https://www.delawarelife.com/main-JVJHXV6B.js

1import{a as fp}from"./chunk-B3YAJNHH.js";import{a as Rn}from"./chunk-FBPUXLRZ.js";import{a as Tc,c as vp}from"./chunk-IE6GGPKK.js";import"./chunk-X6YHEMIY.js";import{c as pp}from"./chunk-6QVJBPZ7.js";import{a as ge,b as ur,e as gp,f as Fu,i as ii,j as bc,k as Ms}from"./chunk-DUKSTT3K.js";import{a as ip,b as wc,c as mp}from"./chunk-MACQKU6K.js";import{a as De,b as op,c as sp,d as Ec,e as ap,f as uo,g as cp,h as lp,i as Ac,j as up,k as hp,l as dp,m as ho}from"./chunk-DAY3Q7G4.js";import{$a as xf,A as Iu,B as Cf,Bc as Hf,Cb as Rr,D as Ru,Dc as Lf,E as Sf,Ec as Uf,Ga as ye,Gc as Kf,Ha as If,I as Bt,J as Pu,Ja as Rf,K as ku,Kc as qf,Lc as Cc,Na as Pf,Nb as Oe,O as Ef,Ob as bn,Oc as jf,Pa as Ht,Pc as Vf,Q as Af,Qc as Nu,Sc,Ta as Ct,Tc as Gf,Ua as yc,Uc as zf,Va as kf,Vc as $f,W as er,Wc as Wf,X as wf,Xa as Wr,Y as pc,Za as _u,Zc as Qf,_ as Te,_c as Yf,aa as $t,ad as Jf,ba as gc,bd as Xf,c as Ns,ca as Os,cc as Df,d as lo,da as ct,dd as Zf,e as vf,ea as Ee,ec as Mf,ed as ep,f as Fs,fc as Bf,fd as In,ga as Tf,h as bu,id as tp,jb as et,jd as rp,kb as br,kd as np,lb as Ir,ma as bf,mb as lt,na as mc,nb as _f,ob as Nf,p as Et,pb as Ff,q as Me,s as yf,sb as Of,u as At,ua as $r,ya as vc,za as xu,zc as Ds}from"./chunk-J3OM6467.js";import{a as q,b as re,c as lr,d as Pv,e as Mt,f as kv,g as Tu,h as x}from"./chunk-TJICSKBO.js";var ym=Pv(z=>{"use strict";var tc={};tc.userAgent=!1;var Cs={},s0="11.1.1",a0="jsrsasign(all) 11.1.1 (2026-02-21) (c) 2010-2023 Kenji Urushima | kjur.github.io/jsrsasign/license";var W=W||(function(r,e){var t={},n=t.lib={},i=n.Base=(function(){function d(){}return{extend:function(m){d.prototype=this;var f=new d;return m&&f.mixIn(m),f.hasOwnProperty("init")||(f.init=function(){f.$super.init.apply(this,arguments)}),f.init.prototype=f,f.$super=this,f},create:function(){var m=this.extend();return m.init.apply(m,arguments),m},init:function(){},mixIn:function(m){for(var f in m)m.hasOwnProperty(f)&&(this[f]=m[f]);m.hasOwnProperty("toString")&&(this.toString=m.toString)},clone:function(){return this.init.prototype.extend(this)}}})(),o=n.WordArray=i.extend({init:function(d,m){d=this.words=d||[],m!=e?this.sigBytes=m:this.sigBytes=d.length*4},toString:function(d){return(d||a).stringify(this)},concat:function(d){var m=this.words,f=d.words,y=this.sigBytes,v=d.sigBytes;if(this.clamp(),y%4)for(var S=0;S<v;S++){var A=f[S>>>2]>>>24-S%4*8&255;m[y+S>>>2]|=A<<24-(y+S)%4*8}else for(var S=0;S<v;S+=4)m[y+S>>>2]=f[S>>>2];return this.sigBytes+=v,this},clamp:function(){var d=this.words,m=this.sigBytes;d[m>>>2]&=4294967295<<32-m%4*8,d.length=r.ceil(m/4)},clone:function(){var d=i.clone.call(this);return d.words=this.words.slice(0),d},random:function(d){for(var m=[],f=0;f<d;f+=4)m.push(r.random()*4294967296|0);return new o.init(m,d)}}),s=t.enc={},a=s.Hex={stringify:function(d){for(var m=d.words,f=d.sigBytes,y=[],v=0;v<f;v++){var S=m[v>>>2]>>>24-v%4*8&255;y.push((S>>>4).toString(16)),y.push((S&15).toString(16))}return y.join("")},parse:function(d){for(var m=d.length,f=[],y=0;y<m;y+=2)f[y>>>3]|=parseInt(d.substr(y,2),16)<<24-y%8*4;return new o.init(f,m/2)}},c=s.Latin1={stringify:function(d){for(var m=d.words,f=d.sigBytes,y=[],v=0;v<f;v++){var S=m[v>>>2]>>>24-v%4*8&255;y.push(String.fromCharCode(S))}return y.join("")},parse:function(d){for(var m=d.length,f=[],y=0;y<m;y++)f[y>>>2]|=(d.charCodeAt(y)&255)<<24-y%4*8;return new o.init(f,m)}},l=s.Utf8={stringify:function(d){try{return decodeURIComponent(escape(c.stringify(d)))}catch{throw new Error("Malformed UTF-8 data")}},parse:function(d){return c.parse(unescape(encodeURIComponent(d)))}},p=n.BufferedBlockAlgorithm=i.extend({reset:function(){this._data=new o.init,this._nDataBytes=0},_append:function(d){typeof d=="string"&&(d=l.parse(d)),this._data.concat(d),this._nDataBytes+=d.sigBytes},_process:function(d){var m=this._data,f=m.words,y=m.sigBytes,v=this.blockSize,S=v*4,A=y/S;d?A=r.ceil(A):A=r.max((A|0)-this._minBufferSize,0);var T=A*v,b=r.min(T*4,y);if(T){for(var D=0;D<T;D+=v)this._doProcessBlock(f,D);var B=f.splice(0,T);m.sigBytes-=b}return new o.init(B,b)},clone:function(){var d=i.clone.call(this);return d._data=this._data.clone(),d},_minBufferSize:0}),g=n.Hasher=p.extend({cfg:i.extend(),init:function(d){this.cfg=this.cfg.extend(d),this.reset()},reset:function(){p.reset.call(this),this._doReset()},update:function(d){return this._append(d),this._process(),this},finalize:function(d){d&&this._append(d);var m=this._doFinalize();return m},blockSize:512/32,_createHelper:function(d){return function(m,f){return new d.init(f).finalize(m)}},_createHmacHelper:function(d){return function(m,f){return new h.HMAC.init(d,f).finalize(m)}}}),h=t.algo={};return t})(Math);(function(r){var i=W,e=i.lib,t=e.Base,n=e.WordArray,i=i.x64={};i.Word=t.extend({init:function(o,s){this.high=o,this.low=s}}),i.WordArray=t.extend({init:function(o,s){o=this.words=o||[],this.sigBytes=s!=r?s:8*o.length},toX32:function(){for(var o=this.words,s=o.length,a=[],c=0;c<s;c++){var l=o[c];a.push(l.high),a.push(l.low)}return n.create(a,this.sigBytes)},clone:function(){for(var o=t.clone.call(this),s=o.words=this.words.slice(0),a=s.length,c=0;c<a;c++)s[c]=s[c].clone();return o}})})();W.lib.Cipher||(function(r){var d=W,e=d.lib,t=e.Base,n=e.WordArray,i=e.BufferedBlockAlgorithm,o=d.enc.Base64,s=d.algo.EvpKDF,a=e.Cipher=i.extend({cfg:t.extend(),createEncryptor:function(f,y){return this.create(this._ENC_XFORM_MODE,f,y)},createDecryptor:function(f,y){return this.create(this._DEC_XFORM_MODE,f,y)},init:function(f,y,v){this.cfg=this.cfg.extend(v),this._xformMode=f,this._key=y,this.reset()},reset:function(){i.reset.call(this),this._doReset()},process:function(f){return this._append(f),this._process()},finalize:function(f){return f&&this._append(f),this._doFinalize()},keySize:4,ivSize:4,_ENC_XFORM_MODE:1,_DEC_XFORM_MODE:2,_createHelper:function(f){return{encrypt:function(y,v,S){return(typeof v=="string"?m:h).encrypt

