signPayload = function (payload, keyId, request, claims) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var resourceRequestMethod, resourceRequestUri, shrClaims, shrNonce, resourceUrlString, resourceUrlComponents;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n resourceRequestMethod = request.resourceRequestMethod, resourceRequestUri = request.resourceRequestUri, shrClaims = request.shrClaims, shrNonce = request.shrNonce;\r\n resourceUrlString = (resourceRequestUri) ? new UrlString(resourceRequestUri) : undefined;\r\n resourceUrlComponents = resourceUrlString === null || resourceUrlString === void 0 ? void 0 : resourceUrlString.getUrlComponents();\r\n return [4 /*yield*/, this.cryptoUtils.signJwt(__assign({ at: payload, ts: TimeUtils.nowSeconds(), m: resourceRequestMethod === null || resourceRequestMethod === void 0 ? void 0 : resourceRequestMethod.toUpperCase(), u: resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.HostNameAndPort, nonce: shrNonce || this.cryptoUtils.createNewGuid(), p: resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.AbsolutePath, q: (resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.QueryString) ? [[], resourceUrlComponents.QueryString] : undefined, client_claims: shrClaims || undefined }, claims), keyId, request.correlationId)];\r\n case 1: return [2 /*return*/, _a.sent()];\r\n }\r\n });\r\n });\r\n };\r\n return PopTokenGenerator;\r\n}());\n\nexport { PopTokenGenerator };\n//# sourceMappingURL=PopTokenGenerator.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { ThrottlingConstants, Constants, HeaderNames } from '../utils/Constants.js';\nimport { ServerError } from '../error/ServerError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar ThrottlingUtils = /** @class */ (function () {\r\n function ThrottlingUtils() {\r\n }\r\n /**\r\n * Prepares a RequestThumbprint to be stored as a key.\r\n * @param thumbprint\r\n */\r\n ThrottlingUtils.generateThrottlingStorageKey = function (thumbprint) {\r\n return ThrottlingConstants.THROTTLING_PREFIX + \".\" + JSON.stringify(thumbprint);\r\n };\r\n /**\r\n * Performs necessary throttling checks before a network request.\r\n * @param cacheManager\r\n * @param thumbprint\r\n */\r\n ThrottlingUtils.preProcess = function (cacheManager, thumbprint) {\r\n var _a;\r\n var key = ThrottlingUtils.generateThrottlingStorageKey(thumbprint);\r\n var value = cacheManager.getThrottlingCache(key);\r\n if (value) {\r\n if (value.throttleTime < Date.now()) {\r\n cacheManager.removeItem(key);\r\n return;\r\n }\r\n throw new ServerError(((_a = value.errorCodes) === null || _a === void 0 ? void 0 : _a.join(\" \")) || Constants.EMPTY_STRING, value.errorMessage, value.subError);\r\n }\r\n };\r\n /**\r\n * Performs necessary throttling checks after a network request.\r\n * @param cacheManager\r\n * @param thumbprint\r\n * @param response\r\n */\r\n ThrottlingUtils.postProcess = function (cacheManager, thumbprint, response) {\r\n if (ThrottlingUtils.checkResponseStatus(response) || ThrottlingUtils.checkResponseForRetryAfter(response)) {\r\n var thumbprintValue = {\r\n throttleTime: ThrottlingUtils.calculateThrottleTime(parseInt(response.headers[HeaderNames.RETRY_AFTER])),\r\n error: response.body.error,\r\n errorCodes: response.body.error_codes,\r\n errorMessage: response.body.error_description,\r\n subError: response.body.suberror\r\n };\r\n cacheManager.setThrottlingCache(ThrottlingUtils.generateThrottlingStorageKey(thumbprint), thumbprintValue);\r\n }\r\n };\r\n /**\r\n * Checks a NetworkResponse object's status codes against 429 or 5xx\r\n * @param response\r\n */\r\n ThrottlingUtils.checkResponseStatus = function (response) {\r\n return response.status === 429 || response.status >= 500 && response.status < 600;\r\n };\r\n /**\r\n * Checks a NetworkResponse object's RetryAfter header\r\n * @param response\r\n */\r\n ThrottlingUtils.checkResponseForRetryAfter = function (response) {\r\n if (response.headers) {\r\n return response.headers.hasOwnProperty(HeaderNames.RETRY_AFTER) && (response.status < 200 || response.status >= 300);\r\n }\r\n return false;\r\n };\r\n /**\r\n * Calculates the Unix-time value for a throttle to expire given throttleTime in seconds.\r\n * @param throttleTime\r\n */\r\n ThrottlingUtils.calculateThrottleTime = function (throttleTime) {\r\n var time = throttleTime <= 0 ? 0 : throttleTime;\r\n var currentSeconds = Date.now() / 1000;\r\n return Math.floor(Math.min(currentSeconds + (time || ThrottlingConstants.DEFAULT_THROTTLE_TIME_SECONDS), currentSeconds + ThrottlingConstants.DEFAULT_MAX_THROTTLE_TIME_SECONDS) * 1000);\r\n };\r\n ThrottlingUtils.removeThrottle = function (cacheManager, clientId, request, homeAccountIdentifier) {\r\n var thumbprint = {\r\n clientId: clientId,\r\n authority: request.authority,\r\n scopes: request.scopes,\r\n homeAccountIdentifier: homeAccountIdentifier,\r\n claims: request.claims,\r\n authenticationScheme: request.authenticationScheme,\r\n resourceRequestMethod: request.resourceRequestMethod,\r\n resourceRequestUri: request.resourceRequestUri,\r\n shrClaims: request.shrClaims,\r\n sshKid: request.sshKid\r\n };\r\n var key = this.generateThrottlingStorageKey(thumbprint);\r\n cacheManager.removeItem(key);\r\n };\r\n return ThrottlingUtils;\r\n}());\n\nexport { ThrottlingUtils };\n//# sourceMappingURL=ThrottlingUtils.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { ThrottlingUtils } from './ThrottlingUtils.js';\nimport { AuthError } from '../error/AuthError.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar NetworkManager = /** @class */ (function () {\r\n function NetworkManager(networkClient, cacheManager) {\r\n this.networkClient = networkClient;\r\n this.cacheManager = cacheManager;\r\n }\r\n /**\r\n * Wraps sendPostRequestAsync with necessary preflight and postflight logic\r\n * @param thumbprint\r\n * @param tokenEndpoint\r\n * @param options\r\n */\r\n NetworkManager.prototype.sendPostRequest = function (thumbprint, tokenEndpoint, options) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var response, e_1;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n ThrottlingUtils.preProcess(this.cacheManager, thumbprint);\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.networkClient.sendPostRequestAsync(tokenEndpoint, options)];\r\n case 2:\r\n response = _a.sent();\r\n return [3 /*break*/, 4];\r\n case 3:\r\n e_1 = _a.sent();\r\n if (e_1 instanceof AuthError) {\r\n throw e_1;\r\n }\r\n else {\r\n throw ClientAuthError.createNetworkError(tokenEndpoint, e_1);\r\n }\r\n case 4:\r\n ThrottlingUtils.postProcess(this.cacheManager, thumbprint, response);\r\n return [2 /*return*/, response];\r\n }\r\n });\r\n });\r\n };\r\n return NetworkManager;\r\n}());\n\nexport { NetworkManager };\n//# sourceMappingURL=NetworkManager.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { CodeChallengeMethodValues, PromptValue } from '../utils/Constants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Validates server consumable params from the \"request\" objects\r\n */\r\nvar RequestValidator = /** @class */ (function () {\r\n function RequestValidator() {\r\n }\r\n /**\r\n * Utility to check if the `redirectUri` in the request is a non-null value\r\n * @param redirectUri\r\n */\r\n RequestValidator.validateRedirectUri = function (redirectUri) {\r\n if (StringUtils.isEmpty(redirectUri)) {\r\n throw ClientConfigurationError.createRedirectUriEmptyError();\r\n }\r\n };\r\n /**\r\n * Utility to validate prompt sent by the user in the request\r\n * @param prompt\r\n */\r\n RequestValidator.validatePrompt = function (prompt) {\r\n var promptValues = [];\r\n for (var value in PromptValue) {\r\n promptValues.push(PromptValue[value]);\r\n }\r\n if (promptValues.indexOf(prompt) < 0) {\r\n throw ClientConfigurationError.createInvalidPromptError(prompt);\r\n }\r\n };\r\n RequestValidator.validateClaims = function (claims) {\r\n try {\r\n JSON.parse(claims);\r\n }\r\n catch (e) {\r\n throw ClientConfigurationError.createInvalidClaimsRequestError();\r\n }\r\n };\r\n /**\r\n * Utility to validate code_challenge and code_challenge_method\r\n * @param codeChallenge\r\n * @param codeChallengeMethod\r\n */\r\n RequestValidator.validateCodeChallengeParams = function (codeChallenge, codeChallengeMethod) {\r\n if (StringUtils.isEmpty(codeChallenge) || StringUtils.isEmpty(codeChallengeMethod)) {\r\n throw ClientConfigurationError.createInvalidCodeChallengeParamsError();\r\n }\r\n else {\r\n this.validateCodeChallengeMethod(codeChallengeMethod);\r\n }\r\n };\r\n /**\r\n * Utility to validate code_challenge_method\r\n * @param codeChallengeMethod\r\n */\r\n RequestValidator.validateCodeChallengeMethod = function (codeChallengeMethod) {\r\n if ([\r\n CodeChallengeMethodValues.PLAIN,\r\n CodeChallengeMethodValues.S256\r\n ].indexOf(codeChallengeMethod) < 0) {\r\n throw ClientConfigurationError.createInvalidCodeChallengeMethodError();\r\n }\r\n };\r\n /**\r\n * Removes unnecessary, duplicate, and empty string query parameters from extraQueryParameters\r\n * @param request\r\n */\r\n RequestValidator.sanitizeEQParams = function (eQParams, queryParams) {\r\n if (!eQParams) {\r\n return {};\r\n }\r\n // Remove any query parameters already included in SSO params\r\n queryParams.forEach(function (value, key) {\r\n if (eQParams[key]) {\r\n delete eQParams[key];\r\n }\r\n });\r\n // remove empty string parameters\r\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\r\n return Object.fromEntries(Object.entries(eQParams).filter(function (_a) {\r\n var value = _a[1];\r\n return value !== \"\";\r\n }));\r\n };\r\n return RequestValidator;\r\n}());\n\nexport { RequestValidator };\n//# sourceMappingURL=RequestValidator.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __spreadArrays } from '../_virtual/_tslib.js';\nimport { AADServerParamKeys, Constants, ResponseMode, OIDC_DEFAULT_SCOPES, SSOTypes, HeaderNames, CLIENT_INFO, ClaimsRequestKeys, PasswordGrantConstants, AuthenticationScheme, ThrottlingConstants } from '../utils/Constants.js';\nimport { ScopeSet } from './ScopeSet.js';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { RequestValidator } from './RequestValidator.js';\nimport { StringUtils } from '../utils/StringUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar RequestParameterBuilder = /** @class */ (function () {\r\n function RequestParameterBuilder() {\r\n this.parameters = new Map();\r\n }\r\n /**\r\n * add response_type = code\r\n */\r\n RequestParameterBuilder.prototype.addResponseTypeCode = function () {\r\n this.parameters.set(AADServerParamKeys.RESPONSE_TYPE, encodeURIComponent(Constants.CODE_RESPONSE_TYPE));\r\n };\r\n /**\r\n * add response_type = token id_token\r\n */\r\n RequestParameterBuilder.prototype.addResponseTypeForTokenAndIdToken = function () {\r\n this.parameters.set(AADServerParamKeys.RESPONSE_TYPE, encodeURIComponent(Constants.TOKEN_RESPONSE_TYPE + \" \" + Constants.ID_TOKEN_RESPONSE_TYPE));\r\n };\r\n /**\r\n * add response_mode. defaults to query.\r\n * @param responseMode\r\n */\r\n RequestParameterBuilder.prototype.addResponseMode = function (responseMode) {\r\n this.parameters.set(AADServerParamKeys.RESPONSE_MODE, encodeURIComponent((responseMode) ? responseMode : ResponseMode.QUERY));\r\n };\r\n /**\r\n * Add flag to indicate STS should attempt to use WAM if available\r\n */\r\n RequestParameterBuilder.prototype.addNativeBroker = function () {\r\n this.parameters.set(AADServerParamKeys.NATIVE_BROKER, encodeURIComponent(\"1\"));\r\n };\r\n /**\r\n * add scopes. set addOidcScopes to false to prevent default scopes in non-user scenarios\r\n * @param scopeSet\r\n * @param addOidcScopes\r\n */\r\n RequestParameterBuilder.prototype.addScopes = function (scopes, addOidcScopes) {\r\n if (addOidcScopes === void 0) { addOidcScopes = true; }\r\n var requestScopes = addOidcScopes ? __spreadArrays(scopes || [], OIDC_DEFAULT_SCOPES) : scopes || [];\r\n var scopeSet = new ScopeSet(requestScopes);\r\n this.parameters.set(AADServerParamKeys.SCOPE, encodeURIComponent(scopeSet.printScopes()));\r\n };\r\n /**\r\n * add clientId\r\n * @param clientId\r\n */\r\n RequestParameterBuilder.prototype.addClientId = function (clientId) {\r\n this.parameters.set(AADServerParamKeys.CLIENT_ID, encodeURIComponent(clientId));\r\n };\r\n /**\r\n * add redirect_uri\r\n * @param redirectUri\r\n */\r\n RequestParameterBuilder.prototype.addRedirectUri = function (redirectUri) {\r\n RequestValidator.validateRedirectUri(redirectUri);\r\n this.parameters.set(AADServerParamKeys.REDIRECT_URI, encodeURIComponent(redirectUri));\r\n };\r\n /**\r\n * add post logout redirectUri\r\n * @param redirectUri\r\n */\r\n RequestParameterBuilder.prototype.addPostLogoutRedirectUri = function (redirectUri) {\r\n RequestValidator.validateRedirectUri(redirectUri);\r\n this.parameters.set(AADServerParamKeys.POST_LOGOUT_URI, encodeURIComponent(redirectUri));\r\n };\r\n /**\r\n * add id_token_hint to logout request\r\n * @param idTokenHint\r\n */\r\n RequestParameterBuilder.prototype.addIdTokenHint = function (idTokenHint) {\r\n this.parameters.set(AADServerParamKeys.ID_TOKEN_HINT, encodeURIComponent(idTokenHint));\r\n };\r\n /**\r\n * add domain_hint\r\n * @param domainHint\r\n */\r\n RequestParameterBuilder.prototype.addDomainHint = function (domainHint) {\r\n this.parameters.set(SSOTypes.DOMAIN_HINT, encodeURIComponent(domainHint));\r\n };\r\n /**\r\n * add login_hint\r\n * @param loginHint\r\n */\r\n RequestParameterBuilder.prototype.addLoginHint = function (loginHint) {\r\n this.parameters.set(SSOTypes.LOGIN_HINT, encodeURIComponent(loginHint));\r\n };\r\n /**\r\n * Adds the CCS (Cache Credential Service) query parameter for login_hint\r\n * @param loginHint\r\n */\r\n RequestParameterBuilder.prototype.addCcsUpn = function (loginHint) {\r\n this.parameters.set(HeaderNames.CCS_HEADER, encodeURIComponent(\"UPN:\" + loginHint));\r\n };\r\n /**\r\n * Adds the CCS (Cache Credential Service) query parameter for account object\r\n * @param loginHint\r\n */\r\n RequestParameterBuilder.prototype.addCcsOid = function (clientInfo) {\r\n this.parameters.set(HeaderNames.CCS_HEADER, encodeURIComponent(\"Oid:\" + clientInfo.uid + \"@\" + clientInfo.utid));\r\n };\r\n /**\r\n * add sid\r\n * @param sid\r\n */\r\n RequestParameterBuilder.prototype.addSid = function (sid) {\r\n this.parameters.set(SSOTypes.SID, encodeURIComponent(sid));\r\n };\r\n /**\r\n * add claims\r\n * @param claims\r\n */\r\n RequestParameterBuilder.prototype.addClaims = function (claims, clientCapabilities) {\r\n var mergedClaims = this.addClientCapabilitiesToClaims(claims, clientCapabilities);\r\n RequestValidator.validateClaims(mergedClaims);\r\n this.parameters.set(AADServerParamKeys.CLAIMS, encodeURIComponent(mergedClaims));\r\n };\r\n /**\r\n * add correlationId\r\n * @param correlationId\r\n */\r\n RequestParameterBuilder.prototype.addCorrelationId = function (correlationId) {\r\n this.parameters.set(AADServerParamKeys.CLIENT_REQUEST_ID, encodeURIComponent(correlationId));\r\n };\r\n /**\r\n * add library info query params\r\n * @param libraryInfo\r\n */\r\n RequestParameterBuilder.prototype.addLibraryInfo = function (libraryInfo) {\r\n // Telemetry Info\r\n this.parameters.set(AADServerParamKeys.X_CLIENT_SKU, libraryInfo.sku);\r\n this.parameters.set(AADServerParamKeys.X_CLIENT_VER, libraryInfo.version);\r\n if (libraryInfo.os) {\r\n this.parameters.set(AADServerParamKeys.X_CLIENT_OS, libraryInfo.os);\r\n }\r\n if (libraryInfo.cpu) {\r\n this.parameters.set(AADServerParamKeys.X_CLIENT_CPU, libraryInfo.cpu);\r\n }\r\n };\r\n /**\r\n * Add client telemetry parameters\r\n * @param appTelemetry\r\n */\r\n RequestParameterBuilder.prototype.addApplicationTelemetry = function (appTelemetry) {\r\n if (appTelemetry === null || appTelemetry === void 0 ? void 0 : appTelemetry.appName) {\r\n this.parameters.set(AADServerParamKeys.X_APP_NAME, appTelemetry.appName);\r\n }\r\n if (appTelemetry === null || appTelemetry === void 0 ? void 0 : appTelemetry.appVersion) {\r\n this.parameters.set(AADServerParamKeys.X_APP_VER, appTelemetry.appVersion);\r\n }\r\n };\r\n /**\r\n * add prompt\r\n * @param prompt\r\n */\r\n RequestParameterBuilder.prototype.addPrompt = function (prompt) {\r\n RequestValidator.validatePrompt(prompt);\r\n this.parameters.set(\"\" + AADServerParamKeys.PROMPT, encodeURIComponent(prompt));\r\n };\r\n /**\r\n * add state\r\n * @param state\r\n */\r\n RequestParameterBuilder.prototype.addState = function (state) {\r\n if (!StringUtils.isEmpty(state)) {\r\n this.parameters.set(AADServerParamKeys.STATE, encodeURIComponent(state));\r\n }\r\n };\r\n /**\r\n * add nonce\r\n * @param nonce\r\n */\r\n RequestParameterBuilder.prototype.addNonce = function (nonce) {\r\n this.parameters.set(AADServerParamKeys.NONCE, encodeURIComponent(nonce));\r\n };\r\n /**\r\n * add code_challenge and code_challenge_method\r\n * - throw if either of them are not passed\r\n * @param codeChallenge\r\n * @param codeChallengeMethod\r\n */\r\n RequestParameterBuilder.prototype.addCodeChallengeParams = function (codeChallenge, codeChallengeMethod) {\r\n RequestValidator.validateCodeChallengeParams(codeChallenge, codeChallengeMethod);\r\n if (codeChallenge && codeChallengeMethod) {\r\n this.parameters.set(AADServerParamKeys.CODE_CHALLENGE, encodeURIComponent(codeChallenge));\r\n this.parameters.set(AADServerParamKeys.CODE_CHALLENGE_METHOD, encodeURIComponent(codeChallengeMethod));\r\n }\r\n else {\r\n throw ClientConfigurationError.createInvalidCodeChallengeParamsError();\r\n }\r\n };\r\n /**\r\n * add the `authorization_code` passed by the user to exchange for a token\r\n * @param code\r\n */\r\n RequestParameterBuilder.prototype.addAuthorizationCode = function (code) {\r\n this.parameters.set(AADServerParamKeys.CODE, encodeURIComponent(code));\r\n };\r\n /**\r\n * add the `authorization_code` passed by the user to exchange for a token\r\n * @param code\r\n */\r\n RequestParameterBuilder.prototype.addDeviceCode = function (code) {\r\n this.parameters.set(AADServerParamKeys.DEVICE_CODE, encodeURIComponent(code));\r\n };\r\n /**\r\n * add the `refreshToken` passed by the user\r\n * @param refreshToken\r\n */\r\n RequestParameterBuilder.prototype.addRefreshToken = function (refreshToken) {\r\n this.parameters.set(AADServerParamKeys.REFRESH_TOKEN, encodeURIComponent(refreshToken));\r\n };\r\n /**\r\n * add the `code_verifier` passed by the user to exchange for a token\r\n * @param codeVerifier\r\n */\r\n RequestParameterBuilder.prototype.addCodeVerifier = function (codeVerifier) {\r\n this.parameters.set(AADServerParamKeys.CODE_VERIFIER, encodeURIComponent(codeVerifier));\r\n };\r\n /**\r\n * add client_secret\r\n * @param clientSecret\r\n */\r\n RequestParameterBuilder.prototype.addClientSecret = function (clientSecret) {\r\n this.parameters.set(AADServerParamKeys.CLIENT_SECRET, encodeURIComponent(clientSecret));\r\n };\r\n /**\r\n * add clientAssertion for confidential client flows\r\n * @param clientAssertion\r\n */\r\n RequestParameterBuilder.prototype.addClientAssertion = function (clientAssertion) {\r\n if (!StringUtils.isEmpty(clientAssertion)) {\r\n this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION, encodeURIComponent(clientAssertion));\r\n }\r\n };\r\n /**\r\n * add clientAssertionType for confidential client flows\r\n * @param clientAssertionType\r\n */\r\n RequestParameterBuilder.prototype.addClientAssertionType = function (clientAssertionType) {\r\n if (!StringUtils.isEmpty(clientAssertionType)) {\r\n this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION_TYPE, encodeURIComponent(clientAssertionType));\r\n }\r\n };\r\n /**\r\n * add OBO assertion for confidential client flows\r\n * @param clientAssertion\r\n */\r\n RequestParameterBuilder.prototype.addOboAssertion = function (oboAssertion) {\r\n this.parameters.set(AADServerParamKeys.OBO_ASSERTION, encodeURIComponent(oboAssertion));\r\n };\r\n /**\r\n * add grant type\r\n * @param grantType\r\n */\r\n RequestParameterBuilder.prototype.addRequestTokenUse = function (tokenUse) {\r\n this.parameters.set(AADServerParamKeys.REQUESTED_TOKEN_USE, encodeURIComponent(tokenUse));\r\n };\r\n /**\r\n * add grant type\r\n * @param grantType\r\n */\r\n RequestParameterBuilder.prototype.addGrantType = function (grantType) {\r\n this.parameters.set(AADServerParamKeys.GRANT_TYPE, encodeURIComponent(grantType));\r\n };\r\n /**\r\n * add client info\r\n *\r\n */\r\n RequestParameterBuilder.prototype.addClientInfo = function () {\r\n this.parameters.set(CLIENT_INFO, \"1\");\r\n };\r\n /**\r\n * add extraQueryParams\r\n * @param eQParams\r\n */\r\n RequestParameterBuilder.prototype.addExtraQueryParameters = function (eQParams) {\r\n var _this = this;\r\n var sanitizedEQParams = RequestValidator.sanitizeEQParams(eQParams, this.parameters);\r\n Object.keys(sanitizedEQParams).forEach(function (key) {\r\n _this.parameters.set(key, eQParams[key]);\r\n });\r\n };\r\n RequestParameterBuilder.prototype.addClientCapabilitiesToClaims = function (claims, clientCapabilities) {\r\n var mergedClaims;\r\n // Parse provided claims into JSON object or initialize empty object\r\n if (!claims) {\r\n mergedClaims = {};\r\n }\r\n else {\r\n try {\r\n mergedClaims = JSON.parse(claims);\r\n }\r\n catch (e) {\r\n throw ClientConfigurationError.createInvalidClaimsRequestError();\r\n }\r\n }\r\n if (clientCapabilities && clientCapabilities.length > 0) {\r\n if (!mergedClaims.hasOwnProperty(ClaimsRequestKeys.ACCESS_TOKEN)) {\r\n // Add access_token key to claims object\r\n mergedClaims[ClaimsRequestKeys.ACCESS_TOKEN] = {};\r\n }\r\n // Add xms_cc claim with provided clientCapabilities to access_token key\r\n mergedClaims[ClaimsRequestKeys.ACCESS_TOKEN][ClaimsRequestKeys.XMS_CC] = {\r\n values: clientCapabilities\r\n };\r\n }\r\n return JSON.stringify(mergedClaims);\r\n };\r\n /**\r\n * adds `username` for Password Grant flow\r\n * @param username\r\n */\r\n RequestParameterBuilder.prototype.addUsername = function (username) {\r\n this.parameters.set(PasswordGrantConstants.username, encodeURIComponent(username));\r\n };\r\n /**\r\n * adds `password` for Password Grant flow\r\n * @param password\r\n */\r\n RequestParameterBuilder.prototype.addPassword = function (password) {\r\n this.parameters.set(PasswordGrantConstants.password, encodeURIComponent(password));\r\n };\r\n /**\r\n * add pop_jwk to query params\r\n * @param cnfString\r\n */\r\n RequestParameterBuilder.prototype.addPopToken = function (cnfString) {\r\n if (!StringUtils.isEmpty(cnfString)) {\r\n this.parameters.set(AADServerParamKeys.TOKEN_TYPE, AuthenticationScheme.POP);\r\n this.parameters.set(AADServerParamKeys.REQ_CNF, encodeURIComponent(cnfString));\r\n }\r\n };\r\n /**\r\n * add SSH JWK and key ID to query params\r\n */\r\n RequestParameterBuilder.prototype.addSshJwk = function (sshJwkString) {\r\n if (!StringUtils.isEmpty(sshJwkString)) {\r\n this.parameters.set(AADServerParamKeys.TOKEN_TYPE, AuthenticationScheme.SSH);\r\n this.parameters.set(AADServerParamKeys.REQ_CNF, encodeURIComponent(sshJwkString));\r\n }\r\n };\r\n /**\r\n * add server telemetry fields\r\n * @param serverTelemetryManager\r\n */\r\n RequestParameterBuilder.prototype.addServerTelemetry = function (serverTelemetryManager) {\r\n this.parameters.set(AADServerParamKeys.X_CLIENT_CURR_TELEM, serverTelemetryManager.generateCurrentRequestHeaderValue());\r\n this.parameters.set(AADServerParamKeys.X_CLIENT_LAST_TELEM, serverTelemetryManager.generateLastRequestHeaderValue());\r\n };\r\n /**\r\n * Adds parameter that indicates to the server that throttling is supported\r\n */\r\n RequestParameterBuilder.prototype.addThrottling = function () {\r\n this.parameters.set(AADServerParamKeys.X_MS_LIB_CAPABILITY, ThrottlingConstants.X_MS_LIB_CAPABILITY_VALUE);\r\n };\r\n /**\r\n * Adds logout_hint parameter for \"silent\" logout which prevent server account picker\r\n */\r\n RequestParameterBuilder.prototype.addLogoutHint = function (logoutHint) {\r\n this.parameters.set(AADServerParamKeys.LOGOUT_HINT, encodeURIComponent(logoutHint));\r\n };\r\n /**\r\n * Utility to create a URL from the params map\r\n */\r\n RequestParameterBuilder.prototype.createQueryString = function () {\r\n var queryParameterArray = new Array();\r\n this.parameters.forEach(function (value, key) {\r\n queryParameterArray.push(key + \"=\" + value);\r\n });\r\n return queryParameterArray.join(\"&\");\r\n };\r\n return RequestParameterBuilder;\r\n}());\n\nexport { RequestParameterBuilder };\n//# sourceMappingURL=RequestParameterBuilder.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { buildClientConfiguration } from '../config/ClientConfiguration.js';\nimport { NetworkManager } from '../network/NetworkManager.js';\nimport { Logger } from '../logger/Logger.js';\nimport { HeaderNames, Constants } from '../utils/Constants.js';\nimport { name, version } from '../packageMetadata.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { CcsCredentialType } from '../account/CcsCredential.js';\nimport { buildClientInfoFromHomeAccountId } from '../account/ClientInfo.js';\nimport { RequestParameterBuilder } from '../request/RequestParameterBuilder.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Base application class which will construct requests to send to and handle responses from the Microsoft STS using the authorization code flow.\r\n */\r\nvar BaseClient = /** @class */ (function () {\r\n function BaseClient(configuration, performanceClient) {\r\n // Set the configuration\r\n this.config = buildClientConfiguration(configuration);\r\n // Initialize the logger\r\n this.logger = new Logger(this.config.loggerOptions, name, version);\r\n // Initialize crypto\r\n this.cryptoUtils = this.config.cryptoInterface;\r\n // Initialize storage interface\r\n this.cacheManager = this.config.storageInterface;\r\n // Set the network interface\r\n this.networkClient = this.config.networkInterface;\r\n // Set the NetworkManager\r\n this.networkManager = new NetworkManager(this.networkClient, this.cacheManager);\r\n // Set TelemetryManager\r\n this.serverTelemetryManager = this.config.serverTelemetryManager;\r\n // set Authority\r\n this.authority = this.config.authOptions.authority;\r\n // set performance telemetry client\r\n this.performanceClient = performanceClient;\r\n }\r\n /**\r\n * Creates default headers for requests to token endpoint\r\n */\r\n BaseClient.prototype.createTokenRequestHeaders = function (ccsCred) {\r\n var headers = {};\r\n headers[HeaderNames.CONTENT_TYPE] = Constants.URL_FORM_CONTENT_TYPE;\r\n if (!this.config.systemOptions.preventCorsPreflight && ccsCred) {\r\n switch (ccsCred.type) {\r\n case CcsCredentialType.HOME_ACCOUNT_ID:\r\n try {\r\n var clientInfo = buildClientInfoFromHomeAccountId(ccsCred.credential);\r\n headers[HeaderNames.CCS_HEADER] = \"Oid:\" + clientInfo.uid + \"@\" + clientInfo.utid;\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"Could not parse home account ID for CCS Header: \" + e);\r\n }\r\n break;\r\n case CcsCredentialType.UPN:\r\n headers[HeaderNames.CCS_HEADER] = \"UPN: \" + ccsCred.credential;\r\n break;\r\n }\r\n }\r\n return headers;\r\n };\r\n /**\r\n * Http post to token endpoint\r\n * @param tokenEndpoint\r\n * @param queryString\r\n * @param headers\r\n * @param thumbprint\r\n */\r\n BaseClient.prototype.executePostToTokenEndpoint = function (tokenEndpoint, queryString, headers, thumbprint) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var response;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.networkManager.sendPostRequest(thumbprint, tokenEndpoint, { body: queryString, headers: headers })];\r\n case 1:\r\n response = _a.sent();\r\n if (this.config.serverTelemetryManager && response.status < 500 && response.status !== 429) {\r\n // Telemetry data successfully logged by server, clear Telemetry cache\r\n this.config.serverTelemetryManager.clearTelemetryCache();\r\n }\r\n return [2 /*return*/, response];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Updates the authority object of the client. Endpoint discovery must be completed.\r\n * @param updatedAuthority\r\n */\r\n BaseClient.prototype.updateAuthority = function (updatedAuthority) {\r\n if (!updatedAuthority.discoveryComplete()) {\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(\"Updated authority has not completed endpoint discovery.\");\r\n }\r\n this.authority = updatedAuthority;\r\n };\r\n /**\r\n * Creates query string for the /token request\r\n * @param request\r\n */\r\n BaseClient.prototype.createTokenQueryParameters = function (request) {\r\n var parameterBuilder = new RequestParameterBuilder();\r\n if (request.tokenQueryParameters) {\r\n parameterBuilder.addExtraQueryParameters(request.tokenQueryParameters);\r\n }\r\n return parameterBuilder.createQueryString();\r\n };\r\n return BaseClient;\r\n}());\n\nexport { BaseClient };\n//# sourceMappingURL=BaseClient.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar CacheRecord = /** @class */ (function () {\r\n function CacheRecord(accountEntity, idTokenEntity, accessTokenEntity, refreshTokenEntity, appMetadataEntity) {\r\n this.account = accountEntity || null;\r\n this.idToken = idTokenEntity || null;\r\n this.accessToken = accessTokenEntity || null;\r\n this.refreshToken = refreshTokenEntity || null;\r\n this.appMetadata = appMetadataEntity || null;\r\n }\r\n return CacheRecord;\r\n}());\n\nexport { CacheRecord };\n//# sourceMappingURL=CacheRecord.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This class instance helps track the memory changes facilitating\r\n * decisions to read from and write to the persistent cache\r\n */ var TokenCacheContext = /** @class */ (function () {\r\n function TokenCacheContext(tokenCache, hasChanged) {\r\n this.cache = tokenCache;\r\n this.hasChanged = hasChanged;\r\n }\r\n Object.defineProperty(TokenCacheContext.prototype, \"cacheHasChanged\", {\r\n /**\r\n * boolean which indicates the changes in cache\r\n */\r\n get: function () {\r\n return this.hasChanged;\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(TokenCacheContext.prototype, \"tokenCache\", {\r\n /**\r\n * function to retrieve the token cache\r\n */\r\n get: function () {\r\n return this.cache;\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n return TokenCacheContext;\r\n}());\n\nexport { TokenCacheContext };\n//# sourceMappingURL=TokenCacheContext.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { buildClientInfo } from '../account/ClientInfo.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { ServerError } from '../error/ServerError.js';\nimport { AuthToken } from '../account/AuthToken.js';\nimport { ScopeSet } from '../request/ScopeSet.js';\nimport { AccountEntity } from '../cache/entities/AccountEntity.js';\nimport { AuthorityType } from '../authority/AuthorityType.js';\nimport { IdTokenEntity } from '../cache/entities/IdTokenEntity.js';\nimport { AccessTokenEntity } from '../cache/entities/AccessTokenEntity.js';\nimport { RefreshTokenEntity } from '../cache/entities/RefreshTokenEntity.js';\nimport { InteractionRequiredAuthError } from '../error/InteractionRequiredAuthError.js';\nimport { CacheRecord } from '../cache/entities/CacheRecord.js';\nimport { ProtocolUtils } from '../utils/ProtocolUtils.js';\nimport { Constants, AuthenticationScheme, THE_FAMILY_ID } from '../utils/Constants.js';\nimport { PopTokenGenerator } from '../crypto/PopTokenGenerator.js';\nimport { AppMetadataEntity } from '../cache/entities/AppMetadataEntity.js';\nimport { TokenCacheContext } from '../cache/persistence/TokenCacheContext.js';\nimport { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Class that handles response parsing.\r\n */\r\nvar ResponseHandler = /** @class */ (function () {\r\n function ResponseHandler(clientId, cacheStorage, cryptoObj, logger, serializableCache, persistencePlugin, performanceClient) {\r\n this.clientId = clientId;\r\n this.cacheStorage = cacheStorage;\r\n this.cryptoObj = cryptoObj;\r\n this.logger = logger;\r\n this.serializableCache = serializableCache;\r\n this.persistencePlugin = persistencePlugin;\r\n this.performanceClient = performanceClient;\r\n }\r\n /**\r\n * Function which validates server authorization code response.\r\n * @param serverResponseHash\r\n * @param cachedState\r\n * @param cryptoObj\r\n */\r\n ResponseHandler.prototype.validateServerAuthorizationCodeResponse = function (serverResponseHash, cachedState, cryptoObj) {\r\n if (!serverResponseHash.state || !cachedState) {\r\n throw !serverResponseHash.state ? ClientAuthError.createStateNotFoundError(\"Server State\") : ClientAuthError.createStateNotFoundError(\"Cached State\");\r\n }\r\n if (decodeURIComponent(serverResponseHash.state) !== decodeURIComponent(cachedState)) {\r\n throw ClientAuthError.createStateMismatchError();\r\n }\r\n // Check for error\r\n if (serverResponseHash.error || serverResponseHash.error_description || serverResponseHash.suberror) {\r\n if (InteractionRequiredAuthError.isInteractionRequiredError(serverResponseHash.error, serverResponseHash.error_description, serverResponseHash.suberror)) {\r\n throw new InteractionRequiredAuthError(serverResponseHash.error || Constants.EMPTY_STRING, serverResponseHash.error_description, serverResponseHash.suberror, serverResponseHash.timestamp || Constants.EMPTY_STRING, serverResponseHash.trace_id || Constants.EMPTY_STRING, serverResponseHash.correlation_id || Constants.EMPTY_STRING, serverResponseHash.claims || Constants.EMPTY_STRING);\r\n }\r\n throw new ServerError(serverResponseHash.error || Constants.EMPTY_STRING, serverResponseHash.error_description, serverResponseHash.suberror);\r\n }\r\n if (serverResponseHash.client_info) {\r\n buildClientInfo(serverResponseHash.client_info, cryptoObj);\r\n }\r\n };\r\n /**\r\n * Function which validates server authorization token response.\r\n * @param serverResponse\r\n */\r\n ResponseHandler.prototype.validateTokenResponse = function (serverResponse) {\r\n // Check for error\r\n if (serverResponse.error || serverResponse.error_description || serverResponse.suberror) {\r\n if (InteractionRequiredAuthError.isInteractionRequiredError(serverResponse.error, serverResponse.error_description, serverResponse.suberror)) {\r\n throw new InteractionRequiredAuthError(serverResponse.error, serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || Constants.EMPTY_STRING, serverResponse.trace_id || Constants.EMPTY_STRING, serverResponse.correlation_id || Constants.EMPTY_STRING, serverResponse.claims || Constants.EMPTY_STRING);\r\n }\r\n var errString = serverResponse.error_codes + \" - [\" + serverResponse.timestamp + \"]: \" + serverResponse.error_description + \" - Correlation ID: \" + serverResponse.correlation_id + \" - Trace ID: \" + serverResponse.trace_id;\r\n throw new ServerError(serverResponse.error, errString, serverResponse.suberror);\r\n }\r\n };\r\n /**\r\n * Returns a constructed token response based on given string. Also manages the cache updates and cleanups.\r\n * @param serverTokenResponse\r\n * @param authority\r\n */\r\n ResponseHandler.prototype.handleServerTokenResponse = function (serverTokenResponse, authority, reqTimestamp, request, authCodePayload, userAssertionHash, handlingRefreshTokenResponse, forceCacheRefreshTokenResponse, serverRequestId) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var idTokenObj, authTime, requestStateObj, cacheRecord, cacheContext, key, account;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.HandleServerTokenResponse, serverTokenResponse.correlation_id);\r\n if (serverTokenResponse.id_token) {\r\n idTokenObj = new AuthToken(serverTokenResponse.id_token || Constants.EMPTY_STRING, this.cryptoObj);\r\n // token nonce check (TODO: Add a warning if no nonce is given?)\r\n if (authCodePayload && !StringUtils.isEmpty(authCodePayload.nonce)) {\r\n if (idTokenObj.claims.nonce !== authCodePayload.nonce) {\r\n throw ClientAuthError.createNonceMismatchError();\r\n }\r\n }\r\n // token max_age check\r\n if (request.maxAge || (request.maxAge === 0)) {\r\n authTime = idTokenObj.claims.auth_time;\r\n if (!authTime) {\r\n throw ClientAuthError.createAuthTimeNotFoundError();\r\n }\r\n AuthToken.checkMaxAge(authTime, request.maxAge);\r\n }\r\n }\r\n // generate homeAccountId\r\n this.homeAccountIdentifier = AccountEntity.generateHomeAccountId(serverTokenResponse.client_info || Constants.EMPTY_STRING, authority.authorityType, this.logger, this.cryptoObj, idTokenObj);\r\n if (!!authCodePayload && !!authCodePayload.state) {\r\n requestStateObj = ProtocolUtils.parseRequestState(this.cryptoObj, authCodePayload.state);\r\n }\r\n // Add keyId from request to serverTokenResponse if defined\r\n serverTokenResponse.key_id = serverTokenResponse.key_id || request.sshKid || undefined;\r\n cacheRecord = this.generateCacheRecord(serverTokenResponse, authority, reqTimestamp, request, idTokenObj, userAssertionHash, authCodePayload);\r\n _b.label = 1;\r\n case 1:\r\n _b.trys.push([1, , 5, 8]);\r\n if (!(this.persistencePlugin && this.serializableCache)) return [3 /*break*/, 3];\r\n this.logger.verbose(\"Persistence enabled, calling beforeCacheAccess\");\r\n cacheContext = new TokenCacheContext(this.serializableCache, true);\r\n return [4 /*yield*/, this.persistencePlugin.beforeCacheAccess(cacheContext)];\r\n case 2:\r\n _b.sent();\r\n _b.label = 3;\r\n case 3:\r\n /*\r\n * When saving a refreshed tokens to the cache, it is expected that the account that was used is present in the cache.\r\n * If not present, we should return null, as it's the case that another application called removeAccount in between\r\n * the calls to getAllAccounts and acquireTokenSilent. We should not overwrite that removal, unless explicitly flagged by\r\n * the developer, as in the case of refresh token flow used in ADAL Node to MSAL Node migration.\r\n */\r\n if (handlingRefreshTokenResponse && !forceCacheRefreshTokenResponse && cacheRecord.account) {\r\n key = cacheRecord.account.generateAccountKey();\r\n account = this.cacheStorage.getAccount(key);\r\n if (!account) {\r\n this.logger.warning(\"Account used to refresh tokens not in persistence, refreshed tokens will not be stored in the cache\");\r\n return [2 /*return*/, ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, idTokenObj, requestStateObj, undefined, serverRequestId)];\r\n }\r\n }\r\n return [4 /*yield*/, this.cacheStorage.saveCacheRecord(cacheRecord)];\r\n case 4:\r\n _b.sent();\r\n return [3 /*break*/, 8];\r\n case 5:\r\n if (!(this.persistencePlugin && this.serializableCache && cacheContext)) return [3 /*break*/, 7];\r\n this.logger.verbose(\"Persistence enabled, calling afterCacheAccess\");\r\n return [4 /*yield*/, this.persistencePlugin.afterCacheAccess(cacheContext)];\r\n case 6:\r\n _b.sent();\r\n _b.label = 7;\r\n case 7: return [7 /*endfinally*/];\r\n case 8: return [2 /*return*/, ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, idTokenObj, requestStateObj, serverTokenResponse, serverRequestId)];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Generates CacheRecord\r\n * @param serverTokenResponse\r\n * @param idTokenObj\r\n * @param authority\r\n */\r\n ResponseHandler.prototype.generateCacheRecord = function (serverTokenResponse, authority, reqTimestamp, request, idTokenObj, userAssertionHash, authCodePayload) {\r\n var env = authority.getPreferredCache();\r\n if (StringUtils.isEmpty(env)) {\r\n throw ClientAuthError.createInvalidCacheEnvironmentError();\r\n }\r\n // IdToken: non AAD scenarios can have empty realm\r\n var cachedIdToken;\r\n var cachedAccount;\r\n if (!StringUtils.isEmpty(serverTokenResponse.id_token) && !!idTokenObj) {\r\n cachedIdToken = IdTokenEntity.createIdTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.id_token || Constants.EMPTY_STRING, this.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);\r\n cachedAccount = this.generateAccountEntity(serverTokenResponse, idTokenObj, authority, authCodePayload);\r\n }\r\n // AccessToken\r\n var cachedAccessToken = null;\r\n if (!StringUtils.isEmpty(serverTokenResponse.access_token)) {\r\n // If scopes not returned in server response, use request scopes\r\n var responseScopes = serverTokenResponse.scope ? ScopeSet.fromString(serverTokenResponse.scope) : new ScopeSet(request.scopes || []);\r\n /*\r\n * Use timestamp calculated before request\r\n * Server may return timestamps as strings, parse to numbers if so.\r\n */\r\n var expiresIn = (typeof serverTokenResponse.expires_in === \"string\" ? parseInt(serverTokenResponse.expires_in, 10) : serverTokenResponse.expires_in) || 0;\r\n var extExpiresIn = (typeof serverTokenResponse.ext_expires_in === \"string\" ? parseInt(serverTokenResponse.ext_expires_in, 10) : serverTokenResponse.ext_expires_in) || 0;\r\n var refreshIn = (typeof serverTokenResponse.refresh_in === \"string\" ? parseInt(serverTokenResponse.refresh_in, 10) : serverTokenResponse.refresh_in) || undefined;\r\n var tokenExpirationSeconds = reqTimestamp + expiresIn;\r\n var extendedTokenExpirationSeconds = tokenExpirationSeconds + extExpiresIn;\r\n var refreshOnSeconds = refreshIn && refreshIn > 0 ? reqTimestamp + refreshIn : undefined;\r\n // non AAD scenarios can have empty realm\r\n cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token || Constants.EMPTY_STRING, this.clientId, idTokenObj ? idTokenObj.claims.tid || Constants.EMPTY_STRING : authority.tenant, responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj, refreshOnSeconds, serverTokenResponse.token_type, userAssertionHash, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);\r\n }\r\n // refreshToken\r\n var cachedRefreshToken = null;\r\n if (!StringUtils.isEmpty(serverTokenResponse.refresh_token)) {\r\n cachedRefreshToken = RefreshTokenEntity.createRefreshTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.refresh_token || Constants.EMPTY_STRING, this.clientId, serverTokenResponse.foci, userAssertionHash);\r\n }\r\n // appMetadata\r\n var cachedAppMetadata = null;\r\n if (!StringUtils.isEmpty(serverTokenResponse.foci)) {\r\n cachedAppMetadata = AppMetadataEntity.createAppMetadataEntity(this.clientId, env, serverTokenResponse.foci);\r\n }\r\n return new CacheRecord(cachedAccount, cachedIdToken, cachedAccessToken, cachedRefreshToken, cachedAppMetadata);\r\n };\r\n /**\r\n * Generate Account\r\n * @param serverTokenResponse\r\n * @param idToken\r\n * @param authority\r\n */\r\n ResponseHandler.prototype.generateAccountEntity = function (serverTokenResponse, idToken, authority, authCodePayload) {\r\n var authorityType = authority.authorityType;\r\n var cloudGraphHostName = authCodePayload ? authCodePayload.cloud_graph_host_name : Constants.EMPTY_STRING;\r\n var msGraphhost = authCodePayload ? authCodePayload.msgraph_host : Constants.EMPTY_STRING;\r\n // ADFS does not require client_info in the response\r\n if (authorityType === AuthorityType.Adfs) {\r\n this.logger.verbose(\"Authority type is ADFS, creating ADFS account\");\r\n return AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);\r\n }\r\n // This fallback applies to B2C as well as they fall under an AAD account type.\r\n if (StringUtils.isEmpty(serverTokenResponse.client_info) && authority.protocolMode === \"AAD\") {\r\n throw ClientAuthError.createClientInfoEmptyError();\r\n }\r\n return serverTokenResponse.client_info ?\r\n AccountEntity.createAccount(serverTokenResponse.client_info, this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost) :\r\n AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);\r\n };\r\n /**\r\n * Creates an @AuthenticationResult from @CacheRecord , @IdToken , and a boolean that states whether or not the result is from cache.\r\n *\r\n * Optionally takes a state string that is set as-is in the response.\r\n *\r\n * @param cacheRecord\r\n * @param idTokenObj\r\n * @param fromTokenCache\r\n * @param stateString\r\n */\r\n ResponseHandler.generateAuthenticationResult = function (cryptoObj, authority, cacheRecord, fromTokenCache, request, idTokenObj, requestState, serverTokenResponse, requestId) {\r\n var _a, _b, _c;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var accessToken, responseScopes, expiresOn, extExpiresOn, familyId, popTokenGenerator, _d, secret, keyId, uid, tid;\r\n return __generator(this, function (_e) {\r\n switch (_e.label) {\r\n case 0:\r\n accessToken = Constants.EMPTY_STRING;\r\n responseScopes = [];\r\n expiresOn = null;\r\n familyId = Constants.EMPTY_STRING;\r\n if (!cacheRecord.accessToken) return [3 /*break*/, 4];\r\n if (!(cacheRecord.accessToken.tokenType === AuthenticationScheme.POP)) return [3 /*break*/, 2];\r\n popTokenGenerator = new PopTokenGenerator(cryptoObj);\r\n _d = cacheRecord.accessToken, secret = _d.secret, keyId = _d.keyId;\r\n if (!keyId) {\r\n throw ClientAuthError.createKeyIdMissingError();\r\n }\r\n return [4 /*yield*/, popTokenGenerator.signPopToken(secret, keyId, request)];\r\n case 1:\r\n accessToken = _e.sent();\r\n return [3 /*break*/, 3];\r\n case 2:\r\n accessToken = cacheRecord.accessToken.secret;\r\n _e.label = 3;\r\n case 3:\r\n responseScopes = ScopeSet.fromString(cacheRecord.accessToken.target).asArray();\r\n expiresOn = new Date(Number(cacheRecord.accessToken.expiresOn) * 1000);\r\n extExpiresOn = new Date(Number(cacheRecord.accessToken.extendedExpiresOn) * 1000);\r\n _e.label = 4;\r\n case 4:\r\n if (cacheRecord.appMetadata) {\r\n familyId = cacheRecord.appMetadata.familyId === THE_FAMILY_ID ? THE_FAMILY_ID : Constants.EMPTY_STRING;\r\n }\r\n uid = (idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims.oid) || (idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims.sub) || Constants.EMPTY_STRING;\r\n tid = (idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims.tid) || Constants.EMPTY_STRING;\r\n // for hybrid + native bridge enablement, send back the native account Id\r\n if ((serverTokenResponse === null || serverTokenResponse === void 0 ? void 0 : serverTokenResponse.spa_accountid) && !!cacheRecord.account) {\r\n cacheRecord.account.nativeAccountId = serverTokenResponse === null || serverTokenResponse === void 0 ? void 0 : serverTokenResponse.spa_accountid;\r\n }\r\n return [2 /*return*/, {\r\n authority: authority.canonicalAuthority,\r\n uniqueId: uid,\r\n tenantId: tid,\r\n scopes: responseScopes,\r\n account: cacheRecord.account ? cacheRecord.account.getAccountInfo() : null,\r\n idToken: idTokenObj ? idTokenObj.rawToken : Constants.EMPTY_STRING,\r\n idTokenClaims: idTokenObj ? idTokenObj.claims : {},\r\n accessToken: accessToken,\r\n fromCache: fromTokenCache,\r\n expiresOn: expiresOn,\r\n correlationId: request.correlationId,\r\n requestId: requestId || Constants.EMPTY_STRING,\r\n extExpiresOn: extExpiresOn,\r\n familyId: familyId,\r\n tokenType: ((_a = cacheRecord.accessToken) === null || _a === void 0 ? void 0 : _a.tokenType) || Constants.EMPTY_STRING,\r\n state: requestState ? requestState.userRequestState : Constants.EMPTY_STRING,\r\n cloudGraphHostName: ((_b = cacheRecord.account) === null || _b === void 0 ? void 0 : _b.cloudGraphHostName) || Constants.EMPTY_STRING,\r\n msGraphHost: ((_c = cacheRecord.account) === null || _c === void 0 ? void 0 : _c.msGraphHost) || Constants.EMPTY_STRING,\r\n code: serverTokenResponse === null || serverTokenResponse === void 0 ? void 0 : serverTokenResponse.spa_code,\r\n fromNativeBroker: false,\r\n }];\r\n }\r\n });\r\n });\r\n };\r\n return ResponseHandler;\r\n}());\n\nexport { ResponseHandler };\n//# sourceMappingURL=ResponseHandler.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign, __spreadArrays } from '../_virtual/_tslib.js';\nimport { BaseClient } from './BaseClient.js';\nimport { RequestParameterBuilder } from '../request/RequestParameterBuilder.js';\nimport { Separators, AADServerParamKeys, AuthenticationScheme, GrantType, PromptValue, HeaderNames } from '../utils/Constants.js';\nimport { ResponseHandler } from '../response/ResponseHandler.js';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { UrlString } from '../url/UrlString.js';\nimport { PopTokenGenerator } from '../crypto/PopTokenGenerator.js';\nimport { TimeUtils } from '../utils/TimeUtils.js';\nimport { buildClientInfo, buildClientInfoFromHomeAccountId } from '../account/ClientInfo.js';\nimport { CcsCredentialType } from '../account/CcsCredential.js';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { RequestValidator } from '../request/RequestValidator.js';\nimport { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Oauth2.0 Authorization Code client\r\n */\r\nvar AuthorizationCodeClient = /** @class */ (function (_super) {\r\n __extends(AuthorizationCodeClient, _super);\r\n function AuthorizationCodeClient(configuration, performanceClient) {\r\n var _this = _super.call(this, configuration, performanceClient) || this;\r\n // Flag to indicate if client is for hybrid spa auth code redemption\r\n _this.includeRedirectUri = true;\r\n return _this;\r\n }\r\n /**\r\n * Creates the URL of the authorization request letting the user input credentials and consent to the\r\n * application. The URL target the /authorize endpoint of the authority configured in the\r\n * application object.\r\n *\r\n * Once the user inputs their credentials and consents, the authority will send a response to the redirect URI\r\n * sent in the request and should contain an authorization code, which can then be used to acquire tokens via\r\n * acquireToken(AuthorizationCodeRequest)\r\n * @param request\r\n */\r\n AuthorizationCodeClient.prototype.getAuthCodeUrl = function (request) {\r\n var _a, _b;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var queryString;\r\n return __generator(this, function (_c) {\r\n switch (_c.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.GetAuthCodeUrl, request.correlationId);\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);\r\n return [4 /*yield*/, this.createAuthCodeUrlQueryString(request)];\r\n case 1:\r\n queryString = _c.sent();\r\n return [2 /*return*/, UrlString.appendQueryString(this.authority.authorizationEndpoint, queryString)];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * API to acquire a token in exchange of 'authorization_code` acquired by the user in the first leg of the\r\n * authorization_code_grant\r\n * @param request\r\n */\r\n AuthorizationCodeClient.prototype.acquireToken = function (request, authCodePayload) {\r\n var _a, _b, _c, _d, _e, _f;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var atsMeasurement, reqTimestamp, response, requestId, httpVerAuthority, responseHandler;\r\n var _this = this;\r\n return __generator(this, function (_g) {\r\n switch (_g.label) {\r\n case 0:\r\n if (!request || !request.code) {\r\n throw ClientAuthError.createTokenRequestCannotBeMadeError();\r\n }\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthClientAcquireToken, request.correlationId);\r\n atsMeasurement = (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.startMeasurement(\"AuthCodeClientAcquireToken\", request.correlationId);\r\n this.logger.info(\"in acquireToken call in auth-code client\");\r\n reqTimestamp = TimeUtils.nowSeconds();\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);\r\n return [4 /*yield*/, this.executeTokenRequest(this.authority, request)];\r\n case 1:\r\n response = _g.sent();\r\n requestId = (_d = response.headers) === null || _d === void 0 ? void 0 : _d[HeaderNames.X_MS_REQUEST_ID];\r\n httpVerAuthority = (_e = response.headers) === null || _e === void 0 ? void 0 : _e[HeaderNames.X_MS_HTTP_VERSION];\r\n if (httpVerAuthority) {\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.addStaticFields({\r\n httpVerAuthority: httpVerAuthority\r\n });\r\n }\r\n responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, this.config.serializableCache, this.config.persistencePlugin, this.performanceClient);\r\n // Validate response. This function throws a server error if an error is returned by the server.\r\n responseHandler.validateTokenResponse(response.body);\r\n (_f = this.performanceClient) === null || _f === void 0 ? void 0 : _f.setPreQueueTime(PerformanceEvents.HandleServerTokenResponse, request.correlationId);\r\n return [2 /*return*/, responseHandler.handleServerTokenResponse(response.body, this.authority, reqTimestamp, request, authCodePayload, undefined, undefined, undefined, requestId).then(function (result) {\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.endMeasurement({\r\n success: true\r\n });\r\n return result;\r\n })\r\n .catch(function (error) {\r\n _this.logger.verbose(\"Error in fetching token in ACC\", request.correlationId);\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.endMeasurement({\r\n errorCode: error.errorCode,\r\n subErrorCode: error.subError,\r\n success: false\r\n });\r\n throw error;\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Handles the hash fragment response from public client code request. Returns a code response used by\r\n * the client to exchange for a token in acquireToken.\r\n * @param hashFragment\r\n */\r\n AuthorizationCodeClient.prototype.handleFragmentResponse = function (hashFragment, cachedState) {\r\n // Handle responses.\r\n var responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, null, null);\r\n // Deserialize hash fragment response parameters.\r\n var hashUrlString = new UrlString(hashFragment);\r\n // Deserialize hash fragment response parameters.\r\n var serverParams = UrlString.getDeserializedHash(hashUrlString.getHash());\r\n // Get code response\r\n responseHandler.validateServerAuthorizationCodeResponse(serverParams, cachedState, this.cryptoUtils);\r\n // throw when there is no auth code in the response\r\n if (!serverParams.code) {\r\n throw ClientAuthError.createNoAuthCodeInServerResponseError();\r\n }\r\n return __assign(__assign({}, serverParams), { \r\n // Code param is optional in ServerAuthorizationCodeResponse but required in AuthorizationCodePaylod\r\n code: serverParams.code });\r\n };\r\n /**\r\n * Used to log out the current user, and redirect the user to the postLogoutRedirectUri.\r\n * Default behaviour is to redirect the user to `window.location.href`.\r\n * @param authorityUri\r\n */\r\n AuthorizationCodeClient.prototype.getLogoutUri = function (logoutRequest) {\r\n // Throw error if logoutRequest is null/undefined\r\n if (!logoutRequest) {\r\n throw ClientConfigurationError.createEmptyLogoutRequestError();\r\n }\r\n var queryString = this.createLogoutUrlQueryString(logoutRequest);\r\n // Construct logout URI\r\n return UrlString.appendQueryString(this.authority.endSessionEndpoint, queryString);\r\n };\r\n /**\r\n * Executes POST request to token endpoint\r\n * @param authority\r\n * @param request\r\n */\r\n AuthorizationCodeClient.prototype.executeTokenRequest = function (authority, request) {\r\n var _a, _b;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var queryParametersString, endpoint, requestBody, ccsCredential, clientInfo, headers, thumbprint;\r\n return __generator(this, function (_c) {\r\n switch (_c.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);\r\n queryParametersString = this.createTokenQueryParameters(request);\r\n endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParametersString);\r\n return [4 /*yield*/, this.createTokenRequestBody(request)];\r\n case 1:\r\n requestBody = _c.sent();\r\n ccsCredential = undefined;\r\n if (request.clientInfo) {\r\n try {\r\n clientInfo = buildClientInfo(request.clientInfo, this.cryptoUtils);\r\n ccsCredential = {\r\n credential: \"\" + clientInfo.uid + Separators.CLIENT_INFO_SEPARATOR + clientInfo.utid,\r\n type: CcsCredentialType.HOME_ACCOUNT_ID\r\n };\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"Could not parse client info for CCS Header: \" + e);\r\n }\r\n }\r\n headers = this.createTokenRequestHeaders(ccsCredential || request.ccsCredential);\r\n thumbprint = {\r\n clientId: this.config.authOptions.clientId,\r\n authority: authority.canonicalAuthority,\r\n scopes: request.scopes,\r\n claims: request.claims,\r\n authenticationScheme: request.authenticationScheme,\r\n resourceRequestMethod: request.resourceRequestMethod,\r\n resourceRequestUri: request.resourceRequestUri,\r\n shrClaims: request.shrClaims,\r\n sshKid: request.sshKid\r\n };\r\n return [2 /*return*/, this.executePostToTokenEndpoint(endpoint, requestBody, headers, thumbprint)];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Generates a map for all the params to be sent to the service\r\n * @param request\r\n */\r\n AuthorizationCodeClient.prototype.createTokenRequestBody = function (request) {\r\n var _a, _b;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var parameterBuilder, clientAssertion, popTokenGenerator, reqCnfData, correlationId, ccsCred, clientInfo, clientInfo;\r\n var _c;\r\n return __generator(this, function (_d) {\r\n switch (_d.