1(f,y,v,S)},decrypt:function(y,v,S){return(typeof v=="string"?m:h).decrypt(f,y,v,S)}}}});e.StreamCipher=a.extend({_doFinalize:function(){return this._process(!0)},blockSize:1});var g=d.mode={},c=function(f,y,v){var S=this._iv;S?this._iv=r:S=this._prevBlock;for(var A=0;A<v;A++)f[y+A]^=S[A]},l=(e.BlockCipherMode=t.extend({createEncryptor:function(f,y){return this.Encryptor.create(f,y)},createDecryptor:function(f,y){return this.Decryptor.create(f,y)},init:function(f,y){this._cipher=f,this._iv=y}})).extend();l.Encryptor=l.extend({processBlock:function(f,y){var v=this._cipher,S=v.blockSize;c.call(this,f,y,S),v.encryptBlock(f,y),this._prevBlock=f.slice(y,y+S)}}),l.Decryptor=l.extend({processBlock:function(f,y){var v=this._cipher,S=v.blockSize,A=f.slice(y,y+S);v.decryptBlock(f,y),c.call(this,f,y,S),this._prevBlock=A}}),g=g.CBC=l,l=(d.pad={}).Pkcs7={pad:function(f,y){for(var v=4*y,v=v-f.sigBytes%v,S=v<<24|v<<16|v<<8|v,A=[],T=0;T<v;T+=4)A.push(S);v=n.create(A,v),f.concat(v)},unpad:function(f){f.sigBytes-=f.words[f.sigBytes-1>>>2]&255}},e.BlockCipher=a.extend({cfg:a.cfg.extend({mode:g,padding:l}),reset:function(){a.reset.call(this);var y=this.cfg,f=y.iv,y=y.mode;if(this._xformMode==this._ENC_XFORM_MODE)var v=y.createEncryptor;else v=y.createDecryptor,this._minBufferSize=1;this._mode=v.call(y,this,f&&f.words)},_doProcessBlock:function(f,y){this._mode.processBlock(f,y)},_doFinalize:function(){var f=this.cfg.padding;if(this._xformMode==this._ENC_XFORM_MODE){f.pad(this._data,this.blockSize);var y=this._process(!0)}else y=this._process(!0),f.unpad(y);return y},blockSize:4});var p=e.CipherParams=t.extend({init:function(f){this.mixIn(f)},toString:function(f){return(f||this.formatter).stringify(this)}}),g=(d.format={}).OpenSSL={stringify:function(f){var y=f.ciphertext;return f=f.salt,(f?n.create([1398893684,1701076831]).concat(f).concat(y):y).toString(o)},parse:function(f){f=o.parse(f);var y=f.words;if(y[0]==1398893684&&y[1]==1701076831){var v=n.create(y.slice(2,4));y.splice(0,4),f.sigBytes-=16}return p.create({ciphertext:f,salt:v})}},h=e.SerializableCipher=t.extend({cfg:t.extend({format:g}),encrypt:function(f,y,v,S){S=this.cfg.extend(S);var A=f.createEncryptor(v,S);return y=A.finalize(y),A=A.cfg,p.create({ciphertext:y,key:v,iv:A.iv,algorithm:f,mode:A.mode,padding:A.padding,blockSize:f.blockSize,formatter:S.format})},decrypt:function(f,y,v,S){return S=this.cfg.extend(S),y=this._parse(y,S.format),f.createDecryptor(v,S).finalize(y.ciphertext)},_parse:function(f,y){return typeof f=="string"?y.parse(f,this):f}}),d=(d.kdf={}).OpenSSL={execute:function(f,y,v,S){return S||(S=n.random(8)),f=s.create({keySize:y+v}).compute(f,S),v=n.create(f.words.slice(y),4*v),f.sigBytes=4*y,p.create({key:f,iv:v,salt:S})}},m=e.PasswordBasedCipher=h.extend({cfg:h.cfg.extend({kdf:d}),encrypt:function(f,y,v,S){return S=this.cfg.extend(S),v=S.kdf.execute(v,f.keySize,f.ivSize),S.iv=v.iv,f=h.encrypt.call(this,f,y,v.key,S),f.mixIn(v),f},decrypt:function(f,y,v,S){return S=this.cfg.extend(S),y=this._parse(y,S.format),v=S.kdf.execute(v,f.keySize,f.ivSize,y.salt),S.iv=v.iv,h.decrypt.call(this,f,y,v.key,S)}})})();(function(){for(var r=W,e=r.lib.BlockCipher,D=r.algo,t=[],n=[],i=[],o=[],s=[],a=[],c=[],l=[],p=[],g=[],h=[],d=0;256>d;d++)h[d]=128>d?d<<1:d<<1^283;for(var m=0,f=0,d=0;256>d;d++){var y=f^f<<1^f<<2^f<<3^f<<4,y=y>>>8^y&255^99;t[m]=y,n[y]=m;var v=h[m],S=h[v],A=h[S],T=257*h[y]^16843008*y;i[m]=T<<24|T>>>8,o[m]=T<<16|T>>>16,s[m]=T<<8|T>>>24,a[m]=T,T=16843009*A^65537*S^257*v^16843008*m,c[y]=T<<24|T>>>8,l[y]=T<<16|T>>>16,p[y]=T<<8|T>>>24,g[y]=T,m?(m=v^h[h[h[A^v]]],f^=h[h[f]]):m=f=1}var b=[0,1,2,4,8,16,32,64,128,27,54],D=D.AES=e.extend({_doReset:function(){for(var E=this._key,B=E.words,C=E.sigBytes/4,E=4*((this._nRounds=C+6)+1),I=this._keySchedule=[],R=0;R<E;R++)if(R<C)I[R]=B[R];else{var _=I[R-1];R%C?6<C&&R%C==4&&(_=t[_>>>24]<<24|t[_>>>16&255]<<16|t[_>>>8&255]<<8|t[_&255]):(_=_<<8|_>>>24,_=t[_>>>24]<<24|t[_>>>16&255]<<16|t[_>>>8&255]<<8|t[_&255],_^=b[R/C|0]<<24),I[R]=I[R-C]^_}for(B=this._invKeySchedule=[],C=0;C<E;C++)R=E-C,_=C%4?I[R]:I[R-4],B[C]=4>C||4>=R?_:c[t[_>>>24]]^l[t[_>>>16&255]]^p[t[_>>>8&255]]^g[t[_&255]]},encryptBlock:function(B,C){this._doCryptBlock(B,C,this._keySchedule,i,o,s,a,t)},decryptBlock:function(B,C){var E=B[C+1];B[C+1]=B[C+3],B[C+3]=E,this._doCryptBlock(B,C,this._invKeySchedule,c,l,p,g,n),E=B[C+1],B[C+1]=B[C+3],B[C+3]=E}

1,_doCryptBlock:function(B,C,E,I,R,_,M,k){for(var N=this._nRounds,ee=B[C]^E[0],me=B[C+1]^E[1],te=B[C+2]^E[2],oe=B[C+3]^E[3],P=4,F=1;F<N;F++)var j=I[ee>>>24]^R[me>>>16&255]^_[te>>>8&255]^M[oe&255]^E[P++],$=I[me>>>24]^R[te>>>16&255]^_[oe>>>8&255]^M[ee&255]^E[P++],Q=I[te>>>24]^R[oe>>>16&255]^_[ee>>>8&255]^M[me&255]^E[P++],oe=I[oe>>>24]^R[ee>>>16&255]^_[me>>>8&255]^M[te&255]^E[P++],ee=j,me=$,te=Q;j=(k[ee>>>24]<<24|k[me>>>16&255]<<16|k[te>>>8&255]<<8|k[oe&255])^E[P++],$=(k[me>>>24]<<24|k[te>>>16&255]<<16|k[oe>>>8&255]<<8|k[ee&255])^E[P++],Q=(k[te>>>24]<<24|k[oe>>>16&255]<<16|k[ee>>>8&255]<<8|k[me&255])^E[P++],oe=(k[oe>>>24]<<24|k[ee>>>16&255]<<16|k[me>>>8&255]<<8|k[te&255])^E[P++],B[C]=j,B[C+1]=$,B[C+2]=Q,B[C+3]=oe},keySize:8});r.AES=e._createHelper(D)})();(function(){function r(h,d){var m=(this._lBlock>>>h^this._rBlock)&d;this._rBlock^=m,this._lBlock^=m<<h}function e(h,d){var m=(this._rBlock>>>h^this._lBlock)&d;this._lBlock^=m,this._rBlock^=m<<h}var t=W,i=t.lib,n=i.WordArray,i=i.BlockCipher,o=t.algo,s=[57,49,41,33,25,17,9,1,58,50,42,34,26,18,10,2,59,51,43,35,27,19,11,3,60,52,44,36,63,55,47,39,31,23,15,7,62,54,46,38,30,22,14,6,61,53,45,37,29,21,13,5,28,20,12,4],a=[14,17,11,24,1,5,3,28,15,6,21,10,23,19,12,4,26,8,16,7,27,20,13,2,41,52,31,37,47,55,30,40,51,45,33,48,44,49,39,56,34,53,46,42,50,36,29,32],c=[1,2,4,6,8,10,12,14,15,17,19,21,23,25,27,28],l