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);\r\n parameterBuilder = new RequestParameterBuilder();\r\n parameterBuilder.addClientId(this.config.authOptions.clientId);\r\n /*\r\n * For hybrid spa flow, there will be a code but no verifier\r\n * In this scenario, don't include redirect uri as auth code will not be bound to redirect URI\r\n */\r\n if (!this.includeRedirectUri) {\r\n // Just validate\r\n RequestValidator.validateRedirectUri(request.redirectUri);\r\n }\r\n else {\r\n // Validate and include redirect uri\r\n parameterBuilder.addRedirectUri(request.redirectUri);\r\n }\r\n // Add scope array, parameter builder will add default scopes and dedupe\r\n parameterBuilder.addScopes(request.scopes);\r\n // add code: user set, not validated\r\n parameterBuilder.addAuthorizationCode(request.code);\r\n // Add library metadata\r\n parameterBuilder.addLibraryInfo(this.config.libraryInfo);\r\n parameterBuilder.addApplicationTelemetry(this.config.telemetry.application);\r\n parameterBuilder.addThrottling();\r\n if (this.serverTelemetryManager) {\r\n parameterBuilder.addServerTelemetry(this.serverTelemetryManager);\r\n }\r\n // add code_verifier if passed\r\n if (request.codeVerifier) {\r\n parameterBuilder.addCodeVerifier(request.codeVerifier);\r\n }\r\n if (this.config.clientCredentials.clientSecret) {\r\n parameterBuilder.addClientSecret(this.config.clientCredentials.clientSecret);\r\n }\r\n if (this.config.clientCredentials.clientAssertion) {\r\n clientAssertion = this.config.clientCredentials.clientAssertion;\r\n parameterBuilder.addClientAssertion(clientAssertion.assertion);\r\n parameterBuilder.addClientAssertionType(clientAssertion.assertionType);\r\n }\r\n parameterBuilder.addGrantType(GrantType.AUTHORIZATION_CODE_GRANT);\r\n parameterBuilder.addClientInfo();\r\n if (!(request.authenticationScheme === AuthenticationScheme.POP)) return [3 /*break*/, 2];\r\n popTokenGenerator = new PopTokenGenerator(this.cryptoUtils, this.performanceClient);\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);\r\n return [4 /*yield*/, popTokenGenerator.generateCnf(request)];\r\n case 1:\r\n reqCnfData = _d.sent();\r\n // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)\r\n parameterBuilder.addPopToken(reqCnfData.reqCnfString);\r\n return [3 /*break*/, 3];\r\n case 2:\r\n if (request.authenticationScheme === AuthenticationScheme.SSH) {\r\n if (request.sshJwk) {\r\n parameterBuilder.addSshJwk(request.sshJwk);\r\n }\r\n else {\r\n throw ClientConfigurationError.createMissingSshJwkError();\r\n }\r\n }\r\n _d.label = 3;\r\n case 3:\r\n correlationId = request.correlationId || this.config.cryptoInterface.createNewGuid();\r\n parameterBuilder.addCorrelationId(correlationId);\r\n if (!StringUtils.isEmptyObj(request.claims) || this.config.authOptions.clientCapabilities && this.config.authOptions.clientCapabilities.length > 0) {\r\n parameterBuilder.addClaims(request.claims, this.config.authOptions.clientCapabilities);\r\n }\r\n ccsCred = undefined;\r\n if (request.clientInfo) {\r\n try {\r\n clientInfo = buildClientInfo(request.clientInfo, this.cryptoUtils);\r\n ccsCred = {\r\n credential: \"\" + clientInfo.uid + Separators.CLIENT_INFO_SEPARATOR + clientInfo.utid,\r\n type: CcsCredentialType.HOME_ACCOUNT_ID\r\n };\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"Could not parse client info for CCS Header: \" + e);\r\n }\r\n }\r\n else {\r\n ccsCred = request.ccsCredential;\r\n }\r\n // Adds these as parameters in the request instead of headers to prevent CORS preflight request\r\n if (this.config.systemOptions.preventCorsPreflight && ccsCred) {\r\n switch (ccsCred.type) {\r\n case CcsCredentialType.HOME_ACCOUNT_ID:\r\n try {\r\n clientInfo = buildClientInfoFromHomeAccountId(ccsCred.credential);\r\n parameterBuilder.addCcsOid(clientInfo);\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"Could not parse home account ID for CCS Header: \" + e);\r\n }\r\n break;\r\n case CcsCredentialType.UPN:\r\n parameterBuilder.addCcsUpn(ccsCred.credential);\r\n break;\r\n }\r\n }\r\n if (request.tokenBodyParameters) {\r\n parameterBuilder.addExtraQueryParameters(request.tokenBodyParameters);\r\n }\r\n // Add hybrid spa parameters if not already provided\r\n if (request.enableSpaAuthorizationCode && (!request.tokenBodyParameters || !request.tokenBodyParameters[AADServerParamKeys.RETURN_SPA_CODE])) {\r\n parameterBuilder.addExtraQueryParameters((_c = {},\r\n _c[AADServerParamKeys.RETURN_SPA_CODE] = \"1\",\r\n _c));\r\n }\r\n return [2 /*return*/, parameterBuilder.createQueryString()];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * This API validates the `AuthorizationCodeUrlRequest` and creates a URL\r\n * @param request\r\n */\r\n AuthorizationCodeClient.prototype.createAuthCodeUrlQueryString = function (request) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var parameterBuilder, requestScopes, correlationId, accountSid, accountLoginHintClaim, clientInfo, clientInfo, clientInfo, popTokenGenerator, reqCnfData;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);\r\n parameterBuilder = new RequestParameterBuilder();\r\n parameterBuilder.addClientId(this.config.authOptions.clientId);\r\n requestScopes = __spreadArrays(request.scopes || [], request.extraScopesToConsent || []);\r\n parameterBuilder.addScopes(requestScopes);\r\n // validate the redirectUri (to be a non null value)\r\n parameterBuilder.addRedirectUri(request.redirectUri);\r\n correlationId = request.correlationId || this.config.cryptoInterface.createNewGuid();\r\n parameterBuilder.addCorrelationId(correlationId);\r\n // add response_mode. If not passed in it defaults to query.\r\n parameterBuilder.addResponseMode(request.responseMode);\r\n // add response_type = code\r\n parameterBuilder.addResponseTypeCode();\r\n // add library info parameters\r\n parameterBuilder.addLibraryInfo(this.config.libraryInfo);\r\n parameterBuilder.addApplicationTelemetry(this.config.telemetry.application);\r\n // add client_info=1\r\n parameterBuilder.addClientInfo();\r\n if (request.codeChallenge && request.codeChallengeMethod) {\r\n parameterBuilder.addCodeChallengeParams(request.codeChallenge, request.codeChallengeMethod);\r\n }\r\n if (request.prompt) {\r\n parameterBuilder.addPrompt(request.prompt);\r\n }\r\n if (request.domainHint) {\r\n parameterBuilder.addDomainHint(request.domainHint);\r\n }\r\n // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object\r\n if (request.prompt !== PromptValue.SELECT_ACCOUNT) {\r\n // AAD will throw if prompt=select_account is passed with an account hint\r\n if (request.sid && request.prompt === PromptValue.NONE) {\r\n // SessionID is only used in silent calls\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: Prompt is none, adding sid from request\");\r\n parameterBuilder.addSid(request.sid);\r\n }\r\n else if (request.account) {\r\n accountSid = this.extractAccountSid(request.account);\r\n accountLoginHintClaim = this.extractLoginHint(request.account);\r\n // If login_hint claim is present, use it over sid/username\r\n if (accountLoginHintClaim) {\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: login_hint claim present on account\");\r\n parameterBuilder.addLoginHint(accountLoginHintClaim);\r\n try {\r\n clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);\r\n parameterBuilder.addCcsOid(clientInfo);\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header\");\r\n }\r\n }\r\n else if (accountSid && request.prompt === PromptValue.NONE) {\r\n /*\r\n * If account and loginHint are provided, we will check account first for sid before adding loginHint\r\n * SessionId is only used in silent calls\r\n */\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: Prompt is none, adding sid from account\");\r\n parameterBuilder.addSid(accountSid);\r\n try {\r\n clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);\r\n parameterBuilder.addCcsOid(clientInfo);\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header\");\r\n }\r\n }\r\n else if (request.loginHint) {\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: Adding login_hint from request\");\r\n parameterBuilder.addLoginHint(request.loginHint);\r\n parameterBuilder.addCcsUpn(request.loginHint);\r\n }\r\n else if (request.account.username) {\r\n // Fallback to account username if provided\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: Adding login_hint from account\");\r\n parameterBuilder.addLoginHint(request.account.username);\r\n try {\r\n clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);\r\n parameterBuilder.addCcsOid(clientInfo);\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header\");\r\n }\r\n }\r\n }\r\n else if (request.loginHint) {\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: No account, adding login_hint from request\");\r\n parameterBuilder.addLoginHint(request.loginHint);\r\n parameterBuilder.addCcsUpn(request.loginHint);\r\n }\r\n }\r\n else {\r\n this.logger.verbose(\"createAuthCodeUrlQueryString: Prompt is select_account, ignoring account hints\");\r\n }\r\n if (request.nonce) {\r\n parameterBuilder.addNonce(request.nonce);\r\n }\r\n if (request.state) {\r\n parameterBuilder.addState(request.state);\r\n }\r\n if (!StringUtils.isEmpty(request.claims) || this.config.authOptions.clientCapabilities && this.config.authOptions.clientCapabilities.length > 0) {\r\n parameterBuilder.addClaims(request.claims, this.config.authOptions.clientCapabilities);\r\n }\r\n if (request.extraQueryParameters) {\r\n parameterBuilder.addExtraQueryParameters(request.extraQueryParameters);\r\n }\r\n if (!request.nativeBroker) return [3 /*break*/, 2];\r\n // signal ests that this is a WAM call\r\n parameterBuilder.addNativeBroker();\r\n if (!(request.authenticationScheme === AuthenticationScheme.POP)) return [3 /*break*/, 2];\r\n popTokenGenerator = new PopTokenGenerator(this.cryptoUtils);\r\n return [4 /*yield*/, popTokenGenerator.generateCnf(request)];\r\n case 1:\r\n reqCnfData = _b.sent();\r\n parameterBuilder.addPopToken(reqCnfData.reqCnfString);\r\n _b.label = 2;\r\n case 2: return [2 /*return*/, parameterBuilder.createQueryString()];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * This API validates the `EndSessionRequest` and creates a URL\r\n * @param request\r\n */\r\n AuthorizationCodeClient.prototype.createLogoutUrlQueryString = function (request) {\r\n var parameterBuilder = new RequestParameterBuilder();\r\n if (request.postLogoutRedirectUri) {\r\n parameterBuilder.addPostLogoutRedirectUri(request.postLogoutRedirectUri);\r\n }\r\n if (request.correlationId) {\r\n parameterBuilder.addCorrelationId(request.correlationId);\r\n }\r\n if (request.idTokenHint) {\r\n parameterBuilder.addIdTokenHint(request.idTokenHint);\r\n }\r\n if (request.state) {\r\n parameterBuilder.addState(request.state);\r\n }\r\n if (request.logoutHint) {\r\n parameterBuilder.addLogoutHint(request.logoutHint);\r\n }\r\n if (request.extraQueryParameters) {\r\n parameterBuilder.addExtraQueryParameters(request.extraQueryParameters);\r\n }\r\n return parameterBuilder.createQueryString();\r\n };\r\n /**\r\n * Helper to get sid from account. Returns null if idTokenClaims are not present or sid is not present.\r\n * @param account\r\n */\r\n AuthorizationCodeClient.prototype.extractAccountSid = function (account) {\r\n var _a;\r\n return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a.sid) || null;\r\n };\r\n AuthorizationCodeClient.prototype.extractLoginHint = function (account) {\r\n var _a;\r\n return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a.login_hint) || null;\r\n };\r\n return AuthorizationCodeClient;\r\n}(BaseClient));\n\nexport { AuthorizationCodeClient };\n//# sourceMappingURL=AuthorizationCodeClient.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nfunction isOpenIdConfigResponse(response) {\r\n return (response.hasOwnProperty(\"authorization_endpoint\") &&\r\n response.hasOwnProperty(\"token_endpoint\") &&\r\n response.hasOwnProperty(\"issuer\") &&\r\n response.hasOwnProperty(\"jwks_uri\"));\r\n}\n\nexport { isOpenIdConfigResponse };\n//# sourceMappingURL=OpenIdConfigResponse.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar rawMetdataJSON = { \"endpointMetadata\": { \"https://login.microsoftonline.com/common/\": { \"token_endpoint\": \"https://login.microsoftonline.com/common/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.microsoftonline.com/common/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.microsoftonline.com/{tenantid}/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://graph.microsoft.com/oidc/userinfo\", \"authorization_endpoint\": \"https://login.microsoftonline.com/common/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.microsoftonline.com/common/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.microsoftonline.com/common/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.microsoftonline.com/common/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"microsoftonline.com\", \"cloud_graph_host_name\": \"graph.windows.net\", \"msgraph_host\": \"graph.microsoft.com\", \"rbac_url\": \"https://pas.windows.net\" }, \"https://login.chinacloudapi.cn/common/\": { \"token_endpoint\": \"https://login.chinacloudapi.cn/common/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.chinacloudapi.cn/common/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.partner.microsoftonline.cn/{tenantid}/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://microsoftgraph.chinacloudapi.cn/oidc/userinfo\", \"authorization_endpoint\": \"https://login.chinacloudapi.cn/common/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.chinacloudapi.cn/common/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.chinacloudapi.cn/common/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.chinacloudapi.cn/common/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"partner.microsoftonline.cn\", \"cloud_graph_host_name\": \"graph.chinacloudapi.cn\", \"msgraph_host\": \"microsoftgraph.chinacloudapi.cn\", \"rbac_url\": \"https://pas.chinacloudapi.cn\" }, \"https://login.microsoftonline.us/common/\": { \"token_endpoint\": \"https://login.microsoftonline.us/common/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.microsoftonline.us/common/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.microsoftonline.us/{tenantid}/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://graph.microsoft.com/oidc/userinfo\", \"authorization_endpoint\": \"https://login.microsoftonline.us/common/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.microsoftonline.us/common/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.microsoftonline.us/common/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.microsoftonline.us/common/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"microsoftonline.us\", \"cloud_graph_host_name\": \"graph.windows.net\", \"msgraph_host\": \"graph.microsoft.com\", \"rbac_url\": \"https://pasff.usgovcloudapi.net\" }, \"https://login.microsoftonline.com/consumers/\": { \"token_endpoint\": \"https://login.microsoftonline.com/consumers/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.microsoftonline.com/consumers/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.microsoftonline.com/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://graph.microsoft.com/oidc/userinfo\", \"authorization_endpoint\": \"https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.microsoftonline.com/consumers/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.microsoftonline.com/consumers/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.microsoftonline.com/consumers/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"microsoftonline.com\", \"cloud_graph_host_name\": \"graph.windows.net\", \"msgraph_host\": \"graph.microsoft.com\", \"rbac_url\": \"https://pas.windows.net\" }, \"https://login.chinacloudapi.cn/consumers/\": { \"token_endpoint\": \"https://login.chinacloudapi.cn/consumers/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.chinacloudapi.cn/consumers/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.partner.microsoftonline.cn/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://microsoftgraph.chinacloudapi.cn/oidc/userinfo\", \"authorization_endpoint\": \"https://login.chinacloudapi.cn/consumers/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.chinacloudapi.cn/consumers/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.chinacloudapi.cn/consumers/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.chinacloudapi.cn/consumers/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"partner.microsoftonline.cn\", \"cloud_graph_host_name\": \"graph.chinacloudapi.cn\", \"msgraph_host\": \"microsoftgraph.chinacloudapi.cn\", \"rbac_url\": \"https://pas.chinacloudapi.cn\" }, \"https://login.microsoftonline.us/consumers/\": { \"token_endpoint\": \"https://login.microsoftonline.us/consumers/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.microsoftonline.us/consumers/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.microsoftonline.us/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://graph.microsoft.com/oidc/userinfo\", \"authorization_endpoint\": \"https://login.microsoftonline.us/consumers/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.microsoftonline.us/consumers/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.microsoftonline.us/consumers/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.microsoftonline.us/consumers/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"microsoftonline.us\", \"cloud_graph_host_name\": \"graph.windows.net\", \"msgraph_host\": \"graph.microsoft.com\", \"rbac_url\": \"https://pasff.usgovcloudapi.net\" }, \"https://login.microsoftonline.com/organizations/\": { \"token_endpoint\": \"https://login.microsoftonline.com/organizations/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.microsoftonline.com/organizations/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.microsoftonline.com/{tenantid}/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://graph.microsoft.com/oidc/userinfo\", \"authorization_endpoint\": \"https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.microsoftonline.com/organizations/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.microsoftonline.com/organizations/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"microsoftonline.com\", \"cloud_graph_host_name\": \"graph.windows.net\", \"msgraph_host\": \"graph.microsoft.com\", \"rbac_url\": \"https://pas.windows.net\" }, \"https://login.chinacloudapi.cn/organizations/\": { \"token_endpoint\": \"https://login.chinacloudapi.cn/organizations/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.chinacloudapi.cn/organizations/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.partner.microsoftonline.cn/{tenantid}/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://microsoftgraph.chinacloudapi.cn/oidc/userinfo\", \"authorization_endpoint\": \"https://login.chinacloudapi.cn/organizations/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.chinacloudapi.cn/organizations/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.chinacloudapi.cn/organizations/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.chinacloudapi.cn/organizations/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"partner.microsoftonline.cn\", \"cloud_graph_host_name\": \"graph.chinacloudapi.cn\", \"msgraph_host\": \"microsoftgraph.chinacloudapi.cn\", \"rbac_url\": \"https://pas.chinacloudapi.cn\" }, \"https://login.microsoftonline.us/organizations/\": { \"token_endpoint\": \"https://login.microsoftonline.us/organizations/oauth2/v2.0/token\", \"token_endpoint_auth_methods_supported\": [\"client_secret_post\", \"private_key_jwt\", \"client_secret_basic\"], \"jwks_uri\": \"https://login.microsoftonline.us/organizations/discovery/v2.0/keys\", \"response_modes_supported\": [\"query\", \"fragment\", \"form_post\"], \"subject_types_supported\": [\"pairwise\"], \"id_token_signing_alg_values_supported\": [\"RS256\"], \"response_types_supported\": [\"code\", \"id_token\", \"code id_token\", \"id_token token\"], \"scopes_supported\": [\"openid\", \"profile\", \"email\", \"offline_access\"], \"issuer\": \"https://login.microsoftonline.us/{tenantid}/v2.0\", \"request_uri_parameter_supported\": false, \"userinfo_endpoint\": \"https://graph.microsoft.com/oidc/userinfo\", \"authorization_endpoint\": \"https://login.microsoftonline.us/organizations/oauth2/v2.0/authorize\", \"device_authorization_endpoint\": \"https://login.microsoftonline.us/organizations/oauth2/v2.0/devicecode\", \"http_logout_supported\": true, \"frontchannel_logout_supported\": true, \"end_session_endpoint\": \"https://login.microsoftonline.us/organizations/oauth2/v2.0/logout\", \"claims_supported\": [\"sub\", \"iss\", \"cloud_instance_name\", \"cloud_instance_host_name\", \"cloud_graph_host_name\", \"msgraph_host\", \"aud\", \"exp\", \"iat\", \"auth_time\", \"acr\", \"nonce\", \"preferred_username\", \"name\", \"tid\", \"ver\", \"at_hash\", \"c_hash\", \"email\"], \"kerberos_endpoint\": \"https://login.microsoftonline.us/organizations/kerberos\", \"tenant_region_scope\": null, \"cloud_instance_name\": \"microsoftonline.us\", \"cloud_graph_host_name\": \"graph.windows.net\", \"msgraph_host\": \"graph.microsoft.com\", \"rbac_url\": \"https://pasff.usgovcloudapi.net\" } }, \"instanceDiscoveryMetadata\": { \"https://login.microsoftonline.com/common/\": { \"tenant_discovery_endpoint\": \"https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] }, \"https://login.chinacloudapi.cn/common/\": { \"tenant_discovery_endpoint\": \"https://login.chinacloudapi.cn/common/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] }, \"https://login.microsoftonline.us/common/\": { \"tenant_discovery_endpoint\": \"https://login.microsoftonline.us/common/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] }, \"https://login.microsoftonline.com/consumers/\": { \"tenant_discovery_endpoint\": \"https://login.microsoftonline.com/consumers/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] }, \"https://login.chinacloudapi.cn/consumers/\": { \"tenant_discovery_endpoint\": \"https://login.chinacloudapi.cn/consumers/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] }, \"https://login.microsoftonline.us/consumers/\": { \"tenant_discovery_endpoint\": \"https://login.microsoftonline.us/consumers/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] }, \"https://login.microsoftonline.com/organizations/\": { \"tenant_discovery_endpoint\": \"https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] }, \"https://login.chinacloudapi.cn/organizations/\": { \"tenant_discovery_endpoint\": \"https://login.chinacloudapi.cn/organizations/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] }, \"https://login.microsoftonline.us/organizations/\": { \"tenant_discovery_endpoint\": \"https://login.microsoftonline.us/organizations/v2.0/.well-known/openid-configuration\", \"api-version\": \"1.1\", \"metadata\": [{ \"preferred_network\": \"login.microsoftonline.com\", \"preferred_cache\": \"login.windows.net\", \"aliases\": [\"login.microsoftonline.com\", \"login.windows.net\", \"login.microsoft.com\", \"sts.windows.net\"] }, { \"preferred_network\": \"login.partner.microsoftonline.cn\", \"preferred_cache\": \"login.partner.microsoftonline.cn\", \"aliases\": [\"login.partner.microsoftonline.cn\", \"login.chinacloudapi.cn\"] }, { \"preferred_network\": \"login.microsoftonline.de\", \"preferred_cache\": \"login.microsoftonline.de\", \"aliases\": [\"login.microsoftonline.de\"] }, { \"preferred_network\": \"login.microsoftonline.us\", \"preferred_cache\": \"login.microsoftonline.us\", \"aliases\": [\"login.microsoftonline.us\", \"login.usgovcloudapi.net\"] }, { \"preferred_network\": \"login-us.microsoftonline.com\", \"preferred_cache\": \"login-us.microsoftonline.com\", \"aliases\": [\"login-us.microsoftonline.com\"] }] } } };\r\nvar EndpointMetadata = rawMetdataJSON.endpointMetadata;\r\nvar InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;\n\nexport { EndpointMetadata, InstanceDiscoveryMetadata, rawMetdataJSON };\n//# sourceMappingURL=AuthorityMetadata.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { RegionDiscoverySources, ResponseCodes, Constants } from '../utils/Constants.js';\nimport { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar RegionDiscovery = /** @class */ (function () {\r\n function RegionDiscovery(networkInterface, performanceClient, correlationId) {\r\n this.networkInterface = networkInterface;\r\n this.performanceClient = performanceClient;\r\n this.correlationId = correlationId;\r\n }\r\n /**\r\n * Detect the region from the application's environment.\r\n *\r\n * @returns Promise\r\n */\r\n RegionDiscovery.prototype.detectRegion = function (environmentRegion, regionDiscoveryMetadata) {\r\n var _a, _b, _c, _d;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var autodetectedRegionName, options, localIMDSVersionResponse, currentIMDSVersion, currentIMDSVersionResponse;\r\n return __generator(this, function (_e) {\r\n switch (_e.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);\r\n autodetectedRegionName = environmentRegion;\r\n if (!!autodetectedRegionName) return [3 /*break*/, 8];\r\n options = RegionDiscovery.IMDS_OPTIONS;\r\n _e.label = 1;\r\n case 1:\r\n _e.trys.push([1, 6, , 7]);\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);\r\n return [4 /*yield*/, this.getRegionFromIMDS(Constants.IMDS_VERSION, options)];\r\n case 2:\r\n localIMDSVersionResponse = _e.sent();\r\n if (localIMDSVersionResponse.status === ResponseCodes.httpSuccess) {\r\n autodetectedRegionName = localIMDSVersionResponse.body;\r\n regionDiscoveryMetadata.region_source = RegionDiscoverySources.IMDS;\r\n }\r\n if (!(localIMDSVersionResponse.status === ResponseCodes.httpBadRequest)) return [3 /*break*/, 5];\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.correlationId);\r\n return [4 /*yield*/, this.getCurrentVersion(options)];\r\n case 3:\r\n currentIMDSVersion = _e.sent();\r\n if (!currentIMDSVersion) {\r\n regionDiscoveryMetadata.region_source = RegionDiscoverySources.FAILED_AUTO_DETECTION;\r\n return [2 /*return*/, null];\r\n }\r\n (_d = this.performanceClient) === null || _d === void 0 ? void 0 : _d.setPreQueueTime(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);\r\n return [4 /*yield*/, this.getRegionFromIMDS(currentIMDSVersion, options)];\r\n case 4:\r\n currentIMDSVersionResponse = _e.sent();\r\n if (currentIMDSVersionResponse.status === ResponseCodes.httpSuccess) {\r\n autodetectedRegionName = currentIMDSVersionResponse.body;\r\n regionDiscoveryMetadata.region_source = RegionDiscoverySources.IMDS;\r\n }\r\n _e.label = 5;\r\n case 5: return [3 /*break*/, 7];\r\n case 6:\r\n _e.sent();\r\n regionDiscoveryMetadata.region_source = RegionDiscoverySources.FAILED_AUTO_DETECTION;\r\n return [2 /*return*/, null];\r\n case 7: return [3 /*break*/, 9];\r\n case 8:\r\n regionDiscoveryMetadata.region_source = RegionDiscoverySources.ENVIRONMENT_VARIABLE;\r\n _e.label = 9;\r\n case 9:\r\n // If no region was auto detected from the environment or from the IMDS endpoint, mark the attempt as a FAILED_AUTO_DETECTION\r\n if (!autodetectedRegionName) {\r\n regionDiscoveryMetadata.region_source = RegionDiscoverySources.FAILED_AUTO_DETECTION;\r\n }\r\n return [2 /*return*/, autodetectedRegionName || null];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Make the call to the IMDS endpoint\r\n *\r\n * @param imdsEndpointUrl\r\n * @returns Promise>\r\n */\r\n RegionDiscovery.prototype.getRegionFromIMDS = function (version, options) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_b) {\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);\r\n return [2 /*return*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + \"?api-version=\" + version + \"&format=text\", options, Constants.IMDS_TIMEOUT)];\r\n });\r\n });\r\n };\r\n /**\r\n * Get the most recent version of the IMDS endpoint available\r\n *\r\n * @returns Promise\r\n */\r\n RegionDiscovery.prototype.getCurrentVersion = function (options) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var response;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.correlationId);\r\n _b.label = 1;\r\n case 1:\r\n _b.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + \"?format=json\", options)];\r\n case 2:\r\n response = _b.sent();\r\n // When IMDS endpoint is called without the api version query param, bad request response comes back with latest version.\r\n if (response.status === ResponseCodes.httpBadRequest && response.body && response.body[\"newest-versions\"] && response.body[\"newest-versions\"].length > 0) {\r\n return [2 /*return*/, response.body[\"newest-versions\"][0]];\r\n }\r\n return [2 /*return*/, null];\r\n case 3:\r\n _b.sent();\r\n return [2 /*return*/, null];\r\n case 4: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n // Options for the IMDS endpoint request\r\n RegionDiscovery.IMDS_OPTIONS = {\r\n headers: {\r\n Metadata: \"true\",\r\n },\r\n };\r\n return RegionDiscovery;\r\n}());\n\nexport { RegionDiscovery };\n//# sourceMappingURL=RegionDiscovery.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { InteractionRequiredAuthError, AuthError } from '@azure/msal-common';\nimport { BrowserAuthError } from './BrowserAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar NativeStatusCode;\r\n(function (NativeStatusCode) {\r\n NativeStatusCode[\"USER_INTERACTION_REQUIRED\"] = \"USER_INTERACTION_REQUIRED\";\r\n NativeStatusCode[\"USER_CANCEL\"] = \"USER_CANCEL\";\r\n NativeStatusCode[\"NO_NETWORK\"] = \"NO_NETWORK\";\r\n NativeStatusCode[\"TRANSIENT_ERROR\"] = \"TRANSIENT_ERROR\";\r\n NativeStatusCode[\"PERSISTENT_ERROR\"] = \"PERSISTENT_ERROR\";\r\n NativeStatusCode[\"DISABLED\"] = \"DISABLED\";\r\n NativeStatusCode[\"ACCOUNT_UNAVAILABLE\"] = \"ACCOUNT_UNAVAILABLE\";\r\n})(NativeStatusCode || (NativeStatusCode = {}));\r\nvar NativeAuthErrorMessage = {\r\n extensionError: {\r\n code: \"ContentError\"\r\n },\r\n userSwitch: {\r\n code: \"user_switch\",\r\n desc: \"User attempted to switch accounts in the native broker, which is not allowed. All new accounts must sign-in through the standard web flow first, please try again.\"\r\n },\r\n tokensNotFoundInCache: {\r\n code: \"tokens_not_found_in_internal_memory_cache\",\r\n desc: \"Tokens not cached in MSAL JS internal memory, please make the WAM request\"\r\n }\r\n};\r\nvar NativeAuthError = /** @class */ (function (_super) {\r\n __extends(NativeAuthError, _super);\r\n function NativeAuthError(errorCode, description, ext) {\r\n var _this = _super.call(this, errorCode, description) || this;\r\n Object.setPrototypeOf(_this, NativeAuthError.prototype);\r\n _this.name = \"NativeAuthError\";\r\n _this.ext = ext;\r\n return _this;\r\n }\r\n /**\r\n * These errors should result in a fallback to the 'standard' browser based auth flow.\r\n */\r\n NativeAuthError.prototype.isFatal = function () {\r\n if (this.ext && this.ext.status && (this.ext.status === NativeStatusCode.PERSISTENT_ERROR || this.ext.status === NativeStatusCode.DISABLED)) {\r\n return true;\r\n }\r\n switch (this.errorCode) {\r\n case NativeAuthErrorMessage.extensionError.code:\r\n return true;\r\n default:\r\n return false;\r\n }\r\n };\r\n /**\r\n * Create the appropriate error object based on the WAM status code.\r\n * @param code\r\n * @param description\r\n * @param ext\r\n * @returns\r\n */\r\n NativeAuthError.createError = function (code, description, ext) {\r\n if (ext && ext.status) {\r\n switch (ext.status) {\r\n case NativeStatusCode.ACCOUNT_UNAVAILABLE:\r\n return InteractionRequiredAuthError.createNativeAccountUnavailableError();\r\n case NativeStatusCode.USER_INTERACTION_REQUIRED:\r\n return new InteractionRequiredAuthError(code, description);\r\n case NativeStatusCode.USER_CANCEL:\r\n return BrowserAuthError.createUserCancelledError();\r\n case NativeStatusCode.NO_NETWORK:\r\n return BrowserAuthError.createNoNetworkConnectivityError();\r\n }\r\n }\r\n return new NativeAuthError(code, description, ext);\r\n };\r\n /**\r\n * Creates user switch error when the user chooses a different account in the native broker prompt\r\n * @returns\r\n */\r\n NativeAuthError.createUserSwitchError = function () {\r\n return new NativeAuthError(NativeAuthErrorMessage.userSwitch.code, NativeAuthErrorMessage.userSwitch.desc);\r\n };\r\n /**\r\n * Creates a tokens not found error when the internal cache look up fails\r\n * @returns NativeAuthError: tokensNotFoundInCache\r\n */\r\n NativeAuthError.createTokensNotFoundInCacheError = function () {\r\n return new NativeAuthError(NativeAuthErrorMessage.tokensNotFoundInCache.code, NativeAuthErrorMessage.tokensNotFoundInCache.desc);\r\n };\r\n return NativeAuthError;\r\n}(AuthError));\n\nexport { NativeAuthError, NativeAuthErrorMessage, NativeStatusCode };\n//# sourceMappingURL=NativeAuthError.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { AuthorityType } from './AuthorityType.js';\nimport { isOpenIdConfigResponse } from './OpenIdConfigResponse.js';\nimport { UrlString } from '../url/UrlString.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { Constants, AADAuthorityConstants, AuthorityMetadataSource, RegionDiscoveryOutcomes } from '../utils/Constants.js';\nimport { EndpointMetadata, InstanceDiscoveryMetadata } from './AuthorityMetadata.js';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { ProtocolMode } from './ProtocolMode.js';\nimport { AuthorityMetadataEntity } from '../cache/entities/AuthorityMetadataEntity.js';\nimport { AzureCloudInstance } from './AuthorityOptions.js';\nimport { isCloudInstanceDiscoveryResponse } from './CloudInstanceDiscoveryResponse.js';\nimport { isCloudInstanceDiscoveryErrorResponse } from './CloudInstanceDiscoveryErrorResponse.js';\nimport { RegionDiscovery } from './RegionDiscovery.js';\nimport { AuthError } from '../error/AuthError.js';\nimport { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * The authority class validates the authority URIs used by the user, and retrieves the OpenID Configuration Data from the\r\n * endpoint. It will store the pertinent config data in this object for use during token calls.\r\n */\r\nvar Authority = /** @class */ (function () {\r\n function Authority(authority, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {\r\n this.canonicalAuthority = authority;\r\n this._canonicalAuthority.validateAsUri();\r\n this.networkInterface = networkInterface;\r\n this.cacheManager = cacheManager;\r\n this.authorityOptions = authorityOptions;\r\n this.regionDiscoveryMetadata = { region_used: undefined, region_source: undefined, region_outcome: undefined };\r\n this.logger = logger;\r\n this.performanceClient = performanceClient;\r\n this.correlationId = correlationId;\r\n this.regionDiscovery = new RegionDiscovery(networkInterface, this.performanceClient, this.correlationId);\r\n }\r\n /**\r\n * Get {@link AuthorityType}\r\n * @param authorityUri {@link IUri}\r\n * @private\r\n */\r\n Authority.prototype.getAuthorityType = function (authorityUri) {\r\n // CIAM auth url pattern is being standardized as: .ciamlogin.com\r\n if (authorityUri.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL)) {\r\n return AuthorityType.Ciam;\r\n }\r\n var pathSegments = authorityUri.PathSegments;\r\n if (pathSegments.length) {\r\n switch (pathSegments[0].toLowerCase()) {\r\n case Constants.ADFS:\r\n return AuthorityType.Adfs;\r\n case Constants.DSTS:\r\n return AuthorityType.Dsts;\r\n }\r\n }\r\n return AuthorityType.Default;\r\n };\r\n Object.defineProperty(Authority.prototype, \"authorityType\", {\r\n // See above for AuthorityType\r\n get: function () {\r\n return this.getAuthorityType(this.canonicalAuthorityUrlComponents);\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"protocolMode\", {\r\n /**\r\n * ProtocolMode enum representing the way endpoints are constructed.\r\n */\r\n get: function () {\r\n return this.authorityOptions.protocolMode;\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"options\", {\r\n /**\r\n * Returns authorityOptions which can be used to reinstantiate a new authority instance\r\n */\r\n get: function () {\r\n return this.authorityOptions;\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"canonicalAuthority\", {\r\n /**\r\n * A URL that is the authority set by the developer\r\n */\r\n get: function () {\r\n return this._canonicalAuthority.urlString;\r\n },\r\n /**\r\n * Sets canonical authority.\r\n */\r\n set: function (url) {\r\n this._canonicalAuthority = new UrlString(url);\r\n this._canonicalAuthority.validateAsUri();\r\n this._canonicalAuthorityUrlComponents = null;\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"canonicalAuthorityUrlComponents\", {\r\n /**\r\n * Get authority components.\r\n */\r\n get: function () {\r\n if (!this._canonicalAuthorityUrlComponents) {\r\n this._canonicalAuthorityUrlComponents = this._canonicalAuthority.getUrlComponents();\r\n }\r\n return this._canonicalAuthorityUrlComponents;\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"hostnameAndPort\", {\r\n /**\r\n * Get hostname and port i.e. login.microsoftonline.com\r\n */\r\n get: function () {\r\n return this.canonicalAuthorityUrlComponents.HostNameAndPort.toLowerCase();\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"tenant\", {\r\n /**\r\n * Get tenant for authority.\r\n */\r\n get: function () {\r\n return this.canonicalAuthorityUrlComponents.PathSegments[0];\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"authorizationEndpoint\", {\r\n /**\r\n * OAuth /authorize endpoint for requests\r\n */\r\n get: function () {\r\n if (this.discoveryComplete()) {\r\n return this.replacePath(this.metadata.authorization_endpoint);\r\n }\r\n else {\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(\"Discovery incomplete.\");\r\n }\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"tokenEndpoint\", {\r\n /**\r\n * OAuth /token endpoint for requests\r\n */\r\n get: function () {\r\n if (this.discoveryComplete()) {\r\n return this.replacePath(this.metadata.token_endpoint);\r\n }\r\n else {\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(\"Discovery incomplete.\");\r\n }\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"deviceCodeEndpoint\", {\r\n get: function () {\r\n if (this.discoveryComplete()) {\r\n return this.replacePath(this.metadata.token_endpoint.replace(\"/token\", \"/devicecode\"));\r\n }\r\n else {\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(\"Discovery incomplete.\");\r\n }\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"endSessionEndpoint\", {\r\n /**\r\n * OAuth logout endpoint for requests\r\n */\r\n get: function () {\r\n if (this.discoveryComplete()) {\r\n // ROPC policies may not have end_session_endpoint set\r\n if (!this.metadata.end_session_endpoint) {\r\n throw ClientAuthError.createLogoutNotSupportedError();\r\n }\r\n return this.replacePath(this.metadata.end_session_endpoint);\r\n }\r\n else {\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(\"Discovery incomplete.\");\r\n }\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"selfSignedJwtAudience\", {\r\n /**\r\n * OAuth issuer for requests\r\n */\r\n get: function () {\r\n if (this.discoveryComplete()) {\r\n return this.replacePath(this.metadata.issuer);\r\n }\r\n else {\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(\"Discovery incomplete.\");\r\n }\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n Object.defineProperty(Authority.prototype, \"jwksUri\", {\r\n /**\r\n * Jwks_uri for token signing keys\r\n */\r\n get: function () {\r\n if (this.discoveryComplete()) {\r\n return this.replacePath(this.metadata.jwks_uri);\r\n }\r\n else {\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(\"Discovery incomplete.\");\r\n }\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n /**\r\n * Returns a flag indicating that tenant name can be replaced in authority {@link IUri}\r\n * @param authorityUri {@link IUri}\r\n * @private\r\n */\r\n Authority.prototype.canReplaceTenant = function (authorityUri) {\r\n return authorityUri.PathSegments.length === 1\r\n && !Authority.reservedTenantDomains.has(authorityUri.PathSegments[0])\r\n && this.getAuthorityType(authorityUri) === AuthorityType.Default\r\n && this.protocolMode === ProtocolMode.AAD;\r\n };\r\n /**\r\n * Replaces tenant in url path with current tenant. Defaults to common.\r\n * @param urlString\r\n */\r\n Authority.prototype.replaceTenant = function (urlString) {\r\n return urlString.replace(/{tenant}|{tenantid}/g, this.tenant);\r\n };\r\n /**\r\n * Replaces path such as tenant or policy with the current tenant or policy.\r\n * @param urlString\r\n */\r\n Authority.prototype.replacePath = function (urlString) {\r\n var _this = this;\r\n var endpoint = urlString;\r\n var cachedAuthorityUrl = new UrlString(this.metadata.canonical_authority);\r\n var cachedAuthorityUrlComponents = cachedAuthorityUrl.getUrlComponents();\r\n var cachedAuthorityParts = cachedAuthorityUrlComponents.PathSegments;\r\n var currentAuthorityParts = this.canonicalAuthorityUrlComponents.PathSegments;\r\n currentAuthorityParts.forEach(function (currentPart, index) {\r\n var cachedPart = cachedAuthorityParts[index];\r\n if (index === 0 && _this.canReplaceTenant(cachedAuthorityUrlComponents)) {\r\n var tenantId = (new UrlString(_this.metadata.authorization_endpoint)).getUrlComponents().PathSegments[0];\r\n /**\r\n * Check if AAD canonical authority contains tenant domain name, for example \"testdomain.onmicrosoft.com\",\r\n * by comparing its first path segment to the corresponding authorization endpoint path segment, which is\r\n * always resolved with tenant id by OIDC.\r\n */\r\n if (cachedPart !== tenantId) {\r\n _this.logger.verbose(\"Replacing tenant domain name \" + cachedPart + \" with id \" + tenantId);\r\n cachedPart = tenantId;\r\n }\r\n }\r\n if (currentPart !== cachedPart) {\r\n endpoint = endpoint.replace(\"/\" + cachedPart + \"/\", \"/\" + currentPart + \"/\");\r\n }\r\n });\r\n return this.replaceTenant(endpoint);\r\n };\r\n Object.defineProperty(Authority.prototype, \"defaultOpenIdConfigurationEndpoint\", {\r\n /**\r\n * The default open id configuration endpoint for any canonical authority.\r\n */\r\n get: function () {\r\n if (this.authorityType === AuthorityType.Adfs ||\r\n this.authorityType === AuthorityType.Dsts ||\r\n this.protocolMode === ProtocolMode.OIDC) {\r\n return this.canonicalAuthority + \".well-known/openid-configuration\";\r\n }\r\n return this.canonicalAuthority + \"v2.0/.well-known/openid-configuration\";\r\n },\r\n enumerable: false,\r\n configurable: true\r\n });\r\n /**\r\n * Boolean that returns whethr or not tenant discovery has been completed.\r\n */\r\n Authority.prototype.discoveryComplete = function () {\r\n return !!this.metadata;\r\n };\r\n /**\r\n * Perform endpoint discovery to discover aliases, preferred_cache, preferred_network\r\n * and the /authorize, /token and logout endpoints.\r\n */\r\n Authority.prototype.resolveEndpointsAsync = function () {\r\n var _a, _b, _c;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var metadataEntity, cloudDiscoverySource, endpointSource, cacheKey;\r\n return __generator(this, function (_d) {\r\n switch (_d.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityResolveEndpointsAsync, this.correlationId);\r\n metadataEntity = this.cacheManager.getAuthorityMetadataByAlias(this.hostnameAndPort);\r\n if (!metadataEntity) {\r\n metadataEntity = new AuthorityMetadataEntity();\r\n metadataEntity.updateCanonicalAuthority(this.canonicalAuthority);\r\n }\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);\r\n return [4 /*yield*/, this.updateCloudDiscoveryMetadata(metadataEntity)];\r\n case 1:\r\n cloudDiscoverySource = _d.sent();\r\n this.canonicalAuthority = this.canonicalAuthority.replace(this.hostnameAndPort, metadataEntity.preferred_network);\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.AuthorityUpdateEndpointMetadata, this.correlationId);\r\n return [4 /*yield*/, this.updateEndpointMetadata(metadataEntity)];\r\n case 2:\r\n endpointSource = _d.sent();\r\n if (cloudDiscoverySource !== AuthorityMetadataSource.CACHE && endpointSource !== AuthorityMetadataSource.CACHE) {\r\n // Reset the expiration time unless both values came from a successful cache lookup\r\n metadataEntity.resetExpiresAt();\r\n metadataEntity.updateCanonicalAuthority(this.canonicalAuthority);\r\n }\r\n cacheKey = this.cacheManager.generateAuthorityMetadataCacheKey(metadataEntity.preferred_cache);\r\n this.cacheManager.setAuthorityMetadata(cacheKey, metadataEntity);\r\n this.metadata = metadataEntity;\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Update AuthorityMetadataEntity with new endpoints and return where the information came from\r\n * @param metadataEntity\r\n */\r\n Authority.prototype.updateEndpointMetadata = function (metadataEntity) {\r\n var _a, _b, _c, _d, _e, _f;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var metadata, harcodedMetadata;\r\n return __generator(this, function (_g) {\r\n switch (_g.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityUpdateEndpointMetadata, this.correlationId);\r\n metadata = this.getEndpointMetadataFromConfig();\r\n if (metadata) {\r\n metadataEntity.updateEndpointMetadata(metadata, false);\r\n return [2 /*return*/, AuthorityMetadataSource.CONFIG];\r\n }\r\n if (this.isAuthoritySameType(metadataEntity) && metadataEntity.endpointsFromNetwork && !metadataEntity.isExpired()) {\r\n // No need to update\r\n return [2 /*return*/, AuthorityMetadataSource.CACHE];\r\n }\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);\r\n return [4 /*yield*/, this.getEndpointMetadataFromNetwork()];\r\n case 1:\r\n metadata = _g.sent();\r\n if (!metadata) return [3 /*break*/, 4];\r\n if (!((_c = this.authorityOptions.azureRegionConfiguration) === null || _c === void 0 ? void 0 : _c.azureRegion)) return [3 /*break*/, 3];\r\n (_d = this.performanceClient) === null || _d === void 0 ? void 0 : _d.setPreQueueTime(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);\r\n return [4 /*yield*/, this.updateMetadataWithRegionalInformation(metadata)];\r\n case 2:\r\n metadata = _g.sent();\r\n _g.label = 3;\r\n case 3:\r\n metadataEntity.updateEndpointMetadata(metadata, true);\r\n return [2 /*return*/, AuthorityMetadataSource.NETWORK];\r\n case 4:\r\n harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();\r\n if (!(harcodedMetadata && !this.authorityOptions.skipAuthorityMetadataCache)) return [3 /*break*/, 7];\r\n if (!((_e = this.authorityOptions.azureRegionConfiguration) === null || _e === void 0 ? void 0 : _e.azureRegion)) return [3 /*break*/, 6];\r\n (_f = this.performanceClient) === null || _f === void 0 ? void 0 : _f.setPreQueueTime(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);\r\n return [4 /*yield*/, this.updateMetadataWithRegionalInformation(harcodedMetadata)];\r\n case 5:\r\n harcodedMetadata = _g.sent();\r\n _g.label = 6;\r\n case 6:\r\n metadataEntity.updateEndpointMetadata(harcodedMetadata, false);\r\n return [2 /*return*/, AuthorityMetadataSource.HARDCODED_VALUES];\r\n case 7: throw ClientAuthError.createUnableToGetOpenidConfigError(this.defaultOpenIdConfigurationEndpoint);\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Compares the number of url components after the domain to determine if the cached\r\n * authority metadata can be used for the requested authority. Protects against same domain different\r\n * authority such as login.microsoftonline.com/tenant and login.microsoftonline.com/tfp/tenant/policy\r\n * @param metadataEntity\r\n */\r\n Authority.prototype.isAuthoritySameType = function (metadataEntity) {\r\n var cachedAuthorityUrl = new UrlString(metadataEntity.canonical_authority);\r\n var cachedParts = cachedAuthorityUrl.getUrlComponents().PathSegments;\r\n return cachedParts.length === this.canonicalAuthorityUrlComponents.PathSegments.length;\r\n };\r\n /**\r\n * Parse authorityMetadata config option\r\n */\r\n Authority.prototype.getEndpointMetadataFromConfig = function () {\r\n if (this.authorityOptions.authorityMetadata) {\r\n try {\r\n return JSON.parse(this.authorityOptions.authorityMetadata);\r\n }\r\n catch (e) {\r\n throw ClientConfigurationError.createInvalidAuthorityMetadataError();\r\n }\r\n }\r\n return null;\r\n };\r\n /**\r\n * Gets OAuth endpoints from the given OpenID configuration endpoint.\r\n *\r\n * @param hasHardcodedMetadata boolean\r\n */\r\n Authority.prototype.getEndpointMetadataFromNetwork = function () {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var options, response;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);\r\n options = {};\r\n _b.label = 1;\r\n case 1:\r\n _b.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.networkInterface.\r\n sendGetRequestAsync(this.defaultOpenIdConfigurationEndpoint, options)];\r\n case 2:\r\n response = _b.sent();\r\n return [2 /*return*/, isOpenIdConfigResponse(response.body) ? response.body : null];\r\n case 3:\r\n _b.sent();\r\n return [2 /*return*/, null];\r\n case 4: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Get OAuth endpoints for common authorities.\r\n */\r\n Authority.prototype.getEndpointMetadataFromHardcodedValues = function () {\r\n if (this.canonicalAuthority in EndpointMetadata) {\r\n return EndpointMetadata[this.canonicalAuthority];\r\n }\r\n return null;\r\n };\r\n /**\r\n * Update the retrieved metadata with regional information.\r\n * User selected Azure region will be used if configured.\r\n */\r\n Authority.prototype.updateMetadataWithRegionalInformation = function (metadata) {\r\n var _a, _b, _c, _d;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var userConfiguredAzureRegion, autodetectedRegionName;\r\n return __generator(this, function (_e) {\r\n switch (_e.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);\r\n userConfiguredAzureRegion = (_b = this.authorityOptions.azureRegionConfiguration) === null || _b === void 0 ? void 0 : _b.azureRegion;\r\n if (!userConfiguredAzureRegion) return [3 /*break*/, 2];\r\n if (userConfiguredAzureRegion !== Constants.AZURE_REGION_AUTO_DISCOVER_FLAG) {\r\n this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.CONFIGURED_NO_AUTO_DETECTION;\r\n this.regionDiscoveryMetadata.region_used = userConfiguredAzureRegion;\r\n return [2 /*return*/, Authority.replaceWithRegionalInformation(metadata, userConfiguredAzureRegion)];\r\n }\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);\r\n return [4 /*yield*/, this.regionDiscovery.detectRegion((_d = this.authorityOptions.azureRegionConfiguration) === null || _d === void 0 ? void 0 : _d.environmentRegion, this.regionDiscoveryMetadata)];\r\n case 1:\r\n autodetectedRegionName = _e.sent();\r\n if (autodetectedRegionName) {\r\n this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_SUCCESSFUL;\r\n this.regionDiscoveryMetadata.region_used = autodetectedRegionName;\r\n return [2 /*return*/, Authority.replaceWithRegionalInformation(metadata, autodetectedRegionName)];\r\n }\r\n this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_FAILED;\r\n _e.label = 2;\r\n case 2: return [2 /*return*/, metadata];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Updates the AuthorityMetadataEntity with new aliases, preferred_network and preferred_cache\r\n * and returns where the information was retrieved from\r\n * @param metadataEntity\r\n * @returns AuthorityMetadataSource\r\n */\r\n Authority.prototype.updateCloudDiscoveryMetadata = function (metadataEntity) {\r\n var _a, _b;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var metadata, metadataEntityExpired, harcodedMetadata;\r\n return __generator(this, function (_c) {\r\n switch (_c.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);\r\n // attempt to read metadata from the config\r\n this.logger.verbose(\"Attempting to get cloud discovery metadata in the config\");\r\n this.logger.verbosePii(\"Known Authorities: \" + (this.authorityOptions.knownAuthorities || Constants.NOT_APPLICABLE));\r\n this.logger.verbosePii(\"Authority Metadata: \" + (this.authorityOptions.authorityMetadata || Constants.NOT_APPLICABLE));\r\n this.logger.verbosePii(\"Canonical Authority: \" + (metadataEntity.canonical_authority || Constants.NOT_APPLICABLE));\r\n metadata = this.getCloudDiscoveryMetadataFromConfig();\r\n if (metadata) {\r\n this.logger.verbose(\"Found cloud discovery metadata in the config.\");\r\n metadataEntity.updateCloudDiscoveryMetadata(metadata, false);\r\n return [2 /*return*/, AuthorityMetadataSource.CONFIG];\r\n }\r\n // If the cached metadata came from config but that config was not passed to this instance, we must go to the network\r\n this.logger.verbose(\"Did not find cloud discovery metadata in the config... Attempting to get cloud discovery metadata from the cache.\");\r\n metadataEntityExpired = metadataEntity.isExpired();\r\n if (this.isAuthoritySameType(metadataEntity) && metadataEntity.aliasesFromNetwork && !metadataEntityExpired) {\r\n this.logger.verbose(\"Found metadata in the cache.\");\r\n // No need to update\r\n return [2 /*return*/, AuthorityMetadataSource.CACHE];\r\n }\r\n else if (metadataEntityExpired) {\r\n this.logger.verbose(\"The metadata entity is expired.\");\r\n }\r\n this.logger.verbose(\"Did not find cloud discovery metadata in the cache... Attempting to get cloud discovery metadata from the network.\");\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, this.correlationId);\r\n return [4 /*yield*/, this.getCloudDiscoveryMetadataFromNetwork()];\r\n case 1:\r\n metadata = _c.sent();\r\n if (metadata) {\r\n this.logger.verbose(\"cloud discovery metadata was successfully returned from getCloudDiscoveryMetadataFromNetwork()\");\r\n metadataEntity.updateCloudDiscoveryMetadata(metadata, true);\r\n return [2 /*return*/, AuthorityMetadataSource.NETWORK];\r\n }\r\n this.logger.verbose(\"Did not find cloud discovery metadata from the network... Attempting to get cloud discovery metadata from hardcoded values.\");\r\n harcodedMetadata = this.getCloudDiscoveryMetadataFromHarcodedValues();\r\n if (harcodedMetadata && !this.options.skipAuthorityMetadataCache) {\r\n this.logger.verbose(\"Found cloud discovery metadata from hardcoded values.\");\r\n metadataEntity.updateCloudDiscoveryMetadata(harcodedMetadata, false);\r\n return [2 /*return*/, AuthorityMetadataSource.HARDCODED_VALUES];\r\n }\r\n // Metadata could not be obtained from the config, cache, network or hardcoded values\r\n this.logger.error(\"Did not find cloud discovery metadata from hardcoded values... Metadata could not be obtained from config, cache, network or hardcoded values. Throwing Untrusted Authority Error.\");\r\n throw ClientConfigurationError.createUntrustedAuthorityError();\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Parse cloudDiscoveryMetadata config or check knownAuthorities\r\n */\r\n Authority.prototype.getCloudDiscoveryMetadataFromConfig = function () {\r\n // CIAM does not support cloud discovery metadata\r\n if (this.authorityType === AuthorityType.Ciam) {\r\n this.logger.verbose(\"CIAM authorities do not support cloud discovery metadata, generate the aliases from authority host.\");\r\n return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);\r\n }\r\n // Check if network response was provided in config\r\n if (this.authorityOptions.cloudDiscoveryMetadata) {\r\n this.logger.verbose(\"The cloud discovery metadata has been provided as a network response, in the config.\");\r\n try {\r\n this.logger.verbose(\"Attempting to parse the cloud discovery metadata.\");\r\n var parsedResponse = JSON.parse(this.authorityOptions.cloudDiscoveryMetadata);\r\n var metadata = Authority.getCloudDiscoveryMetadataFromNetworkResponse(parsedResponse.metadata, this.hostnameAndPort);\r\n this.logger.verbose(\"Parsed the cloud discovery metadata.\");\r\n if (metadata) {\r\n this.logger.verbose(\"There is returnable metadata attached to the parsed cloud discovery metadata.\");\r\n return metadata;\r\n }\r\n else {\r\n this.logger.verbose(\"There is no metadata attached to the parsed cloud discovery metadata.\");\r\n }\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"Unable to parse the cloud discovery metadata. Throwing Invalid Cloud Discovery Metadata Error.\");\r\n throw ClientConfigurationError.createInvalidCloudDiscoveryMetadataError();\r\n }\r\n }\r\n // If cloudDiscoveryMetadata is empty or does not contain the host, check knownAuthorities\r\n if (this.isInKnownAuthorities()) {\r\n this.logger.verbose(\"The host is included in knownAuthorities. Creating new cloud discovery metadata from the host.\");\r\n return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);\r\n }\r\n return null;\r\n };\r\n /**\r\n * Called to get metadata from network if CloudDiscoveryMetadata was not populated by config\r\n *\r\n * @param hasHardcodedMetadata boolean\r\n */\r\n Authority.prototype.getCloudDiscoveryMetadataFromNetwork = function () {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var instanceDiscoveryEndpoint, options, match, response, typedResponseBody, metadata, error_1, typedError;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, this.correlationId);\r\n instanceDiscoveryEndpoint = \"\" + Constants.AAD_INSTANCE_DISCOVERY_ENDPT + this.canonicalAuthority + \"oauth2/v2.0/authorize\";\r\n options = {};\r\n match = null;\r\n _b.label = 1;\r\n case 1:\r\n _b.