1=[{0:8421888,268435456:32768,536870912:8421378,805306368:2,1073741824:512,1342177280:8421890,1610612736:8389122,1879048192:8388608,2147483648:514,2415919104:8389120,2684354560:33280,2952790016:8421376,3221225472:32770,3489660928:8388610,3758096384:0,4026531840:33282,134217728:0,402653184:8421890,671088640:33282,939524096:32768,1207959552:8421888,1476395008:512,1744830464:8421378,2013265920:2,2281701376:8389120,2550136832:33280,2818572288:8421376,3087007744:8389122,3355443200:8388610,3623878656:32770,3892314112:514,4160749568:8388608,1:32768,268435457:2,536870913:8421888,805306369:8388608,1073741825:8421378,1342177281:33280,1610612737:512,1879048193:8389122,2147483649:8421890,2415919105:8421376,2684354561:8388610,2952790017:33282,3221225473:514,3489660929:8389120,3758096385:32770,4026531841:0,134217729:8421890,402653185:8421376,671088641:8388608,939524097:512,1207959553:32768,1476395009:8388610,1744830465:2,2013265921:33282,2281701377:32770,2550136833:8389122,2818572289:514,3087007745:8421888,3355443201:8389120,3623878657:0,3892314113:33280,4160749569:8421378},{0:1074282512,16777216:16384,33554432:524288,50331648:1074266128,67108864:1073741840,83886080:1074282496,100663296:1073758208,117440512:16,134217728:540672,150994944:1073758224,167772160:1073741824,184549376:540688,201326592:524304,218103808:0,234881024:16400,251658240:1074266112,8388608:1073758208,25165824:540688,41943040:16,58720256:1073758224,75497472:1074282512,92274688:1073741824,109051904:524288,125829120:1074266128,142606336:524304,159383552:0,176160768:16384,192937984:1074266112,209715200:1073741840,226492416:540672,243269632:1074282496,260046848:16400,268435456:0,285212672:1074266128,301989888:1073758224,318767104:1074282496,335544320:1074266112,352321536:16,369098752:540688,385875968:16384,402653184:16400,419430400:524288,436207616:524304,452984832:1073741840,469762048:540672,486539264:1073758208,503316480:1073741824,520093696:1074282512,276824064:540688,293601280:524288,310378496:1074266112,327155712:16384,343932928:1073758208,360710144:1074282512,377487360:16,394264576:1073741824,411041792:1074282496,427819008:1073741840,444596224:1073758224,461373440:524304,478150656:0,494927872:16400,511705088:1074266128,528482304:540672},{0:260,1048576:0,2097152:67109120,3145728:65796,4194304:65540,5242880:67108868,6291456:67174660,7340032:67174400,8388608:67108864,9437184:67174656,10485760:65792,11534336:67174404,12582912:67109124,13631488:65536,14680064:4,15728640:256,524288:67174656,1572864:67174404,2621440:0,3670016:67109120,4718592:67108868,5767168:65536,6815744:65540,7864320:260,8912896:4,9961472:256,11010048:67174400,12058624:65796,13107200:65792,14155776:67109124,15204352:67174660,16252928:67108864,16777216:67174656,17825792:65540,18874368:65536,19922944:67109120,20971520:256,22020096:67174660,23068672:67108868,24117248:0,25165824:67109124,26214400:67108864,27262976:4,28311552:65792,29360128:67174400,30408704:260,31457280:65796,32505856:67174404,17301504:67108864,18350080:260,19398656:67174656,20447232:0,21495808:65540,22544384:67109120,23592960:256,24641536:67174404,25690112:65536,26738688:67174660,27787264:65796,28835840:67108868,29884416:67109124,30932992:67174400,31981568:4,33030144:65792},{0:2151682048,65536:2147487808,131072:4198464,196608:2151677952,262144:0,327680:4198400,393216:2147483712,458752:4194368,524288:2147483648,589824:4194304,655360:64,720896:2147487744,786432:2151678016,851968:4160,917504:4096,983040:2151682112,32768:2147487808,98304:64,163840:2151678016,229376:2147487744,294912:4198400,360448:2151682112,425984:0,491520:2151677952,557056:4096,622592:2151682048,688128:4194304,753664:4160,819200:2147483648,884736:4194368,950272:4198464,1015808:2147483712,1048576:4194368,1114112:4198400,1179648:2147483712,1245184:0,1310720:4160,1376256:2151678016,1441792:2151682048,1507328:2147487808,1572864:2151682112,1638400:2147483648,1703936:2151677952,1769472:4198464,1835008:2147487744,1900544:4194304,1966080:64,2031616:4096,1081344:2151677952,1146880:2151682112,1212416:0,1277952:4198400,1343488:4194368,1409024:2147483648,1474560:2147487808,1540096:64,1605632:2147483712,1671168:4096,1736704:2147487744,1802240:2151678016,1867776:4160,1933312:2151682048,1998848:4194304,2064384:4198464},{0:128,4096:17039360,8192:262144,12288:536870912,16384:537133184,20480:16777344,24576:553648256,28672:262272,32768:16777216,36864:537133056,40960:536871040,45056:553910400,49152:553910272,53248:0,57344:17039488,61440:553648128,2048:17039488,6144:553648256,10240:128,14336:17039360,18432:262144,22528:537133184,26624:553910272,30720:536870912,34816:537133056,38912:0,43008:553910400,47104:16777344,51200:536871040,55296:553648128,59392:16777216,63488:262272,65536:262144,69632:128,73728:536870912,77824:553648256,81920:16777344,86016:553910272,90112:537133184,94208:16777216,98304:553910400,102400:553648128,106496:17039360,110592:537133056,114688:262272,118784:536871040,122880:0,126976:17039488,67584:553648256,71680:16777216,75776:17039360,79872:537133184,83968:536870912,88064:17039488,92160:128,96256:553910272,100352:262272,104448:553910400,108544:0,112640:553648128,116736:16777344,120832:262144,124928:537133056,129024:536871040},{0:268435464,256:8192,512:270532608,768:270540808,1024:268443648,1280:2097152,1536:2097160,1792:268435456,2048:0,2304:268443656,2560:2105344,2816:8,3072:270532616,3328:2105352,3584:8200,3840:270540800,128:270532608,384:270540808,640:8,896:2097152,1152:2105352,1408:268435464,1664:268443648,1920:8200,2176:2097160,2432:8192,2688:268443656,2944:270532616,3200:0,3456:270540800,3712:2105344,3968:268435456,4096:268443648,4352:270532616,4608:270540808,4864:8200,5120:2097152,5376:268435456,5632:268435464,5888:2105344,6144:2105352,6400:0,6656:8,6912:270532608,7168