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(instanceDiscoveryEndpoint, options)];\r\n case 2:\r\n response = _b.sent();\r\n typedResponseBody = void 0;\r\n metadata = void 0;\r\n if (isCloudInstanceDiscoveryResponse(response.body)) {\r\n typedResponseBody = response.body;\r\n metadata = typedResponseBody.metadata;\r\n this.logger.verbosePii(\"tenant_discovery_endpoint is: \" + typedResponseBody.tenant_discovery_endpoint);\r\n }\r\n else if (isCloudInstanceDiscoveryErrorResponse(response.body)) {\r\n this.logger.warning(\"A CloudInstanceDiscoveryErrorResponse was returned. The cloud instance discovery network request's status code is: \" + response.status);\r\n typedResponseBody = response.body;\r\n if (typedResponseBody.error === Constants.INVALID_INSTANCE) {\r\n this.logger.error(\"The CloudInstanceDiscoveryErrorResponse error is invalid_instance.\");\r\n return [2 /*return*/, null];\r\n }\r\n this.logger.warning(\"The CloudInstanceDiscoveryErrorResponse error is \" + typedResponseBody.error);\r\n this.logger.warning(\"The CloudInstanceDiscoveryErrorResponse error description is \" + typedResponseBody.error_description);\r\n this.logger.warning(\"Setting the value of the CloudInstanceDiscoveryMetadata (returned from the network) to []\");\r\n metadata = [];\r\n }\r\n else {\r\n this.logger.error(\"AAD did not return a CloudInstanceDiscoveryResponse or CloudInstanceDiscoveryErrorResponse\");\r\n return [2 /*return*/, null];\r\n }\r\n this.logger.verbose(\"Attempting to find a match between the developer's authority and the CloudInstanceDiscoveryMetadata returned from the network request.\");\r\n match = Authority.getCloudDiscoveryMetadataFromNetworkResponse(metadata, this.hostnameAndPort);\r\n return [3 /*break*/, 4];\r\n case 3:\r\n error_1 = _b.sent();\r\n if (error_1 instanceof AuthError) {\r\n this.logger.error(\"There was a network error while attempting to get the cloud discovery instance metadata.\\nError: \" + error_1.errorCode + \"\\nError Description: \" + error_1.errorMessage);\r\n }\r\n else {\r\n typedError = error_1;\r\n this.logger.error(\"A non-MSALJS error was thrown while attempting to get the cloud instance discovery metadata.\\nError: \" + typedError.name + \"\\nError Description: \" + typedError.message);\r\n }\r\n return [2 /*return*/, null];\r\n case 4:\r\n // Custom Domain scenario, host is trusted because Instance Discovery call succeeded\r\n if (!match) {\r\n this.logger.warning(\"The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the network request.\");\r\n this.logger.verbose(\"Creating custom Authority for custom domain scenario.\");\r\n match = Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);\r\n }\r\n return [2 /*return*/, match];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Get cloud discovery metadata for common authorities\r\n */\r\n Authority.prototype.getCloudDiscoveryMetadataFromHarcodedValues = function () {\r\n if (this.canonicalAuthority in InstanceDiscoveryMetadata) {\r\n return InstanceDiscoveryMetadata[this.canonicalAuthority];\r\n }\r\n return null;\r\n };\r\n /**\r\n * Helper function to determine if this host is included in the knownAuthorities config option\r\n */\r\n Authority.prototype.isInKnownAuthorities = function () {\r\n var _this = this;\r\n var matches = this.authorityOptions.knownAuthorities.filter(function (authority) {\r\n return UrlString.getDomainFromUrl(authority).toLowerCase() === _this.hostnameAndPort;\r\n });\r\n return matches.length > 0;\r\n };\r\n /**\r\n * helper function to populate the authority based on azureCloudOptions\r\n * @param authorityString\r\n * @param azureCloudOptions\r\n */\r\n Authority.generateAuthority = function (authorityString, azureCloudOptions) {\r\n var authorityAzureCloudInstance;\r\n if (azureCloudOptions && azureCloudOptions.azureCloudInstance !== AzureCloudInstance.None) {\r\n var tenant = azureCloudOptions.tenant ? azureCloudOptions.tenant : Constants.DEFAULT_COMMON_TENANT;\r\n authorityAzureCloudInstance = azureCloudOptions.azureCloudInstance + \"/\" + tenant + \"/\";\r\n }\r\n return authorityAzureCloudInstance ? authorityAzureCloudInstance : authorityString;\r\n };\r\n /**\r\n * Creates cloud discovery metadata object from a given host\r\n * @param host\r\n */\r\n Authority.createCloudDiscoveryMetadataFromHost = function (host) {\r\n return {\r\n preferred_network: host,\r\n preferred_cache: host,\r\n aliases: [host]\r\n };\r\n };\r\n /**\r\n * Searches instance discovery network response for the entry that contains the host in the aliases list\r\n * @param response\r\n * @param authority\r\n */\r\n Authority.getCloudDiscoveryMetadataFromNetworkResponse = function (response, authority) {\r\n for (var i = 0; i < response.length; i++) {\r\n var metadata = response[i];\r\n if (metadata.aliases.indexOf(authority) > -1) {\r\n return metadata;\r\n }\r\n }\r\n return null;\r\n };\r\n /**\r\n * helper function to generate environment from authority object\r\n */\r\n Authority.prototype.getPreferredCache = function () {\r\n if (this.discoveryComplete()) {\r\n return this.metadata.preferred_cache;\r\n }\r\n else {\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(\"Discovery incomplete.\");\r\n }\r\n };\r\n /**\r\n * Returns whether or not the provided host is an alias of this authority instance\r\n * @param host\r\n */\r\n Authority.prototype.isAlias = function (host) {\r\n return this.metadata.aliases.indexOf(host) > -1;\r\n };\r\n /**\r\n * Checks whether the provided host is that of a public cloud authority\r\n *\r\n * @param authority string\r\n * @returns bool\r\n */\r\n Authority.isPublicCloudAuthority = function (host) {\r\n return Constants.KNOWN_PUBLIC_CLOUDS.indexOf(host) >= 0;\r\n };\r\n /**\r\n * Rebuild the authority string with the region\r\n *\r\n * @param host string\r\n * @param region string\r\n */\r\n Authority.buildRegionalAuthorityString = function (host, region, queryString) {\r\n // Create and validate a Url string object with the initial authority string\r\n var authorityUrlInstance = new UrlString(host);\r\n authorityUrlInstance.validateAsUri();\r\n var authorityUrlParts = authorityUrlInstance.getUrlComponents();\r\n var hostNameAndPort = region + \".\" + authorityUrlParts.HostNameAndPort;\r\n if (this.isPublicCloudAuthority(authorityUrlParts.HostNameAndPort)) {\r\n hostNameAndPort = region + \".\" + Constants.REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX;\r\n }\r\n // Include the query string portion of the url\r\n var url = UrlString.constructAuthorityUriFromObject(__assign(__assign({}, authorityUrlInstance.getUrlComponents()), { HostNameAndPort: hostNameAndPort })).urlString;\r\n // Add the query string if a query string was provided\r\n if (queryString)\r\n return url + \"?\" + queryString;\r\n return url;\r\n };\r\n /**\r\n * Replace the endpoints in the metadata object with their regional equivalents.\r\n *\r\n * @param metadata OpenIdConfigResponse\r\n * @param azureRegion string\r\n */\r\n Authority.replaceWithRegionalInformation = function (metadata, azureRegion) {\r\n metadata.authorization_endpoint = Authority.buildRegionalAuthorityString(metadata.authorization_endpoint, azureRegion);\r\n // TODO: Enquire on whether we should leave the query string or remove it before releasing the feature\r\n metadata.token_endpoint = Authority.buildRegionalAuthorityString(metadata.token_endpoint, azureRegion, Constants.REGIONAL_AUTH_NON_MSI_QUERY_STRING);\r\n if (metadata.end_session_endpoint) {\r\n metadata.end_session_endpoint = Authority.buildRegionalAuthorityString(metadata.end_session_endpoint, azureRegion);\r\n }\r\n return metadata;\r\n };\r\n /**\r\n * Transform CIAM_AUTHORIY as per the below rules:\r\n * If no path segments found and it is a CIAM authority (hostname ends with .ciamlogin.com), then transform it\r\n *\r\n * NOTE: The transformation path should go away once STS supports CIAM with the format: `tenantIdorDomain.ciamlogin.com`\r\n * `ciamlogin.com` can also change in the future and we should accommodate the same\r\n *\r\n * @param authority\r\n */\r\n Authority.transformCIAMAuthority = function (authority) {\r\n var ciamAuthority = authority.endsWith(Constants.FORWARD_SLASH) ? authority : \"\" + authority + Constants.FORWARD_SLASH;\r\n var authorityUrl = new UrlString(authority);\r\n var authorityUrlComponents = authorityUrl.getUrlComponents();\r\n // check if transformation is needed\r\n if (authorityUrlComponents.PathSegments.length === 0 && (authorityUrlComponents.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL))) {\r\n var tenantIdOrDomain = authorityUrlComponents.HostNameAndPort.split(\".\")[0];\r\n ciamAuthority = \"\" + ciamAuthority + tenantIdOrDomain + Constants.AAD_TENANT_DOMAIN_SUFFIX;\r\n }\r\n return ciamAuthority;\r\n };\r\n // Reserved tenant domain names that will not be replaced with tenant id\r\n Authority.reservedTenantDomains = (new Set([\r\n \"{tenant}\",\r\n \"{tenantid}\",\r\n AADAuthorityConstants.COMMON,\r\n AADAuthorityConstants.CONSUMERS,\r\n AADAuthorityConstants.ORGANIZATIONS\r\n ]));\r\n return Authority;\r\n}());\n\nexport { Authority };\n//# sourceMappingURL=Authority.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nfunction isCloudInstanceDiscoveryResponse(response) {\r\n return (response.hasOwnProperty(\"tenant_discovery_endpoint\") &&\r\n response.hasOwnProperty(\"metadata\"));\r\n}\n\nexport { isCloudInstanceDiscoveryResponse };\n//# sourceMappingURL=CloudInstanceDiscoveryResponse.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nfunction isCloudInstanceDiscoveryErrorResponse(response) {\r\n return (response.hasOwnProperty(\"error\") &&\r\n response.hasOwnProperty(\"error_description\"));\r\n}\n\nexport { isCloudInstanceDiscoveryErrorResponse };\n//# sourceMappingURL=CloudInstanceDiscoveryErrorResponse.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { Authority } from './Authority.js';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar AuthorityFactory = /** @class */ (function () {\r\n function AuthorityFactory() {\r\n }\r\n /**\r\n * Create an authority object of the correct type based on the url\r\n * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)\r\n *\r\n * Also performs endpoint discovery.\r\n *\r\n * @param authorityUri\r\n * @param networkClient\r\n * @param protocolMode\r\n */\r\n AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var authorityUriFinal, acquireTokenAuthority, e_1;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n performanceClient === null || performanceClient === void 0 ? void 0 : performanceClient.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);\r\n authorityUriFinal = Authority.transformCIAMAuthority(authorityUri);\r\n acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n performanceClient === null || performanceClient === void 0 ? void 0 : performanceClient.setPreQueueTime(PerformanceEvents.AuthorityResolveEndpointsAsync, correlationId);\r\n return [4 /*yield*/, acquireTokenAuthority.resolveEndpointsAsync()];\r\n case 2:\r\n _a.sent();\r\n return [2 /*return*/, acquireTokenAuthority];\r\n case 3:\r\n e_1 = _a.sent();\r\n throw ClientAuthError.createEndpointDiscoveryIncompleteError(e_1);\r\n case 4: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Create an authority object of the correct type based on the url\r\n * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)\r\n *\r\n * Does not perform endpoint discovery.\r\n *\r\n * @param authorityUrl\r\n * @param networkInterface\r\n * @param protocolMode\r\n */\r\n AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {\r\n // Throw error if authority url is empty\r\n if (StringUtils.isEmpty(authorityUrl)) {\r\n throw ClientConfigurationError.createUrlEmptyError();\r\n }\r\n return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId);\r\n };\r\n return AuthorityFactory;\r\n}());\n\nexport { AuthorityFactory };\n//# sourceMappingURL=AuthorityFactory.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { SERVER_TELEM_CONSTANTS, CacheOutcome, Constants, Separators } from '../../utils/Constants.js';\nimport { ServerTelemetryEntity } from '../../cache/entities/ServerTelemetryEntity.js';\nimport { StringUtils } from '../../utils/StringUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar ServerTelemetryManager = /** @class */ (function () {\r\n function ServerTelemetryManager(telemetryRequest, cacheManager) {\r\n this.cacheOutcome = CacheOutcome.NO_CACHE_HIT;\r\n this.cacheManager = cacheManager;\r\n this.apiId = telemetryRequest.apiId;\r\n this.correlationId = telemetryRequest.correlationId;\r\n this.wrapperSKU = telemetryRequest.wrapperSKU || Constants.EMPTY_STRING;\r\n this.wrapperVer = telemetryRequest.wrapperVer || Constants.EMPTY_STRING;\r\n this.telemetryCacheKey = SERVER_TELEM_CONSTANTS.CACHE_KEY + Separators.CACHE_KEY_SEPARATOR + telemetryRequest.clientId;\r\n }\r\n /**\r\n * API to add MSER Telemetry to request\r\n */\r\n ServerTelemetryManager.prototype.generateCurrentRequestHeaderValue = function () {\r\n var request = \"\" + this.apiId + SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR + this.cacheOutcome;\r\n var platformFields = [this.wrapperSKU, this.wrapperVer].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);\r\n var regionDiscoveryFields = this.getRegionDiscoveryFields();\r\n var requestWithRegionDiscoveryFields = [request, regionDiscoveryFields].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);\r\n return [SERVER_TELEM_CONSTANTS.SCHEMA_VERSION, requestWithRegionDiscoveryFields, platformFields].join(SERVER_TELEM_CONSTANTS.CATEGORY_SEPARATOR);\r\n };\r\n /**\r\n * API to add MSER Telemetry for the last failed request\r\n */\r\n ServerTelemetryManager.prototype.generateLastRequestHeaderValue = function () {\r\n var lastRequests = this.getLastRequests();\r\n var maxErrors = ServerTelemetryManager.maxErrorsToSend(lastRequests);\r\n var failedRequests = lastRequests.failedRequests.slice(0, 2 * maxErrors).join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);\r\n var errors = lastRequests.errors.slice(0, maxErrors).join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);\r\n var errorCount = lastRequests.errors.length;\r\n // Indicate whether this header contains all data or partial data\r\n var overflow = maxErrors < errorCount ? SERVER_TELEM_CONSTANTS.OVERFLOW_TRUE : SERVER_TELEM_CONSTANTS.OVERFLOW_FALSE;\r\n var platformFields = [errorCount, overflow].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);\r\n return [SERVER_TELEM_CONSTANTS.SCHEMA_VERSION, lastRequests.cacheHits, failedRequests, errors, platformFields].join(SERVER_TELEM_CONSTANTS.CATEGORY_SEPARATOR);\r\n };\r\n /**\r\n * API to cache token failures for MSER data capture\r\n * @param error\r\n */\r\n ServerTelemetryManager.prototype.cacheFailedRequest = function (error) {\r\n var lastRequests = this.getLastRequests();\r\n if (lastRequests.errors.length >= SERVER_TELEM_CONSTANTS.MAX_CACHED_ERRORS) {\r\n // Remove a cached error to make room, first in first out\r\n lastRequests.failedRequests.shift(); // apiId\r\n lastRequests.failedRequests.shift(); // correlationId\r\n lastRequests.errors.shift();\r\n }\r\n lastRequests.failedRequests.push(this.apiId, this.correlationId);\r\n if (!StringUtils.isEmpty(error.subError)) {\r\n lastRequests.errors.push(error.subError);\r\n }\r\n else if (!StringUtils.isEmpty(error.errorCode)) {\r\n lastRequests.errors.push(error.errorCode);\r\n }\r\n else if (!!error && error.toString()) {\r\n lastRequests.errors.push(error.toString());\r\n }\r\n else {\r\n lastRequests.errors.push(SERVER_TELEM_CONSTANTS.UNKNOWN_ERROR);\r\n }\r\n this.cacheManager.setServerTelemetry(this.telemetryCacheKey, lastRequests);\r\n return;\r\n };\r\n /**\r\n * Update server telemetry cache entry by incrementing cache hit counter\r\n */\r\n ServerTelemetryManager.prototype.incrementCacheHits = function () {\r\n var lastRequests = this.getLastRequests();\r\n lastRequests.cacheHits += 1;\r\n this.cacheManager.setServerTelemetry(this.telemetryCacheKey, lastRequests);\r\n return lastRequests.cacheHits;\r\n };\r\n /**\r\n * Get the server telemetry entity from cache or initialize a new one\r\n */\r\n ServerTelemetryManager.prototype.getLastRequests = function () {\r\n var initialValue = new ServerTelemetryEntity();\r\n var lastRequests = this.cacheManager.getServerTelemetry(this.telemetryCacheKey);\r\n return lastRequests || initialValue;\r\n };\r\n /**\r\n * Remove server telemetry cache entry\r\n */\r\n ServerTelemetryManager.prototype.clearTelemetryCache = function () {\r\n var lastRequests = this.getLastRequests();\r\n var numErrorsFlushed = ServerTelemetryManager.maxErrorsToSend(lastRequests);\r\n var errorCount = lastRequests.errors.length;\r\n if (numErrorsFlushed === errorCount) {\r\n // All errors were sent on last request, clear Telemetry cache\r\n this.cacheManager.removeItem(this.telemetryCacheKey);\r\n }\r\n else {\r\n // Partial data was flushed to server, construct a new telemetry cache item with errors that were not flushed\r\n var serverTelemEntity = new ServerTelemetryEntity();\r\n serverTelemEntity.failedRequests = lastRequests.failedRequests.slice(numErrorsFlushed * 2); // failedRequests contains 2 items for each error\r\n serverTelemEntity.errors = lastRequests.errors.slice(numErrorsFlushed);\r\n this.cacheManager.setServerTelemetry(this.telemetryCacheKey, serverTelemEntity);\r\n }\r\n };\r\n /**\r\n * Returns the maximum number of errors that can be flushed to the server in the next network request\r\n * @param serverTelemetryEntity\r\n */\r\n ServerTelemetryManager.maxErrorsToSend = function (serverTelemetryEntity) {\r\n var i;\r\n var maxErrors = 0;\r\n var dataSize = 0;\r\n var errorCount = serverTelemetryEntity.errors.length;\r\n for (i = 0; i < errorCount; i++) {\r\n // failedRequests parameter contains pairs of apiId and correlationId, multiply index by 2 to preserve pairs\r\n var apiId = serverTelemetryEntity.failedRequests[2 * i] || Constants.EMPTY_STRING;\r\n var correlationId = serverTelemetryEntity.failedRequests[2 * i + 1] || Constants.EMPTY_STRING;\r\n var errorCode = serverTelemetryEntity.errors[i] || Constants.EMPTY_STRING;\r\n // Count number of characters that would be added to header, each character is 1 byte. Add 3 at the end to account for separators\r\n dataSize += apiId.toString().length + correlationId.toString().length + errorCode.length + 3;\r\n if (dataSize < SERVER_TELEM_CONSTANTS.MAX_LAST_HEADER_BYTES) {\r\n // Adding this entry to the header would still keep header size below the limit\r\n maxErrors += 1;\r\n }\r\n else {\r\n break;\r\n }\r\n }\r\n return maxErrors;\r\n };\r\n /**\r\n * Get the region discovery fields\r\n *\r\n * @returns string\r\n */\r\n ServerTelemetryManager.prototype.getRegionDiscoveryFields = function () {\r\n var regionDiscoveryFields = [];\r\n regionDiscoveryFields.push(this.regionUsed || Constants.EMPTY_STRING);\r\n regionDiscoveryFields.push(this.regionSource || Constants.EMPTY_STRING);\r\n regionDiscoveryFields.push(this.regionOutcome || Constants.EMPTY_STRING);\r\n return regionDiscoveryFields.join(\",\");\r\n };\r\n /**\r\n * Update the region discovery metadata\r\n *\r\n * @param regionDiscoveryMetadata\r\n * @returns void\r\n */\r\n ServerTelemetryManager.prototype.updateRegionDiscoveryMetadata = function (regionDiscoveryMetadata) {\r\n this.regionUsed = regionDiscoveryMetadata.region_used;\r\n this.regionSource = regionDiscoveryMetadata.region_source;\r\n this.regionOutcome = regionDiscoveryMetadata.region_outcome;\r\n };\r\n /**\r\n * Set cache outcome\r\n */\r\n ServerTelemetryManager.prototype.setCacheOutcome = function (cacheOutcome) {\r\n this.cacheOutcome = cacheOutcome;\r\n };\r\n return ServerTelemetryManager;\r\n}());\n\nexport { ServerTelemetryManager };\n//# sourceMappingURL=ServerTelemetryManager.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator, __spread, __assign } from '../_virtual/_tslib.js';\nimport { AccountEntity, AuthenticationScheme, ClientConfigurationError, StringUtils, PerformanceEvents, UrlString, ServerTelemetryManager, AuthorityFactory } from '@azure/msal-common';\nimport { version } from '../packageMetadata.js';\nimport { BrowserConstants } from '../utils/BrowserConstants.js';\nimport { BrowserUtils } from '../utils/BrowserUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar BaseInteractionClient = /** @class */ (function () {\r\n function BaseInteractionClient(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId) {\r\n this.config = config;\r\n this.browserStorage = storageImpl;\r\n this.browserCrypto = browserCrypto;\r\n this.networkClient = this.config.system.networkClient;\r\n this.eventHandler = eventHandler;\r\n this.navigationClient = navigationClient;\r\n this.nativeMessageHandler = nativeMessageHandler;\r\n this.correlationId = correlationId || this.browserCrypto.createNewGuid();\r\n this.logger = logger.clone(BrowserConstants.MSAL_SKU, version, this.correlationId);\r\n this.performanceClient = performanceClient;\r\n }\r\n BaseInteractionClient.prototype.clearCacheOnLogout = function (account) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n if (!account) return [3 /*break*/, 5];\r\n if (AccountEntity.accountInfoIsEqual(account, this.browserStorage.getActiveAccount(), false)) {\r\n this.logger.verbose(\"Setting active account to null\");\r\n this.browserStorage.setActiveAccount(null);\r\n }\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n return [4 /*yield*/, this.browserStorage.removeAccount(AccountEntity.generateAccountCacheKey(account))];\r\n case 2:\r\n _a.sent();\r\n this.logger.verbose(\"Cleared cache items belonging to the account provided in the logout request.\");\r\n return [3 /*break*/, 4];\r\n case 3:\r\n _a.sent();\r\n this.logger.error(\"Account provided in logout request was not found. Local cache unchanged.\");\r\n return [3 /*break*/, 4];\r\n case 4: return [3 /*break*/, 9];\r\n case 5:\r\n _a.trys.push([5, 8, , 9]);\r\n this.logger.verbose(\"No account provided in logout request, clearing all cache items.\", this.correlationId);\r\n // Clear all accounts and tokens\r\n return [4 /*yield*/, this.browserStorage.clear()];\r\n case 6:\r\n // Clear all accounts and tokens\r\n _a.sent();\r\n // Clear any stray keys from IndexedDB\r\n return [4 /*yield*/, this.browserCrypto.clearKeystore()];\r\n case 7:\r\n // Clear any stray keys from IndexedDB\r\n _a.sent();\r\n return [3 /*break*/, 9];\r\n case 8:\r\n _a.sent();\r\n this.logger.error(\"Attempted to clear all MSAL cache items and failed. Local cache unchanged.\");\r\n return [3 /*break*/, 9];\r\n case 9: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Initializer function for all request APIs\r\n * @param request\r\n */\r\n BaseInteractionClient.prototype.initializeBaseRequest = function (request, account) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var authority, scopes, validatedRequest, _a;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeBaseRequest, request.correlationId);\r\n this.logger.verbose(\"Initializing BaseAuthRequest\");\r\n authority = request.authority || this.config.auth.authority;\r\n if (!account) return [3 /*break*/, 2];\r\n return [4 /*yield*/, this.validateRequestAuthority(authority, account)];\r\n case 1:\r\n _b.sent();\r\n _b.label = 2;\r\n case 2:\r\n scopes = __spread(((request && request.scopes) || []));\r\n validatedRequest = __assign(__assign({}, request), { correlationId: this.correlationId, authority: authority,\r\n scopes: scopes });\r\n // Set authenticationScheme to BEARER if not explicitly set in the request\r\n if (!validatedRequest.authenticationScheme) {\r\n validatedRequest.authenticationScheme = AuthenticationScheme.BEARER;\r\n this.logger.verbose(\"Authentication Scheme wasn't explicitly set in request, defaulting to \\\"Bearer\\\" request\");\r\n }\r\n else {\r\n if (validatedRequest.authenticationScheme === AuthenticationScheme.SSH) {\r\n if (!request.sshJwk) {\r\n throw ClientConfigurationError.createMissingSshJwkError();\r\n }\r\n if (!request.sshKid) {\r\n throw ClientConfigurationError.createMissingSshKidError();\r\n }\r\n }\r\n this.logger.verbose(\"Authentication Scheme set to \\\"\" + validatedRequest.authenticationScheme + \"\\\" as configured in Auth request\");\r\n }\r\n if (!(this.config.cache.claimsBasedCachingEnabled && request.claims && !StringUtils.isEmptyObj(request.claims))) return [3 /*break*/, 4];\r\n _a = validatedRequest;\r\n return [4 /*yield*/, this.browserCrypto.hashString(request.claims)];\r\n case 3:\r\n _a.requestedClaimsHash = _b.sent();\r\n _b.label = 4;\r\n case 4: return [2 /*return*/, validatedRequest];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n *\r\n * Use to get the redirect uri configured in MSAL or null.\r\n * @param requestRedirectUri\r\n * @returns Redirect URL\r\n *\r\n */\r\n BaseInteractionClient.prototype.getRedirectUri = function (requestRedirectUri) {\r\n this.logger.verbose(\"getRedirectUri called\");\r\n var redirectUri = requestRedirectUri || this.config.auth.redirectUri || BrowserUtils.getCurrentUri();\r\n return UrlString.getAbsoluteUrl(redirectUri, BrowserUtils.getCurrentUri());\r\n };\r\n /*\r\n * If authority provided in the request does not match environment/authority specified\r\n * in the account or MSAL config, we throw an error.\r\n */\r\n BaseInteractionClient.prototype.validateRequestAuthority = function (authority, account) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var discoveredAuthority;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0: return [4 /*yield*/, this.getDiscoveredAuthority(authority)];\r\n case 1:\r\n discoveredAuthority = _a.sent();\r\n if (!discoveredAuthority.isAlias(account.environment)) {\r\n throw ClientConfigurationError.createAuthorityMismatchError();\r\n }\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n *\r\n * @param apiId\r\n * @param correlationId\r\n * @param forceRefresh\r\n */\r\n BaseInteractionClient.prototype.initializeServerTelemetryManager = function (apiId, forceRefresh) {\r\n this.logger.verbose(\"initializeServerTelemetryManager called\");\r\n var telemetryPayload = {\r\n clientId: this.config.auth.clientId,\r\n correlationId: this.correlationId,\r\n apiId: apiId,\r\n forceRefresh: forceRefresh || false,\r\n wrapperSKU: this.browserStorage.getWrapperMetadata()[0],\r\n wrapperVer: this.browserStorage.getWrapperMetadata()[1]\r\n };\r\n return new ServerTelemetryManager(telemetryPayload, this.browserStorage);\r\n };\r\n /**\r\n * Used to get a discovered version of the default authority.\r\n * @param requestAuthority\r\n * @param requestCorrelationId\r\n */\r\n BaseInteractionClient.prototype.getDiscoveredAuthority = function (requestAuthority) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var authorityOptions;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.verbose(\"getDiscoveredAuthority called\");\r\n authorityOptions = {\r\n protocolMode: this.config.auth.protocolMode,\r\n knownAuthorities: this.config.auth.knownAuthorities,\r\n cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,\r\n authorityMetadata: this.config.auth.authorityMetadata\r\n };\r\n if (!requestAuthority) return [3 /*break*/, 2];\r\n this.logger.verbose(\"Creating discovered authority with request authority\");\r\n return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger)];\r\n case 1: return [2 /*return*/, _a.sent()];\r\n case 2:\r\n this.logger.verbose(\"Creating discovered authority with configured authority\");\r\n return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger)];\r\n case 3: return [2 /*return*/, _a.sent()];\r\n }\r\n });\r\n });\r\n };\r\n return BaseInteractionClient;\r\n}());\n\nexport { BaseInteractionClient };\n//# sourceMappingURL=BaseInteractionClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { UrlString, Constants, PerformanceEvents, AuthorizationCodeClient, Authority, AuthorityFactory, ResponseMode, StringUtils, ProtocolUtils } from '@azure/msal-common';\nimport { BaseInteractionClient } from './BaseInteractionClient.js';\nimport { BrowserConstants } from '../utils/BrowserConstants.js';\nimport { version } from '../packageMetadata.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { BrowserProtocolUtils } from '../utils/BrowserProtocolUtils.js';\nimport { BrowserUtils } from '../utils/BrowserUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Defines the class structure and helper functions used by the \"standard\", non-brokered auth flows (popup, redirect, silent (RT), silent (iframe))\r\n */\r\nvar StandardInteractionClient = /** @class */ (function (_super) {\r\n __extends(StandardInteractionClient, _super);\r\n function StandardInteractionClient() {\r\n return _super !== null && _super.apply(this, arguments) || this;\r\n }\r\n /**\r\n * Generates an auth code request tied to the url request.\r\n * @param request\r\n */\r\n StandardInteractionClient.prototype.initializeAuthorizationCodeRequest = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var generatedPkceParams, authCodeRequest;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);\r\n this.logger.verbose(\"initializeAuthorizationRequest called\", request.correlationId);\r\n return [4 /*yield*/, this.browserCrypto.generatePkceCodes()];\r\n case 1:\r\n generatedPkceParams = _a.sent();\r\n authCodeRequest = __assign(__assign({}, request), { redirectUri: request.redirectUri, code: Constants.EMPTY_STRING, codeVerifier: generatedPkceParams.verifier });\r\n request.codeChallenge = generatedPkceParams.challenge;\r\n request.codeChallengeMethod = Constants.S256_CODE_CHALLENGE_METHOD;\r\n return [2 /*return*/, authCodeRequest];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Initializer for the logout request.\r\n * @param logoutRequest\r\n */\r\n StandardInteractionClient.prototype.initializeLogoutRequest = function (logoutRequest) {\r\n this.logger.verbose(\"initializeLogoutRequest called\", logoutRequest === null || logoutRequest === void 0 ? void 0 : logoutRequest.correlationId);\r\n var validLogoutRequest = __assign({ correlationId: this.correlationId || this.browserCrypto.createNewGuid() }, logoutRequest);\r\n /**\r\n * Set logout_hint to be login_hint from ID Token Claims if present\r\n * and logoutHint attribute wasn't manually set in logout request\r\n */\r\n if (logoutRequest) {\r\n // If logoutHint isn't set and an account was passed in, try to extract logoutHint from ID Token Claims\r\n if (!logoutRequest.logoutHint) {\r\n if (logoutRequest.account) {\r\n var logoutHint = this.getLogoutHintFromIdTokenClaims(logoutRequest.account);\r\n if (logoutHint) {\r\n this.logger.verbose(\"Setting logoutHint to login_hint ID Token Claim value for the account provided\");\r\n validLogoutRequest.logoutHint = logoutHint;\r\n }\r\n }\r\n else {\r\n this.logger.verbose(\"logoutHint was not set and account was not passed into logout request, logoutHint will not be set\");\r\n }\r\n }\r\n else {\r\n this.logger.verbose(\"logoutHint has already been set in logoutRequest\");\r\n }\r\n }\r\n else {\r\n this.logger.verbose(\"logoutHint will not be set since no logout request was configured\");\r\n }\r\n /*\r\n * Only set redirect uri if logout request isn't provided or the set uri isn't null.\r\n * Otherwise, use passed uri, config, or current page.\r\n */\r\n if (!logoutRequest || logoutRequest.postLogoutRedirectUri !== null) {\r\n if (logoutRequest && logoutRequest.postLogoutRedirectUri) {\r\n this.logger.verbose(\"Setting postLogoutRedirectUri to uri set on logout request\", validLogoutRequest.correlationId);\r\n validLogoutRequest.postLogoutRedirectUri = UrlString.getAbsoluteUrl(logoutRequest.postLogoutRedirectUri, BrowserUtils.getCurrentUri());\r\n }\r\n else if (this.config.auth.postLogoutRedirectUri === null) {\r\n this.logger.verbose(\"postLogoutRedirectUri configured as null and no uri set on request, not passing post logout redirect\", validLogoutRequest.correlationId);\r\n }\r\n else if (this.config.auth.postLogoutRedirectUri) {\r\n this.logger.verbose(\"Setting postLogoutRedirectUri to configured uri\", validLogoutRequest.correlationId);\r\n validLogoutRequest.postLogoutRedirectUri = UrlString.getAbsoluteUrl(this.config.auth.postLogoutRedirectUri, BrowserUtils.getCurrentUri());\r\n }\r\n else {\r\n this.logger.verbose(\"Setting postLogoutRedirectUri to current page\", validLogoutRequest.correlationId);\r\n validLogoutRequest.postLogoutRedirectUri = UrlString.getAbsoluteUrl(BrowserUtils.getCurrentUri(), BrowserUtils.getCurrentUri());\r\n }\r\n }\r\n else {\r\n this.logger.verbose(\"postLogoutRedirectUri passed as null, not setting post logout redirect uri\", validLogoutRequest.correlationId);\r\n }\r\n return validLogoutRequest;\r\n };\r\n /**\r\n * Parses login_hint ID Token Claim out of AccountInfo object to be used as\r\n * logout_hint in end session request.\r\n * @param account\r\n */\r\n StandardInteractionClient.prototype.getLogoutHintFromIdTokenClaims = function (account) {\r\n var idTokenClaims = account.idTokenClaims;\r\n if (idTokenClaims) {\r\n if (idTokenClaims.login_hint) {\r\n return idTokenClaims.login_hint;\r\n }\r\n else {\r\n this.logger.verbose(\"The ID Token Claims tied to the provided account do not contain a login_hint claim, logoutHint will not be added to logout request\");\r\n }\r\n }\r\n else {\r\n this.logger.verbose(\"The provided account does not contain ID Token Claims, logoutHint will not be added to logout request\");\r\n }\r\n return null;\r\n };\r\n /**\r\n * Creates an Authorization Code Client with the given authority, or the default authority.\r\n * @param serverTelemetryManager\r\n * @param authorityUrl\r\n */\r\n StandardInteractionClient.prototype.createAuthCodeClient = function (serverTelemetryManager, authorityUrl, requestAzureCloudOptions) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var clientConfig;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.correlationId);\r\n // Create auth module.\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);\r\n return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, requestAzureCloudOptions)];\r\n case 1:\r\n clientConfig = _a.sent();\r\n return [2 /*return*/, new AuthorizationCodeClient(clientConfig, this.performanceClient)];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Creates a Client Configuration object with the given request authority, or the default authority.\r\n * @param serverTelemetryManager\r\n * @param requestAuthority\r\n * @param requestCorrelationId\r\n */\r\n StandardInteractionClient.prototype.getClientConfiguration = function (serverTelemetryManager, requestAuthority, requestAzureCloudOptions) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var discoveredAuthority, logger;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);\r\n this.logger.verbose(\"getClientConfiguration called\", this.correlationId);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);\r\n return [4 /*yield*/, this.getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions)];\r\n case 1:\r\n discoveredAuthority = _a.sent();\r\n logger = this.config.system.loggerOptions;\r\n return [2 /*return*/, {\r\n authOptions: {\r\n clientId: this.config.auth.clientId,\r\n authority: discoveredAuthority,\r\n clientCapabilities: this.config.auth.clientCapabilities\r\n },\r\n systemOptions: {\r\n tokenRenewalOffsetSeconds: this.config.system.tokenRenewalOffsetSeconds,\r\n preventCorsPreflight: true\r\n },\r\n loggerOptions: {\r\n loggerCallback: logger.loggerCallback,\r\n piiLoggingEnabled: logger.piiLoggingEnabled,\r\n logLevel: logger.logLevel,\r\n correlationId: this.correlationId\r\n },\r\n cacheOptions: {\r\n claimsBasedCachingEnabled: this.config.cache.claimsBasedCachingEnabled\r\n },\r\n cryptoInterface: this.browserCrypto,\r\n networkInterface: this.networkClient,\r\n storageInterface: this.browserStorage,\r\n serverTelemetryManager: serverTelemetryManager,\r\n libraryInfo: {\r\n sku: BrowserConstants.MSAL_SKU,\r\n version: version,\r\n cpu: Constants.EMPTY_STRING,\r\n os: Constants.EMPTY_STRING\r\n },\r\n telemetry: this.config.telemetry\r\n }];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * @param hash\r\n * @param interactionType\r\n */\r\n StandardInteractionClient.prototype.validateAndExtractStateFromHash = function (serverParams, interactionType, requestCorrelationId) {\r\n this.logger.verbose(\"validateAndExtractStateFromHash called\", requestCorrelationId);\r\n if (!serverParams.state) {\r\n throw BrowserAuthError.createHashDoesNotContainStateError();\r\n }\r\n var platformStateObj = BrowserProtocolUtils.extractBrowserRequestState(this.browserCrypto, serverParams.state);\r\n if (!platformStateObj) {\r\n throw BrowserAuthError.createUnableToParseStateError();\r\n }\r\n if (platformStateObj.interactionType !== interactionType) {\r\n throw BrowserAuthError.createStateInteractionTypeMismatchError();\r\n }\r\n this.logger.verbose(\"Returning state from hash\", requestCorrelationId);\r\n return serverParams.state;\r\n };\r\n /**\r\n * Used to get a discovered version of the default authority.\r\n * @param requestAuthority\r\n * @param requestCorrelationId\r\n */\r\n StandardInteractionClient.prototype.getDiscoveredAuthority = function (requestAuthority, requestAzureCloudOptions) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var getAuthorityMeasurement, authorityOptions, userAuthority, builtAuthority;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);\r\n this.logger.verbose(\"getDiscoveredAuthority called\", this.correlationId);\r\n getAuthorityMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);\r\n authorityOptions = {\r\n protocolMode: this.config.auth.protocolMode,\r\n knownAuthorities: this.config.auth.knownAuthorities,\r\n cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,\r\n authorityMetadata: this.config.auth.authorityMetadata,\r\n skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache\r\n };\r\n userAuthority = requestAuthority ? requestAuthority : this.config.auth.authority;\r\n builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);\r\n this.logger.verbose(\"Creating discovered authority with configured authority\", this.correlationId);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, this.correlationId);\r\n return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger, this.performanceClient, this.correlationId)\r\n .then(function (result) {\r\n getAuthorityMeasurement.endMeasurement({\r\n success: true,\r\n });\r\n return result;\r\n })\r\n .catch(function (error) {\r\n getAuthorityMeasurement.endMeasurement({\r\n errorCode: error.errorCode,\r\n subErrorCode: error.subError,\r\n success: false\r\n });\r\n throw error;\r\n })];\r\n case 1: return [2 /*return*/, _b.sent()];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Helper to initialize required request parameters for interactive APIs and ssoSilent()\r\n * @param request\r\n * @param interactionType\r\n */\r\n StandardInteractionClient.prototype.initializeAuthorizationRequest = function (request, interactionType) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var redirectUri, browserState, state, validatedRequest, _a, account, legacyLoginHint;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.correlationId);\r\n this.logger.verbose(\"initializeAuthorizationRequest called\", this.correlationId);\r\n redirectUri = this.getRedirectUri(request.redirectUri);\r\n browserState = {\r\n interactionType: interactionType\r\n };\r\n state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || Constants.EMPTY_STRING, browserState);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.InitializeBaseRequest, this.correlationId);\r\n _a = [{}];\r\n return [4 /*yield*/, this.initializeBaseRequest(request)];\r\n case 1:\r\n validatedRequest = __assign.apply(void 0, [__assign.apply(void 0, _a.concat([_b.sent()])), { redirectUri: redirectUri, state: state, nonce: request.nonce || this.browserCrypto.createNewGuid(), responseMode: ResponseMode.FRAGMENT }]);\r\n account = request.account || this.browserStorage.getActiveAccount();\r\n if (account) {\r\n this.logger.verbose(\"Setting validated request account\", this.correlationId);\r\n this.logger.verbosePii(\"Setting validated request account: \" + account.homeAccountId, this.correlationId);\r\n validatedRequest.account = account;\r\n }\r\n // Check for ADAL/MSAL v1 SSO\r\n if (StringUtils.isEmpty(validatedRequest.loginHint) && !account) {\r\n legacyLoginHint = this.browserStorage.getLegacyLoginHint();\r\n if (legacyLoginHint) {\r\n validatedRequest.loginHint = legacyLoginHint;\r\n }\r\n }\r\n return [2 /*return*/, validatedRequest];\r\n }\r\n });\r\n });\r\n };\r\n return StandardInteractionClient;\r\n}(BaseInteractionClient));\n\nexport { StandardInteractionClient };\n//# sourceMappingURL=StandardInteractionClient.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { BaseClient } from './BaseClient.js';\nimport { RequestParameterBuilder } from '../request/RequestParameterBuilder.js';\nimport { AuthenticationScheme, GrantType, HeaderNames, Errors } from '../utils/Constants.js';\nimport { ResponseHandler } from '../response/ResponseHandler.js';\nimport { PopTokenGenerator } from '../crypto/PopTokenGenerator.js';\nimport { StringUtils } from '../utils/StringUtils.js';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { ClientAuthError } from '../error/ClientAuthError.js';\nimport { ServerError } from '../error/ServerError.js';\nimport { TimeUtils } from '../utils/TimeUtils.js';\nimport { UrlString } from '../url/UrlString.js';\nimport { CcsCredentialType } from '../account/CcsCredential.js';\nimport { buildClientInfoFromHomeAccountId } from '../account/ClientInfo.js';\nimport { InteractionRequiredAuthError, InteractionRequiredAuthErrorMessage } from '../error/InteractionRequiredAuthError.js';\nimport { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * OAuth2.0 refresh token client\r\n */\r\nvar RefreshTokenClient = /** @class */ (function (_super) {\r\n __extends(RefreshTokenClient, _super);\r\n function RefreshTokenClient(configuration, performanceClient) {\r\n return _super.call(this, configuration, performanceClient) || this;\r\n }\r\n RefreshTokenClient.prototype.acquireToken = function (request) {\r\n var _a, _b, _c, _d, _e, _f, _g;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var atsMeasurement, reqTimestamp, response, httpVerToken, requestId, responseHandler;\r\n var _this = this;\r\n return __generator(this, function (_h) {\r\n switch (_h.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);\r\n atsMeasurement = (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.startMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);\r\n this.logger.verbose(\"RefreshTokenClientAcquireToken called\", request.correlationId);\r\n reqTimestamp = TimeUtils.nowSeconds();\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);\r\n return [4 /*yield*/, this.executeTokenRequest(request, this.authority)];\r\n case 1:\r\n response = _h.sent();\r\n httpVerToken = (_d = response.headers) === null || _d === void 0 ? void 0 : _d[HeaderNames.X_MS_HTTP_VERSION];\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.addStaticFields({\r\n refreshTokenSize: ((_e = response.body.refresh_token) === null || _e === void 0 ? void 0 : _e.length) || 0,\r\n });\r\n if (httpVerToken) {\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.addStaticFields({\r\n httpVerToken: httpVerToken,\r\n });\r\n }\r\n requestId = (_f = response.headers) === null || _f === void 0 ? void 0 : _f[HeaderNames.X_MS_REQUEST_ID];\r\n responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, this.config.serializableCache, this.config.persistencePlugin);\r\n responseHandler.validateTokenResponse(response.body);\r\n (_g = this.performanceClient) === null || _g === void 0 ? void 0 : _g.setPreQueueTime(PerformanceEvents.HandleServerTokenResponse, request.correlationId);\r\n return [2 /*return*/, responseHandler.handleServerTokenResponse(response.body, this.authority, reqTimestamp, request, undefined, undefined, true, request.forceCache, requestId).then(function (result) {\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.endMeasurement({\r\n success: true\r\n });\r\n return result;\r\n })\r\n .catch(function (error) {\r\n _this.logger.verbose(\"Error in fetching refresh token\", request.correlationId);\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.endMeasurement({\r\n errorCode: error.errorCode,\r\n subErrorCode: error.subError,\r\n success: false\r\n });\r\n throw error;\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Gets cached refresh token and attaches to request, then calls acquireToken API\r\n * @param request\r\n */\r\n RefreshTokenClient.prototype.acquireTokenByRefreshToken = function (request) {\r\n var _a, _b, _c, _d;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var isFOCI, noFamilyRTInCache, clientMismatchErrorWithFamilyRT;\r\n return __generator(this, function (_e) {\r\n // Cannot renew token if no request object is given.\r\n if (!request) {\r\n throw ClientConfigurationError.createEmptyTokenRequestError();\r\n }\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, request.correlationId);\r\n // We currently do not support silent flow for account === null use cases; This will be revisited for confidential flow usecases\r\n if (!request.account) {\r\n throw ClientAuthError.createNoAccountInSilentRequestError();\r\n }\r\n isFOCI = this.cacheManager.isAppMetadataFOCI(request.account.environment);\r\n // if the app is part of the family, retrive a Family refresh token if present and make a refreshTokenRequest\r\n if (isFOCI) {\r\n try {\r\n (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);\r\n return [2 /*return*/, this.acquireTokenWithCachedRefreshToken(request, true)];\r\n }\r\n catch (e) {\r\n noFamilyRTInCache = e instanceof InteractionRequiredAuthError && e.errorCode === InteractionRequiredAuthErrorMessage.noTokensFoundError.code;\r\n clientMismatchErrorWithFamilyRT = e instanceof ServerError && e.errorCode === Errors.INVALID_GRANT_ERROR && e.subError === Errors.CLIENT_MISMATCH_ERROR;\r\n // if family Refresh Token (FRT) cache acquisition fails or if client_mismatch error is seen with FRT, reattempt with application Refresh Token (ART)\r\n if (noFamilyRTInCache || clientMismatchErrorWithFamilyRT) {\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);\r\n return [2 /*return*/, this.acquireTokenWithCachedRefreshToken(request, false)];\r\n // throw in all other cases\r\n }\r\n else {\r\n throw e;\r\n }\r\n }\r\n }\r\n // fall back to application refresh token acquisition\r\n (_d = this.performanceClient) === null || _d === void 0 ? void 0 : _d.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);\r\n return [2 /*return*/, this.acquireTokenWithCachedRefreshToken(request, false)];\r\n });\r\n });\r\n };\r\n /**\r\n * makes a network call to acquire tokens by exchanging RefreshToken available in userCache; throws if refresh token is not cached\r\n * @param request\r\n */\r\n RefreshTokenClient.prototype.acquireTokenWithCachedRefreshToken = function (request, foci) {\r\n var _a, _b, _c;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var atsMeasurement, refreshToken, refreshTokenRequest;\r\n return __generator(this, function (_d) {\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);\r\n atsMeasurement = (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.startMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);\r\n this.logger.verbose(\"RefreshTokenClientAcquireTokenWithCachedRefreshToken called\", request.correlationId);\r\n refreshToken = this.cacheManager.getRefreshToken(request.account, foci);\r\n if (!refreshToken) {\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.discardMeasurement();\r\n throw InteractionRequiredAuthError.createNoTokensFoundError();\r\n }\r\n // attach cached RT size to the current measurement\r\n atsMeasurement === null || atsMeasurement === void 0 ? void 0 : atsMeasurement.endMeasurement({\r\n success: true\r\n });\r\n refreshTokenRequest = __assign(__assign({}, request), { refreshToken: refreshToken.secret, authenticationScheme: request.authenticationScheme || AuthenticationScheme.BEARER, ccsCredential: {\r\n credential: request.account.homeAccountId,\r\n type: CcsCredentialType.HOME_ACCOUNT_ID\r\n } });\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);\r\n return [2 /*return*/, this.acquireToken(refreshTokenRequest)];\r\n });\r\n });\r\n };\r\n /**\r\n * Constructs the network message and makes a NW call to the underlying secure token service\r\n * @param request\r\n * @param authority\r\n */\r\n RefreshTokenClient.prototype.executeTokenRequest = function (request, authority) {\r\n var _a, _b, _c;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var acquireTokenMeasurement, queryParametersString, endpoint, requestBody, headers, thumbprint;\r\n return __generator(this, function (_d) {\r\n switch (_d.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);\r\n acquireTokenMeasurement = (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.startMeasurement(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);\r\n queryParametersString = this.createTokenQueryParameters(request);\r\n endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParametersString);\r\n return [4 /*yield*/, this.createTokenRequestBody(request)];\r\n case 1:\r\n requestBody = _d.sent();\r\n headers = this.createTokenRequestHeaders(request.ccsCredential);\r\n thumbprint = {\r\n clientId: this.config.authOptions.clientId,\r\n authority: authority.canonicalAuthority,\r\n scopes: request.scopes,\r\n claims: request.claims,\r\n authenticationScheme: request.authenticationScheme,\r\n resourceRequestMethod: request.resourceRequestMethod,\r\n resourceRequestUri: request.resourceRequestUri,\r\n shrClaims: request.shrClaims,\r\n sshKid: request.sshKid\r\n };\r\n return [2 /*return*/, this.executePostToTokenEndpoint(endpoint, requestBody, headers, thumbprint)\r\n .then(function (result) {\r\n acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({\r\n success: true\r\n });\r\n return result;\r\n })\r\n .catch(function (error) {\r\n acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({\r\n success: false\r\n });\r\n throw error;\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Helper function to create the token request body\r\n * @param request\r\n */\r\n RefreshTokenClient.prototype.createTokenRequestBody = function (request) {\r\n var _a, _b, _c;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var correlationId, acquireTokenMeasurement, parameterBuilder, clientAssertion, popTokenGenerator, reqCnfData, clientInfo;\r\n return __generator(this, function (_d) {\r\n switch (_d.label) {\r\n case 0:\r\n (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);\r\n correlationId = request.correlationId;\r\n acquireTokenMeasurement = (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.startMeasurement(PerformanceEvents.BaseClientCreateTokenRequestHeaders, correlationId);\r\n parameterBuilder = new RequestParameterBuilder();\r\n parameterBuilder.addClientId(this.config.authOptions.clientId);\r\n parameterBuilder.addScopes(request.scopes);\r\n parameterBuilder.addGrantType(GrantType.REFRESH_TOKEN_GRANT);\r\n parameterBuilder.addClientInfo();\r\n parameterBuilder.addLibraryInfo(this.config.libraryInfo);\r\n parameterBuilder.addApplicationTelemetry(this.config.telemetry.application);\r\n parameterBuilder.addThrottling();\r\n if (this.serverTelemetryManager) {\r\n parameterBuilder.addServerTelemetry(this.serverTelemetryManager);\r\n }\r\n parameterBuilder.addCorrelationId(correlationId);\r\n parameterBuilder.addRefreshToken(request.refreshToken);\r\n if (this.config.clientCredentials.clientSecret) {\r\n parameterBuilder.addClientSecret(this.config.clientCredentials.clientSecret);\r\n }\r\n if (this.config.clientCredentials.clientAssertion) {\r\n clientAssertion = this.config.clientCredentials.clientAssertion;\r\n parameterBuilder.addClientAssertion(clientAssertion.assertion);\r\n parameterBuilder.addClientAssertionType(clientAssertion.assertionType);\r\n }\r\n if (!(request.authenticationScheme === AuthenticationScheme.POP)) return [3 /*break*/, 2];\r\n popTokenGenerator = new PopTokenGenerator(this.cryptoUtils, this.performanceClient);\r\n (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);\r\n return [4 /*yield*/, popTokenGenerator.generateCnf(request)];\r\n case 1:\r\n reqCnfData = _d.sent();\r\n // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)\r\n parameterBuilder.addPopToken(reqCnfData.reqCnfString);\r\n return [3 /*break*/, 3];\r\n case 2:\r\n if (request.authenticationScheme === AuthenticationScheme.SSH) {\r\n if (request.sshJwk) {\r\n parameterBuilder.addSshJwk(request.sshJwk);\r\n }\r\n else {\r\n acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({\r\n success: false\r\n });\r\n throw ClientConfigurationError.createMissingSshJwkError();\r\n }\r\n }\r\n _d.label = 3;\r\n case 3:\r\n if (!StringUtils.isEmptyObj(request.claims) || this.config.authOptions.clientCapabilities && this.config.authOptions.clientCapabilities.length > 0) {\r\n parameterBuilder.addClaims(request.claims, this.config.authOptions.clientCapabilities);\r\n }\r\n if (this.config.systemOptions.preventCorsPreflight && request.ccsCredential) {\r\n switch (request.ccsCredential.type) {\r\n case CcsCredentialType.HOME_ACCOUNT_ID:\r\n try {\r\n clientInfo = buildClientInfoFromHomeAccountId(request.ccsCredential.credential);\r\n parameterBuilder.addCcsOid(clientInfo);\r\n }\r\n catch (e) {\r\n this.logger.verbose(\"Could not parse home account ID for CCS Header: \" + e);\r\n }\r\n break;\r\n case CcsCredentialType.UPN:\r\n parameterBuilder.addCcsUpn(request.ccsCredential.credential);\r\n break;\r\n }\r\n }\r\n acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({\r\n success: true\r\n });\r\n return [2 /*return*/, parameterBuilder.createQueryString()];\r\n }\r\n });\r\n });\r\n };\r\n return RefreshTokenClient;\r\n}(BaseClient));\n\nexport { RefreshTokenClient };\n//# sourceMappingURL=RefreshTokenClient.js.map\n","/*! @azure/msal-common v13.3.1 2023-10-27 */\n'use strict';\nimport { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { BaseClient } from './BaseClient.js';\nimport { AuthToken } from '../account/AuthToken.js';\nimport { TimeUtils } from '../utils/TimeUtils.js';\nimport { RefreshTokenClient } from './RefreshTokenClient.js';\nimport { ClientAuthError, ClientAuthErrorMessage } from '../error/ClientAuthError.js';\nimport { ClientConfigurationError } from '../error/ClientConfigurationError.js';\nimport { ResponseHandler } from '../response/ResponseHandler.js';\nimport { CacheOutcome } from '../utils/Constants.js';\nimport { StringUtils } from '../utils/StringUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar SilentFlowClient = /** @class */ (function (_super) {\r\n __extends(SilentFlowClient, _super);\r\n function SilentFlowClient(configuration, performanceClient) {\r\n return _super.call(this, configuration, performanceClient) || this;\r\n }\r\n /**\r\n * Retrieves a token from cache if it is still valid, or uses the cached refresh token to renew\r\n * the given token and returns the renewed token\r\n * @param request\r\n */\r\n SilentFlowClient.prototype.acquireToken = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var e_1, refreshTokenClient;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n _a.trys.push([0, 2, , 3]);\r\n return [4 /*yield*/, this.acquireCachedToken(request)];\r\n case 1: return [2 /*return*/, _a.sent()];\r\n case 2:\r\n e_1 = _a.sent();\r\n if (e_1 instanceof ClientAuthError && e_1.errorCode === ClientAuthErrorMessage.tokenRefreshRequired.code) {\r\n refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);\r\n return [2 /*return*/, refreshTokenClient.acquireTokenByRefreshToken(request)];\r\n }\r\n else {\r\n throw e_1;\r\n }\r\n case 3: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Retrieves token from cache or throws an error if it must be refreshed.\r\n * @param request\r\n */\r\n SilentFlowClient.prototype.acquireCachedToken = function (request) {\r\n var _a, _b, _c, _d, _e;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var environment, cacheRecord;\r\n return __generator(this, function (_f) {\r\n switch (_f.label) {\r\n case 0:\r\n // Cannot renew token if no request object is given.\r\n if (!request) {\r\n throw ClientConfigurationError.createEmptyTokenRequestError();\r\n }\r\n if (request.forceRefresh) {\r\n // Must refresh due to present force_refresh flag.