:8192,7424:268443656,7680:270540800,7936:2097160,4224:8,4480:2105344,4736:2097152,4992:268435464,5248:268443648,5504:8200,5760:270540808,6016:270532608,6272:270540800,6528:270532616,6784:8192,7040:2105352,7296:2097160,7552:0,7808:268435456,8064:268443656},{0:1048576,16:33555457,32:1024,48:1049601,64:34604033,80:0,96:1,112:34603009,128:33555456,144:1048577,160:33554433,176:34604032,192:34603008,208:1025,224:1049600,240:33554432,8:34603009,24:0,40:33555457,56:34604032,72:1048576,88:33554433,104:33554432,120:1025,136:1049601,152:33555456,168:34603008,184:1048577,200:1024,216:34604033,232:1,248:1049600,256:33554432,272:1048576,288:33555457,304:34603009,320:1048577,336:33555456,352:34604032,368:1049601,384:1025,400:34604033,416:1049600,432:1,448:0,464:34603008,480:33554433,496:1024,264:1049600,280:33555457,296:34603009,312:1,328:33554432,344:1048576,360:1025,376:34604032,392:33554433,408:34603008,424:0,440:34604033,456:1049601,472:1024,488:33555456,504:1048577},{0:134219808,1:131072,2:134217728,3:32,4:131104,5:134350880,6:134350848,7:2048,8:134348800,9:134219776,10:133120,11:134348832,12:2080,13:0,14:134217760,15:133152,2147483648:2048,2147483649:134350880,2147483650:134219808,2147483651:134217728,2147483652:134348800,2147483653:133120,2147483654:133152,2147483655:32,2147483656:134217760,2147483657:2080,2147483658:131104,2147483659:134350848,2147483660:0,2147483661:134348832,2147483662:134219776,2147483663:131072,16:133152,17:134350848,18:32,19:2048,20:134219776,21:134217760,22:134348832,23:131072,24:0,25:131104,26:134348800,27:134219808,28:134350880,29:133120,30:2080,31:134217728,2147483664:131072,2147483665:2048,2147483666:134348832,2147483667:133152,2147483668:32,2147483669:134348800,2147483670:134217728,2147483671:134219808,2147483672:134350880,2147483673:134217760,2147483674:134219776,2147483675:0,2147483676:133120,2147483677:2080,2147483678:131104,2147483679:134350848}],

1p=[4160749569,528482304,33030144,2064384,129024,8064,504,2147483679],g=o.DES=i.extend({_doReset:function(){for(var h=this._key.words,d=[],m=0;56>m;m++){var f=s[m]-1;d[m]=h[f>>>5]>>>31-f%32&1}for(h=this._subKeys=[],f=0;16>f;f++){for(var y=h[f]=[],v=c[f],m=0;24>m;m++)y[m/6|0]|=d[(a[m]-1+v)%28]<<31-m%6,y[4+(m/6|0)]|=d[28+(a[m+24]-1+v)%28]<<31-m%6;for(y[0]=y[0]<<1|y[0]>>>31,m=1;7>m;m++)y[m]>>>=4*(m-1)+3;y[7]=y[7]<<5|y[7]>>>27}for(d=this._invSubKeys=[],m=0;16>m;m++)d[m]=h[15-m]},encryptBlock:function(h,d){this._doCryptBlock(h,d,this._subKeys)},decryptBlock:function(h,d){this._doCryptBlock(h,d,this._invSubKeys)},_doCryptBlock:function(h,d,m){this._lBlock=h[d],this._rBlock=h[d+1],r.call(this,4,252645135),r.call(this,16,65535),e.call(this,2,858993459),e.call(this,8,16711935),r.call(this,1,1431655765);for(var f=0;16>f;f++){for(var y=m[f],v=this._lBlock,S=this._rBlock,A=0,T=0;8>T;T++)A|=l[T][((S^y[T])&p[T])>>>0];this._lBlock=S,this._rBlock=v^A}m=this._lBlock,this._lBlock=this._rBlock,this._rBlock=m,r.call(this,1,1431655765),e.call(this,8,16711935),e.call(this,2,858993459),r.call(this,16,65535),r.call(this,4,252645135),h[d]=this._lBlock,h[d+1]=this._rBlock},keySize:2,ivSize:2,blockSize:2});t.DES=i._createHelper(g),o=o.TripleDES=i.extend({_doReset:function(){var h=this._key.words;this._des1=g.createEncryptor(n.create(h.slice(0,2))),this._des2=g.createEncryptor(n.create(h.slice(2,4))),this._des3=g.createEncryptor(n.create(h.slice(4,6)))},encryptBlock:function(h,d){this._des1.encryptBlock(h,d),this._des2.decryptBlock(h,d),this._des3.encryptBlock(h,d)},decryptBlock:function(h,d){this._des3.decryptBlock(h,d),this._des2.encryptBlock(h,d),this._des1.decryptBlock(h,d)},keySize:6,ivSize:2,blockSize:2}),t.TripleDES=i._createHelper(o)})();(function(){var r=W,e=r.lib.WordArray;r.enc.Base64={stringify:function(t){var n=t.words,i=t.sigBytes,o=this._map;t.clamp(),t=[];for(var s=0;s<i;s+=3)for(var a=(n[s>>>2]>>>24-8*(s%4)&255)<<16|(n[s+1>>>2]>>>24-8*((s+1)%4)&255)<<8|n[s+2>>>2]>>>24-8*((s+2)%4)&255,c=0;4>c&&s+.75*c<i;c++)t.push(o.charAt(a>>>6*(3-c)&63));if(n=o.charAt(64))for(;t.length%4;)t.push(n);return t.join("")},parse:function(t){var n=t.length,i=this._map,o=i.charAt(64);o&&(o=t.indexOf(o),o!=-1&&(n=o));for(var o=[],s=0,a=0;a<n;a++)if(a%4){var c=i.indexOf(t.charAt(a-1))<<2*(a%4),l=i.indexOf(t.charAt(a))>>>6-2*(a%4);o[s>>>2]|=(c|l)<<24-8*(s%4),s++}return e.create(o,s)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="}})();(function(r){function e(g,h,d,m,f,y,v){return g=g+(h&d|~h&m)+f+v,(g<<y|g>>>32-y)+h}function t(g,h,d,m,f,y,v){return g=g+(h&m|d&~m)+f+v,(g<<y|g>>>32-y)+h}function n(g,h,d,m,f,y,v){return g=g+(h^d^m)+f+v,(g<<y|g>>>32-y)+h}function i(g,h,d,m,f,y,v){return g=g+(d^(h|~m))+f+v,(g<<y|g>>>32-y)+h}for(var o=W,c=o.lib,s=c.WordArray,a=c.Hasher,c=o.algo,l=[],p=0;64>p;p++)l[p]=4294967296*r.abs(r.sin(p+1))|0;c=c.MD5=a.extend({_doReset:function(){this._hash=new s.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(g,h){for(var d=0;16>d;d++){var m=h+d,f=g[m];g[m]=(f<<8|f>>>24)&16711935|(f<<24|f>>>8)&4278255360}var