\r\n (_a = this.serverTelemetryManager) === null || _a === void 0 ? void 0 : _a.setCacheOutcome(CacheOutcome.FORCE_REFRESH);\r\n this.logger.info(\"SilentFlowClient:acquireCachedToken - Skipping cache because forceRefresh is true.\");\r\n throw ClientAuthError.createRefreshRequiredError();\r\n }\r\n else if (!this.config.cacheOptions.claimsBasedCachingEnabled && !StringUtils.isEmptyObj(request.claims)) {\r\n // Must refresh due to presence of claims in request preventing cache lookup\r\n (_b = this.serverTelemetryManager) === null || _b === void 0 ? void 0 : _b.setCacheOutcome(CacheOutcome.CLAIMS_REQUESTED_CACHE_SKIPPED);\r\n this.logger.info(\"SilentFlowClient:acquireCachedToken - Skipping cache because claims-based caching is disabled and claims were requested.\");\r\n throw ClientAuthError.createRefreshRequiredError();\r\n }\r\n // We currently do not support silent flow for account === null use cases; This will be revisited for confidential flow usecases\r\n if (!request.account) {\r\n throw ClientAuthError.createNoAccountInSilentRequestError();\r\n }\r\n environment = request.authority || this.authority.getPreferredCache();\r\n cacheRecord = this.cacheManager.readCacheRecord(request.account, request, environment);\r\n if (!cacheRecord.accessToken) {\r\n // Must refresh due to non-existent access_token.\r\n (_c = this.serverTelemetryManager) === null || _c === void 0 ? void 0 : _c.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN);\r\n this.logger.info(\"SilentFlowClient:acquireCachedToken - No access token found in cache for the given properties.\");\r\n throw ClientAuthError.createRefreshRequiredError();\r\n }\r\n else if (TimeUtils.wasClockTurnedBack(cacheRecord.accessToken.cachedAt) ||\r\n TimeUtils.isTokenExpired(cacheRecord.accessToken.expiresOn, this.config.systemOptions.tokenRenewalOffsetSeconds)) {\r\n // Must refresh due to expired access_token.\r\n (_d = this.serverTelemetryManager) === null || _d === void 0 ? void 0 : _d.setCacheOutcome(CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED);\r\n this.logger.info(\"SilentFlowClient:acquireCachedToken - Cached access token is expired or will expire within \" + this.config.systemOptions.tokenRenewalOffsetSeconds + \" seconds.\");\r\n throw ClientAuthError.createRefreshRequiredError();\r\n }\r\n else if (cacheRecord.accessToken.refreshOn && TimeUtils.isTokenExpired(cacheRecord.accessToken.refreshOn, 0)) {\r\n // Must refresh due to the refresh_in value.\r\n (_e = this.serverTelemetryManager) === null || _e === void 0 ? void 0 : _e.setCacheOutcome(CacheOutcome.REFRESH_CACHED_ACCESS_TOKEN);\r\n this.logger.info(\"SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'.\");\r\n throw ClientAuthError.createRefreshRequiredError();\r\n }\r\n if (this.config.serverTelemetryManager) {\r\n this.config.serverTelemetryManager.incrementCacheHits();\r\n }\r\n return [4 /*yield*/, this.generateResultFromCacheRecord(cacheRecord, request)];\r\n case 1: return [2 /*return*/, _f.sent()];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Helper function to build response object from the CacheRecord\r\n * @param cacheRecord\r\n */\r\n SilentFlowClient.prototype.generateResultFromCacheRecord = function (cacheRecord, request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var idTokenObj, authTime;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n if (cacheRecord.idToken) {\r\n idTokenObj = new AuthToken(cacheRecord.idToken.secret, this.config.cryptoInterface);\r\n }\r\n // token max_age check\r\n if (request.maxAge || (request.maxAge === 0)) {\r\n authTime = idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims.auth_time;\r\n if (!authTime) {\r\n throw ClientAuthError.createAuthTimeNotFoundError();\r\n }\r\n AuthToken.checkMaxAge(authTime, request.maxAge);\r\n }\r\n return [4 /*yield*/, ResponseHandler.generateAuthenticationResult(this.cryptoUtils, this.authority, cacheRecord, true, request, idTokenObj)];\r\n case 1: return [2 /*return*/, _a.sent()];\r\n }\r\n });\r\n });\r\n };\r\n return SilentFlowClient;\r\n}(BaseClient));\n\nexport { SilentFlowClient };\n//# sourceMappingURL=SilentFlowClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { StandardInteractionClient } from './StandardInteractionClient.js';\nimport { AuthError, PerformanceEvents, SilentFlowClient } from '@azure/msal-common';\nimport { ApiId } from '../utils/BrowserConstants.js';\nimport { BrowserAuthError, BrowserAuthErrorMessage } from '../error/BrowserAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar SilentCacheClient = /** @class */ (function (_super) {\r\n __extends(SilentCacheClient, _super);\r\n function SilentCacheClient() {\r\n return _super !== null && _super.apply(this, arguments) || this;\r\n }\r\n /**\r\n * Returns unexpired tokens from the cache, if available\r\n * @param silentRequest\r\n */\r\n SilentCacheClient.prototype.acquireToken = function (silentRequest) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var acquireTokenMeasurement, serverTelemetryManager, silentAuthClient, cachedToken, error_1;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n acquireTokenMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SilentCacheClientAcquireToken, silentRequest.correlationId);\r\n serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);\r\n return [4 /*yield*/, this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];\r\n case 1:\r\n silentAuthClient = _a.sent();\r\n this.logger.verbose(\"Silent auth client created\");\r\n _a.label = 2;\r\n case 2:\r\n _a.trys.push([2, 4, , 5]);\r\n return [4 /*yield*/, silentAuthClient.acquireCachedToken(silentRequest)];\r\n case 3:\r\n cachedToken = _a.sent();\r\n acquireTokenMeasurement.endMeasurement({\r\n success: true,\r\n fromCache: true\r\n });\r\n return [2 /*return*/, cachedToken];\r\n case 4:\r\n error_1 = _a.sent();\r\n if (error_1 instanceof BrowserAuthError && error_1.errorCode === BrowserAuthErrorMessage.signingKeyNotFoundInStorage.code) {\r\n this.logger.verbose(\"Signing keypair for bound access token not found. Refreshing bound access token and generating a new crypto keypair.\");\r\n }\r\n acquireTokenMeasurement.endMeasurement({\r\n errorCode: error_1 instanceof AuthError && error_1.errorCode || undefined,\r\n subErrorCode: error_1 instanceof AuthError && error_1.subError || undefined,\r\n success: false\r\n });\r\n throw error_1;\r\n case 5: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Currently Unsupported\r\n */\r\n SilentCacheClient.prototype.logout = function () {\r\n // Synchronous so we must reject\r\n return Promise.reject(BrowserAuthError.createSilentLogoutUnsupportedError());\r\n };\r\n /**\r\n * Creates an Silent Flow Client with the given authority, or the default authority.\r\n * @param serverTelemetryManager\r\n * @param authorityUrl\r\n */\r\n SilentCacheClient.prototype.createSilentFlowClient = function (serverTelemetryManager, authorityUrl, azureCloudOptions) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var clientConfig;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n // Create auth module.\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);\r\n return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];\r\n case 1:\r\n clientConfig = _a.sent();\r\n return [2 /*return*/, new SilentFlowClient(clientConfig, this.performanceClient)];\r\n }\r\n });\r\n });\r\n };\r\n SilentCacheClient.prototype.initializeSilentRequest = function (request, account) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var _a;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeSilentRequest, this.correlationId);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.InitializeBaseRequest, this.correlationId);\r\n _a = [__assign({}, request)];\r\n return [4 /*yield*/, this.initializeBaseRequest(request, account)];\r\n case 1: return [2 /*return*/, __assign.apply(void 0, [__assign.apply(void 0, _a.concat([_b.sent()])), { account: account, forceRefresh: request.forceRefresh || false }])];\r\n }\r\n });\r\n });\r\n };\r\n return SilentCacheClient;\r\n}(StandardInteractionClient));\n\nexport { SilentCacheClient };\n//# sourceMappingURL=SilentCacheClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __rest, __assign } from '../_virtual/_tslib.js';\nimport { ScopeSet, AuthToken, Constants, AccountEntity, AuthorityType, IdTokenEntity, AccessTokenEntity, CacheRecord, PerformanceEvents, TimeUtils, ClientAuthError, AuthenticationScheme, PopTokenGenerator, UrlString, OIDC_DEFAULT_SCOPES, PromptValue } from '@azure/msal-common';\nimport { BaseInteractionClient } from './BaseInteractionClient.js';\nimport { TemporaryCacheKeys, NativeExtensionMethod, NativeConstants, ApiId } from '../utils/BrowserConstants.js';\nimport { NativeAuthError } from '../error/NativeAuthError.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { SilentCacheClient } from './SilentCacheClient.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar NativeInteractionClient = /** @class */ (function (_super) {\r\n __extends(NativeInteractionClient, _super);\r\n function NativeInteractionClient(config, browserStorage, browserCrypto, logger, eventHandler, navigationClient, apiId, performanceClient, provider, accountId, nativeStorageImpl, correlationId) {\r\n var _this = _super.call(this, config, browserStorage, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId) || this;\r\n _this.apiId = apiId;\r\n _this.accountId = accountId;\r\n _this.nativeMessageHandler = provider;\r\n _this.nativeStorageManager = nativeStorageImpl;\r\n _this.silentCacheClient = new SilentCacheClient(config, _this.nativeStorageManager, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);\r\n return _this;\r\n }\r\n /**\r\n * Acquire token from native platform via browser extension\r\n * @param request\r\n */\r\n NativeInteractionClient.prototype.acquireToken = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var nativeATMeasurement, reqTimestamp, nativeRequest, result, messageBody, response, validatedResponse;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.trace(\"NativeInteractionClient - acquireToken called.\");\r\n nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);\r\n reqTimestamp = TimeUtils.nowSeconds();\r\n return [4 /*yield*/, this.initializeNativeRequest(request)];\r\n case 1:\r\n nativeRequest = _a.sent();\r\n _a.label = 2;\r\n case 2:\r\n _a.trys.push([2, 4, , 5]);\r\n return [4 /*yield*/, this.acquireTokensFromCache(this.accountId, nativeRequest)];\r\n case 3:\r\n result = _a.sent();\r\n nativeATMeasurement.endMeasurement({\r\n success: true,\r\n isNativeBroker: false,\r\n fromCache: true\r\n });\r\n return [2 /*return*/, result];\r\n case 4:\r\n _a.sent();\r\n // continue with a native call for any and all errors\r\n this.logger.info(\"MSAL internal Cache does not contain tokens, proceed to make a native call\");\r\n return [3 /*break*/, 5];\r\n case 5:\r\n messageBody = {\r\n method: NativeExtensionMethod.GetToken,\r\n request: nativeRequest\r\n };\r\n return [4 /*yield*/, this.nativeMessageHandler.sendMessage(messageBody)];\r\n case 6:\r\n response = _a.sent();\r\n validatedResponse = this.validateNativeResponse(response);\r\n return [2 /*return*/, this.handleNativeResponse(validatedResponse, nativeRequest, reqTimestamp)\r\n .then(function (result) {\r\n nativeATMeasurement.endMeasurement({\r\n success: true,\r\n isNativeBroker: true,\r\n requestId: result.requestId\r\n });\r\n return result;\r\n })\r\n .catch(function (error) {\r\n nativeATMeasurement.endMeasurement({\r\n success: false,\r\n errorCode: error.errorCode,\r\n subErrorCode: error.subError,\r\n isNativeBroker: true\r\n });\r\n throw error;\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Creates silent flow request\r\n * @param request\r\n * @param cachedAccount\r\n * @returns CommonSilentFlowRequest\r\n */\r\n NativeInteractionClient.prototype.createSilentCacheRequest = function (request, cachedAccount) {\r\n return {\r\n authority: request.authority,\r\n correlationId: this.correlationId,\r\n scopes: ScopeSet.fromString(request.scope).asArray(),\r\n account: cachedAccount,\r\n forceRefresh: false,\r\n };\r\n };\r\n /**\r\n * Fetches the tokens from the cache if un-expired\r\n * @param nativeAccountId\r\n * @param request\r\n * @returns authenticationResult\r\n */\r\n NativeInteractionClient.prototype.acquireTokensFromCache = function (nativeAccountId, request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var account, silentRequest, result, e_2;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n if (!nativeAccountId) {\r\n this.logger.warning(\"NativeInteractionClient:acquireTokensFromCache - No nativeAccountId provided\");\r\n throw ClientAuthError.createNoAccountFoundError();\r\n }\r\n account = this.browserStorage.getAccountInfoFilteredBy({ nativeAccountId: nativeAccountId });\r\n if (!account) {\r\n throw ClientAuthError.createNoAccountFoundError();\r\n }\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n silentRequest = this.createSilentCacheRequest(request, account);\r\n return [4 /*yield*/, this.silentCacheClient.acquireToken(silentRequest)];\r\n case 2:\r\n result = _a.sent();\r\n return [2 /*return*/, result];\r\n case 3:\r\n e_2 = _a.sent();\r\n throw e_2;\r\n case 4: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Acquires a token from native platform then redirects to the redirectUri instead of returning the response\r\n * @param request\r\n */\r\n NativeInteractionClient.prototype.acquireTokenRedirect = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var nativeRequest, messageBody, response, e_3, navigationOptions, redirectUri;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.trace(\"NativeInteractionClient - acquireTokenRedirect called.\");\r\n return [4 /*yield*/, this.initializeNativeRequest(request)];\r\n case 1:\r\n nativeRequest = _a.sent();\r\n messageBody = {\r\n method: NativeExtensionMethod.GetToken,\r\n request: nativeRequest\r\n };\r\n _a.label = 2;\r\n case 2:\r\n _a.trys.push([2, 4, , 5]);\r\n return [4 /*yield*/, this.nativeMessageHandler.sendMessage(messageBody)];\r\n case 3:\r\n response = _a.sent();\r\n this.validateNativeResponse(response);\r\n return [3 /*break*/, 5];\r\n case 4:\r\n e_3 = _a.sent();\r\n // Only throw fatal errors here to allow application to fallback to regular redirect. Otherwise proceed and the error will be thrown in handleRedirectPromise\r\n if (e_3 instanceof NativeAuthError && e_3.isFatal()) {\r\n throw e_3;\r\n }\r\n return [3 /*break*/, 5];\r\n case 5:\r\n this.browserStorage.setTemporaryCache(TemporaryCacheKeys.NATIVE_REQUEST, JSON.stringify(nativeRequest), true);\r\n navigationOptions = {\r\n apiId: ApiId.acquireTokenRedirect,\r\n timeout: this.config.system.redirectNavigationTimeout,\r\n noHistory: false\r\n };\r\n redirectUri = this.config.auth.navigateToLoginRequestUrl ? window.location.href : this.getRedirectUri(request.redirectUri);\r\n return [4 /*yield*/, this.navigationClient.navigateExternal(redirectUri, navigationOptions)];\r\n case 6:\r\n _a.sent(); // Need to treat this as external to ensure handleRedirectPromise is run again\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * If the previous page called native platform for a token using redirect APIs, send the same request again and return the response\r\n */\r\n NativeInteractionClient.prototype.handleRedirectPromise = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var cachedRequest, prompt, request, messageBody, reqTimestamp, response, result, e_4;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.trace(\"NativeInteractionClient - handleRedirectPromise called.\");\r\n if (!this.browserStorage.isInteractionInProgress(true)) {\r\n this.logger.info(\"handleRedirectPromise called but there is no interaction in progress, returning null.\");\r\n return [2 /*return*/, null];\r\n }\r\n cachedRequest = this.browserStorage.getCachedNativeRequest();\r\n if (!cachedRequest) {\r\n this.logger.verbose(\"NativeInteractionClient - handleRedirectPromise called but there is no cached request, returning null.\");\r\n return [2 /*return*/, null];\r\n }\r\n prompt = cachedRequest.prompt, request = __rest(cachedRequest, [\"prompt\"]);\r\n if (prompt) {\r\n this.logger.verbose(\"NativeInteractionClient - handleRedirectPromise called and prompt was included in the original request, removing prompt from cached request to prevent second interaction with native broker window.\");\r\n }\r\n this.browserStorage.removeItem(this.browserStorage.generateCacheKey(TemporaryCacheKeys.NATIVE_REQUEST));\r\n messageBody = {\r\n method: NativeExtensionMethod.GetToken,\r\n request: request\r\n };\r\n reqTimestamp = TimeUtils.nowSeconds();\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 4]);\r\n this.logger.verbose(\"NativeInteractionClient - handleRedirectPromise sending message to native broker.\");\r\n return [4 /*yield*/, this.nativeMessageHandler.sendMessage(messageBody)];\r\n case 2:\r\n response = _a.sent();\r\n this.validateNativeResponse(response);\r\n result = this.handleNativeResponse(response, request, reqTimestamp);\r\n this.browserStorage.setInteractionInProgress(false);\r\n return [2 /*return*/, result];\r\n case 3:\r\n e_4 = _a.sent();\r\n this.browserStorage.setInteractionInProgress(false);\r\n throw e_4;\r\n case 4: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Logout from native platform via browser extension\r\n * @param request\r\n */\r\n NativeInteractionClient.prototype.logout = function () {\r\n this.logger.trace(\"NativeInteractionClient - logout called.\");\r\n return Promise.reject(\"Logout not implemented yet\");\r\n };\r\n /**\r\n * Transform response from native platform into AuthenticationResult object which will be returned to the end user\r\n * @param response\r\n * @param request\r\n * @param reqTimestamp\r\n */\r\n NativeInteractionClient.prototype.handleNativeResponse = function (response, request, reqTimestamp) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var authority, authorityPreferredCache, idTokenObj, homeAccountIdentifier, accountEntity, result;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.trace(\"NativeInteractionClient - handleNativeResponse called.\");\r\n if (response.account.id !== request.accountId) {\r\n // User switch in native broker prompt is not supported. All users must first sign in through web flow to ensure server state is in sync\r\n throw NativeAuthError.createUserSwitchError();\r\n }\r\n return [4 /*yield*/, this.getDiscoveredAuthority(request.authority)];\r\n case 1:\r\n authority = _a.sent();\r\n authorityPreferredCache = authority.getPreferredCache();\r\n idTokenObj = this.createIdTokenObj(response);\r\n homeAccountIdentifier = this.createHomeAccountIdentifier(response, idTokenObj);\r\n accountEntity = this.createAccountEntity(response, homeAccountIdentifier, idTokenObj, authorityPreferredCache);\r\n return [4 /*yield*/, this.generateAuthenticationResult(response, request, idTokenObj, accountEntity, authority.canonicalAuthority, reqTimestamp)];\r\n case 2:\r\n result = _a.sent();\r\n // cache accounts and tokens in the appropriate storage\r\n this.cacheAccount(accountEntity);\r\n this.cacheNativeTokens(response, request, homeAccountIdentifier, accountEntity, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);\r\n return [2 /*return*/, result];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Create an idToken Object (not entity)\r\n * @param response\r\n * @returns\r\n */\r\n NativeInteractionClient.prototype.createIdTokenObj = function (response) {\r\n return new AuthToken(response.id_token || Constants.EMPTY_STRING, this.browserCrypto);\r\n };\r\n /**\r\n * creates an homeAccountIdentifier for the account\r\n * @param response\r\n * @param idTokenObj\r\n * @returns\r\n */\r\n NativeInteractionClient.prototype.createHomeAccountIdentifier = function (response, idTokenObj) {\r\n // Save account in browser storage\r\n var homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj);\r\n return homeAccountIdentifier;\r\n };\r\n /**\r\n * Creates account entity\r\n * @param response\r\n * @param homeAccountIdentifier\r\n * @param idTokenObj\r\n * @param authority\r\n * @returns\r\n */\r\n NativeInteractionClient.prototype.createAccountEntity = function (response, homeAccountIdentifier, idTokenObj, authority) {\r\n return AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, authority, response.account.id);\r\n };\r\n /**\r\n * Helper to generate scopes\r\n * @param response\r\n * @param request\r\n * @returns\r\n */\r\n NativeInteractionClient.prototype.generateScopes = function (response, request) {\r\n return response.scope ? ScopeSet.fromString(response.scope) : ScopeSet.fromString(request.scope);\r\n };\r\n /**\r\n * If PoP token is requesred, records the PoP token if returned from the WAM, else generates one in the browser\r\n * @param request\r\n * @param response\r\n */\r\n NativeInteractionClient.prototype.generatePopAccessToken = function (response, request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var popTokenGenerator, shrParameters;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n if (!(request.tokenType === AuthenticationScheme.POP)) return [3 /*break*/, 2];\r\n /**\r\n * This code prioritizes SHR returned from the native layer. In case of error/SHR not calculated from WAM and the AT\r\n * is still received, SHR is calculated locally\r\n */\r\n // Check if native layer returned an SHR token\r\n if (response.shr) {\r\n this.logger.trace(\"handleNativeServerResponse: SHR is enabled in native layer\");\r\n return [2 /*return*/, response.shr];\r\n }\r\n popTokenGenerator = new PopTokenGenerator(this.browserCrypto);\r\n shrParameters = {\r\n resourceRequestMethod: request.resourceRequestMethod,\r\n resourceRequestUri: request.resourceRequestUri,\r\n shrClaims: request.shrClaims,\r\n shrNonce: request.shrNonce\r\n };\r\n /**\r\n * KeyID must be present in the native request from when the PoP key was generated in order for\r\n * PopTokenGenerator to query the full key for signing\r\n */\r\n if (!request.keyId) {\r\n throw ClientAuthError.createKeyIdMissingError();\r\n }\r\n return [4 /*yield*/, popTokenGenerator.signPopToken(response.access_token, request.keyId, shrParameters)];\r\n case 1: return [2 /*return*/, _a.sent()];\r\n case 2: return [2 /*return*/, response.access_token];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Generates authentication result\r\n * @param response\r\n * @param request\r\n * @param idTokenObj\r\n * @param accountEntity\r\n * @param authority\r\n * @param reqTimestamp\r\n * @returns\r\n */\r\n NativeInteractionClient.prototype.generateAuthenticationResult = function (response, request, idTokenObj, accountEntity, authority, reqTimestamp) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var mats, responseScopes, accountProperties, uid, tid, responseAccessToken, tokenType, result;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n mats = this.addTelemetryFromNativeResponse(response);\r\n responseScopes = response.scope ? ScopeSet.fromString(response.scope) : ScopeSet.fromString(request.scope);\r\n accountProperties = response.account.properties || {};\r\n uid = accountProperties[\"UID\"] || idTokenObj.claims.oid || idTokenObj.claims.sub || Constants.EMPTY_STRING;\r\n tid = accountProperties[\"TenantId\"] || idTokenObj.claims.tid || Constants.EMPTY_STRING;\r\n return [4 /*yield*/, this.generatePopAccessToken(response, request)];\r\n case 1:\r\n responseAccessToken = _a.sent();\r\n tokenType = (request.tokenType === AuthenticationScheme.POP) ? AuthenticationScheme.POP : AuthenticationScheme.BEARER;\r\n result = {\r\n authority: authority,\r\n uniqueId: uid,\r\n tenantId: tid,\r\n scopes: responseScopes.asArray(),\r\n account: accountEntity.getAccountInfo(),\r\n idToken: response.id_token,\r\n idTokenClaims: idTokenObj.claims,\r\n accessToken: responseAccessToken,\r\n fromCache: mats ? this.isResponseFromCache(mats) : false,\r\n expiresOn: new Date(Number(reqTimestamp + response.expires_in) * 1000),\r\n tokenType: tokenType,\r\n correlationId: this.correlationId,\r\n state: response.state,\r\n fromNativeBroker: true\r\n };\r\n return [2 /*return*/, result];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * cache the account entity in browser storage\r\n * @param accountEntity\r\n */\r\n NativeInteractionClient.prototype.cacheAccount = function (accountEntity) {\r\n var _this = this;\r\n // Store the account info and hence `nativeAccountId` in browser cache\r\n this.browserStorage.setAccount(accountEntity);\r\n // Remove any existing cached tokens for this account in browser storage\r\n this.browserStorage.removeAccountContext(accountEntity).catch(function (e) {\r\n _this.logger.error(\"Error occurred while removing account context from browser storage. \" + e);\r\n });\r\n };\r\n /**\r\n * Stores the access_token and id_token in inmemory storage\r\n * @param response\r\n * @param request\r\n * @param homeAccountIdentifier\r\n * @param idTokenObj\r\n * @param responseAccessToken\r\n * @param tenantId\r\n * @param reqTimestamp\r\n */\r\n NativeInteractionClient.prototype.cacheNativeTokens = function (response, request, homeAccountIdentifier, accountEntity, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {\r\n var cachedIdToken = IdTokenEntity.createIdTokenEntity(homeAccountIdentifier, request.authority, response.id_token || Constants.EMPTY_STRING, request.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);\r\n // cache accessToken in inmemory storage\r\n var expiresIn = (request.tokenType === AuthenticationScheme.POP)\r\n ? Constants.SHR_NONCE_VALIDITY\r\n : (typeof response.expires_in === \"string\"\r\n ? parseInt(response.expires_in, 10)\r\n : response.expires_in) || 0;\r\n var tokenExpirationSeconds = reqTimestamp + expiresIn;\r\n var responseScopes = this.generateScopes(response, request);\r\n var cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(homeAccountIdentifier, request.authority, responseAccessToken, request.clientId, idTokenObj\r\n ? idTokenObj.claims.tid || Constants.EMPTY_STRING\r\n : tenantId, responseScopes.printScopes(), tokenExpirationSeconds, 0, this.browserCrypto);\r\n var nativeCacheRecord = new CacheRecord(accountEntity, cachedIdToken, cachedAccessToken);\r\n this.nativeStorageManager.saveCacheRecord(nativeCacheRecord);\r\n };\r\n NativeInteractionClient.prototype.addTelemetryFromNativeResponse = function (response) {\r\n var mats = this.getMATSFromResponse(response);\r\n if (!mats) {\r\n return null;\r\n }\r\n this.performanceClient.addStaticFields({\r\n extensionId: this.nativeMessageHandler.getExtensionId(),\r\n extensionVersion: this.nativeMessageHandler.getExtensionVersion(),\r\n matsBrokerVersion: mats.broker_version,\r\n matsAccountJoinOnStart: mats.account_join_on_start,\r\n matsAccountJoinOnEnd: mats.account_join_on_end,\r\n matsDeviceJoin: mats.device_join,\r\n matsPromptBehavior: mats.prompt_behavior,\r\n matsApiErrorCode: mats.api_error_code,\r\n matsUiVisible: mats.ui_visible,\r\n matsSilentCode: mats.silent_code,\r\n matsSilentBiSubCode: mats.silent_bi_sub_code,\r\n matsSilentMessage: mats.silent_message,\r\n matsSilentStatus: mats.silent_status,\r\n matsHttpStatus: mats.http_status,\r\n matsHttpEventCount: mats.http_event_count\r\n }, this.correlationId);\r\n return mats;\r\n };\r\n /**\r\n * Validates native platform response before processing\r\n * @param response\r\n */\r\n NativeInteractionClient.prototype.validateNativeResponse = function (response) {\r\n if (response.hasOwnProperty(\"access_token\") &&\r\n response.hasOwnProperty(\"id_token\") &&\r\n response.hasOwnProperty(\"client_info\") &&\r\n response.hasOwnProperty(\"account\") &&\r\n response.hasOwnProperty(\"scope\") &&\r\n response.hasOwnProperty(\"expires_in\")) {\r\n return response;\r\n }\r\n else {\r\n throw NativeAuthError.createUnexpectedError(\"Response missing expected properties.\");\r\n }\r\n };\r\n /**\r\n * Gets MATS telemetry from native response\r\n * @param response\r\n * @returns\r\n */\r\n NativeInteractionClient.prototype.getMATSFromResponse = function (response) {\r\n if (response.properties.MATS) {\r\n try {\r\n return JSON.parse(response.properties.MATS);\r\n }\r\n catch (e) {\r\n this.logger.error(\"NativeInteractionClient - Error parsing MATS telemetry, returning null instead\");\r\n }\r\n }\r\n return null;\r\n };\r\n /**\r\n * Returns whether or not response came from native cache\r\n * @param response\r\n * @returns\r\n */\r\n NativeInteractionClient.prototype.isResponseFromCache = function (mats) {\r\n if (typeof mats.is_cached === \"undefined\") {\r\n this.logger.verbose(\"NativeInteractionClient - MATS telemetry does not contain field indicating if response was served from cache. Returning false.\");\r\n return false;\r\n }\r\n return !!mats.is_cached;\r\n };\r\n /**\r\n * Translates developer provided request object into NativeRequest object\r\n * @param request\r\n */\r\n NativeInteractionClient.prototype.initializeNativeRequest = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var authority, canonicalAuthority, scopes, remainingProperties, scopeSet, getPrompt, validatedRequest, shrParameters, popTokenGenerator, reqCnfData;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.trace(\"NativeInteractionClient - initializeNativeRequest called\");\r\n authority = request.authority || this.config.auth.authority;\r\n if (!request.account) return [3 /*break*/, 2];\r\n return [4 /*yield*/, this.validateRequestAuthority(authority, request.account)];\r\n case 1:\r\n _a.sent();\r\n _a.label = 2;\r\n case 2:\r\n canonicalAuthority = new UrlString(authority);\r\n canonicalAuthority.validateAsUri();\r\n scopes = request.scopes, remainingProperties = __rest(request, [\"scopes\"]);\r\n scopeSet = new ScopeSet(scopes || []);\r\n scopeSet.appendScopes(OIDC_DEFAULT_SCOPES);\r\n getPrompt = function () {\r\n // If request is silent, prompt is always none\r\n switch (_this.apiId) {\r\n case ApiId.ssoSilent:\r\n case ApiId.acquireTokenSilent_silentFlow:\r\n _this.logger.trace(\"initializeNativeRequest: silent request sets prompt to none\");\r\n return PromptValue.NONE;\r\n }\r\n // Prompt not provided, request may proceed and native broker decides if it needs to prompt\r\n if (!request.prompt) {\r\n _this.logger.trace(\"initializeNativeRequest: prompt was not provided\");\r\n return undefined;\r\n }\r\n // If request is interactive, check if prompt provided is allowed to go directly to native broker\r\n switch (request.prompt) {\r\n case PromptValue.NONE:\r\n case PromptValue.CONSENT:\r\n case PromptValue.LOGIN:\r\n _this.logger.trace(\"initializeNativeRequest: prompt is compatible with native flow\");\r\n return request.prompt;\r\n default:\r\n _this.logger.trace(\"initializeNativeRequest: prompt = \" + request.prompt + \" is not compatible with native flow\");\r\n throw BrowserAuthError.createNativePromptParameterNotSupportedError();\r\n }\r\n };\r\n validatedRequest = __assign(__assign({}, remainingProperties), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scope: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), prompt: getPrompt(), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign(__assign(__assign({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?\r\n });\r\n if (!(request.authenticationScheme === AuthenticationScheme.POP)) return [3 /*break*/, 4];\r\n shrParameters = {\r\n resourceRequestUri: request.resourceRequestUri,\r\n resourceRequestMethod: request.resourceRequestMethod,\r\n shrClaims: request.shrClaims,\r\n shrNonce: request.shrNonce\r\n };\r\n popTokenGenerator = new PopTokenGenerator(this.browserCrypto);\r\n return [4 /*yield*/, popTokenGenerator.generateCnf(shrParameters)];\r\n case 3:\r\n reqCnfData = _a.sent();\r\n // to reduce the URL length, it is recommended to send the short form of the req_cnf \r\n validatedRequest.reqCnf = reqCnfData.reqCnfString;\r\n validatedRequest.keyId = reqCnfData.kid;\r\n _a.label = 4;\r\n case 4: return [2 /*return*/, validatedRequest];\r\n }\r\n });\r\n });\r\n };\r\n return NativeInteractionClient;\r\n}(BaseInteractionClient));\n\nexport { NativeInteractionClient };\n//# sourceMappingURL=NativeInteractionClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../../_virtual/_tslib.js';\nimport { NativeConstants, NativeExtensionMethod } from '../../utils/BrowserConstants.js';\nimport { AuthError, AuthenticationScheme, PerformanceEvents } from '@azure/msal-common';\nimport { NativeAuthError } from '../../error/NativeAuthError.js';\nimport { BrowserAuthError } from '../../error/BrowserAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar NativeMessageHandler = /** @class */ (function () {\r\n function NativeMessageHandler(logger, handshakeTimeoutMs, performanceClient, extensionId) {\r\n this.logger = logger;\r\n this.handshakeTimeoutMs = handshakeTimeoutMs;\r\n this.extensionId = extensionId;\r\n this.resolvers = new Map(); // Used for non-handshake messages\r\n this.handshakeResolvers = new Map(); // Used for handshake messages\r\n this.responseId = 0;\r\n this.messageChannel = new MessageChannel();\r\n this.windowListener = this.onWindowMessage.bind(this); // Window event callback doesn't have access to 'this' unless it's bound\r\n this.performanceClient = performanceClient;\r\n this.handshakeEvent = performanceClient.startMeasurement(PerformanceEvents.NativeMessageHandlerHandshake);\r\n }\r\n /**\r\n * Sends a given message to the extension and resolves with the extension response\r\n * @param body\r\n */\r\n NativeMessageHandler.prototype.sendMessage = function (body) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var req;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n this.logger.trace(\"NativeMessageHandler - sendMessage called.\");\r\n req = {\r\n channel: NativeConstants.CHANNEL_ID,\r\n extensionId: this.extensionId,\r\n responseId: this.responseId++,\r\n body: body\r\n };\r\n this.logger.trace(\"NativeMessageHandler - Sending request to browser extension\");\r\n this.logger.tracePii(\"NativeMessageHandler - Sending request to browser extension: \" + JSON.stringify(req));\r\n this.messageChannel.port1.postMessage(req);\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n _this.resolvers.set(req.responseId, { resolve: resolve, reject: reject });\r\n })];\r\n });\r\n });\r\n };\r\n /**\r\n * Returns an instance of the MessageHandler that has successfully established a connection with an extension\r\n * @param {Logger} logger\r\n * @param {number} handshakeTimeoutMs\r\n * @param {IPerformanceClient} performanceClient\r\n */\r\n NativeMessageHandler.createProvider = function (logger, handshakeTimeoutMs, performanceClient) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var preferredProvider, backupProvider;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n logger.trace(\"NativeMessageHandler - createProvider called.\");\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 3, , 5]);\r\n preferredProvider = new NativeMessageHandler(logger, handshakeTimeoutMs, performanceClient, NativeConstants.PREFERRED_EXTENSION_ID);\r\n return [4 /*yield*/, preferredProvider.sendHandshakeRequest()];\r\n case 2:\r\n _a.sent();\r\n return [2 /*return*/, preferredProvider];\r\n case 3:\r\n _a.sent();\r\n backupProvider = new NativeMessageHandler(logger, handshakeTimeoutMs, performanceClient);\r\n return [4 /*yield*/, backupProvider.sendHandshakeRequest()];\r\n case 4:\r\n _a.sent();\r\n return [2 /*return*/, backupProvider];\r\n case 5: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Send handshake request helper.\r\n */\r\n NativeMessageHandler.prototype.sendHandshakeRequest = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var req;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n this.logger.trace(\"NativeMessageHandler - sendHandshakeRequest called.\");\r\n // Register this event listener before sending handshake\r\n window.addEventListener(\"message\", this.windowListener, false); // false is important, because content script message processing should work first\r\n req = {\r\n channel: NativeConstants.CHANNEL_ID,\r\n extensionId: this.extensionId,\r\n responseId: this.responseId++,\r\n body: {\r\n method: NativeExtensionMethod.HandshakeRequest\r\n }\r\n };\r\n this.handshakeEvent.addStaticFields({\r\n extensionId: this.extensionId,\r\n extensionHandshakeTimeoutMs: this.handshakeTimeoutMs\r\n });\r\n this.messageChannel.port1.onmessage = function (event) {\r\n _this.onChannelMessage(event);\r\n };\r\n window.postMessage(req, window.origin, [this.messageChannel.port2]);\r\n return [2 /*return*/, new Promise(function (resolve, reject) {\r\n _this.handshakeResolvers.set(req.responseId, { resolve: resolve, reject: reject });\r\n _this.timeoutId = window.setTimeout(function () {\r\n /*\r\n * Throw an error if neither HandshakeResponse nor original Handshake request are received in a reasonable timeframe.\r\n * This typically suggests an event handler stopped propagation of the Handshake request but did not respond to it on the MessageChannel port\r\n */\r\n window.removeEventListener(\"message\", _this.windowListener, false);\r\n _this.messageChannel.port1.close();\r\n _this.messageChannel.port2.close();\r\n _this.handshakeEvent.endMeasurement({ extensionHandshakeTimedOut: true, success: false });\r\n reject(BrowserAuthError.createNativeHandshakeTimeoutError());\r\n _this.handshakeResolvers.delete(req.responseId);\r\n }, _this.handshakeTimeoutMs); // Use a reasonable timeout in milliseconds here\r\n })];\r\n });\r\n });\r\n };\r\n /**\r\n * Invoked when a message is posted to the window. If a handshake request is received it means the extension is not installed.\r\n * @param event\r\n */\r\n NativeMessageHandler.prototype.onWindowMessage = function (event) {\r\n this.logger.trace(\"NativeMessageHandler - onWindowMessage called\");\r\n // We only accept messages from ourselves\r\n if (event.source !== window) {\r\n return;\r\n }\r\n var request = event.data;\r\n if (!request.channel || request.channel !== NativeConstants.CHANNEL_ID) {\r\n return;\r\n }\r\n if (request.extensionId && request.extensionId !== this.extensionId) {\r\n return;\r\n }\r\n if (request.body.method === NativeExtensionMethod.HandshakeRequest) {\r\n // If we receive this message back it means no extension intercepted the request, meaning no extension supporting handshake protocol is installed\r\n this.logger.verbose(request.extensionId ? \"Extension with id: \" + request.extensionId + \" not installed\" : \"No extension installed\");\r\n clearTimeout(this.timeoutId);\r\n this.messageChannel.port1.close();\r\n this.messageChannel.port2.close();\r\n window.removeEventListener(\"message\", this.windowListener, false);\r\n var handshakeResolver = this.handshakeResolvers.get(request.responseId);\r\n if (handshakeResolver) {\r\n this.handshakeEvent.endMeasurement({ success: false, extensionInstalled: false });\r\n handshakeResolver.reject(BrowserAuthError.createNativeExtensionNotInstalledError());\r\n }\r\n }\r\n };\r\n /**\r\n * Invoked when a message is received from the extension on the MessageChannel port\r\n * @param event\r\n */\r\n NativeMessageHandler.prototype.onChannelMessage = function (event) {\r\n this.logger.trace(\"NativeMessageHandler - onChannelMessage called.\");\r\n var request = event.data;\r\n var resolver = this.resolvers.get(request.responseId);\r\n var handshakeResolver = this.handshakeResolvers.get(request.responseId);\r\n try {\r\n var method = request.body.method;\r\n if (method === NativeExtensionMethod.Response) {\r\n if (!resolver) {\r\n return;\r\n }\r\n var response = request.body.response;\r\n this.logger.trace(\"NativeMessageHandler - Received response from browser extension\");\r\n this.logger.tracePii(\"NativeMessageHandler - Received response from browser extension: \" + JSON.stringify(response));\r\n if (response.status !== \"Success\") {\r\n resolver.reject(NativeAuthError.createError(response.code, response.description, response.ext));\r\n }\r\n else if (response.result) {\r\n if (response.result[\"code\"] && response.result[\"description\"]) {\r\n resolver.reject(NativeAuthError.createError(response.result[\"code\"], response.result[\"description\"], response.result[\"ext\"]));\r\n }\r\n else {\r\n resolver.resolve(response.result);\r\n }\r\n }\r\n else {\r\n throw AuthError.createUnexpectedError(\"Event does not contain result.\");\r\n }\r\n this.resolvers.delete(request.responseId);\r\n }\r\n else if (method === NativeExtensionMethod.HandshakeResponse) {\r\n if (!handshakeResolver) {\r\n return;\r\n }\r\n clearTimeout(this.timeoutId); // Clear setTimeout\r\n window.removeEventListener(\"message\", this.windowListener, false); // Remove 'No extension' listener\r\n this.extensionId = request.extensionId;\r\n this.extensionVersion = request.body.version;\r\n this.logger.verbose(\"NativeMessageHandler - Received HandshakeResponse from extension: \" + this.extensionId);\r\n this.handshakeEvent.endMeasurement({ extensionInstalled: true, success: true });\r\n handshakeResolver.resolve();\r\n this.handshakeResolvers.delete(request.responseId);\r\n }\r\n // Do nothing if method is not Response or HandshakeResponse\r\n }\r\n catch (err) {\r\n this.logger.error(\"Error parsing response from WAM Extension\");\r\n this.logger.errorPii(\"Error parsing response from WAM Extension: \" + err.toString());\r\n this.logger.errorPii(\"Unable to parse \" + event);\r\n if (resolver) {\r\n resolver.reject(err);\r\n }\r\n else if (handshakeResolver) {\r\n handshakeResolver.reject(err);\r\n }\r\n }\r\n };\r\n /**\r\n * Returns the Id for the browser extension this handler is communicating with\r\n * @returns\r\n */\r\n NativeMessageHandler.prototype.getExtensionId = function () {\r\n return this.extensionId;\r\n };\r\n /**\r\n * Returns the version for the browser extension this handler is communicating with\r\n * @returns\r\n */\r\n NativeMessageHandler.prototype.getExtensionVersion = function () {\r\n return this.extensionVersion;\r\n };\r\n /**\r\n * Returns boolean indicating whether or not the request should attempt to use native broker\r\n * @param logger\r\n * @param config\r\n * @param nativeExtensionProvider\r\n * @param authenticationScheme\r\n */\r\n NativeMessageHandler.isNativeAvailable = function (config, logger, nativeExtensionProvider, authenticationScheme) {\r\n logger.trace(\"isNativeAvailable called\");\r\n if (!config.system.allowNativeBroker) {\r\n logger.trace(\"isNativeAvailable: allowNativeBroker is not enabled, returning false\");\r\n // Developer disabled WAM\r\n return false;\r\n }\r\n if (!nativeExtensionProvider) {\r\n logger.trace(\"isNativeAvailable: WAM extension provider is not initialized, returning false\");\r\n // Extension is not available\r\n return false;\r\n }\r\n if (authenticationScheme) {\r\n switch (authenticationScheme) {\r\n case AuthenticationScheme.BEARER:\r\n case AuthenticationScheme.POP:\r\n logger.trace(\"isNativeAvailable: authenticationScheme is supported, returning true\");\r\n return true;\r\n default:\r\n logger.trace(\"isNativeAvailable: authenticationScheme is not supported, returning false\");\r\n return false;\r\n }\r\n }\r\n return true;\r\n };\r\n return NativeMessageHandler;\r\n}());\n\nexport { NativeMessageHandler };\n//# sourceMappingURL=NativeMessageHandler.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { PerformanceEvents, StringUtils, ClientAuthError, ServerError, AuthorityFactory } from '@azure/msal-common';\nimport { BrowserAuthError, BrowserAuthErrorMessage } from '../error/BrowserAuthError.js';\nimport { TemporaryCacheKeys } from '../utils/BrowserConstants.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Abstract class which defines operations for a browser interaction handling class.\r\n */\r\nvar InteractionHandler = /** @class */ (function () {\r\n function InteractionHandler(authCodeModule, storageImpl, authCodeRequest, logger, performanceClient) {\r\n this.authModule = authCodeModule;\r\n this.browserStorage = storageImpl;\r\n this.authCodeRequest = authCodeRequest;\r\n this.logger = logger;\r\n this.performanceClient = performanceClient;\r\n }\r\n /**\r\n * Function to handle response parameters from hash.\r\n * @param locationHash\r\n */\r\n InteractionHandler.prototype.handleCodeResponseFromHash = function (locationHash, state, authority, networkModule) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var stateKey, requestState, authCodeResponse;\r\n return __generator(this, function (_a) {\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.HandleCodeResponseFromHash, this.authCodeRequest.correlationId);\r\n this.logger.verbose(\"InteractionHandler.handleCodeResponse called\");\r\n // Check that location hash isn't empty.\r\n if (StringUtils.isEmpty(locationHash)) {\r\n throw BrowserAuthError.createEmptyHashError(locationHash);\r\n }\r\n stateKey = this.browserStorage.generateStateKey(state);\r\n requestState = this.browserStorage.getTemporaryCache(stateKey);\r\n if (!requestState) {\r\n throw ClientAuthError.createStateNotFoundError(\"Cached State\");\r\n }\r\n try {\r\n authCodeResponse = this.authModule.handleFragmentResponse(locationHash, requestState);\r\n }\r\n catch (e) {\r\n if (e instanceof ServerError && e.subError === BrowserAuthErrorMessage.userCancelledError.code) {\r\n // Translate server error caused by user closing native prompt to corresponding first class MSAL error\r\n throw BrowserAuthError.createUserCancelledError();\r\n }\r\n else {\r\n throw e;\r\n }\r\n }\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.HandleCodeResponseFromServer, this.authCodeRequest.correlationId);\r\n return [2 /*return*/, this.handleCodeResponseFromServer(authCodeResponse, state, authority, networkModule)];\r\n });\r\n });\r\n };\r\n /**\r\n * Process auth code response from AAD\r\n * @param authCodeResponse\r\n * @param state\r\n * @param authority\r\n * @param networkModule\r\n * @returns\r\n */\r\n InteractionHandler.prototype.handleCodeResponseFromServer = function (authCodeResponse, state, authority, networkModule, validateNonce) {\r\n if (validateNonce === void 0) { validateNonce = true; }\r\n return __awaiter(this, void 0, void 0, function () {\r\n var stateKey, requestState, nonceKey, cachedNonce, cachedCcsCred, tokenResponse;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.HandleCodeResponseFromServer, this.authCodeRequest.correlationId);\r\n this.logger.trace(\"InteractionHandler.handleCodeResponseFromServer called\");\r\n stateKey = this.browserStorage.generateStateKey(state);\r\n requestState = this.browserStorage.getTemporaryCache(stateKey);\r\n if (!requestState) {\r\n throw ClientAuthError.createStateNotFoundError(\"Cached State\");\r\n }\r\n nonceKey = this.browserStorage.generateNonceKey(requestState);\r\n cachedNonce = this.browserStorage.getTemporaryCache(nonceKey);\r\n // Assign code to request\r\n this.authCodeRequest.code = authCodeResponse.code;\r\n if (!authCodeResponse.cloud_instance_host_name) return [3 /*break*/, 2];\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.UpdateTokenEndpointAuthority, this.authCodeRequest.correlationId);\r\n return [4 /*yield*/, this.updateTokenEndpointAuthority(authCodeResponse.cloud_instance_host_name, authority, networkModule)];\r\n case 1:\r\n _a.sent();\r\n _a.label = 2;\r\n case 2:\r\n // Nonce validation not needed when redirect not involved (e.g. hybrid spa, renewing token via rt)\r\n if (validateNonce) {\r\n authCodeResponse.nonce = cachedNonce || undefined;\r\n }\r\n authCodeResponse.state = requestState;\r\n // Add CCS parameters if available\r\n if (authCodeResponse.client_info) {\r\n this.authCodeRequest.clientInfo = authCodeResponse.client_info;\r\n }\r\n else {\r\n cachedCcsCred = this.checkCcsCredentials();\r\n if (cachedCcsCred) {\r\n this.authCodeRequest.ccsCredential = cachedCcsCred;\r\n }\r\n }\r\n // Acquire token with retrieved code.\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.AuthClientAcquireToken, this.authCodeRequest.correlationId);\r\n return [4 /*yield*/, this.authModule.acquireToken(this.authCodeRequest, authCodeResponse)];\r\n case 3:\r\n tokenResponse = _a.sent();\r\n this.browserStorage.cleanRequestByState(state);\r\n return [2 /*return*/, tokenResponse];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Updates authority based on cloudInstanceHostname\r\n * @param cloudInstanceHostname\r\n * @param authority\r\n * @param networkModule\r\n */\r\n InteractionHandler.prototype.updateTokenEndpointAuthority = function (cloudInstanceHostname, authority, networkModule) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var cloudInstanceAuthorityUri, cloudInstanceAuthority;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, this.authCodeRequest.correlationId);\r\n cloudInstanceAuthorityUri = \"https://\" + cloudInstanceHostname + \"/\" + authority.tenant + \"/\";\r\n return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, networkModule, this.browserStorage, authority.options, this.logger, this.performanceClient, this.authCodeRequest.correlationId)];\r\n case 1:\r\n cloudInstanceAuthority = _a.sent();\r\n this.authModule.updateAuthority(cloudInstanceAuthority);\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Looks up ccs creds in the cache\r\n */\r\n InteractionHandler.prototype.checkCcsCredentials = function () {\r\n // Look up ccs credential in temp cache\r\n var cachedCcsCred = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, true);\r\n if (cachedCcsCred) {\r\n try {\r\n return JSON.parse(cachedCcsCred);\r\n }\r\n catch (e) {\r\n this.authModule.logger.error(\"Cache credential could not be parsed\");\r\n this.authModule.logger.errorPii(\"Cache credential could not be parsed: \" + cachedCcsCred);\r\n }\r\n }\r\n return null;\r\n };\r\n return InteractionHandler;\r\n}());\n\nexport { InteractionHandler };\n//# sourceMappingURL=InteractionHandler.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { OIDC_DEFAULT_SCOPES, StringUtils, UrlString, Constants, AuthError, ThrottlingUtils, ProtocolUtils, PerformanceEvents } from '@azure/msal-common';\nimport { StandardInteractionClient } from './StandardInteractionClient.js';\nimport { EventType } from '../event/EventType.js';\nimport { BrowserConstants, InteractionType, ApiId } from '../utils/BrowserConstants.js';\nimport { BrowserUtils } from '../utils/BrowserUtils.js';\nimport { NativeInteractionClient } from './NativeInteractionClient.js';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { InteractionHandler } from '../interaction_handler/InteractionHandler.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar PopupClient = /** @class */ (function (_super) {\r\n __extends(PopupClient, _super);\r\n function PopupClient(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeStorageImpl, nativeMessageHandler, correlationId) {\r\n var _this = _super.call(this, config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId) || this;\r\n // Properly sets this reference for the unload event.\r\n _this.unloadWindow = _this.unloadWindow.bind(_this);\r\n _this.nativeStorage = nativeStorageImpl;\r\n return _this;\r\n }\r\n /**\r\n * Acquires tokens by opening a popup window to the /authorize endpoint of the authority\r\n * @param request\r\n */\r\n PopupClient.prototype.acquireToken = function (request) {\r\n try {\r\n var popupName = this.generatePopupName(request.scopes || OIDC_DEFAULT_SCOPES, request.authority || this.config.auth.authority);\r\n var popupWindowAttributes = request.popupWindowAttributes || {};\r\n // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.\r\n if (this.config.system.asyncPopups) {\r\n this.logger.verbose(\"asyncPopups set to true, acquiring token\");\r\n // Passes on popup position and dimensions if in request\r\n return this.acquireTokenPopupAsync(request, popupName, popupWindowAttributes);\r\n }\r\n else {\r\n // asyncPopups flag is set to false. Opens popup before acquiring token.\r\n this.logger.verbose(\"asyncPopup set to false, opening popup before acquiring token\");\r\n var popup = this.openSizedPopup(\"about:blank\", popupName, popupWindowAttributes);\r\n return this.acquireTokenPopupAsync(request, popupName, popupWindowAttributes, popup);\r\n }\r\n }\r\n catch (e) {\r\n return Promise.reject(e);\r\n }\r\n };\r\n /**\r\n * Clears local cache for the current user then opens a popup window prompting the user to sign-out of the server\r\n * @param logoutRequest\r\n */\r\n PopupClient.prototype.logout = function (logoutRequest) {\r\n try {\r\n this.logger.verbose(\"logoutPopup called\");\r\n var validLogoutRequest = this.initializeLogoutRequest(logoutRequest);\r\n var popupName = this.generateLogoutPopupName(validLogoutRequest);\r\n var authority = logoutRequest && logoutRequest.authority;\r\n var mainWindowRedirectUri = logoutRequest && logoutRequest.mainWindowRedirectUri;\r\n var popupWindowAttributes = (logoutRequest === null || logoutRequest === void 0 ? void 0 : logoutRequest.popupWindowAttributes) || {};\r\n // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.\r\n if (this.config.system.asyncPopups) {\r\n this.logger.verbose(\"asyncPopups set to true\");\r\n // Passes on popup position and dimensions if in request\r\n return this.logoutPopupAsync(validLogoutRequest, popupName, popupWindowAttributes, authority, undefined, mainWindowRedirectUri);\r\n }\r\n else {\r\n // asyncPopups flag is set to false. Opens popup before logging out.\r\n this.logger.verbose(\"asyncPopup set to false, opening popup\");\r\n var popup = this.openSizedPopup(\"about:blank\", popupName, popupWindowAttributes);\r\n return this.logoutPopupAsync(validLogoutRequest, popupName, popupWindowAttributes, authority, popup, mainWindowRedirectUri);\r\n }\r\n }\r\n catch (e) {\r\n // Since this function is synchronous we need to reject\r\n return Promise.reject(e);\r\n }\r\n };\r\n /**\r\n * Helper which obtains an access_token for your API via opening a popup window in the user's browser\r\n * @param validRequest\r\n * @param popupName\r\n * @param popup\r\n * @param popupWindowAttributes\r\n *\r\n * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n */\r\n PopupClient.prototype.acquireTokenPopupAsync = function (request, popupName, popupWindowAttributes, popup) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var serverTelemetryManager, validRequest, authCodeRequest, authClient, isNativeBroker, fetchNativeAccountIdMeasurement, navigateUrl, interactionHandler, popupParameters, popupWindow, hash, serverParams, state_1, nativeInteractionClient, userRequestState, result, e_1;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.verbose(\"acquireTokenPopupAsync called\");\r\n serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenPopup);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);\r\n return [4 /*yield*/, this.initializeAuthorizationRequest(request, InteractionType.Popup)];\r\n case 1:\r\n validRequest = _a.sent();\r\n this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || Constants.EMPTY_STRING, validRequest.account || null);\r\n _a.label = 2;\r\n case 2:\r\n _a.trys.push([2, 8, , 9]);\r\n // Create auth code request and generate PKCE params\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);\r\n return [4 /*yield*/, this.initializeAuthorizationCodeRequest(validRequest)];\r\n case 3:\r\n authCodeRequest = _a.sent();\r\n // Initialize the client\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);\r\n return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions)];\r\n case 4:\r\n authClient = _a.sent();\r\n this.logger.verbose(\"Auth code client created\");\r\n isNativeBroker = NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, request.authenticationScheme);\r\n fetchNativeAccountIdMeasurement = void 0;\r\n if (isNativeBroker) {\r\n fetchNativeAccountIdMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.FetchAccountIdWithNativeBroker, request.correlationId);\r\n }\r\n return [4 /*yield*/, authClient.getAuthCodeUrl(__assign(__assign({}, validRequest), { nativeBroker: isNativeBroker }))];\r\n case 5:\r\n navigateUrl = _a.sent();\r\n interactionHandler = new InteractionHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.performanceClient);\r\n popupParameters = {\r\n popup: popup,\r\n popupName: popupName,\r\n popupWindowAttributes: popupWindowAttributes\r\n };\r\n popupWindow = this.initiateAuthRequest(navigateUrl, popupParameters);\r\n this.eventHandler.emitEvent(EventType.POPUP_OPENED, InteractionType.Popup, { popupWindow: popupWindow }, null);\r\n return [4 /*yield*/, this.monitorPopupForHash(popupWindow)];\r\n case 6:\r\n hash = _a.sent();\r\n serverParams = UrlString.getDeserializedHash(hash);\r\n state_1 = this.validateAndExtractStateFromHash(serverParams, InteractionType.Popup, validRequest.correlationId);\r\n // Remove throttle if it exists\r\n ThrottlingUtils.removeThrottle(this.browserStorage, this.config.auth.clientId, authCodeRequest);\r\n if (serverParams.accountId) {\r\n this.logger.verbose(\"Account id found in hash, calling WAM for token\");\r\n // end measurement for server call with native brokering enabled\r\n if (fetchNativeAccountIdMeasurement) {\r\n fetchNativeAccountIdMeasurement.endMeasurement({\r\n success: true,\r\n isNativeBroker: true\r\n });\r\n }\r\n if (!this.nativeMessageHandler) {\r\n throw BrowserAuthError.createNativeConnectionNotEstablishedError();\r\n }\r\n nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.nativeStorage, validRequest.correlationId);\r\n userRequestState = ProtocolUtils.parseRequestState(this.browserCrypto, state_1).userRequestState;\r\n return [2 /*return*/, nativeInteractionClient.acquireToken(__assign(__assign({}, validRequest), { state: userRequestState, prompt: undefined // Server should handle the prompt, ideally native broker can do this part silently\r\n })).finally(function () {\r\n _this.browserStorage.cleanRequestByState(state_1);\r\n })];\r\n }\r\n return [4 /*yield*/, interactionHandler.handleCodeResponseFromHash(hash, state_1, authClient.authority, this.networkClient)];\r\n case 7:\r\n result = _a.sent();\r\n return [2 /*return*/, result];\r\n case 8:\r\n e_1 = _a.sent();\r\n if (popup) {\r\n // Close the synchronous popup if an error is thrown before the window unload event is registered\r\n popup.close();\r\n }\r\n if (e_1 instanceof AuthError) {\r\n e_1.setCorrelationId(this.correlationId);\r\n }\r\n serverTelemetryManager.cacheFailedRequest(e_1);\r\n this.browserStorage.cleanRequestByState(validRequest.state);\r\n throw e_1;\r\n case 9: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n *\r\n * @param validRequest\r\n * @param popupName\r\n * @param requestAuthority\r\n * @param popup\r\n * @param mainWindowRedirectUri\r\n * @param popupWindowAttributes\r\n */\r\n PopupClient.prototype.logoutPopupAsync = function (validRequest, popupName, popupWindowAttributes, requestAuthority, popup, mainWindowRedirectUri) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var serverTelemetryManager, authClient, logoutUri, popupWindow, navigationOptions, absoluteUrl, e_2;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.verbose(\"logoutPopupAsync called\");\r\n this.eventHandler.emitEvent(EventType.LOGOUT_START, InteractionType.Popup, validRequest);\r\n serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.logoutPopup);\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 5, , 6]);\r\n // Clear cache on logout\r\n return [4 /*yield*/, this.clearCacheOnLogout(validRequest.account)];\r\n case 2:\r\n // Clear cache on logout\r\n _a.sent();\r\n // Initialize the client\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, validRequest.correlationId);\r\n return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, requestAuthority)];\r\n case 3:\r\n authClient = _a.sent();\r\n this.logger.verbose(\"Auth code client created\");\r\n logoutUri = authClient.getLogoutUri(validRequest);\r\n this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Popup, validRequest);\r\n popupWindow = this.openPopup(logoutUri, { popupName: popupName, popupWindowAttributes: popupWindowAttributes, popup: popup });\r\n this.eventHandler.emitEvent(EventType.POPUP_OPENED, InteractionType.Popup, { popupWindow: popupWindow }, null);\r\n return [4 /*yield*/, this.waitForLogoutPopup(popupWindow)];\r\n case 4:\r\n _a.sent();\r\n if (mainWindowRedirectUri) {\r\n navigationOptions = {\r\n apiId: ApiId.logoutPopup,\r\n timeout: this.config.system.redirectNavigationTimeout,\r\n noHistory: false\r\n };\r\n absoluteUrl = UrlString.getAbsoluteUrl(mainWindowRedirectUri, BrowserUtils.getCurrentUri());\r\n this.logger.verbose(\"Redirecting main window to url specified in the request\");\r\n this.logger.verbosePii(\"Redirecting main window to: \" + absoluteUrl);\r\n this.navigationClient.navigateInternal(absoluteUrl, navigationOptions);\r\n }\r\n else {\r\n this.logger.verbose(\"No main window navigation requested\");\r\n }\r\n return [3 /*break*/, 6];\r\n case 5:\r\n e_2 = _a.sent();\r\n if (popup) {\r\n // Close the synchronous popup if an error is thrown before the window unload event is registered\r\n popup.close();\r\n }\r\n if (e_2 instanceof AuthError) {\r\n e_2.setCorrelationId(this.correlationId);\r\n }\r\n this.browserStorage.setInteractionInProgress(false);\r\n this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, InteractionType.Popup, null, e_2);\r\n this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Popup);\r\n serverTelemetryManager.cacheFailedRequest(e_2);\r\n throw e_2;\r\n case 6:\r\n this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Popup);\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Opens a popup window with given request Url.\r\n * @param requestUrl\r\n */\r\n PopupClient.prototype.initiateAuthRequest = function (requestUrl, params) {\r\n // Check that request url is not empty.\r\n if (!StringUtils.isEmpty(requestUrl)) {\r\n this.logger.infoPii(\"Navigate to: \" + requestUrl);\r\n // Open the popup window to requestUrl.\r\n return this.openPopup(requestUrl, params);\r\n }\r\n else {\r\n // Throw error if request URL is empty.\r\n this.logger.error(\"Navigate url is empty\");\r\n throw BrowserAuthError.createEmptyNavigationUriError();\r\n }\r\n };\r\n /**\r\n * Monitors a window until it loads a url with the same origin.\r\n * @param popupWindow - window that is being monitored\r\n * @param timeout - timeout for processing hash once popup is redirected back to application\r\n */\r\n PopupClient.prototype.monitorPopupForHash = function (popupWindow) {\r\n var _this = this;\r\n return new Promise(function (resolve, reject) {\r\n /*\r\n * Polling for popups needs to be tick-based,\r\n * since a non-trivial amount of time can be spent on interaction (which should not count against the timeout).\r\n */\r\n var maxTicks = _this.config.system.windowHashTimeout / _this.config.system.pollIntervalMilliseconds;\r\n var ticks = 0;\r\n _this.logger.verbose(\"PopupHandler.monitorPopupForHash - polling started\");\r\n var intervalId = setInterval(function () {\r\n // Window is closed\r\n if (popupWindow.closed) {\r\n _this.logger.error(\"PopupHandler.monitorPopupForHash - window closed\");\r\n _this.cleanPopup();\r\n clearInterval(intervalId);\r\n reject(BrowserAuthError.createUserCancelledError());\r\n return;\r\n }\r\n var href = Constants.EMPTY_STRING;\r\n var hash = Constants.EMPTY_STRING;\r\n try {\r\n /*\r\n * Will throw if cross origin,\r\n * which should be caught and ignored\r\n * since we need the interval to keep running while on STS UI.\r\n */\r\n href = popupWindow.location.href;\r\n hash = popupWindow.location.hash;\r\n }\r\n catch (e) { }\r\n // Don't process blank pages or cross domain\r\n if (StringUtils.isEmpty(href) || href === \"about:blank\") {\r\n return;\r\n }\r\n _this.logger.verbose(\"PopupHandler.monitorPopupForHash - popup window is on same origin as caller\");\r\n /*\r\n * Only run clock when we are on same domain for popups\r\n * as popup operations can take a long time.\r\n */\r\n ticks++;\r\n if (hash) {\r\n _this.logger.verbose(\"PopupHandler.monitorPopupForHash - found hash in url\");\r\n clearInterval(intervalId);\r\n _this.cleanPopup(popupWindow);\r\n if (UrlString.hashContainsKnownProperties(hash)) {\r\n _this.logger.verbose(\"PopupHandler.monitorPopupForHash - hash contains known properties, returning.\");\r\n resolve(hash);\r\n }\r\n else {\r\n _this.logger.error(\"PopupHandler.monitorPopupForHash - found hash in url but it does not contain known properties. Check that your router is not changing the hash prematurely.\");\r\n _this.logger.errorPii(\"PopupHandler.monitorPopupForHash - hash found: \" + hash);\r\n reject(BrowserAuthError.createHashDoesNotContainKnownPropertiesError());\r\n }\r\n }\r\n else if (ticks > maxTicks) {\r\n _this.logger.error(\"PopupHandler.monitorPopupForHash - unable to find hash in url, timing out\");\r\n clearInterval(intervalId);\r\n reject(BrowserAuthError.createMonitorPopupTimeoutError());\r\n }\r\n }, _this.config.system.pollIntervalMilliseconds);\r\n });\r\n };\r\n /**\r\n * Waits for user interaction in logout popup window\r\n * @param popupWindow\r\n * @returns\r\n */\r\n PopupClient.prototype.waitForLogoutPopup = function (popupWindow) {\r\n var _this = this;\r\n return new Promise(function (resolve) {\r\n _this.logger.verbose(\"PopupHandler.waitForLogoutPopup - polling started\");\r\n var intervalId = setInterval(function () {\r\n // Window is closed\r\n if (popupWindow.closed) {\r\n _this.logger.error(\"PopupHandler.waitForLogoutPopup - window closed\");\r\n _this.cleanPopup();\r\n clearInterval(intervalId);\r\n resolve();\r\n }\r\n var href = Constants.EMPTY_STRING;\r\n try {\r\n /*\r\n * Will throw if cross origin,\r\n * which should be caught and ignored\r\n * since we need the interval to keep running while on STS UI.\r\n */\r\n href = popupWindow.location.href;\r\n }\r\n catch (e) { }\r\n // Don't process blank pages or cross domain\r\n if (StringUtils.isEmpty(href) || href === \"about:blank\") {\r\n return;\r\n }\r\n _this.logger.verbose(\"PopupHandler.waitForLogoutPopup - popup window is on same origin as caller, closing.\");\r\n clearInterval(intervalId);\r\n _this.cleanPopup(popupWindow);\r\n resolve();\r\n }, _this.config.system.pollIntervalMilliseconds);\r\n });\r\n };\r\n /**\r\n * @hidden\r\n *\r\n * Configures popup window for login.\r\n *\r\n * @param urlNavigate\r\n * @param title\r\n * @param popUpWidth\r\n * @param popUpHeight\r\n * @param popupWindowAttributes\r\n * @ignore\r\n * @hidden\r\n */\r\n PopupClient.prototype.openPopup = function (urlNavigate, popupParams) {\r\n try {\r\n var popupWindow = void 0;\r\n // Popup window passed in, setting url to navigate to\r\n if (popupParams.popup) {\r\n popupWindow = popupParams.popup;\r\n this.logger.verbosePii(\"Navigating popup window to: \" + urlNavigate);\r\n popupWindow.location.assign(urlNavigate);\r\n }\r\n else if (typeof popupParams.popup === \"undefined\") {\r\n // Popup will be undefined if it was not passed in\r\n this.logger.verbosePii(\"Opening popup window to: \" + urlNavigate);\r\n popupWindow = this.openSizedPopup(urlNavigate, popupParams.popupName, popupParams.popupWindowAttributes);\r\n }\r\n // Popup will be null if popups are blocked\r\n if (!popupWindow) {\r\n throw BrowserAuthError.createEmptyWindowCreatedError();\r\n }\r\n if (popupWindow.focus) {\r\n popupWindow.focus();\r\n }\r\n this.currentWindow = popupWindow;\r\n window.addEventListener(\"beforeunload\", this.unloadWindow);\r\n return popupWindow;\r\n }\r\n catch (e) {\r\n this.logger.error(\"error opening popup \" + e.message);\r\n this.browserStorage.setInteractionInProgress(false);\r\n throw BrowserAuthError.createPopupWindowError(e.toString());\r\n }\r\n };\r\n /**\r\n * Helper function to set popup window dimensions and position\r\n * @param urlNavigate\r\n * @param popupName\r\n * @param popupWindowAttributes\r\n * @returns\r\n */\r\n PopupClient.prototype.openSizedPopup = function (urlNavigate, popupName, popupWindowAttributes) {\r\n var _a, _b, _c, _d;\r\n /**\r\n * adding winLeft and winTop to account for dual monitor\r\n * using screenLeft and screenTop for IE8 and earlier\r\n */\r\n var winLeft = window.screenLeft ? window.screenLeft : window.screenX;\r\n var winTop = window.screenTop ? window.screenTop : window.screenY;\r\n /**\r\n * window.innerWidth displays browser window\"s height and width excluding toolbars\r\n * using document.documentElement.clientWidth for IE8 and earlier\r\n */\r\n var winWidth = window.innerWidth || document.documentElement.clientWidth || document.body.clientWidth;\r\n var winHeight = window.innerHeight || document.documentElement.clientHeight || document.body.clientHeight;\r\n var width = (_a = popupWindowAttributes.popupSize) === null || _a === void 0 ? void 0 : _a.width;\r\n var height = (_b = popupWindowAttributes.popupSize) === null || _b === void 0 ? void 0 : _b.height;\r\n var top = (_c = popupWindowAttributes.popupPosition) === null || _c === void 0 ? void 0 : _c.top;\r\n var left = (_d = popupWindowAttributes.popupPosition) === null || _d === void 0 ? void 0 : _d.left;\r\n if (!width || width < 0 || width > winWidth) {\r\n this.logger.verbose(\"Default popup window width used. Window width not configured or invalid.\");\r\n width = BrowserConstants.POPUP_WIDTH;\r\n }\r\n if (!height || height < 0 || height > winHeight) {\r\n this.logger.verbose(\"Default popup window height used. Window height not configured or invalid.\");\r\n height = BrowserConstants.POPUP_HEIGHT;\r\n }\r\n if (!top || top < 0 || top > winHeight) {\r\n this.logger.verbose(\"Default popup window top position used. Window top not configured or invalid.\");\r\n top = Math.max(0, ((winHeight / 2) - (BrowserConstants.POPUP_HEIGHT / 2)) + winTop);\r\n }\r\n if (!left || left < 0 || left > winWidth) {\r\n this.logger.verbose(\"Default popup window left position used. Window left not configured or invalid.\");\r\n left = Math.max(0, ((winWidth / 2) - (BrowserConstants.POPUP_WIDTH / 2)) + winLeft);\r\n }\r\n return window.open(urlNavigate, popupName, \"width=\" + width + \", height=\" + height + \", top=\" + top + \", left=\" + left + \", scrollbars=yes\");\r\n };\r\n /**\r\n * Event callback to unload main window.\r\n */\r\n PopupClient.prototype.unloadWindow = function (e) {\r\n this.browserStorage.cleanRequestByInteractionType(InteractionType.Popup);\r\n if (this.currentWindow) {\r\n this.currentWindow.close();\r\n }\r\n // Guarantees browser unload will happen, so no other errors will be thrown.\r\n e.preventDefault();\r\n };\r\n /**\r\n * Closes popup, removes any state vars created during popup calls.\r\n * @param popupWindow\r\n */\r\n PopupClient.prototype.cleanPopup = function (popupWindow) {\r\n if (popupWindow) {\r\n // Close window.\r\n popupWindow.close();\r\n }\r\n // Remove window unload function\r\n window.removeEventListener(\"beforeunload\", this.unloadWindow);\r\n // Interaction is completed - remove interaction status.\r\n this.browserStorage.setInteractionInProgress(false);\r\n };\r\n /**\r\n * Generates the name for the popup based on the client id and request\r\n * @param clientId\r\n * @param request\r\n */\r\n PopupClient.prototype.generatePopupName = function (scopes, authority) {\r\n return BrowserConstants.POPUP_NAME_PREFIX + \".\" + this.config.auth.clientId + \".\" + scopes.join(\"-\") + \".\" + authority + \".\" + this.correlationId;\r\n };\r\n /**\r\n * Generates the name for the popup based on the client id and request for logouts\r\n * @param clientId\r\n * @param request\r\n */\r\n PopupClient.prototype.generateLogoutPopupName = function (request) {\r\n var homeAccountId = request.account && request.account.homeAccountId;\r\n return BrowserConstants.POPUP_NAME_PREFIX + \".\" + this.config.auth.clientId + \".\" + homeAccountId + \".\" + this.correlationId;\r\n };\r\n return PopupClient;\r\n}(StandardInteractionClient));\n\nexport { PopupClient };\n//# sourceMappingURL=PopupClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { StringUtils, ClientAuthError, ServerError } from '@azure/msal-common';\nimport { BrowserAuthError, BrowserAuthErrorMessage } from '../error/BrowserAuthError.js';\nimport { TemporaryCacheKeys, ApiId } from '../utils/BrowserConstants.js';\nimport { InteractionHandler } from './InteractionHandler.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar RedirectHandler = /** @class */ (function (_super) {\r\n __extends(RedirectHandler, _super);\r\n function RedirectHandler(authCodeModule, storageImpl, authCodeRequest, logger, browserCrypto, performanceClient) {\r\n var _this = _super.call(this, authCodeModule, storageImpl, authCodeRequest, logger, performanceClient) || this;\r\n _this.browserCrypto = browserCrypto;\r\n return _this;\r\n }\r\n /**\r\n * Redirects window to given URL.\r\n * @param urlNavigate\r\n */\r\n RedirectHandler.prototype.initiateAuthRequest = function (requestUrl, params) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var navigationOptions, navigate;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.verbose(\"RedirectHandler.initiateAuthRequest called\");\r\n if (!!StringUtils.isEmpty(requestUrl)) return [3 /*break*/, 7];\r\n // Cache start page, returns to this page after redirectUri if navigateToLoginRequestUrl is true\r\n if (params.redirectStartPage) {\r\n this.logger.verbose(\"RedirectHandler.initiateAuthRequest: redirectStartPage set, caching start page\");\r\n this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, params.redirectStartPage, true);\r\n }\r\n // Set interaction status in the library.\r\n this.browserStorage.setTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, this.authCodeRequest.correlationId, true);\r\n this.browserStorage.cacheCodeRequest(this.authCodeRequest, this.browserCrypto);\r\n this.logger.infoPii(\"RedirectHandler.initiateAuthRequest: Navigate to: \" + requestUrl);\r\n navigationOptions = {\r\n apiId: ApiId.acquireTokenRedirect,\r\n timeout: params.redirectTimeout,\r\n noHistory: false\r\n };\r\n if (!(typeof params.onRedirectNavigate === \"function\")) return [3 /*break*/, 4];\r\n this.logger.verbose(\"RedirectHandler.initiateAuthRequest: Invoking onRedirectNavigate callback\");\r\n navigate = params.onRedirectNavigate(requestUrl);\r\n if (!(navigate !== false)) return [3 /*break*/, 2];\r\n this.logger.verbose(\"RedirectHandler.initiateAuthRequest: onRedirectNavigate did not return false, navigating\");\r\n return [4 /*yield*/, params.navigationClient.navigateExternal(requestUrl, navigationOptions)];\r\n case 1:\r\n _a.sent();\r\n return [2 /*return*/];\r\n case 2:\r\n this.logger.verbose(\"RedirectHandler.initiateAuthRequest: onRedirectNavigate returned false, stopping navigation\");\r\n return [2 /*return*/];\r\n case 3: return [3 /*break*/, 6];\r\n case 4:\r\n // Navigate window to request URL\r\n this.logger.verbose(\"RedirectHandler.initiateAuthRequest: Navigating window to navigate url\");\r\n return [4 /*yield*/, params.navigationClient.navigateExternal(requestUrl, navigationOptions)];\r\n case 5:\r\n _a.sent();\r\n return [2 /*return*/];\r\n case 6: return [3 /*break*/, 8];\r\n case 7:\r\n // Throw error if request URL is empty.\r\n this.logger.info(\"RedirectHandler.initiateAuthRequest: Navigate url is empty\");\r\n throw BrowserAuthError.createEmptyNavigationUriError();\r\n case 8: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Handle authorization code response in the window.\r\n * @param hash\r\n */\r\n RedirectHandler.prototype.handleCodeResponseFromHash = function (locationHash, state, authority, networkModule) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var stateKey, requestState, authCodeResponse, nonceKey, cachedNonce, cachedCcsCred, tokenResponse;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.verbose(\"RedirectHandler.handleCodeResponse called\");\r\n // Check that location hash isn't empty.\r\n if (StringUtils.isEmpty(locationHash)) {\r\n throw BrowserAuthError.createEmptyHashError(locationHash);\r\n }\r\n // Interaction is completed - remove interaction status.\r\n this.browserStorage.setInteractionInProgress(false);\r\n stateKey = this.browserStorage.generateStateKey(state);\r\n requestState = this.browserStorage.getTemporaryCache(stateKey);\r\n if (!requestState) {\r\n throw ClientAuthError.createStateNotFoundError(\"Cached State\");\r\n }\r\n try {\r\n authCodeResponse = this.authModule.handleFragmentResponse(locationHash, requestState);\r\n }\r\n catch (e) {\r\n if (e instanceof ServerError && e.subError === BrowserAuthErrorMessage.userCancelledError.code) {\r\n // Translate server error caused by user closing native prompt to corresponding first class MSAL error\r\n throw BrowserAuthError.createUserCancelledError();\r\n }\r\n else {\r\n throw e;\r\n }\r\n }\r\n nonceKey = this.browserStorage.generateNonceKey(requestState);\r\n cachedNonce = this.browserStorage.getTemporaryCache(nonceKey);\r\n // Assign code to request\r\n this.authCodeRequest.code = authCodeResponse.code;\r\n if (!authCodeResponse.cloud_instance_host_name) return [3 /*break*/, 2];\r\n return [4 /*yield*/, this.updateTokenEndpointAuthority(authCodeResponse.cloud_instance_host_name, authority, networkModule)];\r\n case 1:\r\n _a.sent();\r\n _a.label = 2;\r\n case 2:\r\n authCodeResponse.nonce = cachedNonce || undefined;\r\n authCodeResponse.state = requestState;\r\n // Add CCS parameters if available\r\n if (authCodeResponse.client_info) {\r\n this.authCodeRequest.clientInfo = authCodeResponse.client_info;\r\n }\r\n else {\r\n cachedCcsCred = this.checkCcsCredentials();\r\n if (cachedCcsCred) {\r\n this.authCodeRequest.ccsCredential = cachedCcsCred;\r\n }\r\n }\r\n return [4 /*yield*/, this.authModule.acquireToken(this.authCodeRequest, authCodeResponse)];\r\n case 3:\r\n tokenResponse = _a.sent();\r\n this.browserStorage.cleanRequestByState(state);\r\n return [2 /*return*/, tokenResponse];\r\n }\r\n });\r\n });\r\n };\r\n return RedirectHandler;\r\n}(InteractionHandler));\n\nexport { RedirectHandler };\n//# sourceMappingURL=RedirectHandler.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { UrlString, AuthError, PerformanceEvents, Constants, ThrottlingUtils, ProtocolUtils } from '@azure/msal-common';\nimport { StandardInteractionClient } from './StandardInteractionClient.js';\nimport { TemporaryCacheKeys, ApiId, InteractionType } from '../utils/BrowserConstants.js';\nimport { RedirectHandler } from '../interaction_handler/RedirectHandler.js';\nimport { BrowserUtils } from '../utils/BrowserUtils.js';\nimport { EventType } from '../event/EventType.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { NativeInteractionClient } from './NativeInteractionClient.js';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar RedirectClient = /** @class */ (function (_super) {\r\n __extends(RedirectClient, _super);\r\n function RedirectClient(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeStorageImpl, nativeMessageHandler, correlationId) {\r\n var _this = _super.call(this, config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId) || this;\r\n _this.nativeStorage = nativeStorageImpl;\r\n return _this;\r\n }\r\n /**\r\n * Redirects the page to the /authorize endpoint of the IDP\r\n * @param request\r\n */\r\n RedirectClient.prototype.acquireToken = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var validRequest, serverTelemetryManager, handleBackButton, authCodeRequest, authClient, interactionHandler, navigateUrl, redirectStartPage, e_1;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);\r\n return [4 /*yield*/, this.initializeAuthorizationRequest(request, InteractionType.Redirect)];\r\n case 1:\r\n validRequest = _a.sent();\r\n this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || Constants.EMPTY_STRING, validRequest.account || null);\r\n serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenRedirect);\r\n handleBackButton = function (event) {\r\n // Clear temporary cache if the back button is clicked during the redirect flow.\r\n if (event.persisted) {\r\n _this.logger.verbose(\"Page was restored from back/forward cache. Clearing temporary cache.\");\r\n _this.browserStorage.cleanRequestByState(validRequest.state);\r\n _this.eventHandler.emitEvent(EventType.RESTORE_FROM_BFCACHE, InteractionType.Redirect);\r\n }\r\n };\r\n _a.label = 2;\r\n case 2:\r\n _a.trys.push([2, 7, , 8]);\r\n // Create auth code request and generate PKCE params\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);\r\n return [4 /*yield*/, this.initializeAuthorizationCodeRequest(validRequest)];\r\n case 3:\r\n authCodeRequest = _a.sent();\r\n // Initialize the client\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);\r\n return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions)];\r\n case 4:\r\n authClient = _a.sent();\r\n this.logger.verbose(\"Auth code client created\");\r\n interactionHandler = new RedirectHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.browserCrypto, this.performanceClient);\r\n return [4 /*yield*/, authClient.getAuthCodeUrl(__assign(__assign({}, validRequest), { nativeBroker: NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, request.authenticationScheme) }))];\r\n case 5:\r\n navigateUrl = _a.sent();\r\n redirectStartPage = this.getRedirectStartPage(request.redirectStartPage);\r\n this.logger.verbosePii(\"Redirect start page: \" + redirectStartPage);\r\n // Clear temporary cache if the back button is clicked during the redirect flow.\r\n window.addEventListener(\"pageshow\", handleBackButton);\r\n return [4 /*yield*/, interactionHandler.initiateAuthRequest(navigateUrl, {\r\n navigationClient: this.navigationClient,\r\n redirectTimeout: this.config.system.redirectNavigationTimeout,\r\n redirectStartPage: redirectStartPage,\r\n onRedirectNavigate: request.onRedirectNavigate\r\n })];\r\n case 6: \r\n // Show the UI once the url has been created. Response will come back in the hash, which will be handled in the handleRedirectCallback function.\r\n return [2 /*return*/, _a.sent()];\r\n case 7:\r\n e_1 = _a.sent();\r\n if (e_1 instanceof AuthError) {\r\n e_1.setCorrelationId(this.correlationId);\r\n }\r\n window.removeEventListener(\"pageshow\", handleBackButton);\r\n serverTelemetryManager.cacheFailedRequest(e_1);\r\n this.browserStorage.cleanRequestByState(validRequest.state);\r\n throw e_1;\r\n case 8: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Checks if navigateToLoginRequestUrl is set, and:\r\n * - if true, performs logic to cache and navigate\r\n * - if false, handles hash string and parses response\r\n * @param hash\r\n */\r\n RedirectClient.prototype.handleRedirectPromise = function (hash) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var serverTelemetryManager, responseHash, state, serverParams, loginRequestUrl, loginRequestUrlNormalized, currentUrlNormalized, handleHashResult, navigationOptions, processHashOnRedirect, homepage, e_2;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.handleRedirectPromise);\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 10, , 11]);\r\n if (!this.browserStorage.isInteractionInProgress(true)) {\r\n this.logger.info(\"handleRedirectPromise called but there is no interaction in progress, returning null.\");\r\n return [2 /*return*/, null];\r\n }\r\n responseHash = this.getRedirectResponseHash(hash || window.location.hash);\r\n if (!responseHash) {\r\n // Not a recognized server response hash or hash not associated with a redirect request\r\n this.logger.info(\"handleRedirectPromise did not detect a response hash as a result of a redirect. Cleaning temporary cache.\");\r\n this.browserStorage.cleanRequestByInteractionType(InteractionType.Redirect);\r\n return [2 /*return*/, null];\r\n }\r\n state = void 0;\r\n try {\r\n serverParams = UrlString.getDeserializedHash(responseHash);\r\n state = this.validateAndExtractStateFromHash(serverParams, InteractionType.Redirect);\r\n this.logger.verbose(\"State extracted from hash\");\r\n }\r\n catch (e) {\r\n this.logger.info(\"handleRedirectPromise was unable to extract state due to: \" + e);\r\n this.browserStorage.cleanRequestByInteractionType(InteractionType.Redirect);\r\n return [2 /*return*/, null];\r\n }\r\n loginRequestUrl = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, true) || Constants.EMPTY_STRING;\r\n loginRequestUrlNormalized = UrlString.removeHashFromUrl(loginRequestUrl);\r\n currentUrlNormalized = UrlString.removeHashFromUrl(window.location.href);\r\n if (!(loginRequestUrlNormalized === currentUrlNormalized && this.config.auth.navigateToLoginRequestUrl)) return [3 /*break*/, 3];\r\n // We are on the page we need to navigate to - handle hash\r\n this.logger.verbose(\"Current page is loginRequestUrl, handling hash\");\r\n return [4 /*yield*/, this.handleHash(responseHash, state, serverTelemetryManager)];\r\n case 2:\r\n handleHashResult = _a.sent();\r\n if (loginRequestUrl.indexOf(\"#\") > -1) {\r\n // Replace current hash with non-msal hash, if present\r\n BrowserUtils.replaceHash(loginRequestUrl);\r\n }\r\n return [2 /*return*/, handleHashResult];\r\n case 3:\r\n if (!!this.config.auth.navigateToLoginRequestUrl) return [3 /*break*/, 4];\r\n this.logger.verbose(\"NavigateToLoginRequestUrl set to false, handling hash\");\r\n return [2 /*return*/, this.handleHash(responseHash, state, serverTelemetryManager)];\r\n case 4:\r\n if (!(!BrowserUtils.isInIframe() || this.config.system.allowRedirectInIframe)) return [3 /*break*/, 9];\r\n /*\r\n * Returned from authority using redirect - need to perform navigation before processing response\r\n * Cache the hash to be retrieved after the next redirect\r\n */\r\n this.browserStorage.setTemporaryCache(TemporaryCacheKeys.URL_HASH, responseHash, true);\r\n navigationOptions = {\r\n apiId: ApiId.handleRedirectPromise,\r\n timeout: this.config.system.redirectNavigationTimeout,\r\n noHistory: true\r\n };\r\n processHashOnRedirect = true;\r\n if (!(!loginRequestUrl || loginRequestUrl === \"null\")) return [3 /*break*/, 6];\r\n homepage = BrowserUtils.getHomepage();\r\n // Cache the homepage under ORIGIN_URI to ensure cached hash is processed on homepage\r\n this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, homepage, true);\r\n this.logger.warning(\"Unable to get valid login request url from cache, redirecting to home page\");\r\n return [4 /*yield*/, this.navigationClient.navigateInternal(homepage, navigationOptions)];\r\n case 5:\r\n processHashOnRedirect = _a.sent();\r\n return [3 /*break*/, 8];\r\n case 6:\r\n // Navigate to page that initiated the redirect request\r\n this.logger.verbose(\"Navigating to loginRequestUrl: \" + loginRequestUrl);\r\n return [4 /*yield*/, this.navigationClient.navigateInternal(loginRequestUrl, navigationOptions)];\r\n case 7:\r\n processHashOnRedirect = _a.sent();\r\n _a.label = 8;\r\n case 8:\r\n // If navigateInternal implementation returns false, handle the hash now\r\n if (!processHashOnRedirect) {\r\n return [2 /*return*/, this.handleHash(responseHash, state, serverTelemetryManager)];\r\n }\r\n _a.label = 9;\r\n case 9: return [2 /*return*/, null];\r\n case 10:\r\n e_2 = _a.sent();\r\n if (e_2 instanceof AuthError) {\r\n e_2.setCorrelationId(this.correlationId);\r\n }\r\n serverTelemetryManager.cacheFailedRequest(e_2);\r\n this.browserStorage.cleanRequestByInteractionType(InteractionType.Redirect);\r\n throw e_2;\r\n case 11: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Gets the response hash for a redirect request\r\n * Returns null if interactionType in the state value is not \"redirect\" or the hash does not contain known properties\r\n * @param hash\r\n */\r\n RedirectClient.prototype.getRedirectResponseHash = function (hash) {\r\n this.logger.verbose(\"getRedirectResponseHash called\");\r\n // Get current location hash from window or cache.\r\n var isResponseHash = UrlString.hashContainsKnownProperties(hash);\r\n if (isResponseHash) {\r\n BrowserUtils.clearHash(window);\r\n this.logger.verbose(\"Hash contains known properties, returning response hash\");\r\n return hash;\r\n }\r\n var cachedHash = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.URL_HASH, true);\r\n this.browserStorage.removeItem(this.browserStorage.generateCacheKey(TemporaryCacheKeys.URL_HASH));\r\n this.logger.verbose(\"Hash does not contain known properties, returning cached hash\");\r\n return cachedHash;\r\n };\r\n /**\r\n * Checks if hash exists and handles in window.\r\n * @param hash\r\n * @param state\r\n */\r\n RedirectClient.prototype.handleHash = function (hash, state, serverTelemetryManager) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var cachedRequest, serverParams, nativeInteractionClient, userRequestState, currentAuthority, authClient, interactionHandler;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n cachedRequest = this.browserStorage.getCachedRequest(state, this.browserCrypto);\r\n this.logger.verbose(\"handleHash called, retrieved cached request\");\r\n serverParams = UrlString.getDeserializedHash(hash);\r\n if (serverParams.accountId) {\r\n this.logger.verbose(\"Account id found in hash, calling WAM for token\");\r\n if (!this.nativeMessageHandler) {\r\n throw BrowserAuthError.createNativeConnectionNotEstablishedError();\r\n }\r\n nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.nativeStorage, cachedRequest.correlationId);\r\n userRequestState = ProtocolUtils.parseRequestState(this.browserCrypto, state).userRequestState;\r\n return [2 /*return*/, nativeInteractionClient.acquireToken(__assign(__assign({}, cachedRequest), { state: userRequestState, prompt: undefined // Server should handle the prompt, ideally native broker can do this part silently\r\n })).finally(function () {\r\n _this.browserStorage.cleanRequestByState(state);\r\n })];\r\n }\r\n currentAuthority = this.browserStorage.getCachedAuthority(state);\r\n if (!currentAuthority) {\r\n throw BrowserAuthError.createNoCachedAuthorityError();\r\n }\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, cachedRequest.correlationId);\r\n return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, currentAuthority)];\r\n case 1:\r\n authClient = _a.sent();\r\n this.logger.verbose(\"Auth code client created\");\r\n ThrottlingUtils.removeThrottle(this.browserStorage, this.config.auth.clientId, cachedRequest);\r\n interactionHandler = new RedirectHandler(authClient, this.browserStorage, cachedRequest, this.logger, this.browserCrypto, this.performanceClient);\r\n return [4 /*yield*/, interactionHandler.handleCodeResponseFromHash(hash, state, authClient.authority, this.networkClient)];\r\n case 2: return [2 /*return*/, _a.sent()];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Use to log out the current user, and redirect the user to the postLogoutRedirectUri.\r\n * Default behaviour is to redirect the user to `window.location.href`.\r\n * @param logoutRequest\r\n */\r\n RedirectClient.prototype.logout = function (logoutRequest) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var validLogoutRequest, serverTelemetryManager, navigationOptions, authClient, logoutUri, navigate, e_3;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.verbose(\"logoutRedirect called\");\r\n validLogoutRequest = this.initializeLogoutRequest(logoutRequest);\r\n serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.logout);\r\n _a.label = 1;\r\n case 1:\r\n _a.trys.push([1, 10, , 11]);\r\n this.eventHandler.emitEvent(EventType.LOGOUT_START, InteractionType.Redirect, logoutRequest);\r\n // Clear cache on logout\r\n return [4 /*yield*/, this.clearCacheOnLogout(validLogoutRequest.account)];\r\n case 2:\r\n // Clear cache on logout\r\n _a.sent();\r\n navigationOptions = {\r\n apiId: ApiId.logout,\r\n timeout: this.config.system.redirectNavigationTimeout,\r\n noHistory: false\r\n };\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, validLogoutRequest.correlationId);\r\n return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, logoutRequest && logoutRequest.authority)];\r\n case 3:\r\n authClient = _a.sent();\r\n this.logger.verbose(\"Auth code client created\");\r\n logoutUri = authClient.getLogoutUri(validLogoutRequest);\r\n this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Redirect, validLogoutRequest);\r\n if (!(logoutRequest && typeof logoutRequest.onRedirectNavigate === \"function\")) return [3 /*break*/, 7];\r\n navigate = logoutRequest.onRedirectNavigate(logoutUri);\r\n if (!(navigate !== false)) return [3 /*break*/, 5];\r\n this.logger.verbose(\"Logout onRedirectNavigate did not return false, navigating\");\r\n // Ensure interaction is in progress\r\n if (!this.browserStorage.getInteractionInProgress()) {\r\n this.browserStorage.setInteractionInProgress(true);\r\n }\r\n return [4 /*yield*/, this.navigationClient.navigateExternal(logoutUri, navigationOptions)];\r\n case 4:\r\n _a.sent();\r\n return [2 /*return*/];\r\n case 5:\r\n // Ensure interaction is not in progress\r\n this.browserStorage.setInteractionInProgress(false);\r\n this.logger.verbose(\"Logout onRedirectNavigate returned false, stopping navigation\");\r\n _a.label = 6;\r\n case 6: return [3 /*break*/, 9];\r\n case 7:\r\n // Ensure interaction is in progress\r\n if (!this.browserStorage.getInteractionInProgress()) {\r\n this.browserStorage.setInteractionInProgress(true);\r\n }\r\n return [4 /*yield*/, this.navigationClient.navigateExternal(logoutUri, navigationOptions)];\r\n case 8:\r\n _a.sent();\r\n return [2 /*return*/];\r\n case 9: return [3 /*break*/, 11];\r\n case 10:\r\n e_3 = _a.sent();\r\n if (e_3 instanceof AuthError) {\r\n e_3.setCorrelationId(this.correlationId);\r\n }\r\n serverTelemetryManager.cacheFailedRequest(e_3);\r\n this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, InteractionType.Redirect, null, e_3);\r\n this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Redirect);\r\n throw e_3;\r\n case 11:\r\n this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Redirect);\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Use to get the redirectStartPage either from request or use current window\r\n * @param requestStartPage\r\n */\r\n RedirectClient.prototype.getRedirectStartPage = function (requestStartPage) {\r\n var redirectStartPage = requestStartPage || window.location.href;\r\n return UrlString.getAbsoluteUrl(redirectStartPage, BrowserUtils.getCurrentUri());\r\n };\r\n return RedirectClient;\r\n}(StandardInteractionClient));\n\nexport { RedirectClient };\n//# sourceMappingURL=RedirectClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';\nimport { PerformanceEvents, StringUtils, Constants, UrlString } from '@azure/msal-common';\nimport { InteractionHandler } from './InteractionHandler.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { DEFAULT_IFRAME_TIMEOUT_MS } from '../config/Configuration.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar SilentHandler = /** @class */ (function (_super) {\r\n __extends(SilentHandler, _super);\r\n function SilentHandler(authCodeModule, storageImpl, authCodeRequest, logger, systemOptions, performanceClient) {\r\n var _this = _super.call(this, authCodeModule, storageImpl, authCodeRequest, logger, performanceClient) || this;\r\n _this.navigateFrameWait = systemOptions.navigateFrameWait;\r\n _this.pollIntervalMilliseconds = systemOptions.pollIntervalMilliseconds;\r\n return _this;\r\n }\r\n /**\r\n * Creates a hidden iframe to given URL using user-requested scopes as an id.\r\n * @param urlNavigate\r\n * @param userRequestScopes\r\n */\r\n SilentHandler.prototype.initiateAuthRequest = function (requestUrl) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerInitiateAuthRequest, this.authCodeRequest.correlationId);\r\n if (StringUtils.isEmpty(requestUrl)) {\r\n // Throw error if request URL is empty.\r\n this.logger.info(\"Navigate url is empty\");\r\n throw BrowserAuthError.createEmptyNavigationUriError();\r\n }\r\n if (!this.navigateFrameWait) return [3 /*break*/, 2];\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.SilentHandlerLoadFrame, this.authCodeRequest.correlationId);\r\n return [4 /*yield*/, this.loadFrame(requestUrl)];\r\n case 1: return [2 /*return*/, _a.sent()];\r\n case 2: return [2 /*return*/, this.loadFrameSync(requestUrl)];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Monitors an iframe content window until it loads a url with a known hash, or hits a specified timeout.\r\n * @param iframe\r\n * @param timeout\r\n */\r\n SilentHandler.prototype.monitorIframeForHash = function (iframe, timeout) {\r\n var _this = this;\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerMonitorIframeForHash, this.authCodeRequest.correlationId);\r\n return new Promise(function (resolve, reject) {\r\n if (timeout < DEFAULT_IFRAME_TIMEOUT_MS) {\r\n _this.logger.warning(\"system.loadFrameTimeout or system.iframeHashTimeout set to lower (\" + timeout + \"ms) than the default (\" + DEFAULT_IFRAME_TIMEOUT_MS + \"ms). This may result in timeouts.\");\r\n }\r\n /*\r\n * Polling for iframes can be purely timing based,\r\n * since we don't need to account for interaction.\r\n */\r\n var nowMark = window.performance.now();\r\n var timeoutMark = nowMark + timeout;\r\n var intervalId = setInterval(function () {\r\n if (window.performance.now() > timeoutMark) {\r\n _this.removeHiddenIframe(iframe);\r\n clearInterval(intervalId);\r\n reject(BrowserAuthError.createMonitorIframeTimeoutError());\r\n return;\r\n }\r\n var href = Constants.EMPTY_STRING;\r\n var contentWindow = iframe.contentWindow;\r\n try {\r\n /*\r\n * Will throw if cross origin,\r\n * which should be caught and ignored\r\n * since we need the interval to keep running while on STS UI.\r\n */\r\n href = contentWindow ? contentWindow.location.href : Constants.EMPTY_STRING;\r\n }\r\n catch (e) { }\r\n if (StringUtils.isEmpty(href)) {\r\n return;\r\n }\r\n var contentHash = contentWindow ? contentWindow.location.hash : Constants.EMPTY_STRING;\r\n if (UrlString.hashContainsKnownProperties(contentHash)) {\r\n // Success case\r\n _this.removeHiddenIframe(iframe);\r\n clearInterval(intervalId);\r\n resolve(contentHash);\r\n return;\r\n }\r\n }, _this.pollIntervalMilliseconds);\r\n });\r\n };\r\n /**\r\n * @hidden\r\n * Loads iframe with authorization endpoint URL\r\n * @ignore\r\n */\r\n SilentHandler.prototype.loadFrame = function (urlNavigate) {\r\n var _this = this;\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerLoadFrame, this.authCodeRequest.correlationId);\r\n /*\r\n * This trick overcomes iframe navigation in IE\r\n * IE does not load the page consistently in iframe\r\n */\r\n return new Promise(function (resolve, reject) {\r\n var frameHandle = _this.createHiddenIframe();\r\n setTimeout(function () {\r\n if (!frameHandle) {\r\n reject(\"Unable to load iframe\");\r\n return;\r\n }\r\n frameHandle.src = urlNavigate;\r\n resolve(frameHandle);\r\n }, _this.navigateFrameWait);\r\n });\r\n };\r\n /**\r\n * @hidden\r\n * Loads the iframe synchronously when the navigateTimeFrame is set to `0`\r\n * @param urlNavigate\r\n * @param frameName\r\n * @param logger\r\n */\r\n SilentHandler.prototype.loadFrameSync = function (urlNavigate) {\r\n var frameHandle = this.createHiddenIframe();\r\n frameHandle.src = urlNavigate;\r\n return frameHandle;\r\n };\r\n /**\r\n * @hidden\r\n * Creates a new hidden iframe or gets an existing one for silent token renewal.\r\n * @ignore\r\n */\r\n SilentHandler.prototype.createHiddenIframe = function () {\r\n var authFrame = document.createElement(\"iframe\");\r\n authFrame.className = \"msalSilentIframe\";\r\n authFrame.style.visibility = \"hidden\";\r\n authFrame.style.position = \"absolute\";\r\n authFrame.style.width = authFrame.style.height = \"0\";\r\n authFrame.style.border = \"0\";\r\n authFrame.setAttribute(\"sandbox\", \"allow-scripts allow-same-origin allow-forms\");\r\n document.getElementsByTagName(\"body\")[0].appendChild(authFrame);\r\n return authFrame;\r\n };\r\n /**\r\n * @hidden\r\n * Removes a hidden iframe from the page.\r\n * @ignore\r\n */\r\n SilentHandler.prototype.removeHiddenIframe = function (iframe) {\r\n if (document.body === iframe.parentNode) {\r\n document.body.removeChild(iframe);\r\n }\r\n };\r\n return SilentHandler;\r\n}(InteractionHandler));\n\nexport { SilentHandler };\n//# sourceMappingURL=SilentHandler.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { AuthError, PerformanceEvents, Constants, StringUtils, PromptValue, UrlString, ProtocolUtils } from '@azure/msal-common';\nimport { StandardInteractionClient } from './StandardInteractionClient.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { InteractionType } from '../utils/BrowserConstants.js';\nimport { SilentHandler } from '../interaction_handler/SilentHandler.js';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.js';\nimport { NativeInteractionClient } from './NativeInteractionClient.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar SilentIframeClient = /** @class */ (function (_super) {\r\n __extends(SilentIframeClient, _super);\r\n function SilentIframeClient(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, apiId, performanceClient, nativeStorageImpl, nativeMessageHandler, correlationId) {\r\n var _this = _super.call(this, config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId) || this;\r\n _this.apiId = apiId;\r\n _this.nativeStorage = nativeStorageImpl;\r\n return _this;\r\n }\r\n /**\r\n * Acquires a token silently by opening a hidden iframe to the /authorize endpoint with prompt=none or prompt=no_session\r\n * @param request\r\n */\r\n SilentIframeClient.prototype.acquireToken = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var acquireTokenMeasurement, silentRequest, serverTelemetryManager, authClient, e_1;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);\r\n this.logger.verbose(\"acquireTokenByIframe called\");\r\n acquireTokenMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);\r\n // Check that we have some SSO data\r\n if (StringUtils.isEmpty(request.loginHint) && StringUtils.isEmpty(request.sid) && (!request.account || StringUtils.isEmpty(request.account.username))) {\r\n this.logger.warning(\"No user hint provided. The authorization server may need more information to complete this request.\");\r\n }\r\n // Check that prompt is set to none or no_session, throw error if it is set to anything else.\r\n if (request.prompt && (request.prompt !== PromptValue.NONE) && (request.prompt !== PromptValue.NO_SESSION)) {\r\n acquireTokenMeasurement.endMeasurement({\r\n success: false\r\n });\r\n throw BrowserAuthError.createSilentPromptValueError(request.prompt);\r\n }\r\n // Create silent request\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);\r\n return [4 /*yield*/, this.initializeAuthorizationRequest(__assign(__assign({}, request), { prompt: request.prompt || PromptValue.NONE }), InteractionType.Silent)];\r\n case 1:\r\n silentRequest = _a.sent();\r\n this.browserStorage.updateCacheEntries(silentRequest.state, silentRequest.nonce, silentRequest.authority, silentRequest.loginHint || Constants.EMPTY_STRING, silentRequest.account || null);\r\n serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);\r\n _a.label = 2;\r\n case 2:\r\n _a.trys.push([2, 5, , 6]);\r\n // Initialize the client\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);\r\n return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];\r\n case 3:\r\n authClient = _a.sent();\r\n this.logger.verbose(\"Auth code client created\");\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.SilentIframeClientTokenHelper, request.correlationId);\r\n return [4 /*yield*/, this.silentTokenHelper(authClient, silentRequest).then(function (result) {\r\n acquireTokenMeasurement.endMeasurement({\r\n success: true,\r\n fromCache: false,\r\n requestId: result.requestId\r\n });\r\n return result;\r\n })];\r\n case 4: return [2 /*return*/, _a.sent()];\r\n case 5:\r\n e_1 = _a.sent();\r\n if (e_1 instanceof AuthError) {\r\n e_1.setCorrelationId(this.correlationId);\r\n }\r\n serverTelemetryManager.cacheFailedRequest(e_1);\r\n this.browserStorage.cleanRequestByState(silentRequest.state);\r\n acquireTokenMeasurement.endMeasurement({\r\n errorCode: e_1 instanceof AuthError && e_1.errorCode || undefined,\r\n subErrorCode: e_1 instanceof AuthError && e_1.subError || undefined,\r\n success: false\r\n });\r\n throw e_1;\r\n case 6: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Currently Unsupported\r\n */\r\n SilentIframeClient.prototype.logout = function () {\r\n // Synchronous so we must reject\r\n return Promise.reject(BrowserAuthError.createSilentLogoutUnsupportedError());\r\n };\r\n /**\r\n * Helper which acquires an authorization code silently using a hidden iframe from given url\r\n * using the scopes requested as part of the id, and exchanges the code for a set of OAuth tokens.\r\n * @param navigateUrl\r\n * @param userRequestScopes\r\n */\r\n SilentIframeClient.prototype.silentTokenHelper = function (authClient, silentRequest) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var authCodeRequest, navigateUrl, silentHandler, msalFrame, hash, serverParams, state, nativeInteractionClient, userRequestState;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentIframeClientTokenHelper, silentRequest.correlationId);\r\n // Create auth code request and generate PKCE params\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, silentRequest.correlationId);\r\n return [4 /*yield*/, this.initializeAuthorizationCodeRequest(silentRequest)];\r\n case 1:\r\n authCodeRequest = _a.sent();\r\n // Create authorize request url\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.GetAuthCodeUrl, silentRequest.correlationId);\r\n return [4 /*yield*/, authClient.getAuthCodeUrl(__assign(__assign({}, silentRequest), { nativeBroker: NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, silentRequest.authenticationScheme) }))];\r\n case 2:\r\n navigateUrl = _a.sent();\r\n silentHandler = new SilentHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.config.system, this.performanceClient);\r\n // Get the frame handle for the silent request\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.SilentHandlerInitiateAuthRequest, silentRequest.correlationId);\r\n return [4 /*yield*/, silentHandler.initiateAuthRequest(navigateUrl)];\r\n case 3:\r\n msalFrame = _a.sent();\r\n // Monitor the window for the hash. Return the string value and close the popup when the hash is received. Default timeout is 60 seconds.\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.SilentHandlerMonitorIframeForHash, silentRequest.correlationId);\r\n return [4 /*yield*/, silentHandler.monitorIframeForHash(msalFrame, this.config.system.iframeHashTimeout)];\r\n case 4:\r\n hash = _a.sent();\r\n serverParams = UrlString.getDeserializedHash(hash);\r\n state = this.validateAndExtractStateFromHash(serverParams, InteractionType.Silent, authCodeRequest.correlationId);\r\n if (serverParams.accountId) {\r\n this.logger.verbose(\"Account id found in hash, calling WAM for token\");\r\n if (!this.nativeMessageHandler) {\r\n throw BrowserAuthError.createNativeConnectionNotEstablishedError();\r\n }\r\n nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.apiId, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.browserStorage, this.correlationId);\r\n userRequestState = ProtocolUtils.parseRequestState(this.browserCrypto, state).userRequestState;\r\n return [2 /*return*/, nativeInteractionClient.acquireToken(__assign(__assign({}, silentRequest), { state: userRequestState, prompt: silentRequest.prompt || PromptValue.NONE })).finally(function () {\r\n _this.browserStorage.cleanRequestByState(state);\r\n })];\r\n }\r\n // Handle response from hash string\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.HandleCodeResponseFromHash, silentRequest.correlationId);\r\n return [2 /*return*/, silentHandler.handleCodeResponseFromHash(hash, state, authClient.authority, this.networkClient)];\r\n }\r\n });\r\n });\r\n };\r\n return SilentIframeClient;\r\n}(StandardInteractionClient));\n\nexport { SilentIframeClient };\n//# sourceMappingURL=SilentIframeClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { StandardInteractionClient } from './StandardInteractionClient.js';\nimport { PerformanceEvents, AuthError, RefreshTokenClient } from '@azure/msal-common';\nimport { ApiId } from '../utils/BrowserConstants.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar SilentRefreshClient = /** @class */ (function (_super) {\r\n __extends(SilentRefreshClient, _super);\r\n function SilentRefreshClient() {\r\n return _super !== null && _super.apply(this, arguments) || this;\r\n }\r\n /**\r\n * Exchanges the refresh token for new tokens\r\n * @param request\r\n */\r\n SilentRefreshClient.prototype.acquireToken = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var silentRequest, _a, acquireTokenMeasurement, serverTelemetryManager, refreshTokenClient;\r\n var _this = this;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentRefreshClientAcquireToken, request.correlationId);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.InitializeBaseRequest, request.correlationId);\r\n _a = [__assign({}, request)];\r\n return [4 /*yield*/, this.initializeBaseRequest(request, request.account)];\r\n case 1:\r\n silentRequest = __assign.apply(void 0, _a.concat([_b.sent()]));\r\n acquireTokenMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SilentRefreshClientAcquireToken, silentRequest.correlationId);\r\n serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);\r\n return [4 /*yield*/, this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];\r\n case 2:\r\n refreshTokenClient = _b.sent();\r\n this.logger.verbose(\"Refresh token client created\");\r\n // Send request to renew token. Auth module will throw errors if token cannot be renewed.\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, request.correlationId);\r\n return [2 /*return*/, refreshTokenClient.acquireTokenByRefreshToken(silentRequest)\r\n .then(function (result) {\r\n acquireTokenMeasurement.endMeasurement({\r\n success: true,\r\n fromCache: result.fromCache,\r\n requestId: result.requestId\r\n });\r\n return result;\r\n })\r\n .catch(function (e) {\r\n if (e instanceof AuthError) {\r\n e.setCorrelationId(_this.correlationId);\r\n }\r\n serverTelemetryManager.cacheFailedRequest(e);\r\n acquireTokenMeasurement.endMeasurement({\r\n errorCode: e.errorCode,\r\n subErrorCode: e.subError,\r\n success: false\r\n });\r\n throw e;\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Currently Unsupported\r\n */\r\n SilentRefreshClient.prototype.logout = function () {\r\n // Synchronous so we must reject\r\n return Promise.reject(BrowserAuthError.createSilentLogoutUnsupportedError());\r\n };\r\n /**\r\n * Creates a Refresh Client with the given authority, or the default authority.\r\n * @param serverTelemetryManager\r\n * @param authorityUrl\r\n */\r\n SilentRefreshClient.prototype.createRefreshTokenClient = function (serverTelemetryManager, authorityUrl, azureCloudOptions) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var clientConfig;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n // Create auth module.\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);\r\n return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];\r\n case 1:\r\n clientConfig = _a.sent();\r\n return [2 /*return*/, new RefreshTokenClient(clientConfig, this.performanceClient)];\r\n }\r\n });\r\n });\r\n };\r\n return SilentRefreshClient;\r\n}(StandardInteractionClient));\n\nexport { SilentRefreshClient };\n//# sourceMappingURL=SilentRefreshClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { AuthToken, CacheRecord, Authority, AccountEntity, IdTokenEntity, ScopeSet, AccessTokenEntity, RefreshTokenEntity, Constants } from '@azure/msal-common';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Token cache manager\r\n */\r\nvar TokenCache = /** @class */ (function () {\r\n function TokenCache(configuration, storage, logger, cryptoObj) {\r\n this.isBrowserEnvironment = typeof window !== \"undefined\";\r\n this.config = configuration;\r\n this.storage = storage;\r\n this.logger = logger;\r\n this.cryptoObj = cryptoObj;\r\n }\r\n // Move getAllAccounts here and cache utility APIs\r\n /**\r\n * API to load tokens to msal-browser cache.\r\n * @param request\r\n * @param response\r\n * @param options\r\n * @returns `AuthenticationResult` for the response that was loaded.\r\n */\r\n TokenCache.prototype.loadExternalTokens = function (request, response, options) {\r\n this.logger.info(\"TokenCache - loadExternalTokens called\");\r\n if (!response.id_token) {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"Please ensure server response includes id token.\");\r\n }\r\n var idToken = new AuthToken(response.id_token, this.cryptoObj);\r\n var cacheRecord;\r\n var authority;\r\n if (request.account) {\r\n var cacheRecordAccount = this.loadAccount(idToken, request.account.environment, undefined, undefined, request.account.homeAccountId);\r\n cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, request.account.environment, request.account.tenantId), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, request.account.environment, request.account.tenantId, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, request.account.environment));\r\n }\r\n else if (request.authority) {\r\n var authorityUrl = Authority.generateAuthority(request.authority, request.azureCloudOptions);\r\n var authorityOptions = {\r\n protocolMode: this.config.auth.protocolMode,\r\n knownAuthorities: this.config.auth.knownAuthorities,\r\n cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,\r\n authorityMetadata: this.config.auth.authorityMetadata,\r\n skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,\r\n };\r\n authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions, this.logger);\r\n // \"clientInfo\" from options takes precedence over \"clientInfo\" in response\r\n if (options.clientInfo) {\r\n this.logger.trace(\"TokenCache - homeAccountId from options\");\r\n var cacheRecordAccount = this.loadAccount(idToken, authority.hostnameAndPort, options.clientInfo, authority.authorityType);\r\n cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort));\r\n }\r\n else if (response.client_info) {\r\n this.logger.trace(\"TokenCache - homeAccountId from response\");\r\n var cacheRecordAccount = this.loadAccount(idToken, authority.hostnameAndPort, response.client_info, authority.authorityType);\r\n cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort));\r\n }\r\n else {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"Please provide clientInfo in the response or options.