d=this._hash.words,m=g[h+0],f=g[h+1],y=g[h+2],v=g[h+3],S=g[h+4],A=g[h+5],T=g[h+6],b=g[h+7],D=g[h+8],B=g[h+9],C=g[h+10],E=g[h+11],I=g[h+12],R=g[h+13],_=g[h+14],M=g[h+15],k=d[0],F=d[1],P=d[2],N=d[3],k=e(k,F,P,N,m,7,l[0]),N=e(N,k,F,P,f,12,l[1]),P=e(P,N,k,F,y,17,l[2]),F=e(F,P,N,k,v,22,l[3]),k=e(k,F,P,N,S,7,l[4]),N=e(N,k,F,P,A,12,l[5]),P=e(P,N,k,F,T,17,l[6]),F=e(F,P,N,k,b,22,l[7]),k=e(k,F,P,N,D,7,l[8]),N=e(N,k,F,P,B,12,l[9]),P=e(P,N,k,F,C,17,l[10]),F=e(F,P,N,k,E,22,l[11]),k=e(k,F,P,N,I,7,l[12]),N=e(N,k,F,P,R,12,l[13]),P=e(P,N,k,F,_,17,l[14]),F=e(F,P,N,k,M,22,l[15]),k=t(k,F,P,N,f,5,l[16]),N=t(N,k,F,P,T,9,l[17]),P=t(P,N,k,F,E,14,l[18]),F=t(F,P,N,k,m,20,l[19]),k=t(k,F,P,N,A,5,l[20]),N=t(N,k,F,P,C,9,l[21]),P=t(P,N,k,F,M,14,l[22]),F=t(F,P,N,k,S,20,l[23]),k=t(k,F,P,N,B,5,l[24]),N=t(N,k,F,P,_,9,l[25]),P=t(P,N,k,F,v,14,l[26]),F=t(F,P,N,k,D,20,l[27]),k=t(k,F,P,N,R,5,l[28]),N=t(N,k,F,P,y,9,l[29]),P=t(P,N,k,F,b,14,l[30]),F=t(F,P,N,k,I,20,l[31]),k=n(k,F,P,N,A,4,l[32]),N=n(N,k,F,P,D,11,l[33]),P=n(P,N,k,F,E,16,l[34]),F=n(F,P,N,k,_,23,l[35]),k=n(k,F,P,N,f,4,l[36]),N=n(N,k,F,P,S,11,l[37]),P=n(P,N,k,F,b,16,l[38]),F=n(F,P,N,k,C,23,l[39]),k=n(k,F,P,N,R,4,l[40]),N=n(N,k,F,P,m,11,l[41]),P=n(P,N,k,F,v,16,l[42]),F=n(F,P,N,k,T,23,l[43]),k=n(k,F,P,N,B,4,l[44]),N=n(N,k,F,P,I,11,l[45]),P=n(P,N,k,F,M,16,l[46]),F=n(F,P,N,k,y,23,l[47]),k=i(k,F,P,N,m,6,l[48]),N=i(N,k,F,P,b,10,l[49]),P=i(P,N,k,F,_,15,l[50]),F=i(F,P,N,k,A,21,l[51]),k=i(k,F,P,N,I,6,l[52]),N=i(N,k,F,P,v,10,l[53]),P=i(P,N,k,F,C,15,l[54]),F=i(F,P,N,k,f,21,l[55]),k=i(k,F,P,N,D,6,l[56]),N=i(N,k,F,P,M,10,l[57]),P=i(P,N,k,F,T,15,l[58]),F=i(F,P,N,k,R,21,l[59]),k=i(k,F,P,N,S,6,l[60]),N=i(N,k,F,P,E,10,l[61]),P=i(P,N,k,F,y,15,l[62]),F=i(F,P,N,k,B,21,l[63]);d[0]=d[0]+k|0,d[1]=d[1]+F|0,d[2]=d[2]+P|0,d[3]=d[3]+N|0},_doFinalize:function(){var g=this._data,h=g.words,d=8*this._nDataBytes,m=8*g.sigBytes;h[m>>>5]|=128<<24-m%32;var f=r.floor(d/4294967296);for(h[(m+64>>>9<<4)+15]=(f<<8|f>>>24)&16711935|(f<<24|f>>>8)&4278255360,h[(m+64>>>9<<4)+14]=(d<<8|d>>>24)&16711935|(d<<24|d>>>8)&4278255360,g.sigBytes=4*(h.length+1),this._process(),g=this._hash,h=g.words,d=0;4>d;d++)m=h[d],h[d]=(m<<8|m>>>24)&16711935|(m<<24|m>>>8)&4278255360;return g},clone:function(){var g=a.clone.call(this);return g._hash=this._hash.clone(),g}}),o.MD5=a._createHelper(c),o.HmacMD5=a._createHmacHelper(c)})(Math);

1(function(){var r=W,i=r.lib,e=i.WordArray,t=i.Hasher,n=[],i=r.algo.SHA1=t.extend({_doReset:function(){this._hash=new e.init([1732584193,4023233417,2562383102,271733878,3285377520])},_doProcessBlock:function(o,s){for(var a=this._hash.words,c=a[0],l=a[1],p=a[2],g=a[3],h=a[4],d=0;80>d;d++){if(16>d)n[d]=o[s+d]|0;else{var m=n[d-3]^n[d-8]^n[d-14]^n[d-16];n[d]=m<<1|m>>>31}m=(c<<5|c>>>27)+h+n[d],m=20>d?m+((l&p|~l&g)+1518500249):40>d?m+((l^p^g)+1859775393):60>d?m+((l&p|l&g|p&g)-1894007588):m+((l^p^g)-899497514),h=g,g=p,p=l<<30|l>>>2,l=c,c=m}a[0]=a[0]+c|0,a[1]=a[1]+l|0,a[2]=a[2]+p|0,a[3]=a[3]+g|0,a[4]=a[4]+h|0},_doFinalize:function(){var o=this._data,s=o.words,a=8*this._nDataBytes,c=8*o.sigBytes;return s[c>>>5]|=128<<24-c%32,s[(c+64>>>9<<4)+14]=Math.floor(a/4294967296),s[(c+64>>>9<<4)+15]=a,o.sigBytes=4*s.length,this._process(),this._hash},clone:function(){var o=t.clone.call(this);return o._hash=this._hash.clone(),o}});r.SHA1=t._createHelper(i),r.HmacSHA1=t._createHmacHelper(i)})();(function(r){for(var e=W,d=e.lib,t=d.WordArray,n=d.Hasher,d=e.algo,i=[],o=[],s=function(f){return 4294967296*(f-(f|0))|0},a=2,c=0;64>c;){var l;e:{l=a;for(var p=r.sqrt(l),g=2;g<=p;g++)if(!(l%g)){l=!1;break e}l=!0}l&&(8>c&&(i[c]=s(r.pow(a,.5))),o[c]=s(r.pow(a,1/3)),c++),a++}var h=[],d=d.SHA256=n.extend({_doReset:function(){this._hash=new t.init(i.slice(0))},_doProcessBlock:function(m,f){for(var y=this._hash.words,v=y[0],S=y[1],A=y[2],T=y[3],b=y[4],D=y[5],B=y[6],C=y[7],E=0;64>E;E++){if(16>E)h[E]=m[f+E]|0;else{var I=h[E-15],R=h[E-2];h[E]=((I<<25|I>>>7)^(I<<14|I>>>18)^I>>>3)+h[E-7]+((R<<15|R>>>17)^(R<<13|R>>>19)^R>>>10)+h[E-16]}I=C+((b<<26|b>>>6)^(b<<21|b>>>11)^(b<<7|b>>>25))+(b&D^~b&B)+o[E]+h[E],R=((v<<30|v>>>2)^(v<<19|v>>>13)^(v<<10|v>>>22))+(v&S^v&A^S&A),C=B,B=D,D=b,b=T+I|0,T=A,A=S,S=v,v=I+R|0}y[0]=y[0]+v|0,y[1]=y[1]+S|0,y[2]=y[2]+A|0,y[3]=y[3]+T|0,y[4]=y[4]+b|0,y[5]=y[5]+D|0,y[6]=y[6]+B|0,y[7]=y[7]+C|0},_doFinalize:function(){var m=this._data,f=m.words,y=8*this._nDataBytes,v=8*m.sigBytes;return f[v>>>5]|=128<<24-v%32,f[(v+64>>>9<<4)+14]=r.floor(y/4294967296),f[(v+64>>>9<<4)+15]=y,m.sigBytes=4*f.length,this._process(),this._hash},clone:function(){var m=n.clone.call(this);return m._hash=this._hash.clone(),m}});e.SHA256=n._createHelper(d),e.HmacSHA256=n._createHmacHelper(d)})(Math);(function(){var r=W,e=r.lib.WordArray,n=r.algo,t=n.SHA256,n=n.SHA224=t.extend({_doReset:function(){this._hash=new e.init([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428])},_doFinalize:function(){var i=t._doFinalize.call(this);return i.sigBytes-=4,i}});r.SHA224=t._createHelper(n),r.HmacSHA224=t._createHmacHelper(n)})();(function(){function r(){return n.create.apply(n,arguments)}for(var e=W,t=e.lib.Hasher,o=e.x64,n=o.Word,i=o.WordArray,o=e.algo,s=[r(1116352408,3609767458),r(1899447441,602891725),r(3049323471,3964484399),r(3921009573,2173295548),r(961987163,4081628472),r(1508970993,3053834265),r(2453635748,2937671579),r(2870763221,3664609560),r(3624381080,2734883394),r(310598401,1164996542),r(607225278,1323610764),r(1426881987,3590304994),r(1925078388,4068182383),r(2162078206,991336113),r(2614888103,633803317),r(3248222580,3479774868),r(3835390401,2666613458),r(4022224774,944711139),r(264347078,2341262773),r(604807628,2007800933),r(770255983,1495990901),r(1249150122,1856431235),r(1555081692,3175218132),r(1996064986,2198950837),r(2554220882,3999719339),r(2821834349,766784016),r(2952996808,2566594879),r(3210313671,3203337956),r(3336571891,1034457026),r(3584528711,2466948901),r(113926993,3758326383),r(338241895,168717936),r(666307205,1188179964),r(773529912,1546045734),r(1294757372,1522805485),r(1396182291,2643833823),r(1695183700,2343527390),r(1986661051,1014477480),r(2177026350,1206759142),r(2456956037,344077627),r(2730485921,1290863460),r(2820302411,3158454273),r(3259730800,3505952657),r(3345764771,106217008),r(3516065817,3606008344),r(3600352804,1432725776),r(4094571909,1467031594),r(275423344,851169720),r(430227734,3100823752),r(506948616,1363258195),r(659060556,3750685593),r(883997877,3785050280),r(958139571,3318307427),r(1322822218,3812723403),r(1537002063,2003034995),r(1747873779,3602036899),r(1955562222,1575990012),r(2024104815,1125592928),r(2227730452,2716904306),r(2361852424,442776044),r(2428436474,593698344),r(2756734187,3733110249),r(3204031479,2999351573),r(3329325298,3815920427),r(3391569614,3928383900),r(3515267271,566280711),r(3940187606,3454069534),r(4118630271,4000239992),r(116418474,1914138554),r(174292421,2731055270),r(289380356,3203993006),r(460393269,320620315),r(685471733,587496836),r(852142971,1086792851),r(1017036298,365543100),r(1126000580,2618297676),r(1288033470,3409855158),r(1501505948,4234509866),r(1607167915,987167468),r(1816402316,1246189591)],a=[],c=0;80>c;c++)a[c]=r();o=o.SHA512=t.extend({_doReset:function(){this._hash=new