\");\r\n }\r\n }\r\n else {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"Please provide a request with an account or a request with authority.\");\r\n }\r\n return this.generateAuthenticationResult(request, idToken, cacheRecord, authority);\r\n };\r\n /**\r\n * Helper function to load account to msal-browser cache\r\n * @param idToken\r\n * @param environment\r\n * @param clientInfo\r\n * @param authorityType\r\n * @param requestHomeAccountId\r\n * @returns `AccountEntity`\r\n */\r\n TokenCache.prototype.loadAccount = function (idToken, environment, clientInfo, authorityType, requestHomeAccountId) {\r\n var homeAccountId;\r\n if (requestHomeAccountId) {\r\n homeAccountId = requestHomeAccountId;\r\n }\r\n else if (authorityType !== undefined && clientInfo) {\r\n homeAccountId = AccountEntity.generateHomeAccountId(clientInfo, authorityType, this.logger, this.cryptoObj, idToken);\r\n }\r\n if (!homeAccountId) {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"Unexpected missing homeAccountId\");\r\n }\r\n var accountEntity = clientInfo ?\r\n AccountEntity.createAccount(clientInfo, homeAccountId, idToken, undefined, undefined, undefined, environment) :\r\n AccountEntity.createGenericAccount(homeAccountId, idToken, undefined, undefined, undefined, environment);\r\n if (this.isBrowserEnvironment) {\r\n this.logger.verbose(\"TokenCache - loading account\");\r\n this.storage.setAccount(accountEntity);\r\n return accountEntity;\r\n }\r\n else {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"loadExternalTokens is designed to work in browser environments only.\");\r\n }\r\n };\r\n /**\r\n * Helper function to load id tokens to msal-browser cache\r\n * @param idToken\r\n * @param homeAccountId\r\n * @param environment\r\n * @param tenantId\r\n * @returns `IdTokenEntity`\r\n */\r\n TokenCache.prototype.loadIdToken = function (idToken, homeAccountId, environment, tenantId) {\r\n var idTokenEntity = IdTokenEntity.createIdTokenEntity(homeAccountId, environment, idToken.rawToken, this.config.auth.clientId, tenantId);\r\n if (this.isBrowserEnvironment) {\r\n this.logger.verbose(\"TokenCache - loading id token\");\r\n this.storage.setIdTokenCredential(idTokenEntity);\r\n return idTokenEntity;\r\n }\r\n else {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"loadExternalTokens is designed to work in browser environments only.\");\r\n }\r\n };\r\n /**\r\n * Helper function to load access tokens to msal-browser cache\r\n * @param request\r\n * @param response\r\n * @param homeAccountId\r\n * @param environment\r\n * @param tenantId\r\n * @returns `AccessTokenEntity`\r\n */\r\n TokenCache.prototype.loadAccessToken = function (request, response, homeAccountId, environment, tenantId, options) {\r\n if (!response.access_token) {\r\n this.logger.verbose(\"TokenCache - No access token provided for caching\");\r\n return null;\r\n }\r\n if (!response.expires_in) {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"Please ensure server response includes expires_in value.\");\r\n }\r\n if (!options.extendedExpiresOn) {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"Please provide an extendedExpiresOn value in the options.\");\r\n }\r\n var scopes = new ScopeSet(request.scopes).printScopes();\r\n var expiresOn = options.expiresOn || (response.expires_in + new Date().getTime() / 1000);\r\n var extendedExpiresOn = options.extendedExpiresOn;\r\n var accessTokenEntity = AccessTokenEntity.createAccessTokenEntity(homeAccountId, environment, response.access_token, this.config.auth.clientId, tenantId, scopes, expiresOn, extendedExpiresOn, this.cryptoObj);\r\n if (this.isBrowserEnvironment) {\r\n this.logger.verbose(\"TokenCache - loading access token\");\r\n this.storage.setAccessTokenCredential(accessTokenEntity);\r\n return accessTokenEntity;\r\n }\r\n else {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"loadExternalTokens is designed to work in browser environments only.\");\r\n }\r\n };\r\n /**\r\n * Helper function to load refresh tokens to msal-browser cache\r\n * @param request\r\n * @param response\r\n * @param homeAccountId\r\n * @param environment\r\n * @returns `RefreshTokenEntity`\r\n */\r\n TokenCache.prototype.loadRefreshToken = function (request, response, homeAccountId, environment) {\r\n if (!response.refresh_token) {\r\n this.logger.verbose(\"TokenCache - No refresh token provided for caching\");\r\n return null;\r\n }\r\n var refreshTokenEntity = RefreshTokenEntity.createRefreshTokenEntity(homeAccountId, environment, response.refresh_token, this.config.auth.clientId);\r\n if (this.isBrowserEnvironment) {\r\n this.logger.verbose(\"TokenCache - loading refresh token\");\r\n this.storage.setRefreshTokenCredential(refreshTokenEntity);\r\n return refreshTokenEntity;\r\n }\r\n else {\r\n throw BrowserAuthError.createUnableToLoadTokenError(\"loadExternalTokens is designed to work in browser environments only.\");\r\n }\r\n };\r\n /**\r\n * Helper function to generate an `AuthenticationResult` for the result.\r\n * @param request\r\n * @param idTokenObj\r\n * @param cacheRecord\r\n * @param authority\r\n * @returns `AuthenticationResult`\r\n */\r\n TokenCache.prototype.generateAuthenticationResult = function (request, idTokenObj, cacheRecord, authority) {\r\n var _a, _b, _c;\r\n var accessToken = Constants.EMPTY_STRING;\r\n var responseScopes = [];\r\n var expiresOn = null;\r\n var extExpiresOn;\r\n if (cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.accessToken) {\r\n accessToken = cacheRecord.accessToken.secret;\r\n responseScopes = ScopeSet.fromString(cacheRecord.accessToken.target).asArray();\r\n expiresOn = new Date(Number(cacheRecord.accessToken.expiresOn) * 1000);\r\n extExpiresOn = new Date(Number(cacheRecord.accessToken.extendedExpiresOn) * 1000);\r\n }\r\n var uid = (idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims.oid) || (idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims.sub) || Constants.EMPTY_STRING;\r\n var tid = (idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims.tid) || Constants.EMPTY_STRING;\r\n return {\r\n authority: authority ? authority.canonicalAuthority : Constants.EMPTY_STRING,\r\n uniqueId: uid,\r\n tenantId: tid,\r\n scopes: responseScopes,\r\n account: (cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) ? cacheRecord.account.getAccountInfo() : null,\r\n idToken: idTokenObj ? idTokenObj.rawToken : Constants.EMPTY_STRING,\r\n idTokenClaims: idTokenObj ? idTokenObj.claims : {},\r\n accessToken: accessToken,\r\n fromCache: true,\r\n expiresOn: expiresOn,\r\n correlationId: request.correlationId || Constants.EMPTY_STRING,\r\n requestId: Constants.EMPTY_STRING,\r\n extExpiresOn: extExpiresOn,\r\n familyId: Constants.EMPTY_STRING,\r\n tokenType: ((_a = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.accessToken) === null || _a === void 0 ? void 0 : _a.tokenType) || Constants.EMPTY_STRING,\r\n state: Constants.EMPTY_STRING,\r\n cloudGraphHostName: ((_b = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) === null || _b === void 0 ? void 0 : _b.cloudGraphHostName) || Constants.EMPTY_STRING,\r\n msGraphHost: ((_c = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) === null || _c === void 0 ? void 0 : _c.msGraphHost) || Constants.EMPTY_STRING,\r\n code: undefined,\r\n fromNativeBroker: false\r\n };\r\n };\r\n return TokenCache;\r\n}());\n\nexport { TokenCache };\n//# sourceMappingURL=TokenCache.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends } from '../_virtual/_tslib.js';\nimport { AuthorizationCodeClient } from '@azure/msal-common';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar HybridSpaAuthorizationCodeClient = /** @class */ (function (_super) {\r\n __extends(HybridSpaAuthorizationCodeClient, _super);\r\n function HybridSpaAuthorizationCodeClient(config) {\r\n var _this = _super.call(this, config) || this;\r\n _this.includeRedirectUri = false;\r\n return _this;\r\n }\r\n return HybridSpaAuthorizationCodeClient;\r\n}(AuthorizationCodeClient));\n\nexport { HybridSpaAuthorizationCodeClient };\n//# sourceMappingURL=HybridSpaAuthorizationCodeClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { AuthError, PerformanceEvents, Constants } from '@azure/msal-common';\nimport { StandardInteractionClient } from './StandardInteractionClient.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { InteractionType } from '../utils/BrowserConstants.js';\nimport { SilentHandler } from '../interaction_handler/SilentHandler.js';\nimport { HybridSpaAuthorizationCodeClient } from './HybridSpaAuthorizationCodeClient.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar SilentAuthCodeClient = /** @class */ (function (_super) {\r\n __extends(SilentAuthCodeClient, _super);\r\n function SilentAuthCodeClient(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, apiId, performanceClient, nativeMessageHandler, correlationId) {\r\n var _this = _super.call(this, config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId) || this;\r\n _this.apiId = apiId;\r\n return _this;\r\n }\r\n /**\r\n * Acquires a token silently by redeeming an authorization code against the /token endpoint\r\n * @param request\r\n */\r\n SilentAuthCodeClient.prototype.acquireToken = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var silentRequest, serverTelemetryManager, authCodeRequest, clientConfig, authClient, silentHandler, e_1;\r\n return __generator(this, function (_a) {\r\n switch (_a.label) {\r\n case 0:\r\n this.logger.trace(\"SilentAuthCodeClient.acquireToken called\");\r\n // Auth code payload is required\r\n if (!request.code) {\r\n throw BrowserAuthError.createAuthCodeRequiredError();\r\n }\r\n // Create silent request\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);\r\n return [4 /*yield*/, this.initializeAuthorizationRequest(request, InteractionType.Silent)];\r\n case 1:\r\n silentRequest = _a.sent();\r\n this.browserStorage.updateCacheEntries(silentRequest.state, silentRequest.nonce, silentRequest.authority, silentRequest.loginHint || Constants.EMPTY_STRING, silentRequest.account || null);\r\n serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);\r\n _a.label = 2;\r\n case 2:\r\n _a.trys.push([2, 4, , 5]);\r\n authCodeRequest = __assign(__assign({}, silentRequest), { code: request.code });\r\n // Initialize the client\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetClientConfiguration, request.correlationId);\r\n return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, silentRequest.authority)];\r\n case 3:\r\n clientConfig = _a.sent();\r\n authClient = new HybridSpaAuthorizationCodeClient(clientConfig);\r\n this.logger.verbose(\"Auth code client created\");\r\n silentHandler = new SilentHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.config.system, this.performanceClient);\r\n // Handle auth code parameters from request\r\n return [2 /*return*/, silentHandler.handleCodeResponseFromServer({\r\n code: request.code,\r\n msgraph_host: request.msGraphHost,\r\n cloud_graph_host_name: request.cloudGraphHostName,\r\n cloud_instance_host_name: request.cloudInstanceHostName\r\n }, silentRequest.state, authClient.authority, this.networkClient, false)];\r\n case 4:\r\n e_1 = _a.sent();\r\n if (e_1 instanceof AuthError) {\r\n e_1.setCorrelationId(this.correlationId);\r\n }\r\n serverTelemetryManager.cacheFailedRequest(e_1);\r\n this.browserStorage.cleanRequestByState(silentRequest.state);\r\n throw e_1;\r\n case 5: return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Currently Unsupported\r\n */\r\n SilentAuthCodeClient.prototype.logout = function () {\r\n // Synchronous so we must reject\r\n return Promise.reject(BrowserAuthError.createSilentLogoutUnsupportedError());\r\n };\r\n return SilentAuthCodeClient;\r\n}(StandardInteractionClient));\n\nexport { SilentAuthCodeClient };\n//# sourceMappingURL=SilentAuthCodeClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar BrowserPerformanceMeasurement = /** @class */ (function () {\r\n function BrowserPerformanceMeasurement(name, correlationId) {\r\n this.correlationId = correlationId;\r\n this.measureName = BrowserPerformanceMeasurement.makeMeasureName(name, correlationId);\r\n this.startMark = BrowserPerformanceMeasurement.makeStartMark(name, correlationId);\r\n this.endMark = BrowserPerformanceMeasurement.makeEndMark(name, correlationId);\r\n }\r\n BrowserPerformanceMeasurement.makeMeasureName = function (name, correlationId) {\r\n return \"msal.measure.\" + name + \".\" + correlationId;\r\n };\r\n BrowserPerformanceMeasurement.makeStartMark = function (name, correlationId) {\r\n return \"msal.start.\" + name + \".\" + correlationId;\r\n };\r\n BrowserPerformanceMeasurement.makeEndMark = function (name, correlationId) {\r\n return \"msal.end.\" + name + \".\" + correlationId;\r\n };\r\n BrowserPerformanceMeasurement.supportsBrowserPerformance = function () {\r\n return typeof window !== \"undefined\" &&\r\n typeof window.performance !== \"undefined\" &&\r\n typeof window.performance.mark === \"function\" &&\r\n typeof window.performance.measure === \"function\" &&\r\n typeof window.performance.clearMarks === \"function\" &&\r\n typeof window.performance.clearMeasures === \"function\" &&\r\n typeof window.performance.getEntriesByName === \"function\";\r\n };\r\n /**\r\n * Flush browser marks and measurements.\r\n * @param {string} correlationId\r\n * @param {SubMeasurement} measurements\r\n */\r\n BrowserPerformanceMeasurement.flushMeasurements = function (correlationId, measurements) {\r\n if (BrowserPerformanceMeasurement.supportsBrowserPerformance()) {\r\n try {\r\n measurements.forEach(function (measurement) {\r\n var measureName = BrowserPerformanceMeasurement.makeMeasureName(measurement.name, correlationId);\r\n var entriesForMeasurement = window.performance.getEntriesByName(measureName, \"measure\");\r\n if (entriesForMeasurement.length > 0) {\r\n window.performance.clearMeasures(measureName);\r\n window.performance.clearMarks(BrowserPerformanceMeasurement.makeStartMark(measureName, correlationId));\r\n window.performance.clearMarks(BrowserPerformanceMeasurement.makeEndMark(measureName, correlationId));\r\n }\r\n });\r\n }\r\n catch (e) {\r\n // Silently catch and return null\r\n }\r\n }\r\n };\r\n BrowserPerformanceMeasurement.prototype.startMeasurement = function () {\r\n if (BrowserPerformanceMeasurement.supportsBrowserPerformance()) {\r\n try {\r\n window.performance.mark(this.startMark);\r\n }\r\n catch (e) {\r\n // Silently catch\r\n }\r\n }\r\n };\r\n BrowserPerformanceMeasurement.prototype.endMeasurement = function () {\r\n if (BrowserPerformanceMeasurement.supportsBrowserPerformance()) {\r\n try {\r\n window.performance.mark(this.endMark);\r\n window.performance.measure(this.measureName, this.startMark, this.endMark);\r\n }\r\n catch (e) {\r\n // Silently catch\r\n }\r\n }\r\n };\r\n BrowserPerformanceMeasurement.prototype.flushMeasurement = function () {\r\n if (BrowserPerformanceMeasurement.supportsBrowserPerformance()) {\r\n try {\r\n var entriesForMeasurement = window.performance.getEntriesByName(this.measureName, \"measure\");\r\n if (entriesForMeasurement.length > 0) {\r\n var durationMs = entriesForMeasurement[0].duration;\r\n window.performance.clearMeasures(this.measureName);\r\n window.performance.clearMarks(this.startMark);\r\n window.performance.clearMarks(this.endMark);\r\n return durationMs;\r\n }\r\n }\r\n catch (e) {\r\n // Silently catch and return null\r\n }\r\n }\r\n return null;\r\n };\r\n return BrowserPerformanceMeasurement;\r\n}());\n\nexport { BrowserPerformanceMeasurement };\n//# sourceMappingURL=BrowserPerformanceMeasurement.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __assign } from '../_virtual/_tslib.js';\nimport { PerformanceClient } from '@azure/msal-common';\nimport { BrowserCrypto } from '../crypto/BrowserCrypto.js';\nimport { GuidGenerator } from '../crypto/GuidGenerator.js';\nimport { BrowserPerformanceMeasurement } from './BrowserPerformanceMeasurement.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar BrowserPerformanceClient = /** @class */ (function (_super) {\r\n __extends(BrowserPerformanceClient, _super);\r\n function BrowserPerformanceClient(clientId, authority, logger, libraryName, libraryVersion, applicationTelemetry, cryptoOptions) {\r\n var _this = _super.call(this, clientId, authority, logger, libraryName, libraryVersion, applicationTelemetry) || this;\r\n _this.browserCrypto = new BrowserCrypto(_this.logger, cryptoOptions);\r\n _this.guidGenerator = new GuidGenerator(_this.browserCrypto);\r\n return _this;\r\n }\r\n BrowserPerformanceClient.prototype.startPerformanceMeasuremeant = function (measureName, correlationId) {\r\n return new BrowserPerformanceMeasurement(measureName, correlationId);\r\n };\r\n BrowserPerformanceClient.prototype.generateId = function () {\r\n return this.guidGenerator.generateGuid();\r\n };\r\n BrowserPerformanceClient.prototype.getPageVisibility = function () {\r\n var _a;\r\n return ((_a = document.visibilityState) === null || _a === void 0 ? void 0 : _a.toString()) || null;\r\n };\r\n BrowserPerformanceClient.prototype.deleteIncompleteSubMeasurements = function (inProgressEvent) {\r\n var rootEvent = this.eventsByCorrelationId.get(inProgressEvent.event.correlationId);\r\n var isRootEvent = rootEvent && rootEvent.eventId === inProgressEvent.event.eventId;\r\n var incompleteMeasurements = [];\r\n if (isRootEvent && (rootEvent === null || rootEvent === void 0 ? void 0 : rootEvent.incompleteSubMeasurements)) {\r\n rootEvent.incompleteSubMeasurements.forEach(function (subMeasurement) {\r\n incompleteMeasurements.push(__assign({}, subMeasurement));\r\n });\r\n }\r\n // Clean up remaining marks for incomplete sub-measurements\r\n if (incompleteMeasurements.length > 0) {\r\n BrowserPerformanceMeasurement.flushMeasurements(inProgressEvent.event.correlationId, incompleteMeasurements);\r\n }\r\n };\r\n BrowserPerformanceClient.prototype.supportsBrowserPerformanceNow = function () {\r\n return typeof window !== \"undefined\" &&\r\n typeof window.performance !== \"undefined\" &&\r\n typeof window.performance.now === \"function\";\r\n };\r\n /**\r\n * Starts measuring performance for a given operation. Returns a function that should be used to end the measurement.\r\n * Also captures browser page visibilityState.\r\n *\r\n * @param {PerformanceEvents} measureName\r\n * @param {?string} [correlationId]\r\n * @returns {((event?: Partial) => PerformanceEvent| null)}\r\n */\r\n BrowserPerformanceClient.prototype.startMeasurement = function (measureName, correlationId) {\r\n var _this = this;\r\n // Capture page visibilityState and then invoke start/end measurement\r\n var startPageVisibility = this.getPageVisibility();\r\n var inProgressEvent = _super.prototype.startMeasurement.call(this, measureName, correlationId);\r\n return __assign(__assign({}, inProgressEvent), { endMeasurement: function (event) {\r\n var res = inProgressEvent.endMeasurement(__assign({ startPageVisibility: startPageVisibility, endPageVisibility: _this.getPageVisibility() }, event));\r\n _this.deleteIncompleteSubMeasurements(inProgressEvent);\r\n return res;\r\n }, discardMeasurement: function () {\r\n inProgressEvent.discardMeasurement();\r\n _this.deleteIncompleteSubMeasurements(inProgressEvent);\r\n inProgressEvent.measurement.flushMeasurement();\r\n } });\r\n };\r\n /**\r\n * Adds pre-queue time to preQueueTimeByCorrelationId map.\r\n * @param {PerformanceEvents} eventName\r\n * @param {?string} correlationId\r\n * @returns\r\n */\r\n BrowserPerformanceClient.prototype.setPreQueueTime = function (eventName, correlationId) {\r\n if (!this.supportsBrowserPerformanceNow()) {\r\n this.logger.trace(\"BrowserPerformanceClient: window performance API not available, unable to set telemetry queue time for \" + eventName);\r\n return;\r\n }\r\n if (!correlationId) {\r\n this.logger.trace(\"BrowserPerformanceClient: correlationId for \" + eventName + \" not provided, unable to set telemetry queue time\");\r\n return;\r\n }\r\n var preQueueEvent = this.preQueueTimeByCorrelationId.get(correlationId);\r\n /**\r\n * Manually complete queue measurement if there is an incomplete pre-queue event.\r\n * Incomplete pre-queue events are instrumentation bugs that should be fixed.\r\n */\r\n if (preQueueEvent) {\r\n this.logger.trace(\"BrowserPerformanceClient: Incomplete pre-queue \" + preQueueEvent.name + \" found\", correlationId);\r\n this.addQueueMeasurement(preQueueEvent.name, correlationId, undefined, true);\r\n }\r\n this.preQueueTimeByCorrelationId.set(correlationId, { name: eventName, time: window.performance.now() });\r\n };\r\n /**\r\n * Calculates and adds queue time measurement for given performance event.\r\n *\r\n * @param {PerformanceEvents} eventName\r\n * @param {?string} correlationId\r\n * @param {?number} queueTime\r\n * @param {?boolean} manuallyCompleted - indicator for manually completed queue measurements\r\n * @returns\r\n */\r\n BrowserPerformanceClient.prototype.addQueueMeasurement = function (eventName, correlationId, queueTime, manuallyCompleted) {\r\n if (!this.supportsBrowserPerformanceNow()) {\r\n this.logger.trace(\"BrowserPerformanceClient: window performance API not available, unable to add queue measurement for \" + eventName);\r\n return;\r\n }\r\n if (!correlationId) {\r\n this.logger.trace(\"BrowserPerformanceClient: correlationId for \" + eventName + \" not provided, unable to add queue measurement\");\r\n return;\r\n }\r\n var preQueueTime = _super.prototype.getPreQueueTime.call(this, eventName, correlationId);\r\n if (!preQueueTime) {\r\n return;\r\n }\r\n var currentTime = window.performance.now();\r\n var resQueueTime = queueTime || _super.prototype.calculateQueuedTime.call(this, preQueueTime, currentTime);\r\n return _super.prototype.addQueueMeasurement.call(this, eventName, correlationId, resQueueTime, manuallyCompleted);\r\n };\r\n return BrowserPerformanceClient;\r\n}(PerformanceClient));\n\nexport { BrowserPerformanceClient };\n//# sourceMappingURL=BrowserPerformanceClient.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { PerformanceEvents, Constants, ServerError, InteractionRequiredAuthError, InteractionRequiredAuthErrorMessage } from '@azure/msal-common';\nimport { DEFAULT_REQUEST, InteractionType, CacheLookupPolicy, ApiId, BrowserConstants } from '../utils/BrowserConstants.js';\nimport { ClientApplication } from './ClientApplication.js';\nimport { EventType } from '../event/EventType.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { NativeAuthError } from '../error/NativeAuthError.js';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.js';\nimport { BrowserUtils } from '../utils/BrowserUtils.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * The PublicClientApplication class is the object exposed by the library to perform authentication and authorization functions in Single Page Applications\r\n * to obtain JWT tokens as described in the OAuth 2.0 Authorization Code Flow with PKCE specification.\r\n */\r\nvar PublicClientApplication = /** @class */ (function (_super) {\r\n __extends(PublicClientApplication, _super);\r\n /**\r\n * @constructor\r\n * Constructor for the PublicClientApplication used to instantiate the PublicClientApplication object\r\n *\r\n * Important attributes in the Configuration object for auth are:\r\n * - clientID: the application ID of your application. You can obtain one by registering your application with our Application registration portal : https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RegisteredAppsPreview\r\n * - authority: the authority URL for your application.\r\n * - redirect_uri: the uri of your application registered in the portal.\r\n *\r\n * In Azure AD, authority is a URL indicating the Azure active directory that MSAL uses to obtain tokens.\r\n * It is of the form https://login.microsoftonline.com/{Enter_the_Tenant_Info_Here}\r\n * If your application supports Accounts in one organizational directory, replace \"Enter_the_Tenant_Info_Here\" value with the Tenant Id or Tenant name (for example, contoso.microsoft.com).\r\n * If your application supports Accounts in any organizational directory, replace \"Enter_the_Tenant_Info_Here\" value with organizations.\r\n * If your application supports Accounts in any organizational directory and personal Microsoft accounts, replace \"Enter_the_Tenant_Info_Here\" value with common.\r\n * To restrict support to Personal Microsoft accounts only, replace \"Enter_the_Tenant_Info_Here\" value with consumers.\r\n *\r\n * In Azure B2C, authority is of the form https://{instance}/tfp/{tenant}/{policyName}/\r\n * Full B2C functionality will be available in this library in future versions.\r\n *\r\n * @param configuration object for the MSAL PublicClientApplication instance\r\n */\r\n function PublicClientApplication(configuration) {\r\n var _this = _super.call(this, configuration) || this;\r\n _this.astsAsyncMeasurement = undefined;\r\n _this.activeSilentTokenRequests = new Map();\r\n // Register listener functions\r\n _this.trackPageVisibility = _this.trackPageVisibility.bind(_this);\r\n return _this;\r\n }\r\n /**\r\n * Use when initiating the login process by redirecting the user's browser to the authorization endpoint. This function redirects the page, so\r\n * any code that follows this function will not execute.\r\n *\r\n * IMPORTANT: It is NOT recommended to have code that is dependent on the resolution of the Promise. This function will navigate away from the current\r\n * browser window. It currently returns a Promise in order to reflect the asynchronous nature of the code running in this function.\r\n *\r\n * @param request\r\n */\r\n PublicClientApplication.prototype.loginRedirect = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var correlationId;\r\n return __generator(this, function (_a) {\r\n correlationId = this.getRequestCorrelationId(request);\r\n this.logger.verbose(\"loginRedirect called\", correlationId);\r\n return [2 /*return*/, this.acquireTokenRedirect(__assign({ correlationId: correlationId }, (request || DEFAULT_REQUEST)))];\r\n });\r\n });\r\n };\r\n /**\r\n * Use when initiating the login process via opening a popup window in the user's browser\r\n *\r\n * @param request\r\n *\r\n * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n */\r\n PublicClientApplication.prototype.loginPopup = function (request) {\r\n var correlationId = this.getRequestCorrelationId(request);\r\n this.logger.verbose(\"loginPopup called\", correlationId);\r\n return this.acquireTokenPopup(__assign({ correlationId: correlationId }, (request || DEFAULT_REQUEST)));\r\n };\r\n /**\r\n * Silently acquire an access token for a given set of scopes. Returns currently processing promise if parallel requests are made.\r\n *\r\n * @param {@link (SilentRequest:type)}\r\n * @returns {Promise.} - a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the {@link AuthResponse} object\r\n */\r\n PublicClientApplication.prototype.acquireTokenSilent = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var correlationId, atsMeasurement, account, thumbprint, silentRequestKey, cachedResponse, response;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n correlationId = this.getRequestCorrelationId(request);\r\n atsMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenSilent, correlationId);\r\n atsMeasurement.addStaticFields({\r\n cacheLookupPolicy: request.cacheLookupPolicy\r\n });\r\n this.preflightBrowserEnvironmentCheck(InteractionType.Silent);\r\n this.logger.verbose(\"acquireTokenSilent called\", correlationId);\r\n account = request.account || this.getActiveAccount();\r\n if (!account) {\r\n throw BrowserAuthError.createNoAccountError();\r\n }\r\n thumbprint = {\r\n clientId: this.config.auth.clientId,\r\n authority: request.authority || Constants.EMPTY_STRING,\r\n scopes: request.scopes,\r\n homeAccountIdentifier: account.homeAccountId,\r\n claims: request.claims,\r\n authenticationScheme: request.authenticationScheme,\r\n resourceRequestMethod: request.resourceRequestMethod,\r\n resourceRequestUri: request.resourceRequestUri,\r\n shrClaims: request.shrClaims,\r\n sshKid: request.sshKid\r\n };\r\n silentRequestKey = JSON.stringify(thumbprint);\r\n cachedResponse = this.activeSilentTokenRequests.get(silentRequestKey);\r\n if (typeof cachedResponse === \"undefined\") {\r\n this.logger.verbose(\"acquireTokenSilent called for the first time, storing active request\", correlationId);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.AcquireTokenSilentAsync, correlationId);\r\n response = this.acquireTokenSilentAsync(__assign(__assign({}, request), { correlationId: correlationId }), account)\r\n .then(function (result) {\r\n _this.activeSilentTokenRequests.delete(silentRequestKey);\r\n atsMeasurement.addStaticFields({\r\n accessTokenSize: result.accessToken.length,\r\n idTokenSize: result.idToken.length\r\n });\r\n atsMeasurement.endMeasurement({\r\n success: true,\r\n fromCache: result.fromCache,\r\n isNativeBroker: result.fromNativeBroker,\r\n cacheLookupPolicy: request.cacheLookupPolicy,\r\n requestId: result.requestId,\r\n });\r\n return result;\r\n })\r\n .catch(function (error) {\r\n _this.activeSilentTokenRequests.delete(silentRequestKey);\r\n atsMeasurement.endMeasurement({\r\n errorCode: error.errorCode,\r\n subErrorCode: error.subError,\r\n success: false\r\n });\r\n throw error;\r\n });\r\n this.activeSilentTokenRequests.set(silentRequestKey, response);\r\n return [2 /*return*/, response];\r\n }\r\n else {\r\n this.logger.verbose(\"acquireTokenSilent has been called previously, returning the result from the first call\", correlationId);\r\n // Discard measurements for memoized calls, as they are usually only a couple of ms and will artificially deflate metrics\r\n atsMeasurement.discardMeasurement();\r\n return [2 /*return*/, cachedResponse];\r\n }\r\n });\r\n });\r\n };\r\n PublicClientApplication.prototype.trackPageVisibility = function () {\r\n if (!this.astsAsyncMeasurement) {\r\n return;\r\n }\r\n this.logger.info(\"Perf: Visibility change detected\");\r\n this.astsAsyncMeasurement.increment({\r\n visibilityChangeCount: 1,\r\n });\r\n };\r\n /**\r\n * Silently acquire an access token for a given set of scopes. Will use cached token if available, otherwise will attempt to acquire a new token from the network via refresh token.\r\n * @param {@link (SilentRequest:type)}\r\n * @param {@link (AccountInfo:type)}\r\n * @returns {Promise.} - a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the {@link AuthResponse}\r\n */\r\n PublicClientApplication.prototype.acquireTokenSilentAsync = function (request, account) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var result, silentRequest, silentCacheClient, silentRequest_1, requestWithCLP_1;\r\n var _this = this;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);\r\n this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Silent, request);\r\n this.astsAsyncMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);\r\n (_a = this.astsAsyncMeasurement) === null || _a === void 0 ? void 0 : _a.increment({\r\n visibilityChangeCount: 0\r\n });\r\n document.addEventListener(\"visibilitychange\", this.trackPageVisibility);\r\n if (!(NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider, request.authenticationScheme) && account.nativeAccountId)) return [3 /*break*/, 1];\r\n this.logger.verbose(\"acquireTokenSilent - attempting to acquire token from native platform\");\r\n silentRequest = __assign(__assign({}, request), { account: account });\r\n result = this.acquireTokenNative(silentRequest, ApiId.acquireTokenSilent_silentFlow).catch(function (e) { return __awaiter(_this, void 0, void 0, function () {\r\n var silentIframeClient;\r\n return __generator(this, function (_a) {\r\n // If native token acquisition fails for availability reasons fallback to web flow\r\n if (e instanceof NativeAuthError && e.isFatal()) {\r\n this.logger.verbose(\"acquireTokenSilent - native platform unavailable, falling back to web flow\");\r\n this.nativeExtensionProvider = undefined; // Prevent future requests from continuing to attempt\r\n silentIframeClient = this.createSilentIframeClient(request.correlationId);\r\n return [2 /*return*/, silentIframeClient.acquireToken(request)];\r\n }\r\n throw e;\r\n });\r\n }); });\r\n return [3 /*break*/, 3];\r\n case 1:\r\n this.logger.verbose(\"acquireTokenSilent - attempting to acquire token from web flow\");\r\n silentCacheClient = this.createSilentCacheClient(request.correlationId);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.InitializeSilentRequest, request.correlationId);\r\n return [4 /*yield*/, silentCacheClient.initializeSilentRequest(request, account)];\r\n case 2:\r\n silentRequest_1 = _b.sent();\r\n requestWithCLP_1 = __assign(__assign({}, request), { \r\n // set the request's CacheLookupPolicy to Default if it was not optionally passed in\r\n cacheLookupPolicy: request.cacheLookupPolicy || CacheLookupPolicy.Default });\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.AcquireTokenFromCache, silentRequest_1.correlationId);\r\n result = this.acquireTokenFromCache(silentCacheClient, silentRequest_1, requestWithCLP_1).catch(function (cacheError) {\r\n if (requestWithCLP_1.cacheLookupPolicy === CacheLookupPolicy.AccessToken) {\r\n throw cacheError;\r\n }\r\n // block the reload if it occurred inside a hidden iframe\r\n BrowserUtils.blockReloadInHiddenIframes();\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, InteractionType.Silent, silentRequest_1);\r\n _this.performanceClient.setPreQueueTime(PerformanceEvents.AcquireTokenByRefreshToken, silentRequest_1.correlationId);\r\n return _this.acquireTokenByRefreshToken(silentRequest_1, requestWithCLP_1).catch(function (refreshTokenError) {\r\n var isServerError = refreshTokenError instanceof ServerError;\r\n var isInteractionRequiredError = refreshTokenError instanceof InteractionRequiredAuthError;\r\n var rtNotFound = (refreshTokenError.errorCode === InteractionRequiredAuthErrorMessage.noTokensFoundError.code);\r\n var isInvalidGrantError = (refreshTokenError.errorCode === BrowserConstants.INVALID_GRANT_ERROR);\r\n if ((!isServerError ||\r\n !isInvalidGrantError ||\r\n isInteractionRequiredError ||\r\n requestWithCLP_1.cacheLookupPolicy === CacheLookupPolicy.AccessTokenAndRefreshToken ||\r\n requestWithCLP_1.cacheLookupPolicy === CacheLookupPolicy.RefreshToken)\r\n && (requestWithCLP_1.cacheLookupPolicy !== CacheLookupPolicy.Skip)\r\n && !rtNotFound) {\r\n throw refreshTokenError;\r\n }\r\n _this.logger.verbose(\"Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.\", request.correlationId);\r\n _this.performanceClient.setPreQueueTime(PerformanceEvents.AcquireTokenBySilentIframe, silentRequest_1.correlationId);\r\n return _this.acquireTokenBySilentIframe(silentRequest_1);\r\n });\r\n });\r\n _b.label = 3;\r\n case 3: return [2 /*return*/, result.then(function (response) {\r\n var _a;\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Silent, response);\r\n (_a = _this.astsAsyncMeasurement) === null || _a === void 0 ? void 0 : _a.endMeasurement({\r\n success: true,\r\n fromCache: response.fromCache,\r\n isNativeBroker: response.fromNativeBroker,\r\n requestId: response.requestId\r\n });\r\n return response;\r\n }).catch(function (tokenRenewalError) {\r\n var _a;\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Silent, null, tokenRenewalError);\r\n (_a = _this.astsAsyncMeasurement) === null || _a === void 0 ? void 0 : _a.endMeasurement({\r\n errorCode: tokenRenewalError.errorCode,\r\n subErrorCode: tokenRenewalError.subError,\r\n success: false\r\n });\r\n throw tokenRenewalError;\r\n }).finally(function () {\r\n document.removeEventListener(\"visibilitychange\", _this.trackPageVisibility);\r\n })];\r\n }\r\n });\r\n });\r\n };\r\n return PublicClientApplication;\r\n}(ClientApplication));\n\nexport { PublicClientApplication };\n//# sourceMappingURL=PublicClientApplication.js.map\n","/*! @azure/msal-browser v2.38.4 2024-03-26 */\n'use strict';\nimport { __awaiter, __generator, __assign } from '../_virtual/_tslib.js';\nimport { CryptoOps } from '../crypto/CryptoOps.js';\nimport { PerformanceEvents, Constants, InteractionRequiredAuthError, AuthError, ClientAuthError, PromptValue, Logger, StubPerformanceClient, DEFAULT_CRYPTO_IMPLEMENTATION } from '@azure/msal-common';\nimport { BrowserCacheManager, DEFAULT_BROWSER_CACHE_MANAGER } from '../cache/BrowserCacheManager.js';\nimport { buildConfiguration } from '../config/Configuration.js';\nimport { InteractionType, ApiId, TemporaryCacheKeys, CacheLookupPolicy, BrowserCacheLocation } from '../utils/BrowserConstants.js';\nimport { BrowserUtils } from '../utils/BrowserUtils.js';\nimport { name, version } from '../packageMetadata.js';\nimport { EventType } from '../event/EventType.js';\nimport { BrowserConfigurationAuthError } from '../error/BrowserConfigurationAuthError.js';\nimport { EventHandler } from '../event/EventHandler.js';\nimport { PopupClient } from '../interaction_client/PopupClient.js';\nimport { RedirectClient } from '../interaction_client/RedirectClient.js';\nimport { SilentIframeClient } from '../interaction_client/SilentIframeClient.js';\nimport { SilentRefreshClient } from '../interaction_client/SilentRefreshClient.js';\nimport { TokenCache } from '../cache/TokenCache.js';\nimport { NativeInteractionClient } from '../interaction_client/NativeInteractionClient.js';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.js';\nimport { NativeAuthError } from '../error/NativeAuthError.js';\nimport { SilentCacheClient } from '../interaction_client/SilentCacheClient.js';\nimport { SilentAuthCodeClient } from '../interaction_client/SilentAuthCodeClient.js';\nimport { BrowserAuthError } from '../error/BrowserAuthError.js';\nimport { BrowserPerformanceClient } from '../telemetry/BrowserPerformanceClient.js';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nvar ClientApplication = /** @class */ (function () {\r\n /**\r\n * @constructor\r\n * Constructor for the PublicClientApplication used to instantiate the PublicClientApplication object\r\n *\r\n * Important attributes in the Configuration object for auth are:\r\n * - clientID: the application ID of your application. You can obtain one by registering your application with our Application registration portal : https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RegisteredAppsPreview\r\n * - authority: the authority URL for your application.\r\n * - redirect_uri: the uri of your application registered in the portal.\r\n *\r\n * In Azure AD, authority is a URL indicating the Azure active directory that MSAL uses to obtain tokens.\r\n * It is of the form https://login.microsoftonline.com/{Enter_the_Tenant_Info_Here}\r\n * If your application supports Accounts in one organizational directory, replace \"Enter_the_Tenant_Info_Here\" value with the Tenant Id or Tenant name (for example, contoso.microsoft.com).\r\n * If your application supports Accounts in any organizational directory, replace \"Enter_the_Tenant_Info_Here\" value with organizations.\r\n * If your application supports Accounts in any organizational directory and personal Microsoft accounts, replace \"Enter_the_Tenant_Info_Here\" value with common.\r\n * To restrict support to Personal Microsoft accounts only, replace \"Enter_the_Tenant_Info_Here\" value with consumers.\r\n *\r\n * In Azure B2C, authority is of the form https://{instance}/tfp/{tenant}/{policyName}/\r\n * Full B2C functionality will be available in this library in future versions.\r\n *\r\n * @param configuration Object for the MSAL PublicClientApplication instance\r\n */\r\n function ClientApplication(configuration) {\r\n /*\r\n * If loaded in an environment where window is not available,\r\n * set internal flag to false so that further requests fail.\r\n * This is to support server-side rendering environments.\r\n */\r\n this.isBrowserEnvironment = typeof window !== \"undefined\";\r\n // Set the configuration.\r\n this.config = buildConfiguration(configuration, this.isBrowserEnvironment);\r\n this.initialized = false;\r\n // Initialize logger\r\n this.logger = new Logger(this.config.system.loggerOptions, name, version);\r\n // Initialize the network module class.\r\n this.networkClient = this.config.system.networkClient;\r\n // Initialize the navigation client class.\r\n this.navigationClient = this.config.system.navigationClient;\r\n // Initialize redirectResponse Map\r\n this.redirectResponse = new Map();\r\n // Initial hybrid spa map\r\n this.hybridAuthCodeResponses = new Map();\r\n // Initialize performance client\r\n this.performanceClient = this.isBrowserEnvironment ?\r\n new BrowserPerformanceClient(this.config.auth.clientId, this.config.auth.authority, this.logger, name, version, this.config.telemetry.application, this.config.system.cryptoOptions) :\r\n new StubPerformanceClient(this.config.auth.clientId, this.config.auth.authority, this.logger, name, version, this.config.telemetry.application);\r\n // Initialize the crypto class.\r\n this.browserCrypto = this.isBrowserEnvironment ? new CryptoOps(this.logger, this.performanceClient, this.config.system.cryptoOptions) : DEFAULT_CRYPTO_IMPLEMENTATION;\r\n this.eventHandler = new EventHandler(this.logger, this.browserCrypto);\r\n // Initialize the browser storage class.\r\n this.browserStorage = this.isBrowserEnvironment ?\r\n new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger) :\r\n DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger);\r\n // initialize in memory storage for native flows\r\n var nativeCacheOptions = {\r\n cacheLocation: BrowserCacheLocation.MemoryStorage,\r\n temporaryCacheLocation: BrowserCacheLocation.MemoryStorage,\r\n storeAuthStateInCookie: false,\r\n secureCookies: false,\r\n cacheMigrationEnabled: false,\r\n claimsBasedCachingEnabled: true\r\n };\r\n this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger);\r\n // Initialize the token cache\r\n this.tokenCache = new TokenCache(this.config, this.browserStorage, this.logger, this.browserCrypto);\r\n // Register listener functions\r\n this.trackPageVisibilityWithMeasurement = this.trackPageVisibilityWithMeasurement.bind(this);\r\n }\r\n /**\r\n * Initializer function to perform async startup tasks such as connecting to WAM extension\r\n */\r\n ClientApplication.prototype.initialize = function () {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var allowNativeBroker, initMeasurement, _a, e_1, claimsTokensRemovalMeasurement;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n this.logger.trace(\"initialize called\");\r\n if (this.initialized) {\r\n this.logger.info(\"initialize has already been called, exiting early.\");\r\n return [2 /*return*/];\r\n }\r\n allowNativeBroker = this.config.system.allowNativeBroker;\r\n initMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.InitializeClientApplication);\r\n this.eventHandler.emitEvent(EventType.INITIALIZE_START);\r\n if (!allowNativeBroker) return [3 /*break*/, 4];\r\n _b.label = 1;\r\n case 1:\r\n _b.trys.push([1, 3, , 4]);\r\n _a = this;\r\n return [4 /*yield*/, NativeMessageHandler.createProvider(this.logger, this.config.system.nativeBrokerHandshakeTimeout, this.performanceClient)];\r\n case 2:\r\n _a.nativeExtensionProvider = _b.sent();\r\n return [3 /*break*/, 4];\r\n case 3:\r\n e_1 = _b.sent();\r\n this.logger.verbose(e_1);\r\n return [3 /*break*/, 4];\r\n case 4:\r\n if (!!this.config.cache.claimsBasedCachingEnabled) return [3 /*break*/, 6];\r\n this.logger.verbose(\"Claims-based caching is disabled. Clearing the previous cache with claims\");\r\n claimsTokensRemovalMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.ClearTokensAndKeysWithClaims);\r\n return [4 /*yield*/, this.browserStorage.clearTokensAndKeysWithClaims()];\r\n case 5:\r\n _b.sent();\r\n claimsTokensRemovalMeasurement.endMeasurement({ success: true });\r\n _b.label = 6;\r\n case 6:\r\n this.initialized = true;\r\n this.eventHandler.emitEvent(EventType.INITIALIZE_END);\r\n initMeasurement.endMeasurement({ allowNativeBroker: allowNativeBroker, success: true });\r\n return [2 /*return*/];\r\n }\r\n });\r\n });\r\n };\r\n // #region Redirect Flow\r\n /**\r\n * Event handler function which allows users to fire events after the PublicClientApplication object\r\n * has loaded during redirect flows. This should be invoked on all page loads involved in redirect\r\n * auth flows.\r\n * @param hash Hash to process. Defaults to the current value of window.location.hash. Only needs to be provided explicitly if the response to be handled is not contained in the current value.\r\n * @returns Token response or null. If the return value is null, then no auth redirect was detected.\r\n */\r\n ClientApplication.prototype.handleRedirectPromise = function (hash) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var loggedInAccounts, redirectResponseKey, response, request, redirectResponse, nativeClient, correlationId, redirectClient;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n this.logger.verbose(\"handleRedirectPromise called\");\r\n // Block token acquisition before initialize has been called if native brokering is enabled\r\n BrowserUtils.blockNativeBrokerCalledBeforeInitialized(this.config.system.allowNativeBroker, this.initialized);\r\n loggedInAccounts = this.getAllAccounts();\r\n if (this.isBrowserEnvironment) {\r\n redirectResponseKey = hash || Constants.EMPTY_STRING;\r\n response = this.redirectResponse.get(redirectResponseKey);\r\n if (typeof response === \"undefined\") {\r\n this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, InteractionType.Redirect);\r\n this.logger.verbose(\"handleRedirectPromise has been called for the first time, storing the promise\");\r\n request = this.browserStorage.getCachedNativeRequest();\r\n redirectResponse = void 0;\r\n if (request && NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider) && this.nativeExtensionProvider && !hash) {\r\n this.logger.trace(\"handleRedirectPromise - acquiring token from native platform\");\r\n nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.nativeExtensionProvider, request.accountId, this.nativeInternalStorage, request.correlationId);\r\n redirectResponse = nativeClient.handleRedirectPromise();\r\n }\r\n else {\r\n this.logger.trace(\"handleRedirectPromise - acquiring token from web flow\");\r\n correlationId = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, true) || Constants.EMPTY_STRING;\r\n redirectClient = this.createRedirectClient(correlationId);\r\n redirectResponse = redirectClient.handleRedirectPromise(hash);\r\n }\r\n response = redirectResponse.then(function (result) {\r\n if (result) {\r\n // Emit login event if number of accounts change\r\n var isLoggingIn = loggedInAccounts.length < _this.getAllAccounts().length;\r\n if (isLoggingIn) {\r\n _this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, InteractionType.Redirect, result);\r\n _this.logger.verbose(\"handleRedirectResponse returned result, login success\");\r\n }\r\n else {\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Redirect, result);\r\n _this.logger.verbose(\"handleRedirectResponse returned result, acquire token success\");\r\n }\r\n }\r\n _this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, InteractionType.Redirect);\r\n return result;\r\n }).catch(function (e) {\r\n // Emit login event if there is an account\r\n if (loggedInAccounts.length > 0) {\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Redirect, null, e);\r\n }\r\n else {\r\n _this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, InteractionType.Redirect, null, e);\r\n }\r\n _this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, InteractionType.Redirect);\r\n throw e;\r\n });\r\n this.redirectResponse.set(redirectResponseKey, response);\r\n }\r\n else {\r\n this.logger.verbose(\"handleRedirectPromise has been called previously, returning the result from the first call\");\r\n }\r\n return [2 /*return*/, response];\r\n }\r\n this.logger.verbose(\"handleRedirectPromise returns null, not browser environment\");\r\n return [2 /*return*/, null];\r\n });\r\n });\r\n };\r\n /**\r\n * Use when you want to obtain an access_token for your API by redirecting the user's browser window to the authorization endpoint. This function redirects\r\n * the page, so any code that follows this function will not execute.\r\n *\r\n * IMPORTANT: It is NOT recommended to have code that is dependent on the resolution of the Promise. This function will navigate away from the current\r\n * browser window. It currently returns a Promise in order to reflect the asynchronous nature of the code running in this function.\r\n *\r\n * @param request\r\n */\r\n ClientApplication.prototype.acquireTokenRedirect = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var correlationId, isLoggedIn, result, nativeClient, redirectClient;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n correlationId = this.getRequestCorrelationId(request);\r\n this.logger.verbose(\"acquireTokenRedirect called\", correlationId);\r\n this.preflightBrowserEnvironmentCheck(InteractionType.Redirect);\r\n isLoggedIn = this.getAllAccounts().length > 0;\r\n if (isLoggedIn) {\r\n this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Redirect, request);\r\n }\r\n else {\r\n this.eventHandler.emitEvent(EventType.LOGIN_START, InteractionType.Redirect, request);\r\n }\r\n if (this.nativeExtensionProvider && this.canUseNative(request)) {\r\n nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenRedirect, this.performanceClient, this.nativeExtensionProvider, this.getNativeAccountId(request), this.nativeInternalStorage, request.correlationId);\r\n result = nativeClient.acquireTokenRedirect(request).catch(function (e) {\r\n if (e instanceof NativeAuthError && e.isFatal()) {\r\n _this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt\r\n var redirectClient = _this.createRedirectClient(request.correlationId);\r\n return redirectClient.acquireToken(request);\r\n }\r\n else if (e instanceof InteractionRequiredAuthError) {\r\n _this.logger.verbose(\"acquireTokenRedirect - Resolving interaction required error thrown by native broker by falling back to web flow\");\r\n var redirectClient = _this.createRedirectClient(request.correlationId);\r\n return redirectClient.acquireToken(request);\r\n }\r\n _this.browserStorage.setInteractionInProgress(false);\r\n throw e;\r\n });\r\n }\r\n else {\r\n redirectClient = this.createRedirectClient(request.correlationId);\r\n result = redirectClient.acquireToken(request);\r\n }\r\n return [2 /*return*/, result.catch(function (e) {\r\n // If logged in, emit acquire token events\r\n if (isLoggedIn) {\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Redirect, null, e);\r\n }\r\n else {\r\n _this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, InteractionType.Redirect, null, e);\r\n }\r\n throw e;\r\n })];\r\n });\r\n });\r\n };\r\n // #endregion\r\n // #region Popup Flow\r\n /**\r\n * Use when you want to obtain an access_token for your API via opening a popup window in the user's browser\r\n *\r\n * @param request\r\n *\r\n * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n */\r\n ClientApplication.prototype.acquireTokenPopup = function (request) {\r\n var _this = this;\r\n var correlationId = this.getRequestCorrelationId(request);\r\n var atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, correlationId);\r\n try {\r\n this.logger.verbose(\"acquireTokenPopup called\", correlationId);\r\n this.preflightBrowserEnvironmentCheck(InteractionType.Popup);\r\n }\r\n catch (e) {\r\n // Since this function is syncronous we need to reject\r\n return Promise.reject(e);\r\n }\r\n // If logged in, emit acquire token events\r\n var loggedInAccounts = this.getAllAccounts();\r\n if (loggedInAccounts.length > 0) {\r\n this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Popup, request);\r\n }\r\n else {\r\n this.eventHandler.emitEvent(EventType.LOGIN_START, InteractionType.Popup, request);\r\n }\r\n var result;\r\n if (this.canUseNative(request)) {\r\n result = this.acquireTokenNative(request, ApiId.acquireTokenPopup).then(function (response) {\r\n _this.browserStorage.setInteractionInProgress(false);\r\n atPopupMeasurement.endMeasurement({\r\n success: true,\r\n isNativeBroker: true,\r\n requestId: response.requestId\r\n });\r\n return response;\r\n }).catch(function (e) {\r\n if (e instanceof NativeAuthError && e.isFatal()) {\r\n _this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt\r\n var popupClient = _this.createPopupClient(request.correlationId);\r\n return popupClient.acquireToken(request);\r\n }\r\n else if (e instanceof InteractionRequiredAuthError) {\r\n _this.logger.verbose(\"acquireTokenPopup - Resolving interaction required error thrown by native broker by falling back to web flow\");\r\n var popupClient = _this.createPopupClient(request.correlationId);\r\n return popupClient.acquireToken(request);\r\n }\r\n _this.browserStorage.setInteractionInProgress(false);\r\n throw e;\r\n });\r\n }\r\n else {\r\n var popupClient = this.createPopupClient(request.correlationId);\r\n result = popupClient.acquireToken(request);\r\n }\r\n return result.then(function (result) {\r\n /*\r\n * If logged in, emit acquire token events\r\n */\r\n var isLoggingIn = loggedInAccounts.length < _this.getAllAccounts().length;\r\n if (isLoggingIn) {\r\n _this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, InteractionType.Popup, result);\r\n }\r\n else {\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Popup, result);\r\n }\r\n atPopupMeasurement.addStaticFields({\r\n accessTokenSize: result.accessToken.length,\r\n idTokenSize: result.idToken.length\r\n });\r\n atPopupMeasurement.endMeasurement({\r\n success: true,\r\n requestId: result.requestId\r\n });\r\n return result;\r\n }).catch(function (e) {\r\n if (loggedInAccounts.length > 0) {\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Popup, null, e);\r\n }\r\n else {\r\n _this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, InteractionType.Popup, null, e);\r\n }\r\n atPopupMeasurement.endMeasurement({\r\n errorCode: e.errorCode,\r\n subErrorCode: e.subError,\r\n success: false\r\n });\r\n // Since this function is syncronous we need to reject\r\n return Promise.reject(e);\r\n });\r\n };\r\n ClientApplication.prototype.trackPageVisibilityWithMeasurement = function () {\r\n var measurement = this.ssoSilentMeasurement || this.acquireTokenByCodeAsyncMeasurement;\r\n if (!measurement) {\r\n return;\r\n }\r\n this.logger.info(\"Perf: Visibility change detected in \", measurement.event.name);\r\n measurement.increment({\r\n visibilityChangeCount: 1,\r\n });\r\n };\r\n // #endregion\r\n // #region Silent Flow\r\n /**\r\n * This function uses a hidden iframe to fetch an authorization code from the eSTS. There are cases where this may not work:\r\n * - Any browser using a form of Intelligent Tracking Prevention\r\n * - If there is not an established session with the service\r\n *\r\n * In these cases, the request must be done inside a popup or full frame redirect.\r\n *\r\n * For the cases where interaction is required, you cannot send a request with prompt=none.\r\n *\r\n * If your refresh token has expired, you can use this function to fetch a new set of tokens silently as long as\r\n * you session on the server still exists.