i.init([new n.init(1779033703,4089235720),new n.init(3144134277,2227873595),new n.init(1013904242,4271175723),new n.init(2773480762,1595750129),new n.init(1359893119,2917565137),new n.init(2600822924,725511199),new n.init(528734635,4215389547),new n.init(1541459225,327033209)])},_doProcessBlock:function(l,p){for(var S=this._hash.words,g=S[0],h=S[1],d=S[2],m=S[3],f=S[4],y=S[5],v=S[6],S=S[7],A=g.high,T=g.low,b=h.high,D=h.low,B=d.high,C=d.low,E=m.high,I=m.low,R=f.high,_=f.low,M=y.high,k=y.low,N=v.high,P=v.low,F=S.high,j=S.low,$=A,Q=T,oe=b,ee=D,me=B,te=C,Zt=E,bt=I,we=R,We=_,Fe=M,ve=k,Ve=N,Ge=P,rt=F,It=j,xe=0;80>xe;xe++){var Tn=a[xe];if(16>xe)var Dt=Tn.high=l[p+2*xe]|0,Pe=Tn.low=l[p+2*xe+1]|0;else{var Dt=a[xe-15],Pe=Dt.high,wr=Dt.low,Dt=(Pe>>>1|wr<<31)^(Pe>>>8|wr<<24)^Pe>>>7,wr=(wr>>>1|Pe<<31)^(wr>>>8|Pe<<24)^(wr>>>7|Pe<<25),ni=a[xe-2],Pe=ni.high,He=ni.low,ni=(Pe>>>19|He<<13)^(Pe<<3|He>>>29)^Pe>>>6,He=(He>>>19|Pe<<13)^(He<<3|Pe>>>29)^(He>>>6|Pe<<26),Pe=a[xe-7],_s=Pe.high,wn=a[xe-16],Tr=wn.high,wn=wn.low,Pe=wr+Pe.low,Dt=Dt+_s+(Pe>>>0<wr>>>0?1:0),Pe=Pe+He,Dt=Dt+ni+(Pe>>>0<He>>>0?1:0),Pe=Pe+wn,Dt=Dt+Tr+(Pe>>>0<wn>>>0?1:0);Tn.high=Dt,Tn.low=Pe}var _s=we&Fe^~we&Ve,wn=We&ve^~We&Ge,Tn=$&oe^$&me^oe&me,Iv=Q&ee^Q&te^ee&te,wr=($>>>28|Q<<4)^($<<30|Q>>>2)^($<<25|Q>>>7),ni=(Q>>>28|$<<4)^(Q<<30|$>>>2)^(Q<<25|$>>>7),He=s[xe],Rv=He.high,mf=He.low,He=It+((We>>

1>14|we<<18)^(We>>>18|we<<14)^(We<<23|we>>>9)),Tr=rt+((we>>>14|We<<18)^(we>>>18|We<<14)^(we<<23|We>>>9))+(He>>>0<It>>>0?1:0),He=He+wn,Tr=Tr+_s+(He>>>0<wn>>>0?1:0),He=He+mf,Tr=Tr+Rv+(He>>>0<mf>>>0?1:0),He=He+Pe,Tr=Tr+Dt+(He>>>0<Pe>>>0?1:0),Pe=ni+Iv,Tn=wr+Tn+(Pe>>>0<ni>>>0?1:0),rt=Ve,It=Ge,Ve=Fe,Ge=ve,Fe=we,ve=We,We=bt+He|0,we=Zt+Tr+(We>>>0<bt>>>0?1:0)|0,Zt=me,bt=te,me=oe,te=ee,oe=$,ee=Q,Q=He+Pe|0,$=Tr+Tn+(Q>>>0<He>>>0?1:0)|0}T=g.low=T+Q,g.high=A+$+(T>>>0<Q>>>0?1:0),D=h.low=D+ee,h.high=b+oe+(D>>>0<ee>>>0?1:0),C=d.low=C+te,d.high=B+me+(C>>>0<te>>>0?1:0),I=m.low=I+bt,m.high=E+Zt+(I>>>0<bt>>>0?1:0),_=f.low=_+We,f.high=R+we+(_>>>0<We>>>0?1:0),k=y.low=k+ve,y.high=M+Fe+(k>>>0<ve>>>0?1:0),P=v.low=P+Ge,v.high=N+Ve+(P>>>0<Ge>>>0?1:0),j=S.low=j+It,S.high=F+rt+(j>>>0<It>>>0?1:0)},_doFinalize:function(){var l=this._data,p=l.words,g=8*this._nDataBytes,h=8*l.sigBytes;return p[h>>>5]|=128<<24-h%32,p[(h+128>>>10<<5)+30]=Math.floor(g/4294967296),p[(h+128>>>10<<5)+31]=g,l.sigBytes=4*p.length,this._process(),this._hash.toX32()},clone:function(){var l=t.clone.call(this);return l._hash=this._hash.clone(),l},blockSize:32}),e.SHA512=t._createHelper(o),e.HmacSHA512=t._createHmacHelper(o)})();(function(){var r=W,i=r.x64,e=i.Word,t=i.WordArray,i=r.algo,n=i.SHA512,i=i.SHA384=n.extend({_doReset:function(){this._hash=new t.init([new e.init(3418070365,3238371032),new e.init(1654270250,914150663),new e.init(2438529370,812702999),new e.init(355462360,4144912697),new e.init(1731405415,4290775857),new e.init(2394180231,1750603025),new e.init(3675008525,1694076839),new e.init(1203062813,3204075428)])},_doFinalize:function(){var o=n._doFinalize.call(this);return o.sigBytes-=16,o}});r.SHA384=n._createHelper(i),r.HmacSHA384=n._createHmacHelper(i)})();(function(){var r=W,l=r.lib,e=l.WordArray,t=l.Hasher,l=r.algo,n=e.create([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8,3,10,14,4,9,15,8,1,2,7,0,6,13,11,5,12,1,9,11,10,0,8,12,4,13,3,7,15,14,5,6,2,4,0,5,9,7,12,2,10,14,1,3,8,11,6,15,13]),i=e.create([5,14,7,0,9,2,11,4,13,6,15,8,1,10,3,12,6,11,3,7,0,13,5,10,14,15,8,12,4,9,1,2,15,5,1,3,7,14,6,9,11,8,12,2,10,0,4,13,8,6,4,1,3,11,15,0,5,12,2,13,9,7,10,14,12,15,10,4,1,5,8,7,6,2,13,14,0,3,9,11]),o=e.create([11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8,7,6,8,13,11,9,7,15,7,12,15,9,11,7,13,12,11,13,6,7,14,9,13,15,14,8,13,6,5,12,7,5,11,12,14,15,14,15,9,8,9,14,5,6,8,6,5,12,9,15,5,11,6,8,13,12,5,12,13,14,11,8,5,6]),s=e.create([8,9,9,11,13,15,15,5,7,7,8,11,14,14,12,6,9,13,15,7,12,8,9,11,7,7,12,7,6,15,13,11,9,7,15,11,8,6,6,14,12,13,5,14,13,13,7,5,15,5,8,11,14,14,6,14,6,9,12,9,12,5,15,8,8,5,12,9,12,5,14,6,8,13,6,5,15,13,11,11]),a=e.create([0,1518500249,1859775393,2400959708,2840853838]),c=e.create([1352829926,1548603684,1836072691,2053994217,0]),l=l.RIPEMD160=t.extend({_doReset:function(){this._hash=e.create([1732584193,4023233417,2562383102,271733878,3285377520])},_doProcessBlock:function(p,g){for(var h=0;16>h;h++){var d=g+h,m=p[d];p[d]=(m<<8|m>>>24)&16711935|(m<<24|m>>>8)&4278255360}var d=this._hash.words,m=a.words,f=c.words,y=n.words,v=i.words,S=o.words,A=s.words,T,b,D,B,C,E,I,R,_,M;E=T=d[0],I=b=d[1],R=D=d[2],_=B=d[3],M=C=d[4];for(var k,h=0;80>h;h+=1)k=T+p[g+y[h]]|0,k=16>h?k+((b^D^B)+m[0]):32>h?k+((b&D|~b&B)+m[1]):48>h?k+(((b|~D)^B)+m[2]):64>h?k+((b&B|D&~B)+m[3]):k+((b^(D|~B))+m[4]),k|=0,k=k<<S[h]|k>>>32-S[h],k=k+C|0,T=C,C=B,B=D<<10|D>>>22,D=b,b=k,k=E+p[g+v[h]]|0,k=16>h?k+((I^(R|~_))+f[0]):32>h?k+((I&_|R&~_)+f[1]):48>h?k+(((I|~R)^_)+f[2]):64>h?k+((I&R|~I&_)+f[3]):k+((I^R^_)+f[4]),k|=0,k=k<<A[h]|k>>>32-A[h],k=k+M|0,E=M,M=_,_=R<<10|R>>>22,R=I,I=k;k=d[1]+D+_|0,d[1]=d[2]+B+M|0,d[2]=d[3]+C+E|0,d[3]=d[4]+T+I|0,d[4]=d[0]+b+R|0,d[0]=k},_doFinalize:function(){var p=this._data,g=p.words,h=8*this._nDataBytes,d=8*p.sigBytes;for(g[d>>>5]|=128<<24-d%32,g[(d+64>>>9<<4)+14]=(h<<8|h>>>24)&16711935|(h<<24|h>>>8)&4278255360,p.sigBytes=4*(g.length+1),this._process(),p=this._hash,g=p.words,h=0;5>h;h++)d=g[h],g[h]=(d<<8|d>>>24)&16711935|(d<<24|d>>>8)&4278255360;return p},clone:function(){var p=t.clone.call(this);return p._hash=this._hash.clone(),p}});r.RIPEMD160=t._createHelper(l),r.HmacRIPEMD160=t._createHmacHelper(l)})(Math);(function(){var r=W,e=r.enc.Utf8;r.algo.HMAC=r.lib.Base.extend({init:function(t,n){t=this._hasher=new t.init,typeof n=="string"&&(n=e.parse(n));var i=t.blockSize,o=4*i;n.sigBytes>o&&(n=t.finalize(n)),n.clamp();for(var s=this._oKey=n.clone(),a=this._iKey=n.clone(),c=s.words,l=a.words,p=0;p<i;p++)c[p]^=1549556828,l[p]^=909522486;s.sigBytes=a.sigBytes=o,this.reset()},reset:function(){var t=this._hasher;t.reset(),t.update(this._iKey)},update:function(t){return this._hasher.update(t),this},finalize:function(t){var n=this._hasher;return t=n.finalize(t),n.reset(),n.finalize(this._oKey.clone().concat(t))}})})();(function(){var r=W,n=r.lib,e=n.Base,t=n.WordArray,n=r.algo,i=n.HMAC,o=n.PBKDF2=e.extend({cfg:e.extend({keySize:4,hasher:n.SHA1,iterations:1}),init:function(s){this.cfg=this.cfg.extend(s)},compute:function(s,a){for(var m=this.cfg,c=i.create(m.hasher,s),l=t.create(),p=t.create([1]),g=l.words,h=p.words,d=m.keySize,m=m.iterations;g.length<d;){var f=c.update(a).finalize(p);c.reset();for(var y=f.words,v=y.length,S=f,A=1;A<m;A++){S=c.finalize(S),c.reset();for(var T=S.words,b=0;b<v;b++)y[b]^=T[b]}l.concat(f),h[0]++}return l.sigBytes=4*d,l}});r.PBKDF2=function(s,a,c){return o.create(c).compute(s,a)}})();var Ss="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789

1+/",wd="=";function Sn(r){var e,t,n="";for(e=0;e+3<=r.length;e+=3)t=parseInt(r.substring(e,e+3),16),n+=Ss.charAt(t>>6)+Ss.charAt(t&63);if(e+1==r.length?(t=parseInt(r.substring(e,e+1),16),n+=Ss.charAt(t<<2)):e+2==r.length&&(t=parseInt(r.substring(e,e+2),16),n+=Ss.charAt(t>>2)+Ss.charAt((t&3)<<4)),wd)for(;(n.length&3)>0;)n+=wd;return n}function As(r){var e="",t,n=0,i,o;for(t=0;t<r.length&&r.charAt(t)!=wd;++t)o=Ss.indexOf(r.charAt(t)),!(o<0)&&(n==0?(e+=Cn(o>>2),i=o&3,n=1):n==1?(e+=Cn(i<<2|o>>4),i=o&15,n=2):n==2?(e+=Cn(i),e+=Cn(o>>2),i=o&3,n=3):(e+=Cn(i<<2|o>>4),e+=Cn(o&15),n=0));return n==1&&(e+=Cn(i<<2)),e}function Xg(r){var e=As(r),t,n=new Array;for(t=0;2*t<e.length;++t)n[t]=parseInt(e.substring(2*t,2*t+2),16);return n}var ei,c0=0xdeadbeefcafe,Qg=(c0&16777215)==15715070;function O(r,e,t){r!=null&&(typeof r=="number"?this.fromNumber(r,e,t):e==null&&typeof r!="string"?this.fromString(r,256):this.fromString(r,e))}function Se(){return new O(null)}function l0(r,e,t,n,i,o){for(;--o>=0;){var s=e*this[r++]+t[n]+i;i=Math.floor(s/67108864),t[n++]=s&67108863}return i}function u0(r,e,t,n,i,o){for(var s=e&32767,a=e>>15;--o>=0;){var c=this[r]&32767,l=this[r++]>>15,p=a*c+l*s;c=s*c+((p&32767)<<15)+t[n]+(i&1073741823),i=(c>>>30)+(p>>>15)+a*l+(i>>>30),t[n++]=c&1073741823}return i}function h0(r,e,t,n,i,o){for(var s=e&16383,a=e>>14;--o>=0;){var c=this[r]&16383,l=this[r++]>>14,p=a*c+l*s;c=s*c+((p&16383)<<14)+t[n]+i,i=(c>>28)+(p>>14)+a*l,t[n++]=c&268435455}return i}Qg&&tc.appName=="Microsoft Internet Explorer"?(O.prototype.am=u0,ei=30):Qg&&tc.appName!="Netscape"?(O.prototype.am=l0,ei=26):(O.prototype.am=h0,ei=28);O.prototype.DB=ei;O.prototype.DM=(1<<ei)-1;O.prototype.DV=1<<ei;var Pd=52;O.prototype.FV=Math.pow(2,Pd);O.prototype.F1=Pd-ei;O.prototype.F2=2*ei-Pd;var d0="0123456789abcdefghijklmnopqrstuvwxyz",zl=new Array,ws,ar;ws=48;for(ar=0;ar<=9;++ar)zl[ws++]=ar;ws=97;for(ar=10;ar<36;++ar)zl[ws++]=ar;ws=65;for(ar=10;ar<36;++ar)zl[ws++]=ar;function Cn(r){return d0.charAt(r)}function Zg(r,e){var t=zl[r.charCodeAt(e)];return t??-1}function f0(r){for(var e=this.t-1;e>=0;--e)r[e]=this[e];r.t=this.t,r.s=this.s}function p0(r){this.t=1,this.s=r<0?-1:0,r>0?this[0]=r:r<-1?this[0]=r+this.DV:this.t=0}function Zn(r){var e=Se();return e.fromInt(r),e}function g0(r,e){var t;if(e==16)t=4;else if(e==8)t=3;else if(e==256)t=8;else if(e==2)t=1;else if(e==32)t=5;else if(e==4)t=2;else{this.fromRadix(r,e);return}this.t=0,this.s=0;for(var n=r.length,i=!1,o=0;--n>=0;){var s=t==8?r[n]&255:Zg(r,n);if(s<0){r.charAt(n)=="-"&&(i=!0);continue}i=!1,o==0?this[this.t++]=s:o+t>this.DB?(this[this.t-1]|=(s&(1<<this.DB-o)-1)<<o,this[this.t++]=s>>this.DB-o):this[this.t-1]|=s<<o,o+=t,o>=this.DB&&(o-=this.DB)}t==8&&(r[0]&128)!=0&&(this.s=-1,o>0&&(this[this.t-1]|=(1<<this.DB-o)-1<<o)),this.clamp(),i&&O.ZERO.subTo(this,this)}function m0(){for(var r=this.s&this.DM;this.t>0&&this[this.t-1]==r;)--this.t}function v0(r){if(this.s<0)return"-"+this.negate().toString(r);var e;if(r==16)e=4;else if(r==8)e=3;else if(r==2)e=1;else if(r==32)e=5;else if(r==4)e=2;else return this.toRadix(r);var t=(1<<e)-1,n,i=!1,o="",s=this.t,a=this.DB-s*this.DB%e;if(s-- >0)for(a<this.DB&&(n=this[s]>>a)>0&&(i=!0,o=Cn(n));s>=0;)a<e?(n=(this[s]&(1<<a)-1)<<e-a,n|=this[--s]>>(a+=this.DB-e)):(n=this[s]>>(a-=e)&t,a<=0&&(a+=this.DB,--s)),n>0&&(i=!0),i&&(o+=Cn(n));return i?o:"0"}function y0(){var r=Se();return O.ZERO.subTo(this,r),r}function C0(){return this.s<0?this.negate():this}function S0(r){var e=this.s-r.s;if(e!=0)return e;var t=this.t;if(e=t-r.t,e!=0)return this.s<0?-e:e;for(;--t>=0;)if((e=this[t]-r[t])!=0)return e;return 0}function $l(r){var e=1,t;return(t=r>>>16)!=0&&(r=t,e+=16),(t=r>>8)!=0&&(r=t,e+=8),(t=r>>4)!=0&&(r=t,e+=4),(t=r>>2)!=0&&(r=t,e+=2),(t=r>>1)!=0&&(r=t,e+=1),e}function E0(){return this.t<=0?0:this.DB*(this.t-1)+$l(this[this.t-1]^this.s&this.DM)}function A0(r,e){var t;for(t=this.t-1;t>=0;--t)e[t+r]=this[t];for(t=r-1;t>=0;--t)e[t]=0;e.t=this.t+r,e.s=this.s}function w0(r,e){for(var t=r;t<this.t;++t)e[t-r]=this[t];e.t=Math.max(this.t-r,0),e.s=this.s}function T0(r,e){var t=r%this.DB,n=this.DB-t,i=(1<<n)-1,o=Math.floor(r/this.DB),s=this.s<<t&this.DM,a;for(a=this.t-1;a>=0;--a)e[a+o+1]=this[a]>>n|s,s=(this[a]&i)<<t;for(a=o-1;a>=0;--a)e[a]=0;e[o]=s,e.t=this.t+o+1,e.s=this.s,e.clamp()}function b0(r,e){e.s=this.s;var t=Math.floor(r/this.DB);if(t>=this.t){e.t=0;return}var n=r%this.DB,i=this.DB-n,o=(1<<n)-1;e[0]=this[t]>>n;for(var s=t+1;s<this.t;++s)e[s-t-1]|=(this[s]&o)<<i,e[s-t]=this[s]>>n;n>0&&(e[this.t-t-1]|=(this.s&o)<<i),e.t=this.t-t,e.clamp()}function I0(r,e){for(var t=0,n=0,i=Math.min(r.t,this.t);t<i;)n+=this[t]-r[t],e[t++]=n&this.DM,n>>=this.DB;if(r.t<this.t){for(n-=r.s;t<this.t;)n+=this[t],e[t++]=n&this.DM,n>>=this.DB;n+=this.s}else{for(n+=this.s;t<r.t;)n-=r[t],e[t++]=n&this.DM,n>>=this.DB;n-=r.s}e.s=n<0?