\r\n * @param request {@link SsoSilentRequest}\r\n *\r\n * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n */\r\n ClientApplication.prototype.ssoSilent = function (request) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var correlationId, validRequest, result, silentIframeClient;\r\n var _this = this;\r\n return __generator(this, function (_b) {\r\n correlationId = this.getRequestCorrelationId(request);\r\n validRequest = __assign(__assign({}, request), { \r\n // will be PromptValue.NONE or PromptValue.NO_SESSION\r\n prompt: request.prompt, correlationId: correlationId });\r\n this.preflightBrowserEnvironmentCheck(InteractionType.Silent);\r\n this.ssoSilentMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SsoSilent, correlationId);\r\n (_a = this.ssoSilentMeasurement) === null || _a === void 0 ? void 0 : _a.increment({\r\n visibilityChangeCount: 0\r\n });\r\n document.addEventListener(\"visibilitychange\", this.trackPageVisibilityWithMeasurement);\r\n this.logger.verbose(\"ssoSilent called\", correlationId);\r\n this.eventHandler.emitEvent(EventType.SSO_SILENT_START, InteractionType.Silent, validRequest);\r\n if (this.canUseNative(validRequest)) {\r\n result = this.acquireTokenNative(validRequest, ApiId.ssoSilent).catch(function (e) {\r\n // If native token acquisition fails for availability reasons fallback to standard flow\r\n if (e instanceof NativeAuthError && e.isFatal()) {\r\n _this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt\r\n var silentIframeClient = _this.createSilentIframeClient(validRequest.correlationId);\r\n return silentIframeClient.acquireToken(validRequest);\r\n }\r\n throw e;\r\n });\r\n }\r\n else {\r\n silentIframeClient = this.createSilentIframeClient(validRequest.correlationId);\r\n result = silentIframeClient.acquireToken(validRequest);\r\n }\r\n return [2 /*return*/, result.then(function (response) {\r\n var _a, _b;\r\n _this.eventHandler.emitEvent(EventType.SSO_SILENT_SUCCESS, InteractionType.Silent, response);\r\n (_a = _this.ssoSilentMeasurement) === null || _a === void 0 ? void 0 : _a.addStaticFields({\r\n accessTokenSize: response.accessToken.length,\r\n idTokenSize: response.idToken.length\r\n });\r\n (_b = _this.ssoSilentMeasurement) === null || _b === void 0 ? void 0 : _b.endMeasurement({\r\n success: true,\r\n isNativeBroker: response.fromNativeBroker,\r\n requestId: response.requestId\r\n });\r\n return response;\r\n }).catch(function (e) {\r\n var _a;\r\n _this.eventHandler.emitEvent(EventType.SSO_SILENT_FAILURE, InteractionType.Silent, null, e);\r\n (_a = _this.ssoSilentMeasurement) === null || _a === void 0 ? void 0 : _a.endMeasurement({\r\n errorCode: e.errorCode,\r\n subErrorCode: e.subError,\r\n success: false\r\n });\r\n throw e;\r\n }).finally(function () {\r\n document.removeEventListener(\"visibilitychange\", _this.trackPageVisibilityWithMeasurement);\r\n })];\r\n });\r\n });\r\n };\r\n /**\r\n * This function redeems an authorization code (passed as code) from the eSTS token endpoint.\r\n * This authorization code should be acquired server-side using a confidential client to acquire a spa_code.\r\n * This API is not indended for normal authorization code acquisition and redemption.\r\n *\r\n * Redemption of this authorization code will not require PKCE, as it was acquired by a confidential client.\r\n *\r\n * @param request {@link AuthorizationCodeRequest}\r\n * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n */\r\n ClientApplication.prototype.acquireTokenByCode = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var correlationId, atbcMeasurement, hybridAuthCode_1, response;\r\n var _this = this;\r\n return __generator(this, function (_a) {\r\n correlationId = this.getRequestCorrelationId(request);\r\n this.preflightBrowserEnvironmentCheck(InteractionType.Silent);\r\n this.logger.trace(\"acquireTokenByCode called\", correlationId);\r\n this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_START, InteractionType.Silent, request);\r\n atbcMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCode, request.correlationId);\r\n try {\r\n if (request.code && request.nativeAccountId) {\r\n // Throw error in case server returns both spa_code and spa_accountid in exchange for auth code.\r\n throw BrowserAuthError.createSpaCodeAndNativeAccountIdPresentError();\r\n }\r\n else if (request.code) {\r\n hybridAuthCode_1 = request.code;\r\n response = this.hybridAuthCodeResponses.get(hybridAuthCode_1);\r\n if (!response) {\r\n this.logger.verbose(\"Initiating new acquireTokenByCode request\", correlationId);\r\n response = this.acquireTokenByCodeAsync(__assign(__assign({}, request), { correlationId: correlationId }))\r\n .then(function (result) {\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_SUCCESS, InteractionType.Silent, result);\r\n _this.hybridAuthCodeResponses.delete(hybridAuthCode_1);\r\n atbcMeasurement.addStaticFields({\r\n accessTokenSize: result.accessToken.length,\r\n idTokenSize: result.idToken.length\r\n });\r\n atbcMeasurement.endMeasurement({\r\n success: true,\r\n isNativeBroker: result.fromNativeBroker,\r\n requestId: result.requestId\r\n });\r\n return result;\r\n })\r\n .catch(function (error) {\r\n _this.hybridAuthCodeResponses.delete(hybridAuthCode_1);\r\n _this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, InteractionType.Silent, null, error);\r\n atbcMeasurement.endMeasurement({\r\n errorCode: error.errorCode,\r\n subErrorCode: error.subError,\r\n success: false\r\n });\r\n throw error;\r\n });\r\n this.hybridAuthCodeResponses.set(hybridAuthCode_1, response);\r\n }\r\n else {\r\n this.logger.verbose(\"Existing acquireTokenByCode request found\", request.correlationId);\r\n atbcMeasurement.discardMeasurement();\r\n }\r\n return [2 /*return*/, response];\r\n }\r\n else if (request.nativeAccountId) {\r\n if (this.canUseNative(request, request.nativeAccountId)) {\r\n return [2 /*return*/, this.acquireTokenNative(request, ApiId.acquireTokenByCode, request.nativeAccountId).catch(function (e) {\r\n // If native token acquisition fails for availability reasons fallback to standard flow\r\n if (e instanceof NativeAuthError && e.isFatal()) {\r\n _this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt\r\n }\r\n throw e;\r\n })];\r\n }\r\n else {\r\n throw BrowserAuthError.createUnableToAcquireTokenFromNativePlatformError();\r\n }\r\n }\r\n else {\r\n throw BrowserAuthError.createAuthCodeOrNativeAccountIdRequiredError();\r\n }\r\n }\r\n catch (e) {\r\n this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, InteractionType.Silent, null, e);\r\n atbcMeasurement.endMeasurement({\r\n errorCode: e instanceof AuthError && e.errorCode || undefined,\r\n subErrorCode: e instanceof AuthError && e.subError || undefined,\r\n success: false\r\n });\r\n throw e;\r\n }\r\n return [2 /*return*/];\r\n });\r\n });\r\n };\r\n /**\r\n * Creates a SilentAuthCodeClient to redeem an authorization code.\r\n * @param request\r\n * @returns Result of the operation to redeem the authorization code\r\n */\r\n ClientApplication.prototype.acquireTokenByCodeAsync = function (request) {\r\n var _a;\r\n return __awaiter(this, void 0, void 0, function () {\r\n var silentAuthCodeClient, silentTokenResult;\r\n var _this = this;\r\n return __generator(this, function (_b) {\r\n switch (_b.label) {\r\n case 0:\r\n this.logger.trace(\"acquireTokenByCodeAsync called\", request.correlationId);\r\n this.acquireTokenByCodeAsyncMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCodeAsync, request.correlationId);\r\n (_a = this.acquireTokenByCodeAsyncMeasurement) === null || _a === void 0 ? void 0 : _a.increment({\r\n visibilityChangeCount: 0\r\n });\r\n document.addEventListener(\"visibilitychange\", this.trackPageVisibilityWithMeasurement);\r\n silentAuthCodeClient = this.createSilentAuthCodeClient(request.correlationId);\r\n return [4 /*yield*/, silentAuthCodeClient.acquireToken(request).then(function (response) {\r\n var _a;\r\n (_a = _this.acquireTokenByCodeAsyncMeasurement) === null || _a === void 0 ? void 0 : _a.endMeasurement({\r\n success: true,\r\n fromCache: response.fromCache,\r\n isNativeBroker: response.fromNativeBroker,\r\n requestId: response.requestId\r\n });\r\n return response;\r\n }).catch(function (tokenRenewalError) {\r\n var _a;\r\n (_a = _this.acquireTokenByCodeAsyncMeasurement) === null || _a === void 0 ? void 0 : _a.endMeasurement({\r\n errorCode: tokenRenewalError.errorCode,\r\n subErrorCode: tokenRenewalError.subError,\r\n success: false\r\n });\r\n throw tokenRenewalError;\r\n }).finally(function () {\r\n document.removeEventListener(\"visibilitychange\", _this.trackPageVisibilityWithMeasurement);\r\n })];\r\n case 1:\r\n silentTokenResult = _b.sent();\r\n return [2 /*return*/, silentTokenResult];\r\n }\r\n });\r\n });\r\n };\r\n /**\r\n * Attempt to acquire an access token from the cache\r\n * @param silentCacheClient SilentCacheClient\r\n * @param commonRequest CommonSilentFlowRequest\r\n * @param silentRequest SilentRequest\r\n * @returns A promise that, when resolved, returns the access token\r\n */\r\n ClientApplication.prototype.acquireTokenFromCache = function (silentCacheClient, commonRequest, silentRequest) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n return __generator(this, function (_a) {\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenFromCache, commonRequest.correlationId);\r\n switch (silentRequest.cacheLookupPolicy) {\r\n case CacheLookupPolicy.Default:\r\n case CacheLookupPolicy.AccessToken:\r\n case CacheLookupPolicy.AccessTokenAndRefreshToken:\r\n return [2 /*return*/, silentCacheClient.acquireToken(commonRequest)];\r\n default:\r\n throw ClientAuthError.createRefreshRequiredError();\r\n }\r\n return [2 /*return*/];\r\n });\r\n });\r\n };\r\n /**\r\n * Attempt to acquire an access token via a refresh token\r\n * @param commonRequest CommonSilentFlowRequest\r\n * @param silentRequest SilentRequest\r\n * @returns A promise that, when resolved, returns the access token\r\n */\r\n ClientApplication.prototype.acquireTokenByRefreshToken = function (commonRequest, silentRequest) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var silentRefreshClient;\r\n return __generator(this, function (_a) {\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenByRefreshToken, commonRequest.correlationId);\r\n switch (silentRequest.cacheLookupPolicy) {\r\n case CacheLookupPolicy.Default:\r\n case CacheLookupPolicy.AccessTokenAndRefreshToken:\r\n case CacheLookupPolicy.RefreshToken:\r\n case CacheLookupPolicy.RefreshTokenAndNetwork:\r\n silentRefreshClient = this.createSilentRefreshClient(commonRequest.correlationId);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.SilentRefreshClientAcquireToken, commonRequest.correlationId);\r\n return [2 /*return*/, silentRefreshClient.acquireToken(commonRequest)];\r\n default:\r\n throw ClientAuthError.createRefreshRequiredError();\r\n }\r\n return [2 /*return*/];\r\n });\r\n });\r\n };\r\n /**\r\n * Attempt to acquire an access token via an iframe\r\n * @param request CommonSilentFlowRequest\r\n * @returns A promise that, when resolved, returns the access token\r\n */\r\n ClientApplication.prototype.acquireTokenBySilentIframe = function (request) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var silentIframeClient;\r\n return __generator(this, function (_a) {\r\n this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenBySilentIframe, request.correlationId);\r\n silentIframeClient = this.createSilentIframeClient(request.correlationId);\r\n this.performanceClient.setPreQueueTime(PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);\r\n return [2 /*return*/, silentIframeClient.acquireToken(request)];\r\n });\r\n });\r\n };\r\n // #endregion\r\n // #region Logout\r\n /**\r\n * Deprecated logout function. Use logoutRedirect or logoutPopup instead\r\n * @param logoutRequest\r\n * @deprecated\r\n */\r\n ClientApplication.prototype.logout = function (logoutRequest) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var correlationId;\r\n return __generator(this, function (_a) {\r\n correlationId = this.getRequestCorrelationId(logoutRequest);\r\n this.logger.warning(\"logout API is deprecated and will be removed in msal-browser v3.0.0. Use logoutRedirect instead.\", correlationId);\r\n return [2 /*return*/, this.logoutRedirect(__assign({ correlationId: correlationId }, logoutRequest))];\r\n });\r\n });\r\n };\r\n /**\r\n * Use to log out the current user, and redirect the user to the postLogoutRedirectUri.\r\n * Default behaviour is to redirect the user to `window.location.href`.\r\n * @param logoutRequest\r\n */\r\n ClientApplication.prototype.logoutRedirect = function (logoutRequest) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var correlationId, redirectClient;\r\n return __generator(this, function (_a) {\r\n correlationId = this.getRequestCorrelationId(logoutRequest);\r\n this.preflightBrowserEnvironmentCheck(InteractionType.Redirect);\r\n redirectClient = this.createRedirectClient(correlationId);\r\n return [2 /*return*/, redirectClient.logout(logoutRequest)];\r\n });\r\n });\r\n };\r\n /**\r\n * Clears local cache for the current user then opens a popup window prompting the user to sign-out of the server\r\n * @param logoutRequest\r\n */\r\n ClientApplication.prototype.logoutPopup = function (logoutRequest) {\r\n try {\r\n var correlationId = this.getRequestCorrelationId(logoutRequest);\r\n this.preflightBrowserEnvironmentCheck(InteractionType.Popup);\r\n var popupClient = this.createPopupClient(correlationId);\r\n return popupClient.logout(logoutRequest);\r\n }\r\n catch (e) {\r\n // Since this function is syncronous we need to reject\r\n return Promise.reject(e);\r\n }\r\n };\r\n // #endregion\r\n // #region Account APIs\r\n /**\r\n * Returns all accounts that MSAL currently has data for.\r\n * (the account object is created at the time of successful login)\r\n * or empty array when no accounts are found\r\n * @returns Array of account objects in cache\r\n */\r\n ClientApplication.prototype.getAllAccounts = function () {\r\n this.logger.verbose(\"getAllAccounts called\");\r\n return this.isBrowserEnvironment ? this.browserStorage.getAllAccounts() : [];\r\n };\r\n /**\r\n * Returns the signed in account matching username.\r\n * (the account object is created at the time of successful login)\r\n * or null when no matching account is found.\r\n * This API is provided for convenience but getAccountById should be used for best reliability\r\n * @param username\r\n * @returns The account object stored in MSAL\r\n */\r\n ClientApplication.prototype.getAccountByUsername = function (username) {\r\n this.logger.trace(\"getAccountByUsername called\");\r\n if (!username) {\r\n this.logger.warning(\"getAccountByUsername: No username provided\");\r\n return null;\r\n }\r\n var account = this.browserStorage.getAccountInfoFilteredBy({ username: username });\r\n if (account) {\r\n this.logger.verbose(\"getAccountByUsername: Account matching username found, returning\");\r\n this.logger.verbosePii(\"getAccountByUsername: Returning signed-in accounts matching username: \" + username);\r\n return account;\r\n }\r\n else {\r\n this.logger.verbose(\"getAccountByUsername: No matching account found, returning null\");\r\n return null;\r\n }\r\n };\r\n /**\r\n * Returns the signed in account matching homeAccountId.\r\n * (the account object is created at the time of successful login)\r\n * or null when no matching account is found\r\n * @param homeAccountId\r\n * @returns The account object stored in MSAL\r\n */\r\n ClientApplication.prototype.getAccountByHomeId = function (homeAccountId) {\r\n this.logger.trace(\"getAccountByHomeId called\");\r\n if (!homeAccountId) {\r\n this.logger.warning(\"getAccountByHomeId: No homeAccountId provided\");\r\n return null;\r\n }\r\n var account = this.browserStorage.getAccountInfoFilteredBy({ homeAccountId: homeAccountId });\r\n if (account) {\r\n this.logger.verbose(\"getAccountByHomeId: Account matching homeAccountId found, returning\");\r\n this.logger.verbosePii(\"getAccountByHomeId: Returning signed-in accounts matching homeAccountId: \" + homeAccountId);\r\n return account;\r\n }\r\n else {\r\n this.logger.verbose(\"getAccountByHomeId: No matching account found, returning null\");\r\n return null;\r\n }\r\n };\r\n /**\r\n * Returns the signed in account matching localAccountId.\r\n * (the account object is created at the time of successful login)\r\n * or null when no matching account is found\r\n * @param localAccountId\r\n * @returns The account object stored in MSAL\r\n */\r\n ClientApplication.prototype.getAccountByLocalId = function (localAccountId) {\r\n this.logger.trace(\"getAccountByLocalId called\");\r\n if (!localAccountId) {\r\n this.logger.warning(\"getAccountByLocalId: No localAccountId provided\");\r\n return null;\r\n }\r\n var account = this.browserStorage.getAccountInfoFilteredBy({ localAccountId: localAccountId });\r\n if (account) {\r\n this.logger.verbose(\"getAccountByLocalId: Account matching localAccountId found, returning\");\r\n this.logger.verbosePii(\"getAccountByLocalId: Returning signed-in accounts matching localAccountId: \" + localAccountId);\r\n return account;\r\n }\r\n else {\r\n this.logger.verbose(\"getAccountByLocalId: No matching account found, returning null\");\r\n return null;\r\n }\r\n };\r\n /**\r\n * Sets the account to use as the active account. If no account is passed to the acquireToken APIs, then MSAL will use this active account.\r\n * @param account\r\n */\r\n ClientApplication.prototype.setActiveAccount = function (account) {\r\n this.browserStorage.setActiveAccount(account);\r\n };\r\n /**\r\n * Gets the currently active account\r\n */\r\n ClientApplication.prototype.getActiveAccount = function () {\r\n return this.browserStorage.getActiveAccount();\r\n };\r\n // #endregion\r\n // #region Helpers\r\n /**\r\n * Helper to validate app environment before making an auth request\r\n *\r\n * @protected\r\n * @param {InteractionType} interactionType What kind of interaction is being used\r\n * @param {boolean} [setInteractionInProgress=true] Whether to set interaction in progress temp cache flag\r\n */\r\n ClientApplication.prototype.preflightBrowserEnvironmentCheck = function (interactionType, setInteractionInProgress) {\r\n if (setInteractionInProgress === void 0) { setInteractionInProgress = true; }\r\n this.logger.verbose(\"preflightBrowserEnvironmentCheck started\");\r\n // Block request if not in browser environment\r\n BrowserUtils.blockNonBrowserEnvironment(this.isBrowserEnvironment);\r\n // Block redirects if in an iframe\r\n BrowserUtils.blockRedirectInIframe(interactionType, this.config.system.allowRedirectInIframe);\r\n // Block auth requests inside a hidden iframe\r\n BrowserUtils.blockReloadInHiddenIframes();\r\n // Block redirectUri opened in a popup from calling MSAL APIs\r\n BrowserUtils.blockAcquireTokenInPopups();\r\n // Block token acquisition before initialize has been called if native brokering is enabled\r\n BrowserUtils.blockNativeBrokerCalledBeforeInitialized(this.config.system.allowNativeBroker, this.initialized);\r\n // Block redirects if memory storage is enabled but storeAuthStateInCookie is not\r\n if (interactionType === InteractionType.Redirect &&\r\n this.config.cache.cacheLocation === BrowserCacheLocation.MemoryStorage &&\r\n !this.config.cache.storeAuthStateInCookie) {\r\n throw BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError();\r\n }\r\n if (interactionType === InteractionType.Redirect || interactionType === InteractionType.Popup) {\r\n this.preflightInteractiveRequest(setInteractionInProgress);\r\n }\r\n };\r\n /**\r\n * Preflight check for interactive requests\r\n *\r\n * @protected\r\n * @param {boolean} setInteractionInProgress Whether to set interaction in progress temp cache flag\r\n */\r\n ClientApplication.prototype.preflightInteractiveRequest = function (setInteractionInProgress) {\r\n this.logger.verbose(\"preflightInteractiveRequest called, validating app environment\");\r\n // block the reload if it occurred inside a hidden iframe\r\n BrowserUtils.blockReloadInHiddenIframes();\r\n // Set interaction in progress temporary cache or throw if alread set.\r\n if (setInteractionInProgress) {\r\n this.browserStorage.setInteractionInProgress(true);\r\n }\r\n };\r\n /**\r\n * Acquire a token from native device (e.g. WAM)\r\n * @param request\r\n */\r\n ClientApplication.prototype.acquireTokenNative = function (request, apiId, accountId) {\r\n return __awaiter(this, void 0, void 0, function () {\r\n var nativeClient;\r\n return __generator(this, function (_a) {\r\n this.logger.trace(\"acquireTokenNative called\");\r\n if (!this.nativeExtensionProvider) {\r\n throw BrowserAuthError.createNativeConnectionNotEstablishedError();\r\n }\r\n nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, apiId, this.performanceClient, this.nativeExtensionProvider, accountId || this.getNativeAccountId(request), this.nativeInternalStorage, request.correlationId);\r\n return [2 /*return*/, nativeClient.acquireToken(request)];\r\n });\r\n });\r\n };\r\n /**\r\n * Returns boolean indicating if this request can use the native broker\r\n * @param request\r\n */\r\n ClientApplication.prototype.canUseNative = function (request, accountId) {\r\n this.logger.trace(\"canUseNative called\");\r\n if (!NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider, request.authenticationScheme)) {\r\n this.logger.trace(\"canUseNative: isNativeAvailable returned false, returning false\");\r\n return false;\r\n }\r\n if (request.prompt) {\r\n switch (request.prompt) {\r\n case PromptValue.NONE:\r\n case PromptValue.CONSENT:\r\n case PromptValue.LOGIN:\r\n this.logger.trace(\"canUseNative: prompt is compatible with native flow\");\r\n break;\r\n default:\r\n this.logger.trace(\"canUseNative: prompt = \" + request.prompt + \" is not compatible with native flow, returning false\");\r\n return false;\r\n }\r\n }\r\n if (!accountId && !this.getNativeAccountId(request)) {\r\n this.logger.trace(\"canUseNative: nativeAccountId is not available, returning false\");\r\n return false;\r\n }\r\n return true;\r\n };\r\n /**\r\n * Get the native accountId from the account\r\n * @param request\r\n * @returns\r\n */\r\n ClientApplication.prototype.getNativeAccountId = function (request) {\r\n var account = request.account || this.browserStorage.getAccountInfoByHints(request.loginHint, request.sid) || this.getActiveAccount();\r\n return account && account.nativeAccountId || \"\";\r\n };\r\n /**\r\n * Returns new instance of the Popup Interaction Client\r\n * @param correlationId\r\n */\r\n ClientApplication.prototype.createPopupClient = function (correlationId) {\r\n return new PopupClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.nativeInternalStorage, this.nativeExtensionProvider, correlationId);\r\n };\r\n /**\r\n * Returns new instance of the Redirect Interaction Client\r\n * @param correlationId\r\n */\r\n ClientApplication.prototype.createRedirectClient = function (correlationId) {\r\n return new RedirectClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.nativeInternalStorage, this.nativeExtensionProvider, correlationId);\r\n };\r\n /**\r\n * Returns new instance of the Silent Iframe Interaction Client\r\n * @param correlationId\r\n */\r\n ClientApplication.prototype.createSilentIframeClient = function (correlationId) {\r\n return new SilentIframeClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.ssoSilent, this.performanceClient, this.nativeInternalStorage, this.nativeExtensionProvider, correlationId);\r\n };\r\n /**\r\n * Returns new instance of the Silent Cache Interaction Client\r\n */\r\n ClientApplication.prototype.createSilentCacheClient = function (correlationId) {\r\n return new SilentCacheClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.nativeExtensionProvider, correlationId);\r\n };\r\n /**\r\n * Returns new instance of the Silent Refresh Interaction Client\r\n */\r\n ClientApplication.prototype.createSilentRefreshClient = function (correlationId) {\r\n return new SilentRefreshClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.nativeExtensionProvider, correlationId);\r\n };\r\n /**\r\n * Returns new instance of the Silent AuthCode Interaction Client\r\n */\r\n ClientApplication.prototype.createSilentAuthCodeClient = function (correlationId) {\r\n return new SilentAuthCodeClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenByCode, this.performanceClient, this.nativeExtensionProvider, correlationId);\r\n };\r\n /**\r\n * Adds event callbacks to array\r\n * @param callback\r\n */\r\n ClientApplication.prototype.addEventCallback = function (callback) {\r\n return this.eventHandler.addEventCallback(callback);\r\n };\r\n /**\r\n * Removes callback with provided id from callback array\r\n * @param callbackId\r\n */\r\n ClientApplication.prototype.removeEventCallback = function (callbackId) {\r\n this.eventHandler.removeEventCallback(callbackId);\r\n };\r\n /**\r\n * Registers a callback to receive performance events.\r\n *\r\n * @param {PerformanceCallbackFunction} callback\r\n * @returns {string}\r\n */\r\n ClientApplication.prototype.addPerformanceCallback = function (callback) {\r\n return this.performanceClient.addPerformanceCallback(callback);\r\n };\r\n /**\r\n * Removes a callback registered with addPerformanceCallback.\r\n *\r\n * @param {string} callbackId\r\n * @returns {boolean}\r\n */\r\n ClientApplication.prototype.removePerformanceCallback = function (callbackId) {\r\n return this.performanceClient.removePerformanceCallback(callbackId);\r\n };\r\n /**\r\n * Adds event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window\r\n */\r\n ClientApplication.prototype.enableAccountStorageEvents = function () {\r\n this.eventHandler.enableAccountStorageEvents();\r\n };\r\n /**\r\n * Removes event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window\r\n */\r\n ClientApplication.prototype.disableAccountStorageEvents = function () {\r\n this.eventHandler.disableAccountStorageEvents();\r\n };\r\n /**\r\n * Gets the token cache for the application.\r\n */\r\n ClientApplication.prototype.getTokenCache = function () {\r\n return this.tokenCache;\r\n };\r\n /**\r\n * Returns the logger instance\r\n */\r\n ClientApplication.prototype.getLogger = function () {\r\n return this.logger;\r\n };\r\n /**\r\n * Replaces the default logger set in configurations with new Logger with new configurations\r\n * @param logger Logger instance\r\n */\r\n ClientApplication.prototype.setLogger = function (logger) {\r\n this.logger = logger;\r\n };\r\n /**\r\n * Called by wrapper libraries (Angular & React) to set SKU and Version passed down to telemetry, logger, etc.\r\n * @param sku\r\n * @param version\r\n */\r\n ClientApplication.prototype.initializeWrapperLibrary = function (sku, version) {\r\n // Validate the SKU passed in is one we expect\r\n this.browserStorage.setWrapperMetadata(sku, version);\r\n };\r\n /**\r\n * Sets navigation client\r\n * @param navigationClient\r\n */\r\n ClientApplication.prototype.setNavigationClient = function (navigationClient) {\r\n this.navigationClient = navigationClient;\r\n };\r\n /**\r\n * Returns the configuration object\r\n */\r\n ClientApplication.prototype.getConfiguration = function () {\r\n return this.config;\r\n };\r\n /**\r\n * Generates a correlation id for a request if none is provided.\r\n *\r\n * @protected\r\n * @param {?Partial} [request]\r\n * @returns {string}\r\n */\r\n ClientApplication.prototype.getRequestCorrelationId = function (request) {\r\n if (request === null || request === void 0 ? void 0 : request.correlationId) {\r\n return request.correlationId;\r\n }\r\n if (this.isBrowserEnvironment) {\r\n return this.browserCrypto.createNewGuid();\r\n }\r\n /*\r\n * Included for fallback for non-browser environments,\r\n * and to ensure this method always returns a string.\r\n */\r\n return Constants.EMPTY_STRING;\r\n };\r\n return ClientApplication;\r\n}());\n\nexport { ClientApplication };\n//# sourceMappingURL=ClientApplication.js.map\n","import * as Sentry from '@sentry/react';\nimport { PublicClientApplication } from '@azure/msal-browser';\n\nexport const IS_LOGIN_NOT_REQUIRED = process.env.REACT_APP_DISABLE_ACTIVE_DIRECTORY_LOGIN === 'true';\nconst AD_CLIENT_ID = process.env.REACT_APP_ACTIVE_DIRECTORY_CLIENT_ID || 'client-id';\nconst AD_TENANT = process.env.REACT_APP_ACTIVE_DIRECTORY_TENANT || 'tenant-name';\nconst AD_AUTHORITY = `https://login.microsoftonline.com/${AD_TENANT}`;\n\nconst msalConfig = {\n auth: {\n clientId: AD_CLIENT_ID,\n authority: AD_AUTHORITY,\n },\n cache: {\n cacheLocation: 'sessionStorage',\n storeAuthStateInCookie: true,\n },\n};\n\nconst msalInstance = new PublicClientApplication(msalConfig);\nconst loginRequest = {\n scopes: ['User.Read'],\n};\n\nconst guestUserName = 'Guest User';\n\nexport const getMsalInstance = () => msalInstance;\n\nexport const getAuthUser = () => {\n if (IS_LOGIN_NOT_REQUIRED) { return { profile: { name: guestUserName } }; }\n const account = msalInstance.getActiveAccount();\n if (!account) {\n msalInstance.loginRedirect();\n return undefined;\n }\n Sentry.setUser({\n username: account ? account.username : guestUserName,\n });\n\n return account;\n};\n\nexport const getAuthToken = async () => {\n if (IS_LOGIN_NOT_REQUIRED) { return ''; }\n\n const account = msalInstance.getActiveAccount();\n if (!account) {\n throw new Error('No user account found');\n }\n const forceRefresh = new Date() >= new Date(account.idTokenClaims.exp * 1000);\n const response = await msalInstance.acquireTokenSilent({\n ...loginRequest,\n account,\n forceRefresh,\n });\n return response.idToken;\n};\n\nexport const fetchWithAuthHeader = async (url, options) => {\n if (IS_LOGIN_NOT_REQUIRED) {\n return fetch(url, options);\n }\n\n try {\n const idToken = await getAuthToken();\n const optionsWithToken = {\n ...options,\n headers: {\n ...options.headers,\n Authorization: `Bearer ${idToken}`,\n },\n };\n return fetch(url, optionsWithToken);\n } catch (error) {\n Sentry.captureException(error);\n return undefined;\n }\n};\n\nexport const logout = () => {\n const account = msalInstance.getActiveAccount();\n msalInstance.setActiveAccount(null);\n msalInstance.logoutRedirect({ account });\n Sentry.setUser(null);\n};\n","import { uuid4, dateTimestampInSeconds, consoleSandbox, logger, GLOBAL_OBJ, getGlobalSingleton } from '@sentry/utils';\nimport { DEFAULT_ENVIRONMENT } from './constants.js';\nimport { Scope } from './scope.js';\nimport { closeSession, makeSession, updateSession } from './session.js';\n\n/**\n * API compatibility version of this hub.\n *\n * WARNING: This number should only be increased when the global interface\n * changes and new methods are introduced.\n *\n * @hidden\n */\nconst API_VERSION = 4;\n\n/**\n * Default maximum number of breadcrumbs added to an event. Can be overwritten\n * with {@link Options.maxBreadcrumbs}.\n */\nconst DEFAULT_BREADCRUMBS = 100;\n\n/**\n * @inheritDoc\n */\nclass Hub {\n /** Is a {@link Layer}[] containing the client and scope */\n\n /** Contains the last event id of a captured event. */\n\n /**\n * Creates a new instance of the hub, will push one {@link Layer} into the\n * internal stack on creation.\n *\n * @param client bound to the hub.\n * @param scope bound to the hub.\n * @param version number, higher number means higher priority.\n */\n constructor(client, scope = new Scope(), _version = API_VERSION) {this._version = _version;\n this._stack = [{ scope }];\n if (client) {\n this.bindClient(client);\n }\n }\n\n /**\n * @inheritDoc\n */\n isOlderThan(version) {\n return this._version < version;\n }\n\n /**\n * @inheritDoc\n */\n bindClient(client) {\n const top = this.getStackTop();\n top.client = client;\n if (client && client.setupIntegrations) {\n client.setupIntegrations();\n }\n }\n\n /**\n * @inheritDoc\n */\n pushScope() {\n // We want to clone the content of prev scope\n const scope = Scope.clone(this.getScope());\n this.getStack().push({\n client: this.getClient(),\n scope,\n });\n return scope;\n }\n\n /**\n * @inheritDoc\n */\n popScope() {\n if (this.getStack().length <= 1) return false;\n return !!this.getStack().pop();\n }\n\n /**\n * @inheritDoc\n */\n withScope(callback) {\n const scope = this.pushScope();\n try {\n callback(scope);\n } finally {\n this.popScope();\n }\n }\n\n /**\n * @inheritDoc\n */\n getClient() {\n return this.getStackTop().client ;\n }\n\n /** Returns the scope of the top stack. */\n getScope() {\n return this.getStackTop().scope;\n }\n\n /** Returns the scope stack for domains or the process. */\n getStack() {\n return this._stack;\n }\n\n /** Returns the topmost scope layer in the order domain > local > process. */\n getStackTop() {\n return this._stack[this._stack.length - 1];\n }\n\n /**\n * @inheritDoc\n */\n captureException(exception, hint) {\n const eventId = (this._lastEventId = hint && hint.event_id ? hint.event_id : uuid4());\n const syntheticException = new Error('Sentry syntheticException');\n this._withClient((client, scope) => {\n client.captureException(\n exception,\n {\n originalException: exception,\n syntheticException,\n ...hint,\n event_id: eventId,\n },\n scope,\n );\n });\n return eventId;\n }\n\n /**\n * @inheritDoc\n */\n captureMessage(\n message,\n // eslint-disable-next-line deprecation/deprecation\n level,\n hint,\n ) {\n const eventId = (this._lastEventId = hint && hint.event_id ? hint.event_id : uuid4());\n const syntheticException = new Error(message);\n this._withClient((client, scope) => {\n client.captureMessage(\n message,\n level,\n {\n originalException: message,\n syntheticException,\n ...hint,\n event_id: eventId,\n },\n scope,\n );\n });\n return eventId;\n }\n\n /**\n * @inheritDoc\n */\n captureEvent(event, hint) {\n const eventId = hint && hint.event_id ? hint.event_id : uuid4();\n if (!event.type) {\n this._lastEventId = eventId;\n }\n\n this._withClient((client, scope) => {\n client.captureEvent(event, { ...hint, event_id: eventId }, scope);\n });\n return eventId;\n }\n\n /**\n * @inheritDoc\n */\n lastEventId() {\n return this._lastEventId;\n }\n\n /**\n * @inheritDoc\n */\n addBreadcrumb(breadcrumb, hint) {\n const { scope, client } = this.getStackTop();\n\n if (!client) return;\n\n const { beforeBreadcrumb = null, maxBreadcrumbs = DEFAULT_BREADCRUMBS } =\n (client.getOptions && client.getOptions()) || {};\n\n if (maxBreadcrumbs <= 0) return;\n\n const timestamp = dateTimestampInSeconds();\n const mergedBreadcrumb = { timestamp, ...breadcrumb };\n const finalBreadcrumb = beforeBreadcrumb\n ? (consoleSandbox(() => beforeBreadcrumb(mergedBreadcrumb, hint)) )\n : mergedBreadcrumb;\n\n if (finalBreadcrumb === null) return;\n\n if (client.emit) {\n client.emit('beforeAddBreadcrumb', finalBreadcrumb, hint);\n }\n\n scope.addBreadcrumb(finalBreadcrumb, maxBreadcrumbs);\n }\n\n /**\n * @inheritDoc\n */\n setUser(user) {\n this.getScope().setUser(user);\n }\n\n /**\n * @inheritDoc\n */\n setTags(tags) {\n this.getScope().setTags(tags);\n }\n\n /**\n * @inheritDoc\n */\n setExtras(extras) {\n this.getScope().setExtras(extras);\n }\n\n /**\n * @inheritDoc\n */\n setTag(key, value) {\n this.getScope().setTag(key, value);\n }\n\n /**\n * @inheritDoc\n */\n setExtra(key, extra) {\n this.getScope().setExtra(key, extra);\n }\n\n /**\n * @inheritDoc\n */\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n setContext(name, context) {\n this.getScope().setContext(name, context);\n }\n\n /**\n * @inheritDoc\n */\n configureScope(callback) {\n const { scope, client } = this.getStackTop();\n if (client) {\n callback(scope);\n }\n }\n\n /**\n * @inheritDoc\n */\n run(callback) {\n const oldHub = makeMain(this);\n try {\n callback(this);\n } finally {\n makeMain(oldHub);\n }\n }\n\n /**\n * @inheritDoc\n */\n getIntegration(integration) {\n const client = this.getClient();\n if (!client) return null;\n try {\n return client.getIntegration(integration);\n } catch (_oO) {\n (typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__) && logger.warn(`Cannot retrieve integration ${integration.id} from the current Hub`);\n return null;\n }\n }\n\n /**\n * @inheritDoc\n */\n startTransaction(context, customSamplingContext) {\n const result = this._callExtensionMethod('startTransaction', context, customSamplingContext);\n\n if ((typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__) && !result) {\n const client = this.getClient();\n if (!client) {\n // eslint-disable-next-line no-console\n console.warn(\n \"Tracing extension 'startTransaction' is missing. You should 'init' the SDK before calling 'startTransaction'\",\n );\n } else {\n // eslint-disable-next-line no-console\n console.warn(`Tracing extension 'startTransaction' has not been added. Call 'addTracingExtensions' before calling 'init':\nSentry.addTracingExtensions();\nSentry.init({...});\n`);\n }\n }\n\n return result;\n }\n\n /**\n * @inheritDoc\n */\n traceHeaders() {\n return this._callExtensionMethod('traceHeaders');\n }\n\n /**\n * @inheritDoc\n */\n captureSession(endSession = false) {\n // both send the update and pull the session from the scope\n if (endSession) {\n return this.endSession();\n }\n\n // only send the update\n this._sendSessionUpdate();\n }\n\n /**\n * @inheritDoc\n */\n endSession() {\n const layer = this.getStackTop();\n const scope = layer.scope;\n const session = scope.getSession();\n if (session) {\n closeSession(session);\n }\n this._sendSessionUpdate();\n\n // the session is over; take it off of the scope\n scope.setSession();\n }\n\n /**\n * @inheritDoc\n */\n startSession(context) {\n const { scope, client } = this.getStackTop();\n const { release, environment = DEFAULT_ENVIRONMENT } = (client && client.getOptions()) || {};\n\n // Will fetch userAgent if called from browser sdk\n const { userAgent } = GLOBAL_OBJ.navigator || {};\n\n const session = makeSession({\n release,\n environment,\n user: scope.getUser(),\n ...(userAgent && { userAgent }),\n ...context,\n });\n\n // End existing session if there's one\n const currentSession = scope.getSession && scope.getSession();\n if (currentSession && currentSession.status === 'ok') {\n updateSession(currentSession, { status: 'exited' });\n }\n this.endSession();\n\n // Afterwards we set the new session on the scope\n scope.setSession(session);\n\n return session;\n }\n\n /**\n * Returns if default PII should be sent to Sentry and propagated in ourgoing requests\n * when Tracing is used.\n */\n shouldSendDefaultPii() {\n const client = this.getClient();\n const options = client && client.getOptions();\n return Boolean(options && options.sendDefaultPii);\n }\n\n /**\n * Sends the current Session on the scope\n */\n _sendSessionUpdate() {\n const { scope, client } = this.getStackTop();\n\n const session = scope.getSession();\n if (session && client && client.captureSession) {\n client.captureSession(session);\n }\n }\n\n /**\n * Internal helper function to call a method on the top client if it exists.\n *\n * @param method The method to call on the client.\n * @param args Arguments to pass to the client function.\n */\n _withClient(callback) {\n const { scope, client } = this.getStackTop();\n if (client) {\n callback(client, scope);\n }\n }\n\n /**\n * Calls global extension method and binding current instance to the function call\n */\n // @ts-ignore Function lacks ending return statement and return type does not include 'undefined'. ts(2366)\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n _callExtensionMethod(method, ...args) {\n const carrier = getMainCarrier();\n const sentry = carrier.__SENTRY__;\n if (sentry && sentry.extensions && typeof sentry.extensions[method] === 'function') {\n return sentry.extensions[method].apply(this, args);\n }\n (typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__) && logger.warn(`Extension method ${method} couldn't be found, doing nothing.`);\n }\n}\n\n/**\n * Returns the global shim registry.\n *\n * FIXME: This function is problematic, because despite always returning a valid Carrier,\n * it has an optional `__SENTRY__` property, which then in turn requires us to always perform an unnecessary check\n * at the call-site. We always access the carrier through this function, so we can guarantee that `__SENTRY__` is there.\n **/\nfunction getMainCarrier() {\n GLOBAL_OBJ.__SENTRY__ = GLOBAL_OBJ.__SENTRY__ || {\n extensions: {},\n hub: undefined,\n };\n return GLOBAL_OBJ;\n}\n\n/**\n * Replaces the current main hub with the passed one on the global object\n *\n * @returns The old replaced hub\n */\nfunction makeMain(hub) {\n const registry = getMainCarrier();\n const oldHub = getHubFromCarrier(registry);\n setHubOnCarrier(registry, hub);\n return oldHub;\n}\n\n/**\n * Returns the default hub instance.\n *\n * If a hub is already registered in the global carrier but this module\n * contains a more recent version, it replaces the registered version.\n * Otherwise, the currently registered hub will be returned.\n */\nfunction getCurrentHub() {\n // Get main carrier (global for every environment)\n const registry = getMainCarrier();\n\n if (registry.__SENTRY__ && registry.__SENTRY__.acs) {\n const hub = registry.__SENTRY__.acs.getCurrentHub();\n\n if (hub) {\n return hub;\n }\n }\n\n // Return hub that lives on a global object\n return getGlobalHub(registry);\n}\n\nfunction getGlobalHub(registry = getMainCarrier()) {\n // If there's no hub, or its an old API, assign a new one\n if (!hasHubOnCarrier(registry) || getHubFromCarrier(registry).isOlderThan(API_VERSION)) {\n setHubOnCarrier(registry, new Hub());\n }\n\n // Return hub that lives on a global object\n return getHubFromCarrier(registry);\n}\n\n/**\n * @private Private API with no semver guarantees!\n *\n * If the carrier does not contain a hub, a new hub is created with the global hub client and scope.\n */\nfunction ensureHubOnCarrier(carrier, parent = getGlobalHub()) {\n // If there's no hub on current domain, or it's an old API, assign a new one\n if (!hasHubOnCarrier(carrier) || getHubFromCarrier(carrier).isOlderThan(API_VERSION)) {\n const globalHubTopStack = parent.getStackTop();\n setHubOnCarrier(carrier, new Hub(globalHubTopStack.client, Scope.clone(globalHubTopStack.scope)));\n }\n}\n\n/**\n * @private Private API with no semver guarantees!\n *\n * Sets the global async context strategy\n */\nfunction setAsyncContextStrategy(strategy) {\n // Get main carrier (global for every environment)\n const registry = getMainCarrier();\n registry.__SENTRY__ = registry.__SENTRY__ || {};\n registry.__SENTRY__.acs = strategy;\n}\n\n/**\n * Runs the supplied callback in its own async context. Async Context strategies are defined per SDK.\n *\n * @param callback The callback to run in its own async context\n * @param options Options to pass to the async context strategy\n * @returns The result of the callback\n */\nfunction runWithAsyncContext(callback, options = {}) {\n const registry = getMainCarrier();\n\n if (registry.__SENTRY__ && registry.__SENTRY__.acs) {\n return registry.__SENTRY__.acs.runWithAsyncContext(callback, options);\n }\n\n // if there was no strategy, fallback to just calling the callback\n return callback();\n}\n\n/**\n * This will tell whether a carrier has a hub on it or not\n * @param carrier object\n */\nfunction hasHubOnCarrier(carrier) {\n return !!(carrier && carrier.__SENTRY__ && carrier.__SENTRY__.hub);\n}\n\n/**\n * This will create a new {@link Hub} and add to the passed object on\n * __SENTRY__.hub.\n * @param carrier object\n * @hidden\n */\nfunction getHubFromCarrier(carrier) {\n return getGlobalSingleton('hub', () => new Hub(), carrier);\n}\n\n/**\n * This will set passed {@link Hub} on the passed object's __SENTRY__.hub attribute\n * @param carrier object\n * @param hub Hub\n * @returns A boolean indicating success or failure\n */\nfunction setHubOnCarrier(carrier, hub) {\n if (!carrier) return false;\n const __SENTRY__ = (carrier.__SENTRY__ = carrier.__SENTRY__ || {});\n __SENTRY__.hub = hub;\n return true;\n}\n\nexport { API_VERSION, Hub, ensureHubOnCarrier, getCurrentHub, getHubFromCarrier, getMainCarrier, makeMain, runWithAsyncContext, setAsyncContextStrategy, setHubOnCarrier };\n//# sourceMappingURL=hub.js.map\n","import { GLOBAL_OBJ } from './worldwide.js';\n\n/** Prefix for logging strings */\nconst PREFIX = 'Sentry Logger ';\n\nconst CONSOLE_LEVELS = ['debug', 'info', 'warn', 'error', 'log', 'assert', 'trace'] ;\n\n/** This may be mutated by the console instrumentation. */\nconst originalConsoleMethods\n\n = {};\n\n/** JSDoc */\n\n/**\n * Temporarily disable sentry console instrumentations.\n *\n * @param callback The function to run against the original `console` messages\n * @returns The results of the callback\n */\nfunction consoleSandbox(callback) {\n if (!('console' in GLOBAL_OBJ)) {\n return callback();\n }\n\n const console = GLOBAL_OBJ.console ;\n const wrappedFuncs = {};\n\n const wrappedLevels = Object.keys(originalConsoleMethods) ;\n\n // Restore all wrapped console methods\n wrappedLevels.forEach(level => {\n const originalConsoleMethod = originalConsoleMethods[level] ;\n wrappedFuncs[level] = console[level] ;\n console[level] = originalConsoleMethod;\n });\n\n try {\n return callback();\n } finally {\n // Revert restoration to wrapped state\n wrappedLevels.forEach(level => {\n console[level] = wrappedFuncs[level] ;\n });\n }\n}\n\nfunction makeLogger() {\n let enabled = false;\n const logger = {\n enable: () => {\n enabled = true;\n },\n disable: () => {\n enabled = false;\n },\n };\n\n if ((typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__)) {\n CONSOLE_LEVELS.forEach(name => {\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n logger[name] = (...args) => {\n if (enabled) {\n consoleSandbox(() => {\n GLOBAL_OBJ.console[name](`${PREFIX}[${name}]:`, ...args);\n });\n }\n };\n });\n } else {\n CONSOLE_LEVELS.forEach(name => {\n logger[name] = () => undefined;\n });\n }\n\n return logger ;\n}\n\nconst logger = makeLogger();\n\nexport { CONSOLE_LEVELS, consoleSandbox, logger, originalConsoleMethods };\n//# sourceMappingURL=logger.js.map\n","// eslint-disable-next-line @typescript-eslint/unbound-method\nconst objectToString = Object.prototype.toString;\n\n/**\n * Checks whether given value's type is one of a few Error or Error-like\n * {@link isError}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isError(wat) {\n switch (objectToString.call(wat)) {\n case '[object Error]':\n case '[object Exception]':\n case '[object DOMException]':\n return true;\n default:\n return isInstanceOf(wat, Error);\n }\n}\n/**\n * Checks whether given value is an instance of the given built-in class.\n *\n * @param wat The value to be checked\n * @param className\n * @returns A boolean representing the result.\n */\nfunction isBuiltin(wat, className) {\n return objectToString.call(wat) === `[object ${className}]`;\n}\n\n/**\n * Checks whether given value's type is ErrorEvent\n * {@link isErrorEvent}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isErrorEvent(wat) {\n return isBuiltin(wat, 'ErrorEvent');\n}\n\n/**\n * Checks whether given value's type is DOMError\n * {@link isDOMError}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isDOMError(wat) {\n return isBuiltin(wat, 'DOMError');\n}\n\n/**\n * Checks whether given value's type is DOMException\n * {@link isDOMException}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isDOMException(wat) {\n return isBuiltin(wat, 'DOMException');\n}\n\n/**\n * Checks whether given value's type is a string\n * {@link isString}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isString(wat) {\n return isBuiltin(wat, 'String');\n}\n\n/**\n * Checks whether given value is a primitive (undefined, null, number, boolean, string, bigint, symbol)\n * {@link isPrimitive}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isPrimitive(wat) {\n return wat === null || (typeof wat !== 'object' && typeof wat !== 'function');\n}\n\n/**\n * Checks whether given value's type is an object literal\n * {@link isPlainObject}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isPlainObject(wat) {\n return isBuiltin(wat, 'Object');\n}\n\n/**\n * Checks whether given value's type is an Event instance\n * {@link isEvent}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isEvent(wat) {\n return typeof Event !== 'undefined' && isInstanceOf(wat, Event);\n}\n\n/**\n * Checks whether given value's type is an Element instance\n * {@link isElement}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isElement(wat) {\n return typeof Element !== 'undefined' && isInstanceOf(wat, Element);\n}\n\n/**\n * Checks whether given value's type is an regexp\n * {@link isRegExp}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isRegExp(wat) {\n return isBuiltin(wat, 'RegExp');\n}\n\n/**\n * Checks whether given value has a then function.\n * @param wat A value to be checked.\n */\nfunction isThenable(wat) {\n // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n return Boolean(wat && wat.then && typeof wat.then === 'function');\n}\n\n/**\n * Checks whether given value's type is a SyntheticEvent\n * {@link isSyntheticEvent}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isSyntheticEvent(wat) {\n return isPlainObject(wat) && 'nativeEvent' in wat && 'preventDefault' in wat && 'stopPropagation' in wat;\n}\n\n/**\n * Checks whether given value is NaN\n * {@link isNaN}.\n *\n * @param wat A value to be checked.\n * @returns A boolean representing the result.\n */\nfunction isNaN(wat) {\n return typeof wat === 'number' && wat !== wat;\n}\n\n/**\n * Checks whether given value's type is an instance of provided constructor.\n * {@link isInstanceOf}.\n *\n * @param wat A value to be checked.\n * @param base A constructor to be used in a check.\n * @returns A boolean representing the result.\n */\nfunction isInstanceOf(wat, base) {\n try {\n return wat instanceof base;\n } catch (_e) {\n return false;\n }\n}\n\nexport { isDOMError, isDOMException, isElement, isError, isErrorEvent, isEvent, isInstanceOf, isNaN, isPlainObject, isPrimitive, isRegExp, isString, isSyntheticEvent, isThenable };\n//# sourceMappingURL=is.js.map\n","/** Internal global with common properties and Sentry extensions */\n\n// The code below for 'isGlobalObj' and 'GLOBAL_OBJ' was copied from core-js before modification\n// https://github.com/zloirock/core-js/blob/1b944df55282cdc99c90db5f49eb0b6eda2cc0a3/packages/core-js/internals/global.js\n// core-js has the following licence:\n//\n// Copyright (c) 2014-2022 Denis Pushkarev\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in\n// all copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\n// THE SOFTWARE.\n\n/** Returns 'obj' if it's the global object, otherwise returns undefined */\nfunction isGlobalObj(obj) {\n return obj && obj.Math == Math ? obj : undefined;\n}\n\n/** Get's the global object for the current JavaScript runtime */\nconst GLOBAL_OBJ =\n (typeof globalThis == 'object' && isGlobalObj(globalThis)) ||\n // eslint-disable-next-line no-restricted-globals\n (typeof window == 'object' && isGlobalObj(window)) ||\n (typeof self == 'object' && isGlobalObj(self)) ||\n (typeof global == 'object' && isGlobalObj(global)) ||\n (function () {\n return this;\n })() ||\n {};\n\n/**\n * @deprecated Use GLOBAL_OBJ instead or WINDOW from @sentry/browser. This will be removed in v8\n */\nfunction getGlobalObject() {\n return GLOBAL_OBJ ;\n}\n\n/**\n * Returns a global singleton contained in the global `__SENTRY__` object.\n *\n * If the singleton doesn't already exist in `__SENTRY__`, it will be created using the given factory\n * function and added to the `__SENTRY__` object.\n *\n * @param name name of the global singleton on __SENTRY__\n * @param creator creator Factory function to create the singleton if it doesn't already exist on `__SENTRY__`\n * @param obj (Optional) The global object on which to look for `__SENTRY__`, if not `GLOBAL_OBJ`'s return value\n * @returns the singleton\n */\nfunction getGlobalSingleton(name, creator, obj) {\n const gbl = (obj || GLOBAL_OBJ) ;\n const __SENTRY__ = (gbl.__SENTRY__ = gbl.__SENTRY__ || {});\n const singleton = __SENTRY__[name] || (__SENTRY__[name] = creator());\n return singleton;\n}\n\nexport { GLOBAL_OBJ, getGlobalObject, getGlobalSingleton };\n//# sourceMappingURL=worldwide.js.map\n","import { htmlTreeAsString } from './browser.js';\nimport { isError, isEvent, isInstanceOf, isElement, isPlainObject, isPrimitive } from './is.js';\nimport { truncate } from './string.js';\n\n/**\n * Replace a method in an object with a wrapped version of itself.\n *\n * @param source An object that contains a method to be wrapped.\n * @param name The name of the method to be wrapped.\n * @param replacementFactory A higher-order function that takes the original version of the given method and returns a\n * wrapped version. Note: The function returned by `replacementFactory` needs to be a non-arrow function, in order to\n * preserve the correct value of `this`, and the original method must be called using `origMethod.call(this, )` or `origMethod.apply(this, [])` (rather than being called directly), again to preserve `this`.\n * @returns void\n */\nfunction fill(source, name, replacementFactory) {\n if (!(name in source)) {\n return;\n }\n\n const original = source[name] ;\n const wrapped = replacementFactory(original) ;\n\n // Make sure it's a function first, as we need to attach an empty prototype for `defineProperties` to work\n // otherwise it'll throw \"TypeError: Object.defineProperties called on non-object\"\n if (typeof wrapped === 'function') {\n try {\n markFunctionWrapped(wrapped, original);\n } catch (_Oo) {\n // This can throw if multiple fill happens on a global object like XMLHttpRequest\n // Fixes https://github.com/getsentry/sentry-javascript/issues/2043\n }\n }\n\n source[name] = wrapped;\n}\n\n/**\n * Defines a non-enumerable property on the given object.\n *\n * @param obj The object on which to set the property\n * @param name The name of the property to be set\n * @param value The value to which to set the property\n */\nfunction addNonEnumerableProperty(obj, name, value) {\n Object.defineProperty(obj, name, {\n // enumerable: false, // the default, so we can save on bundle size by not explicitly setting it\n value: value,\n writable: true,\n configurable: true,\n });\n}\n\n/**\n * Remembers the original function on the wrapped function and\n * patches up the prototype.\n *\n * @param wrapped the wrapper function\n * @param original the original function that gets wrapped\n */\nfunction markFunctionWrapped(wrapped, original) {\n const proto = original.prototype || {};\n wrapped.prototype = original.prototype = proto;\n addNonEnumerableProperty(wrapped, '__sentry_original__', original);\n}\n\n/**\n * This extracts the original function if available. See\n * `markFunctionWrapped` for more information.\n *\n * @param func the function to unwrap\n * @returns the unwrapped version of the function if available.\n */\nfunction getOriginalFunction(func) {\n return func.__sentry_original__;\n}\n\n/**\n * Encodes given object into url-friendly format\n *\n * @param object An object that contains serializable values\n * @returns string Encoded\n */\nfunction urlEncode(object) {\n return Object.keys(object)\n .map(key => `${encodeURIComponent(key)}=${encodeURIComponent(object[key])}`)\n .join('&');\n}\n\n/**\n * Transforms any `Error` or `Event` into a plain object with all of their enumerable properties, and some of their\n * non-enumerable properties attached.\n *\n * @param value Initial source that we have to transform in order for it to be usable by the serializer\n * @returns An Event or Error turned into an object - or the value argurment itself, when value is neither an Event nor\n * an Error.\n */\nfunction convertToPlainObject(value)\n\n {\n if (isError(value)) {\n return {\n message: value.message,\n name: value.name,\n stack: value.stack,\n ...getOwnProperties(value),\n };\n } else if (isEvent(value)) {\n const newObj\n\n = {\n type: value.type,\n target: serializeEventTarget(value.target),\n currentTarget: serializeEventTarget(value.currentTarget),\n ...getOwnProperties(value),\n };\n\n if (typeof CustomEvent !== 'undefined' && isInstanceOf(value, CustomEvent)) {\n newObj.detail = value.detail;\n }\n\n return newObj;\n } else {\n return value;\n }\n}\n\n/** Creates a string representation of the target of an `Event` object */\nfunction serializeEventTarget(target) {\n try {\n return isElement(target) ? htmlTreeAsString(target) : Object.prototype.toString.call(target);\n } catch (_oO) {\n return '';\n }\n}\n\n/** Filters out all but an object's own properties */\nfunction getOwnProperties(obj) {\n if (typeof obj === 'object' && obj !== null) {\n const extractedProps = {};\n for (const property in obj) {\n if (Object.prototype.hasOwnProperty.call(obj, property)) {\n extractedProps[property] = (obj )[property];\n }\n }\n return extractedProps;\n } else {\n return {};\n }\n}\n\n/**\n * Given any captured exception, extract its keys and create a sorted\n * and truncated list that will be used inside the event message.\n * eg. `Non-error exception captured with keys: foo, bar, baz`\n */\nfunction extractExceptionKeysForMessage(exception, maxLength = 40) {\n const keys = Object.keys(convertToPlainObject(exception));\n keys.sort();\n\n if (!keys.length) {\n return '[object has no keys]';\n }\n\n if (keys[0].length >= maxLength) {\n return truncate(keys[0], maxLength);\n }\n\n for (let includedKeys = keys.length; includedKeys > 0; includedKeys--) {\n const serialized = keys.slice(0, includedKeys).join(', ');\n if (serialized.length > maxLength) {\n continue;\n }\n if (includedKeys === keys.length) {\n return serialized;\n }\n return truncate(serialized, maxLength);\n }\n\n return '';\n}\n\n/**\n * Given any object, return a new object having removed all fields whose value was `undefined`.\n * Works recursively on objects and arrays.\n *\n * Attention: This function keeps circular references in the returned object.\n */\nfunction dropUndefinedKeys(inputValue) {\n // This map keeps track of what already visited nodes map to.\n // Our Set - based memoBuilder doesn't work here because we want to the output object to have the same circular\n // references as the input object.\n const memoizationMap = new Map();\n\n // This function just proxies `_dropUndefinedKeys` to keep the `memoBuilder` out of this function's API\n return _dropUndefinedKeys(inputValue, memoizationMap);\n}\n\nfunction _dropUndefinedKeys(inputValue, memoizationMap) {\n if (isPlainObject(inputValue)) {\n // If this node has already been visited due to a circular reference, return the object it was mapped to in the new object\n const memoVal = memoizationMap.get(inputValue);\n if (memoVal !== undefined) {\n return memoVal ;\n }\n\n const returnValue = {};\n // Store the mapping of this value in case we visit it again, in case of circular data\n memoizationMap.set(inputValue, returnValue);\n\n for (const key of Object.keys(inputValue)) {\n if (typeof inputValue[key] !== 'undefined') {\n returnValue[key] = _dropUndefinedKeys(inputValue[key], memoizationMap);\n }\n }\n\n return returnValue ;\n }\n\n if (Array.isArray(inputValue)) {\n // If this node has already been visited due to a circular reference, return the array it was mapped to in the new object\n const memoVal = memoizationMap.get(inputValue);\n if (memoVal !== undefined) {\n return memoVal ;\n }\n\n const returnValue = [];\n // Store the mapping of this value in case we visit it again, in case of circular data\n memoizationMap.set(inputValue, returnValue);\n\n inputValue.forEach((item) => {\n returnValue.push(_dropUndefinedKeys(item, memoizationMap));\n });\n\n return returnValue ;\n }\n\n return inputValue;\n}\n\n/**\n * Ensure that something is an object.\n *\n * Turns `undefined` and `null` into `String`s and all other primitives into instances of their respective wrapper\n * classes (String, Boolean, Number, etc.). Acts as the identity function on non-primitives.\n *\n * @param wat The subject of the objectification\n * @returns A version of `wat` which can safely be used with `Object` class methods\n */\nfunction objectify(wat) {\n let objectified;\n switch (true) {\n case wat === undefined || wat === null:\n objectified = new String(wat);\n break;\n\n // Though symbols and bigints do have wrapper classes (`Symbol` and `BigInt`, respectively), for whatever reason\n // those classes don't have constructors which can be used with the `new` keyword. We therefore need to cast each as\n // an object in order to wrap it.\n case typeof wat === 'symbol' || typeof wat === 'bigint':\n objectified = Object(wat);\n break;\n\n // this will catch the remaining primitives: `String`, `Number`, and `Boolean`\n case isPrimitive(wat):\n // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n objectified = new (wat ).constructor(wat);\n break;\n\n // by process of elimination, at this point we know that `wat` must already be an object\n default:\n objectified = wat;\n break;\n }\n return objectified;\n}\n\nexport { addNonEnumerableProperty, convertToPlainObject, dropUndefinedKeys, extractExceptionKeysForMessage, fill, getOriginalFunction, markFunctionWrapped, objectify, urlEncode };\n//# sourceMappingURL=object.js.map\n","import { addNonEnumerableProperty } from './object.js';\nimport { snipLine } from './string.js';\nimport { GLOBAL_OBJ } from './worldwide.js';\n\n/**\n * UUID4 generator\n *\n * @returns string Generated UUID4.\n */\nfunction uuid4() {\n const gbl = GLOBAL_OBJ ;\n const crypto = gbl.crypto || gbl.msCrypto;\n\n if (crypto && crypto.randomUUID) {\n return crypto.randomUUID().replace(/-/g, '');\n }\n\n const getRandomByte =\n crypto && crypto.getRandomValues ? () => crypto.getRandomValues(new Uint8Array(1))[0] : () => Math.random() * 16;\n\n // http://stackoverflow.com/questions/105034/how-to-create-a-guid-uuid-in-javascript/2117523#2117523\n // Concatenating the following numbers as strings results in '10000000100040008000100000000000'\n return (([1e7] ) + 1e3 + 4e3 + 8e3 + 1e11).replace(/[018]/g, c =>\n // eslint-disable-next-line no-bitwise\n ((c ) ^ ((getRandomByte() & 15) >> ((c ) / 4))).toString(16),\n );\n}\n\nfunction getFirstException(event) {\n return event.exception && event.exception.values ? event.exception.values[0] : undefined;\n}\n\n/**\n * Extracts either message or type+value from an event that can be used for user-facing logs\n * @returns event's description\n */\nfunction getEventDescription(event) {\n const { message, event_id: eventId } = event;\n if (message) {\n return message;\n }\n\n const firstException = getFirstException(event);\n if (firstException) {\n if (firstException.type && firstException.value) {\n return `${firstException.type}: ${firstException.value}`;\n }\n return firstException.type || firstException.value || eventId || '';\n }\n return eventId || '';\n}\n\n/**\n * Adds exception values, type and value to an synthetic Exception.\n * @param event The event to modify.\n * @param value Value of the exception.\n * @param type Type of the exception.\n * @hidden\n */\nfunction addExceptionTypeValue(event, value, type) {\n const exception = (event.exception = event.exception || {});\n const values = (exception.values = exception.values || []);\n const firstException = (values[0] = values[0] || {});\n if (!firstException.value) {\n firstException.value = value || '';\n }\n if (!firstException.type) {\n firstException.type = type || 'Error';\n }\n}\n\n/**\n * Adds exception mechanism data to a given event. Uses defaults if the second parameter is not passed.\n *\n * @param event The event to modify.\n * @param newMechanism Mechanism data to add to the event.\n * @hidden\n */\nfunction addExceptionMechanism(event, newMechanism) {\n const firstException = getFirstException(event);\n if (!firstException) {\n return;\n }\n\n const defaultMechanism = { type: 'generic', handled: true };\n const currentMechanism = firstException.mechanism;\n firstException.mechanism = { ...defaultMechanism, ...currentMechanism, ...newMechanism };\n\n if (newMechanism && 'data' in newMechanism) {\n const mergedData = { ...(currentMechanism && currentMechanism.data), ...newMechanism.data };\n firstException.mechanism.data = mergedData;\n }\n}\n\n// https://semver.org/#is-there-a-suggested-regular-expression-regex-to-check-a-semver-string\nconst SEMVER_REGEXP =\n /^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$/;\n\n/**\n * Represents Semantic Versioning object\n */\n\n/**\n * Parses input into a SemVer interface\n * @param input string representation of a semver version\n */\nfunction parseSemver(input) {\n const match = input.match(SEMVER_REGEXP) || [];\n const major = parseInt(match[1], 10);\n const minor = parseInt(match[2], 10);\n const patch = parseInt(match[3], 10);\n return {\n buildmetadata: match[5],\n major: isNaN(major) ? undefined : major,\n minor: isNaN(minor) ? undefined : minor,\n patch: isNaN(patch) ? undefined : patch,\n prerelease: match[4],\n };\n}\n\n/**\n * This function adds context (pre/post/line) lines to the provided frame\n *\n * @param lines string[] containing all lines\n * @param frame StackFrame that will be mutated\n * @param linesOfContext number of context lines we want to add pre/post\n */\nfunction addContextToFrame(lines, frame, linesOfContext = 5) {\n // When there is no line number in the frame, attaching context is nonsensical and will even break grouping\n if (frame.lineno === undefined) {\n return;\n }\n\n const maxLines = lines.length;\n const sourceLine = Math.max(Math.min(maxLines - 1, frame.lineno - 1), 0);\n\n frame.pre_context = lines\n .slice(Math.max(0, sourceLine - linesOfContext), sourceLine)\n .map((line) => snipLine(line, 0));\n\n frame.context_line = snipLine(lines[Math.min(maxLines - 1, sourceLine)], frame.colno || 0);\n\n frame.post_context = lines\n .slice(Math.min(sourceLine + 1, maxLines), sourceLine + 1 + linesOfContext)\n .map((line) => snipLine(line, 0));\n}\n\n/**\n * Checks whether or not we've already captured the given exception (note: not an identical exception - the very object\n * in question), and marks it captured if not.\n *\n * This is useful because it's possible for an error to get captured by more than one mechanism. After we intercept and\n * record an error, we rethrow it (assuming we've intercepted it before it's reached the top-level global handlers), so\n * that we don't interfere with whatever effects the error might have had were the SDK not there. At that point, because\n * the error has been rethrown, it's possible for it to bubble up to some other code we've instrumented. If it's not\n * caught after that, it will bubble all the way up to the global handlers (which of course we also instrument). This\n * function helps us ensure that even if we encounter the same error more than once, we only record it the first time we\n * see it.\n *\n * Note: It will ignore primitives (always return `false` and not mark them as seen), as properties can't be set on\n * them. {@link: Object.objectify} can be used on exceptions to convert any that are primitives into their equivalent\n * object wrapper forms so that this check will always work. However, because we need to flag the exact object which\n * will get rethrown, and because that rethrowing happens outside of the event processing pipeline, the objectification\n * must be done before the exception captured.\n *\n * @param A thrown exception to check or flag as having been seen\n * @returns `true` if the exception has already been captured, `false` if not (with the side effect of marking it seen)\n */\nfunction checkOrSetAlreadyCaught(exception) {\n // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n if (exception && (exception ).__sentry_captured__) {\n return true;\n }\n\n try {\n // set it this way rather than by assignment so that it's not ennumerable and therefore isn't recorded by the\n // `ExtraErrorData` integration\n addNonEnumerableProperty(exception , '__sentry_captured__', true);\n } catch (err) {\n // `exception` is a primitive, so we can't mark it seen\n }\n\n return false;\n}\n\n/**\n * Checks whether the given input is already an array, and if it isn't, wraps it in one.\n *\n * @param maybeArray Input to turn into an array, if necessary\n * @returns The input, if already an array, or an array with the input as the only element, if not\n */\nfunction arrayify(maybeArray) {\n return Array.isArray(maybeArray) ? maybeArray : [maybeArray];\n}\n\nexport { addContextToFrame, addExceptionMechanism, addExceptionTypeValue, arrayify, checkOrSetAlreadyCaught, getEventDescription, parseSemver, uuid4 };\n//# sourceMappingURL=misc.js.map\n","/* eslint-disable no-console */\nimport { getMsalInstance, IS_LOGIN_NOT_REQUIRED } from './auth';\n\nlet localVersion;\nfunction loadApp() { }\nfunction sleep(ms) {\n return new Promise(resolve => setTimeout(resolve, ms)); // eslint-disable-line\n}\nfunction checkVersion() {\n const headers = new Headers();\n headers.append('pragma', 'no-cache');\n headers.append('cache-control', 'no-cache, no-store');\n\n fetch('/version.json', { cache: 'no-cache', redirect: 'follow', headers })\n .then((response) => {\n if (response.ok) {\n return response.json();\n }\n return Promise.reject(new Error('Failed to fatch Version'));\n })\n .then((versionObj) => {\n const version = versionObj.releaseVersion;\n if (!localVersion) {\n localVersion = version;\n } else if (version !== localVersion) {\n // TODO: use existing styled Banner to show this\n // eslint-disable-next-line no-alert\n const r = window.confirm(`A new version ${version} is found, click OK to refresh now or cancel to reload the page later`);\n if (r === true) {\n window.location.reload();\n }\n return true;\n }\n return false;\n })\n .then((stopChecking) => {\n if (!stopChecking) {\n sleep(1000 * 60).then(checkVersion);\n }\n })\n .catch(() => sleep(1000 * 60).then(checkVersion));\n}\n\nasync function initializeMsal() {\n const msalInstance = getMsalInstance();\n await msalInstance.initialize();\n await msalInstance.handleRedirectPromise().then(() => {\n const account = msalInstance.getAllAccounts()[0];\n if (!account) {\n msalInstance.loginRedirect();\n }\n }).catch((err) => {\n console.error(err);\n });\n return msalInstance;\n}\n\nasync function checkAuthentication() {\n if (IS_LOGIN_NOT_REQUIRED) {\n loadApp();\n return;\n }\n\n const msalInstance = await initializeMsal();\n const account = msalInstance.getAllAccounts()[0];\n if (account) {\n msalInstance.setActiveAccount(account);\n loadApp();\n } else {\n msalInstance.loginRedirect();\n }\n}\n\ncheckVersion();\ncheckAuthentication();\n","var g;\n\n// This works in non-strict mode\ng = (function() {\n\treturn this;\n})();\n\ntry {\n\t// This works if eval is allowed (see CSP)\n\tg = g || new Function(\"return this\")();\n} catch (e) {\n\t// This works if the window reference is available\n\tif (typeof window === \"object\") g = window;\n}\n\n// g can still be undefined, but nothing to do about it...\n// We return undefined, instead of nothing here, so it's\n// easier to handle this case. if(!global) { ...}\n\nmodule.exports = g;\n","// shim for using process in browser\nvar process = module.exports = {};\n\n// cached from whatever global is present so that test runners that stub it\n// don't break things. But we need to wrap it in a try catch in case it is\n// wrapped in strict mode code which doesn't define any globals. It's inside a\n// function because try/catches deoptimize in certain engines.\n\nvar cachedSetTimeout;\nvar cachedClearTimeout;\n\nfunction defaultSetTimout() {\n throw new Error('setTimeout has not been defined');\n}\nfunction defaultClearTimeout () {\n throw new Error('clearTimeout has not been defined');\n}\n(function () {\n try {\n if (typeof setTimeout === 'function') {\n cachedSetTimeout = setTimeout;\n } else {\n cachedSetTimeout = defaultSetTimout;\n }\n } catch (e) {\n cachedSetTimeout = defaultSetTimout;\n }\n try {\n if (typeof clearTimeout === 'function') {\n cachedClearTimeout = clearTimeout;\n } else {\n cachedClearTimeout = defaultClearTimeout;\n }\n } catch (e) {\n cachedClearTimeout = defaultClearTimeout;\n }\n} ())\nfunction runTimeout(fun) {\n if (cachedSetTimeout === setTimeout) {\n //normal enviroments in sane situations\n return setTimeout(fun, 0);\n }\n // if setTimeout wasn't available but was latter defined\n if ((cachedSetTimeout === defaultSetTimout || !cachedSetTimeout) && setTimeout) {\n cachedSetTimeout = setTimeout;\n return setTimeout(fun, 0);\n }\n try {\n // when when somebody has screwed with setTimeout but no I.E. maddness\n return cachedSetTimeout(fun, 0);\n } catch(e){\n try {\n // When we are in I.E. but the script has been evaled so I.E. doesn't trust the global object when called normally\n return cachedSetTimeout.call(null, fun, 0);\n } catch(e){\n // same as above but when it's a version of I.E. that must have the global object for 'this', hopfully our context correct otherwise it will throw a global error\n return cachedSetTimeout.call(this, fun, 0);\n }\n }\n\n\n}\nfunction runClearTimeout(marker) {\n if (cachedClearTimeout === clearTimeout) {\n //normal enviroments in sane situations\n return clearTimeout(marker);\n }\n // if clearTimeout wasn't available but was latter defined\n if ((cachedClearTimeout === defaultClearTimeout || !cachedClearTimeout) && clearTimeout) {\n cachedClearTimeout = clearTimeout;\n return clearTimeout(marker);\n }\n try {\n // when when somebody has screwed with setTimeout but no I.E. maddness\n return cachedClearTimeout(marker);\n } catch (e){\n try {\n // When we are in I.E. but the script has been evaled so I.E. doesn't trust the global object when called normally\n return cachedClearTimeout.call(null, marker);\n } catch (e){\n // same as above but when it's a version of I.E. that must have the global object for 'this', hopfully our context correct otherwise it will throw a global error.\n // Some versions of I.E. have different rules for clearTimeout vs setTimeout\n return cachedClearTimeout.call(this, marker);\n }\n }\n\n\n\n}\nvar queue = [];\nvar draining = false;\nvar currentQueue;\nvar queueIndex = -1;\n\nfunction cleanUpNextTick() {\n if (!draining || !currentQueue) {\n return;\n }\n draining = false;\n if (currentQueue.length) {\n queue = currentQueue.concat(queue);\n } else {\n queueIndex = -1;\n }\n if (queue.length) {\n drainQueue();\n }\n}\n\nfunction drainQueue() {\n if (draining) {\n return;\n }\n var timeout = runTimeout(cleanUpNextTick);\n draining = true;\n\n var len = queue.length;\n while(len) {\n currentQueue = queue;\n queue = [];\n while (++queueIndex < len) {\n if (currentQueue) {\n currentQueue[queueIndex].run();\n }\n }\n queueIndex = -1;\n len = queue.length;\n }\n currentQueue = null;\n draining = false;\n runClearTimeout(timeout);\n}\n\nprocess.nextTick = function (fun) {\n var args = new Array(arguments.length - 1);\n if (arguments.length > 1) {\n for (var i = 1; i < arguments.length; i++) {\n args[i - 1] = arguments[i];\n }\n }\n queue.push(new Item(fun, args));\n if (queue.length === 1 && !draining) {\n runTimeout(drainQueue);\n }\n};\n\n// v8 likes predictible objects\nfunction Item(fun, array) {\n this.fun = fun;\n this.array = array;\n}\nItem.prototype.run = function () {\n this.fun.apply(null, this.array);\n};\nprocess.title = 'browser';\nprocess.browser = true;\nprocess.env = {};\nprocess.argv = [];\nprocess.version = ''; // empty string to avoid regexp issues\nprocess.versions = {};\n\nfunction noop() {}\n\nprocess.on = noop;\nprocess.addListener = noop;\nprocess.once = noop;\nprocess.off = noop;\nprocess.removeListener = noop;\nprocess.removeAllListeners = noop;\nprocess.emit = noop;\nprocess.prependListener = noop;\nprocess.prependOnceListener = noop;\n\nprocess.listeners = function (name) { return [] }\n\nprocess.binding = function (name) {\n throw new Error('process.binding is not supported');\n};\n\nprocess.cwd = function () { return '/' };\nprocess.chdir = function (dir) {\n throw new Error('process.chdir is not supported');\n};\nprocess.umask = function() { return 0; };\n","import { logger, uuid4 } from '@sentry/utils';\nimport { getCurrentHub } from './hub.js';\n\n// Note: All functions in this file are typed with a return value of `ReturnType`,\n// where HUB_FUNCTION is some method on the Hub class.\n//\n// This is done to make sure the top level SDK methods stay in sync with the hub methods.\n// Although every method here has an explicit return type, some of them (that map to void returns) do not\n// contain `return` keywords. This is done to save on bundle size, as `return` is not minifiable.\n\n/**\n * Captures an exception event and sends it to Sentry.\n *\n * @param exception An exception-like object.\n * @param captureContext Additional scope data to apply to exception event.\n * @returns The generated eventId.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/explicit-module-boundary-types\nfunction captureException(exception, captureContext) {\n return getCurrentHub().captureException(exception, { captureContext });\n}\n\n/**\n * Captures a message event and sends it to Sentry.\n *\n * @param message The message to send to Sentry.\n * @param Severity Define the level of the message.\n * @returns The generated eventId.\n */\nfunction captureMessage(\n message,\n // eslint-disable-next-line deprecation/deprecation\n captureContext,\n) {\n // This is necessary to provide explicit scopes upgrade, without changing the original\n // arity of the `captureMessage(message, level)` method.\n const level = typeof captureContext === 'string' ? captureContext : undefined;\n const context = typeof captureContext !== 'string' ? { captureContext } : undefined;\n return getCurrentHub().captureMessage(message, level, context);\n}\n\n/**\n * Captures a manually created event and sends it to Sentry.\n *\n * @param event The event to send to Sentry.\n * @returns The generated eventId.\n */\nfunction captureEvent(event, hint) {\n return getCurrentHub().captureEvent(event, hint);\n}\n\n/**\n * Callback to set context information onto the scope.\n * @param callback Callback function that receives Scope.\n */\nfunction configureScope(callback) {\n getCurrentHub().configureScope(callback);\n}\n\n/**\n * Records a new breadcrumb which will be attached to future events.\n *\n * Breadcrumbs will be added to subsequent events to provide more context on\n * user's actions prior to an error or crash.\n *\n * @param breadcrumb The breadcrumb to record.\n */\nfunction addBreadcrumb(breadcrumb) {\n getCurrentHub().addBreadcrumb(breadcrumb);\n}\n\n/**\n * Sets context data with the given name.\n * @param name of the context\n * @param context Any kind of data. This data will be normalized.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction setContext(name, context) {\n getCurrentHub().setContext(name, context);\n}\n\n/**\n * Set an object that will be merged sent as extra data with the event.\n * @param extras Extras object to merge into current context.\n */\nfunction setExtras(extras) {\n getCurrentHub().setExtras(extras);\n}\n\n/**\n * Set key:value that will be sent as extra data with the event.\n * @param key String of extra\n * @param extra Any kind of data. This data will be normalized.\n */\nfunction setExtra(key, extra) {\n getCurrentHub().setExtra(key, extra);\n}\n\n/**\n * Set an object that will be merged sent as tags data with the event.\n * @param tags Tags context object to merge into current context.\n */\nfunction setTags(tags) {\n getCurrentHub().setTags(tags);\n}\n\n/**\n * Set key:value that will be sent as tags data with the event.\n *\n * Can also be used to unset a tag, by passing `undefined`.\n *\n * @param key String key of tag\n * @param value Value of tag\n */\nfunction setTag(key, value) {\n getCurrentHub().setTag(key, value);\n}\n\n/**\n * Updates user context information for future events.\n *\n * @param user User context object to be set in the current context. Pass `null` to unset the user.\n */\nfunction setUser(user) {\n getCurrentHub().setUser(user);\n}\n\n/**\n * Creates a new scope with and executes the given operation within.\n * The scope is automatically removed once the operation\n * finishes or throws.\n *\n * This is essentially a convenience function for:\n *\n * pushScope();\n * callback();\n * popScope();\n *\n * @param callback that will be enclosed into push/popScope.\n */\nfunction withScope(callback) {\n getCurrentHub().withScope(callback);\n}\n\n/**\n * Starts a new `Transaction` and returns it. This is the entry point to manual tracing instrumentation.\n *\n * A tree structure can be built by adding child spans to the transaction, and child spans to other spans. To start a\n * new child span within the transaction or any span, call the respective `.startChild()` method.\n *\n * Every child span must be finished before the transaction is finished, otherwise the unfinished spans are discarded.\n *\n * The transaction must be finished with a call to its `.finish()` method, at which point the transaction with all its\n * finished child spans will be sent to Sentry.\n *\n * NOTE: This function should only be used for *manual* instrumentation. Auto-instrumentation should call\n * `startTransaction` directly on the hub.\n *\n * @param context Properties of the new `Transaction`.\n * @param customSamplingContext Information given to the transaction sampling function (along with context-dependent\n * default values). See {@link Options.tracesSampler}.\n *\n * @returns The transaction which was just started\n */\nfunction startTransaction(\n context,\n customSamplingContext,\n) {\n return getCurrentHub().startTransaction({ ...context }, customSamplingContext);\n}\n\n/**\n * Create a cron monitor check in and send it to Sentry.\n *\n * @param checkIn An object that describes a check in.\n * @param upsertMonitorConfig An optional object that describes a monitor config. Use this if you want\n * to create a monitor automatically when sending a check in.\n */\nfunction captureCheckIn(checkIn, upsertMonitorConfig) {\n const hub = getCurrentHub();\n const scope = hub.getScope();\n const client = hub.getClient();\n if (!client) {\n (typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__) && logger.warn('Cannot capture check-in. No client defined.');\n } else if (!client.captureCheckIn) {\n (typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__) && logger.warn('Cannot capture check-in. Client does not support sending check-ins.');\n } else {\n return client.captureCheckIn(checkIn, upsertMonitorConfig, scope);\n }\n\n return uuid4();\n}\n\n/**\n * Call `flush()` on the current client, if there is one. See {@link Client.flush}.\n *\n * @param timeout Maximum time in ms the client should wait to flush its event queue. Omitting this parameter will cause\n * the client to wait until all events are sent before resolving the promise.\n * @returns A promise which resolves to `true` if the queue successfully drains before the timeout, or `false` if it\n * doesn't (or if there's no client defined).\n */\nasync function flush(timeout) {\n const client = getCurrentHub().getClient();\n if (client) {\n return client.flush(timeout);\n }\n (typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__) && logger.warn('Cannot flush events. No client defined.');\n return Promise.resolve(false);\n}\n\n/**\n * Call `close()` on the current client, if there is one. See {@link Client.close}.\n *\n * @param timeout Maximum time in ms the client should wait to flush its event queue before shutting down. Omitting this\n * parameter will cause the client to wait until all events are sent before disabling itself.\n * @returns A promise which resolves to `true` if the queue successfully drains before the timeout, or `false` if it\n * doesn't (or if there's no client defined).\n */\nasync function close(timeout) {\n const client = getCurrentHub().getClient();\n if (client) {\n return client.close(timeout);\n }\n (typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__) && logger.warn('Cannot flush events and disable SDK. No client defined.');\n return Promise.resolve(false);\n}\n\n/**\n * This is the getter for lastEventId.\n *\n * @returns The last event id of a captured event.\n */\nfunction lastEventId() {\n return getCurrentHub().lastEventId();\n}\n\nexport { addBreadcrumb, captureCheckIn, captureEvent, captureException, captureMessage, close, configureScope, flush, lastEventId, setContext, setExtra, setExtras, setTag, setTags, setUser, startTransaction, withScope };\n//# sourceMappingURL=exports.js.map\n","import { isString, isRegExp } from './is.js';\n\n/**\n * Truncates given string to the maximum characters count\n *\n * @param str An object that contains serializable values\n * @param max Maximum number of characters in truncated string (0 = unlimited)\n * @returns string Encoded\n */\nfunction truncate(str, max = 0) {\n if (typeof str !== 'string' || max === 0) {\n return str;\n }\n return str.length <= max ? str : `${str.slice(0, max)}...`;\n}\n\n/**\n * This is basically just `trim_line` from\n * https://github.com/getsentry/sentry/blob/master/src/sentry/lang/javascript/processor.py#L67\n *\n * @param str An object that contains serializable values\n * @param max Maximum number of characters in truncated string\n * @returns string Encoded\n */\nfunction snipLine(line, colno) {\n let newLine = line;\n const lineLength = newLine.length;\n if (lineLength <= 150) {\n return newLine;\n }\n if (colno > lineLength) {\n // eslint-disable-next-line no-param-reassign\n colno = lineLength;\n }\n\n let start = Math.max(colno - 60, 0);\n if (start < 5) {\n start = 0;\n }\n\n let end = Math.min(start + 140, lineLength);\n if (end > lineLength - 5) {\n end = lineLength;\n }\n if (end === lineLength) {\n start = Math.max(end - 140, 0);\n }\n\n newLine = newLine.slice(start, end);\n if (start > 0) {\n newLine = `'{snip} ${newLine}`;\n }\n if (end < lineLength) {\n newLine += ' {snip}';\n }\n\n return newLine;\n}\n\n/**\n * Join values in array\n * @param input array of values to be joined together\n * @param delimiter string to be placed in-between values\n * @returns Joined values\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction safeJoin(input, delimiter) {\n if (!Array.isArray(input)) {\n return '';\n }\n\n const output = [];\n // eslint-disable-next-line @typescript-eslint/prefer-for-of\n for (let i = 0; i < input.length; i++) {\n const value = input[i];\n try {\n output.push(String(value));\n } catch (e) {\n output.push('[value cannot be serialized]');\n }\n }\n\n return output.join(delimiter);\n}\n\n/**\n * Checks if the given value matches a regex or string\n *\n * @param value The string to test\n * @param pattern Either a regex or a string against which `value` will be matched\n * @param requireExactStringMatch If true, `value` must match `pattern` exactly. If false, `value` will match\n * `pattern` if it contains `pattern`. Only applies to string-type patterns.\n */\nfunction isMatchingPattern(\n value,\n pattern,\n requireExactStringMatch = false,\n) {\n if (!isString(value)) {\n return false;\n }\n\n if (isRegExp(pattern)) {\n return pattern.test(value);\n }\n if (isString(pattern)) {\n return requireExactStringMatch ? value === pattern : value.includes(pattern);\n }\n\n return false;\n}\n\n/**\n * Test the given string against an array of strings and regexes. By default, string matching is done on a\n * substring-inclusion basis rather than a strict equality basis\n *\n * @param testString The string to test\n * @param patterns The patterns against which to test the string\n * @param requireExactStringMatch If true, `testString` must match one of the given string patterns exactly in order to\n * count. If false, `testString` will match a string pattern if it contains that pattern.\n * @returns\n */\nfunction stringMatchesSomePattern(\n testString,\n patterns = [],\n requireExactStringMatch = false,\n) {\n return patterns.some(pattern => isMatchingPattern(testString, pattern, requireExactStringMatch));\n}\n\nexport { isMatchingPattern, safeJoin, snipLine, stringMatchesSomePattern, truncate };\n//# sourceMappingURL=string.js.map\n","import { timestampInSeconds, uuid4, dropUndefinedKeys } from '@sentry/utils';\n\n/**\n * Creates a new `Session` object by setting certain default parameters. If optional @param context\n * is passed, the passed properties are applied to the session object.\n *\n * @param context (optional) additional properties to be applied to the returned session object\n *\n * @returns a new `Session` object\n */\nfunction makeSession(context) {\n // Both timestamp and started are in seconds since the UNIX epoch.\n const startingTime = timestampInSeconds();\n\n const session = {\n sid: uuid4(),\n init: true,\n timestamp: startingTime,\n started: startingTime,\n duration: 0,\n status: 'ok',\n errors: 0,\n ignoreDuration: false,\n toJSON: () => sessionToJSON(session),\n };\n\n if (context) {\n updateSession(session, context);\n }\n\n return session;\n}\n\n/**\n * Updates a session object with the properties passed in the context.\n *\n * Note that this function mutates the passed object and returns void.\n * (Had to do this instead of returning a new and updated session because closing and sending a session\n * makes an update to the session after it was passed to the sending logic.\n * @see BaseClient.captureSession )\n *\n * @param session the `Session` to update\n * @param context the `SessionContext` holding the properties that should be updated in @param session\n */\n// eslint-disable-next-line complexity\nfunction updateSession(session, context = {}) {\n if (context.user) {\n if (!session.ipAddress && context.user.ip_address) {\n session.ipAddress = context.user.ip_address;\n }\n\n if (!session.did && !context.did) {\n session.did = context.user.id || context.user.email || context.user.username;\n }\n }\n\n session.timestamp = context.timestamp || timestampInSeconds();\n\n if (context.ignoreDuration) {\n session.ignoreDuration = context.ignoreDuration;\n }\n if (context.sid) {\n // Good enough uuid validation. — Kamil\n session.sid = context.sid.length === 32 ? context.sid : uuid4();\n }\n if (context.init !== undefined) {\n session.init = context.init;\n }\n if (!session.did && context.did) {\n session.did = `${context.did}`;\n }\n if (typeof context.started === 'number') {\n session.started = context.started;\n }\n if (session.ignoreDuration) {\n session.duration = undefined;\n } else if (typeof context.duration === 'number') {\n session.duration = context.duration;\n } else {\n const duration = session.timestamp - session.started;\n session.duration = duration >= 0 ? duration : 0;\n }\n if (context.release) {\n session.release = context.release;\n }\n if (context.environment) {\n session.environment = context.environment;\n }\n if (!session.ipAddress && context.ipAddress) {\n session.ipAddress = context.ipAddress;\n }\n if (!session.userAgent && context.userAgent) {\n session.userAgent = context.userAgent;\n }\n if (typeof context.errors === 'number') {\n session.errors = context.errors;\n }\n if (context.status) {\n session.status = context.status;\n }\n}\n\n/**\n * Closes a session by setting its status and updating the session object with it.\n * Internally calls `updateSession` to update the passed session object.\n *\n * Note that this function mutates the passed session (@see updateSession for explanation).\n *\n * @param session the `Session` object to be closed\n * @param status the `SessionStatus` with which the session was closed. If you don't pass a status,\n * this function will keep the previously set status, unless it was `'ok'` in which case\n * it is changed to `'exited'`.\n */\nfunction closeSession(session, status) {\n let context = {};\n if (status) {\n context = { status };\n } else if (session.status === 'ok') {\n context = { status: 'exited' };\n }\n\n updateSession(session, context);\n}\n\n/**\n * Serializes a passed session object to a JSON object with a slightly different structure.\n * This is necessary because the Sentry backend requires a slightly different schema of a session\n * than the one the JS SDKs use internally.\n *\n * @param session the session to be converted\n *\n * @returns a JSON object of the passed session\n */\nfunction sessionToJSON(session) {\n return dropUndefinedKeys({\n sid: `${session.sid}`,\n init: session.init,\n // Make sure that sec is converted to ms for date constructor\n started: new Date(session.started * 1000).toISOString(),\n timestamp: new Date(session.timestamp * 1000).toISOString(),\n status: session.status,\n errors: session.errors,\n did: typeof session.did === 'number' || typeof session.did === 'string' ? `${session.did}` : undefined,\n duration: session.duration,\n attrs: {\n release: session.release,\n environment: session.environment,\n ip_address: session.ipAddress,\n user_agent: session.userAgent,\n },\n });\n}\n\nexport { closeSession, makeSession, updateSession };\n//# sourceMappingURL=session.js.map\n","import { isNodeEnv, dynamicRequire } from './node.js';\nimport { getGlobalObject } from './worldwide.js';\n\n// eslint-disable-next-line deprecation/deprecation\nconst WINDOW = getGlobalObject();\n\n/**\n * An object that can return the current timestamp in seconds since the UNIX epoch.\n */\n\n/**\n * A TimestampSource implementation for environments that do not support the Performance Web API natively.\n *\n * Note that this TimestampSource does not use a monotonic clock. A call to `nowSeconds` may return a timestamp earlier\n * than a previously returned value. We do not try to emulate a monotonic behavior in order to facilitate debugging. It\n * is more obvious to explain \"why does my span have negative duration\" than \"why my spans have zero duration\".\n */\nconst dateTimestampSource = {\n nowSeconds: () => Date.now() / 1000,\n};\n\n/**\n * A partial definition of the [Performance Web API]{@link https://developer.mozilla.org/en-US/docs/Web/API/Performance}\n * for accessing a high-resolution monotonic clock.\n */\n\n/**\n * Returns a wrapper around the native Performance API browser implementation, or undefined for browsers that do not\n * support the API.\n *\n * Wrapping the native API works around differences in behavior from different browsers.\n */\nfunction getBrowserPerformance() {\n const { performance } = WINDOW;\n if (!performance || !performance.now) {\n return undefined;\n }\n\n // Replace performance.timeOrigin with our own timeOrigin based on Date.now().\n //\n // This is a partial workaround for browsers reporting performance.timeOrigin such that performance.timeOrigin +\n // performance.now() gives a date arbitrarily in the past.\n //\n // Additionally, computing timeOrigin in this way fills the gap for browsers where performance.timeOrigin is\n // undefined.\n //\n // The assumption that performance.timeOrigin + performance.now() ~= Date.now() is flawed, but we depend on it to\n // interact with data coming out of performance entries.\n //\n // Note that despite recommendations against it in the spec, browsers implement the Performance API with a clock that\n // might stop when the computer is asleep (and perhaps under other circumstances). Such behavior causes\n // performance.timeOrigin + performance.now() to have an arbitrary skew over Date.now(). In laptop computers, we have\n // observed skews that can be as long as days, weeks or months.\n //\n // See https://github.com/getsentry/sentry-javascript/issues/2590.\n //\n // BUG: despite our best intentions, this workaround has its limitations. It mostly addresses timings of pageload\n // transactions, but ignores the skew built up over time that can aversely affect timestamps of navigation\n // transactions of long-lived web pages.\n const timeOrigin = Date.now() - performance.now();\n\n return {\n now: () => performance.now(),\n timeOrigin,\n };\n}\n\n/**\n * Returns the native Performance API implementation from Node.js. Returns undefined in old Node.js versions that don't\n * implement the API.\n */\nfunction getNodePerformance() {\n try {\n const perfHooks = dynamicRequire(module, 'perf_hooks') ;\n return perfHooks.performance;\n } catch (_) {\n return undefined;\n }\n}\n\n/**\n * The Performance API implementation for the current platform, if available.\n */\nconst platformPerformance = isNodeEnv() ? getNodePerformance() : getBrowserPerformance();\n\nconst timestampSource =\n platformPerformance === undefined\n ? dateTimestampSource\n : {\n nowSeconds: () => (platformPerformance.timeOrigin + platformPerformance.now()) / 1000,\n };\n\n/**\n * Returns a timestamp in seconds since the UNIX epoch using the Date API.\n */\nconst dateTimestampInSeconds = dateTimestampSource.nowSeconds.bind(dateTimestampSource);\n\n/**\n * Returns a timestamp in seconds since the UNIX epoch using either the Performance or Date APIs, depending on the\n * availability of the Performance API.\n *\n * See `usingPerformanceAPI` to test whether the Performance API is used.\n *\n * BUG: Note that because of how browsers implement the Performance API, the clock might stop when the computer is\n * asleep. This creates a skew between `dateTimestampInSeconds` and `timestampInSeconds`. The\n * skew can grow to arbitrary amounts like days, weeks or months.\n * See https://github.com/getsentry/sentry-javascript/issues/2590.\n */\nconst timestampInSeconds = timestampSource.nowSeconds.bind(timestampSource);\n\n/**\n * Re-exported with an old name for backwards-compatibility.\n * TODO (v8): Remove this\n *\n * @deprecated Use `timestampInSeconds` instead.\n */\nconst timestampWithMs = timestampInSeconds;\n\n/**\n * A boolean that is true when timestampInSeconds uses the Performance API to produce monotonic timestamps.\n */\nconst usingPerformanceAPI = platformPerformance !== undefined;\n\n/**\n * Internal helper to store what is the source of browserPerformanceTimeOrigin below. For debugging only.\n */\nlet _browserPerformanceTimeOriginMode;\n\n/**\n * The number of milliseconds since the UNIX epoch. This value is only usable in a browser, and only when the\n * performance API is available.\n */\nconst browserPerformanceTimeOrigin = (() => {\n // Unfortunately browsers may report an inaccurate time origin data, through either performance.timeOrigin or\n // performance.timing.navigationStart, which results in poor results in performance data. We only treat time origin\n // data as reliable if they are within a reasonable threshold of the current time.\n\n const { performance } = WINDOW;\n if (!performance || !performance.now) {\n _browserPerformanceTimeOriginMode = 'none';\n return undefined;\n }\n\n const threshold = 3600 * 1000;\n const performanceNow = performance.now();\n const dateNow = Date.now();\n\n // if timeOrigin isn't available set delta to threshold so it isn't used\n const timeOriginDelta = performance.timeOrigin\n ? Math.abs(performance.timeOrigin + performanceNow - dateNow)\n : threshold;\n const timeOriginIsReliable = timeOriginDelta < threshold;\n\n // While performance.timing.navigationStart is deprecated in favor of performance.timeOrigin, performance.timeOrigin\n // is not as widely supported. Namely, performance.timeOrigin is undefined in Safari as of writing.\n // Also as of writing, performance.timing is not available in Web Workers in mainstream browsers, so it is not always\n // a valid fallback. In the absence of an initial time provided by the browser, fallback to the current time from the\n // Date API.\n // eslint-disable-next-line deprecation/deprecation\n const navigationStart = performance.timing && performance.timing.navigationStart;\n const hasNavigationStart = typeof navigationStart === 'number';\n // if navigationStart isn't available set delta to threshold so it isn't used\n const navigationStartDelta = hasNavigationStart ? Math.abs(navigationStart + performanceNow - dateNow) : threshold;\n const navigationStartIsReliable = navigationStartDelta < threshold;\n\n if (timeOriginIsReliable || navigationStartIsReliable) {\n // Use the more reliable time origin\n if (timeOriginDelta <= navigationStartDelta) {\n _browserPerformanceTimeOriginMode = 'timeOrigin';\n return performance.timeOrigin;\n } else {\n _browserPerformanceTimeOriginMode = 'navigationStart';\n return navigationStart;\n }\n }\n\n // Either both timeOrigin and navigationStart are skewed or neither is available, fallback to Date.\n _browserPerformanceTimeOriginMode = 'dateNow';\n return dateNow;\n})();\n\nexport { _browserPerformanceTimeOriginMode, browserPerformanceTimeOrigin, dateTimestampInSeconds, timestampInSeconds, timestampWithMs, usingPerformanceAPI };\n//# sourceMappingURL=time.js.map\n","import { isPlainObject, dateTimestampInSeconds, SyncPromise, logger, isThenable, arrayify, getGlobalSingleton, uuid4 } from '@sentry/utils';\nimport { updateSession } from './session.js';\n\n/**\n * Default value for maximum number of breadcrumbs added to an event.\n */\nconst DEFAULT_MAX_BREADCRUMBS = 100;\n\n/**\n * Holds additional event information. {@link Scope.applyToEvent} will be\n * called by the client before an event will be sent.\n */\nclass Scope {\n /** Flag if notifying is happening. */\n\n /** Callback for client to receive scope changes. */\n\n /** Callback list that will be called after {@link applyToEvent}. */\n\n /** Array of breadcrumbs. */\n\n /** User */\n\n /** Tags */\n\n /** Extra */\n\n /** Contexts */\n\n /** Attachments */\n\n /** Propagation Context for distributed tracing */\n\n /**\n * A place to stash data which is needed at some point in the SDK's event processing pipeline but which shouldn't get\n * sent to Sentry\n */\n\n /** Fingerprint */\n\n /** Severity */\n // eslint-disable-next-line deprecation/deprecation\n\n /** Transaction Name */\n\n /** Span */\n\n /** Session */\n\n /** Request Mode Session Status */\n\n // NOTE: Any field which gets added here should get added not only to the constructor but also to the `clone` method.\n\n constructor() {\n this._notifyingListeners = false;\n this._scopeListeners = [];\n this._eventProcessors = [];\n this._breadcrumbs = [];\n this._attachments = [];\n this._user = {};\n this._tags = {};\n this._extra = {};\n this._contexts = {};\n this._sdkProcessingMetadata = {};\n this._propagationContext = generatePropagationContext();\n }\n\n /**\n * Inherit values from the parent scope.\n * @param scope to clone.\n */\n static clone(scope) {\n const newScope = new Scope();\n if (scope) {\n newScope._breadcrumbs = [...scope._breadcrumbs];\n newScope._tags = { ...scope._tags };\n newScope._extra = { ...scope._extra };\n newScope._contexts = { ...scope._contexts };\n newScope._user = scope._user;\n newScope._level = scope._level;\n newScope._span = scope._span;\n newScope._session = scope._session;\n newScope._transactionName = scope._transactionName;\n newScope._fingerprint = scope._fingerprint;\n newScope._eventProcessors = [...scope._eventProcessors];\n newScope._requestSession = scope._requestSession;\n newScope._attachments = [...scope._attachments];\n newScope._sdkProcessingMetadata = { ...scope._sdkProcessingMetadata };\n newScope._propagationContext = { ...scope._propagationContext };\n }\n return newScope;\n }\n\n /**\n * Add internal on change listener. Used for sub SDKs that need to store the scope.\n * @hidden\n */\n addScopeListener(callback) {\n this._scopeListeners.push(callback);\n }\n\n /**\n * @inheritDoc\n */\n addEventProcessor(callback) {\n this._eventProcessors.push(callback);\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setUser(user) {\n this._user = user || {};\n if (this._session) {\n updateSession(this._session, { user });\n }\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n getUser() {\n return this._user;\n }\n\n /**\n * @inheritDoc\n */\n getRequestSession() {\n return this._requestSession;\n }\n\n /**\n * @inheritDoc\n */\n setRequestSession(requestSession) {\n this._requestSession = requestSession;\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setTags(tags) {\n this._tags = {\n ...this._tags,\n ...tags,\n };\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setTag(key, value) {\n this._tags = { ...this._tags, [key]: value };\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setExtras(extras) {\n this._extra = {\n ...this._extra,\n ...extras,\n };\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setExtra(key, extra) {\n this._extra = { ...this._extra, [key]: extra };\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setFingerprint(fingerprint) {\n this._fingerprint = fingerprint;\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setLevel(\n // eslint-disable-next-line deprecation/deprecation\n level,\n ) {\n this._level = level;\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setTransactionName(name) {\n this._transactionName = name;\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setContext(key, context) {\n if (context === null) {\n // eslint-disable-next-line @typescript-eslint/no-dynamic-delete\n delete this._contexts[key];\n } else {\n this._contexts[key] = context;\n }\n\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setSpan(span) {\n this._span = span;\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n getSpan() {\n return this._span;\n }\n\n /**\n * @inheritDoc\n */\n getTransaction() {\n // Often, this span (if it exists at all) will be a transaction, but it's not guaranteed to be. Regardless, it will\n // have a pointer to the currently-active transaction.\n const span = this.getSpan();\n return span && span.transaction;\n }\n\n /**\n * @inheritDoc\n */\n setSession(session) {\n if (!session) {\n delete this._session;\n } else {\n this._session = session;\n }\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n getSession() {\n return this._session;\n }\n\n /**\n * @inheritDoc\n */\n update(captureContext) {\n if (!captureContext) {\n return this;\n }\n\n if (typeof captureContext === 'function') {\n const updatedScope = (captureContext )(this);\n return updatedScope instanceof Scope ? updatedScope : this;\n }\n\n if (captureContext instanceof Scope) {\n this._tags = { ...this._tags, ...captureContext._tags };\n this._extra = { ...this._extra, ...captureContext._extra };\n this._contexts = { ...this._contexts, ...captureContext._contexts };\n if (captureContext._user && Object.keys(captureContext._user).length) {\n this._user = captureContext._user;\n }\n if (captureContext._level) {\n this._level = captureContext._level;\n }\n if (captureContext._fingerprint) {\n this._fingerprint = captureContext._fingerprint;\n }\n if (captureContext._requestSession) {\n this._requestSession = captureContext._requestSession;\n }\n if (captureContext._propagationContext) {\n this._propagationContext = captureContext._propagationContext;\n }\n } else if (isPlainObject(captureContext)) {\n // eslint-disable-next-line no-param-reassign\n captureContext = captureContext ;\n this._tags = { ...this._tags, ...captureContext.tags };\n this._extra = { ...this._extra, ...captureContext.extra };\n this._contexts = { ...this._contexts, ...captureContext.contexts };\n if (captureContext.user) {\n this._user = captureContext.user;\n }\n if (captureContext.level) {\n this._level = captureContext.level;\n }\n if (captureContext.fingerprint) {\n this._fingerprint = captureContext.fingerprint;\n }\n if (captureContext.requestSession) {\n this._requestSession = captureContext.requestSession;\n }\n if (captureContext.propagationContext) {\n this._propagationContext = captureContext.propagationContext;\n }\n }\n\n return this;\n }\n\n /**\n * @inheritDoc\n */\n clear() {\n this._breadcrumbs = [];\n this._tags = {};\n this._extra = {};\n this._user = {};\n this._contexts = {};\n this._level = undefined;\n this._transactionName = undefined;\n this._fingerprint = undefined;\n this._requestSession = undefined;\n this._span = undefined;\n this._session = undefined;\n this._notifyScopeListeners();\n this._attachments = [];\n this._propagationContext = generatePropagationContext();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n addBreadcrumb(breadcrumb, maxBreadcrumbs) {\n const maxCrumbs = typeof maxBreadcrumbs === 'number' ? maxBreadcrumbs : DEFAULT_MAX_BREADCRUMBS;\n\n // No data has been changed, so don't notify scope listeners\n if (maxCrumbs <= 0) {\n return this;\n }\n\n const mergedBreadcrumb = {\n timestamp: dateTimestampInSeconds(),\n ...breadcrumb,\n };\n this._breadcrumbs = [...this._breadcrumbs, mergedBreadcrumb].slice(-maxCrumbs);\n this._notifyScopeListeners();\n\n return this;\n }\n\n /**\n * @inheritDoc\n */\n getLastBreadcrumb() {\n return this._breadcrumbs[this._breadcrumbs.length - 1];\n }\n\n /**\n * @inheritDoc\n */\n clearBreadcrumbs() {\n this._breadcrumbs = [];\n this._notifyScopeListeners();\n return this;\n }\n\n /**\n * @inheritDoc\n */\n addAttachment(attachment) {\n this._attachments.push(attachment);\n return this;\n }\n\n /**\n * @inheritDoc\n */\n getAttachments() {\n return this._attachments;\n }\n\n /**\n * @inheritDoc\n */\n clearAttachments() {\n this._attachments = [];\n return this;\n }\n\n /**\n * Applies data from the scope to the event and runs all event processors on it.\n *\n * @param event Event\n * @param hint Object containing additional information about the original exception, for use by the event processors.\n * @hidden\n */\n applyToEvent(event, hint = {}) {\n if (this._extra && Object.keys(this._extra).length) {\n event.extra = { ...this._extra, ...event.extra };\n }\n if (this._tags && Object.keys(this._tags).length) {\n event.tags = { ...this._tags, ...event.tags };\n }\n if (this._user && Object.keys(this._user).length) {\n event.user = { ...this._user, ...event.user };\n }\n if (this._contexts && Object.keys(this._contexts).length) {\n event.contexts = { ...this._contexts, ...event.contexts };\n }\n if (this._level) {\n event.level = this._level;\n }\n if (this._transactionName) {\n event.transaction = this._transactionName;\n }\n\n // We want to set the trace context for normal events only if there isn't already\n // a trace context on the event. There is a product feature in place where we link\n // errors with transaction and it relies on that.\n if (this._span) {\n event.contexts = { trace: this._span.getTraceContext(), ...event.contexts };\n const transaction = this._span.transaction;\n if (transaction) {\n event.sdkProcessingMetadata = {\n dynamicSamplingContext: transaction.getDynamicSamplingContext(),\n ...event.sdkProcessingMetadata,\n };\n const transactionName = transaction.name;\n if (transactionName) {\n event.tags = { transaction: transactionName, ...event.tags };\n }\n }\n }\n\n this._applyFingerprint(event);\n\n event.breadcrumbs = [...(event.breadcrumbs || []), ...this._breadcrumbs];\n event.breadcrumbs = event.breadcrumbs.length > 0 ? event.breadcrumbs : undefined;\n\n event.sdkProcessingMetadata = {\n ...event.sdkProcessingMetadata,\n ...this._sdkProcessingMetadata,\n propagationContext: this._propagationContext,\n };\n\n return this._notifyEventProcessors([...getGlobalEventProcessors(), ...this._eventProcessors], event, hint);\n }\n\n /**\n * Add data which will be accessible during event processing but won't get sent to Sentry\n */\n setSDKProcessingMetadata(newData) {\n this._sdkProcessingMetadata = { ...this._sdkProcessingMetadata, ...newData };\n\n return this;\n }\n\n /**\n * @inheritDoc\n */\n setPropagationContext(context) {\n this._propagationContext = context;\n return this;\n }\n\n /**\n * @inheritDoc\n */\n getPropagationContext() {\n return this._propagationContext;\n }\n\n /**\n * This will be called after {@link applyToEvent} is finished.\n */\n _notifyEventProcessors(\n processors,\n event,\n hint,\n index = 0,\n ) {\n return new SyncPromise((resolve, reject) => {\n const processor = processors[index];\n if (event === null || typeof processor !== 'function') {\n resolve(event);\n } else {\n const result = processor({ ...event }, hint) ;\n\n (typeof __SENTRY_DEBUG__ === 'undefined' || __SENTRY_DEBUG__) &&\n processor.id &&\n result === null &&\n logger.log(`Event processor \"${processor.id}\" dropped event`);\n\n if (isThenable(result)) {\n void result\n .then(final => this._notifyEventProcessors(processors, final, hint, index + 1).then(resolve))\n .then(null, reject);\n } else {\n void this._notifyEventProcessors(processors, result, hint, index + 1)\n .then(resolve)\n .then(null, reject);\n }\n }\n });\n }\n\n /**\n * This will be called on every set call.\n */\n _notifyScopeListeners() {\n // We need this check for this._notifyingListeners to be able to work on scope during updates\n // If this check is not here we'll produce endless recursion when something is done with the scope\n // during the callback.\n if (!this._notifyingListeners) {\n this._notifyingListeners = true;\n this._scopeListeners.forEach(callback => {\n callback(this);\n });\n this._notifyingListeners = false;\n }\n }\n\n /**\n * Applies fingerprint from the scope to the event if there's one,\n * uses message if there's one instead or get rid of empty fingerprint\n */\n _applyFingerprint(event) {\n // Make sure it's an array first and we actually have something in place\n event.fingerprint = event.fingerprint ? arrayify(event.fingerprint) : [];\n\n // If we have something on the scope, then merge it with event\n if (this._fingerprint) {\n event.fingerprint = event.fingerprint.concat(this._fingerprint);\n }\n\n // If we have no data at all, remove empty array default\n if (event.fingerprint && !event.fingerprint.length) {\n delete event.fingerprint;\n }\n }\n}\n\n/**\n * Returns the global event processors.\n */\nfunction getGlobalEventProcessors() {\n return getGlobalSingleton('globalEventProcessors', () => []);\n}\n\n/**\n * Add a EventProcessor to be kept globally.\n * @param callback EventProcessor to add\n */\nfunction addGlobalEventProcessor(callback) {\n getGlobalEventProcessors().push(callback);\n}\n\nfunction generatePropagationContext() {\n return {\n traceId: uuid4(),\n spanId: uuid4().substring(16),\n };\n}\n\nexport { Scope, addGlobalEventProcessor };\n//# sourceMappingURL=scope.js.map\n"],"sourceRoot":""}