-1:0,n<-1?e[t++]=this.DV+n:n>0&&(e[t++]=n),e.t=t,e.clamp()}function R0(r,e){var t=this.abs(),n=r.abs(),i=t.t;for(e.t=i+n.t;--i>=0;)e[i]=0;for(i=0;i<n.t;++i)e[i+t.t]=t.am(0,n[i],e,i,0,t.t);e.s=0,e.clamp(),this.s!=r.s&&O.ZERO.subTo(e,e)}function P0(r){for(var e=this.abs(),t=r.t=2*e.t;--t>=0;)r[t]=0;for(t=0;t<e.t-1;++t){var n=e.am(t,e[t],r,2*t,0,1);(r[t+e.t]+=e.am(t+1,2*e[t],r,2*t+1,n,e.t-t-1))>=e.DV&&(r[t+e.t]-=e.DV,r[t+e.t+1]=1)}r.t>0&&(r[r.t-1]+=e.am(t,e[t],r,2*t,0,1)),r.s=0,r.clamp()}function k0(r,e,t){var n=r.abs();if(!(n.t<=0)){var i=this.abs();if(i.t<n.t){e?.fromInt(0),t!=null&&this.copyTo(t);return}t==null&&(t=Se());var o=Se(),s=this.s,a=r.s,c=this.DB-$l(n[n.t-1]);c>0?(n.lShiftTo(c,o),i.lShiftTo(c,t)):(n.copyTo(o),i.copyTo(t));var l=o.t,p=o[l-1];if(p!=0){var g=p*(1<<this.F1)+(l>1?o[l-2]>>this.F2:0),h=this.FV/g,d=(1<<this.F1)/g,m=1<<this.F2,f=t.t,y=f-l,v=e??Se();for(o.dlShiftTo(y,v),t.compareTo(v)>=0&&(t[t.t++]=1,t.subTo(v,t)),O.ONE.dlShiftTo(l,v),v.subTo(o,o);o.t<l;)o[o.t++]=0;for(;--y>=0;){var S=t[--f]==p?this.DM:Math.floor(t[f]*h+(t[f-1]+m)*d);if((t[f]+=o.am(0,S,t,y,0,l))<S)for(o.dlShiftTo(y,v),t.subTo(v,t);t[f]<--S;)t.subTo(v,t)}e!=null&&(t.drShiftTo(l,e),s!=a&&O.ZERO.subTo(e,e)),t.t=l,t.clamp(),c>0&&t.rShiftTo(c,t),s<0&&O.ZERO.subTo(t,t)}}}function x0(r){var e=Se();return this.abs().divRemTo(r,null,e),this.s<0&&e.compareTo(O.ZERO)>0&&r.subTo(e,e),e}function no(r){this.m=r}function _0(r){return r.s<0||r.compareTo(this.m)>=0?r.mod(this.m):r}function N0(r){return r}function F0(r){r.divRemTo(this.m,null,r)}function O0(r,e,t){r.multiplyTo(e,t),this.reduce(t)}function D0(r,e){r.squareTo(e),this.reduce(e)}no.prototype.convert=_0;no.prototype.revert=N0;no.prototype.reduce=F0;no.prototype.mulTo=O0;no.prototype.sqrTo=D0;function M0(){if(this.t<1)return 0;var r=this[0];if((r&1)==0)return 0;var e=r&3;return e=e*(2-(r&15)*e)&15,e=e*(2-(r&255)*e)&255,e=e*(2-((r&65535)*e&65535))&65535,e=e*(2-r*e%this.DV)%this.DV,e>0?this.DV-e:-e}function io(r){this.m=r,this.mp=r.invDigit(),this.mpl=this.mp&32767,this.mph=this.mp>>15,this.um=(1<<r.DB-15)-1,this.mt2=2*r.t}function B0(r){var e=Se();return r.abs().dlShiftTo(this.m.t,e),e.divRemTo(this.m,null,e),r.s<0&&e.compareTo(O.ZERO)>0&&this.m.subTo(e,e),e}function H0(r){var e=Se();return r.copyTo(e),this.reduce(e),e}function L0(r){for(;r.t<=this.mt2;)r[r.t++]=0;for(var e=0;e<this.m.t;++e){var t=r[e]&32767,n=t*this.mpl+((t*this.mph+(r[e]>>15)*this.mpl&this.um)<<15)&r.DM;for(t=e+this.m.t,r[t]+=this.m.am(0,n,r,e,0,this.m.t);r[t]>=r.DV;)r[t]-=r.DV,r[++t]++}r.clamp(),r.drShiftTo(this.m.t,r),r.compareTo(this.m)>=0&&r.subTo(this.m,r)}function U0(r,e){r.squareTo(e),this.reduce(e)}function K0(r,e,t){r.multiplyTo(e,t),this.reduce(t)}io.prototype.convert=B0;io.prototype.revert=H0;io.prototype.reduce=L0;io.prototype.mulTo=K0;io.prototype.sqrTo=U0;function q0(){return(this.t>0?this[0]&1:this.s)==0}function j0(r,e){if(r>4294967295||r<1)return O.ONE;var t=Se(),n=Se(),i=e.convert(this),o=$l(r)-1;for(i.copyTo(t);--o>=0;)if(e.sqrTo(t,n),(r&1<<o)>0)e.mulTo(n,i,t);else{var s=t;t=n,n=s}return e.revert(t)}function V0(r,e){var t;return r<256||e.isEven()?t=new no(e):t=new io(e),this.exp(r,t)}O.prototype.copyTo=f0;O.prototype.fromInt=p0;O.prototype.fromString=g0;O.prototype.clamp=m0;O.prototype.dlShiftTo=A0;O.prototype.drShiftTo=w0;O.prototype.lShiftTo=T0;O.prototype.rShiftTo=b0;O.prototype.subTo=I0;O.prototype.multiplyTo=R0;O.prototype.squareTo=P0;O.prototype.divRemTo=k0;O.prototype.invDigit=M0;O.prototype.isEven=q0;O.prototype.exp=j0;O.prototype.toString=v0;O.prototype.negate=y0;O.prototype.abs=C0;O.prototype.compareTo=S0;O.prototype.bitLength=E0;O.prototype.mod=x0;O.prototype.modPowInt=V0;O.ZERO=Zn(0);O.ONE=Zn(1);function G0(){var r=Se();return this.copyTo(r),r}function z0(){if(this.s<0){if(this.t==1)return this[0]-this.DV;if(this.t==0)return-1}else{if(this.t==1)return this[0];if(this.t==0)return 0}return(this[1]&(1<<32-this.DB)-1)<<this.DB|this[0]}function $0(){return this.t==0?this.s:this[0]<<24>>24}function W0(){return this.t==0?this.s:this[0]<<16>>16}function Q0(r){return Math.floor(Math.LN2*this.DB/Math.log(r))}function Y0(){return this.s<0?-1:this.t<=0||this.t==1&&this[0]<=0?0:1}function J0(r){if(r==null&&(r=10),this.signum()==0||r<2||r>36)return"0";var e=this.chunkSize(r),t=Math.pow(r,e),n=Zn(t),i=Se(),o=Se(),s="";for(this.divRemTo(n,i,o);i.signum()>0;)s=(t+o.intValue()).toString(r).substr(1)+s,i.divRemTo(n,i,o);return o.intValue().toString(r)+s}function X0(r,e){this.fromInt(0),e==null&&(e=10);for(var t=this.chunkSize(e),n=Math.pow(e,t),i=!1,o=0,s=0,a=0;a<r.length;++a){var c=Zg(r,a);if(c<0){r.charAt(a)=="-"&&this.signum()==0&&(i=!0);continue}s=e*s+c,++o>=t&&(this.dMultiply(n),this.dAddOffset(s,0),o=0,s=0)}o>0&&(this.dMultiply(Math.pow(e,o)),this.dAddOffset(s,0)),i&&O.ZERO.subTo(this,this)}function Z0(r,e,t){if(typeof e=="number")if(r<2)this.fromInt(1);else for(this.fromNumber(r,t),this.testBit(r-1)||this.bitwiseTo(O.ONE.shiftLeft(r-1),kd,this),this.isEven()&&this.dAddOffset(1,0);!this.isProbablePrime(e);)this.dAddOffset(2,0),this.bitLength()>r&&this.subTo(O.ONE.shiftLeft(r-1),this);else{var n=new Array,i=r&7;n.length=(r>>3)+1,e.nextBytes(n),i>0?n[0]&=(1<<i)-1:n[0]=0,this.fromString(n,256)}}function e1(){var r=this.t,e=new Array;e[0]=this.s;var t=this.DB-r*this.DB%8,n,i=0;if(r-- >0)for(t<this.DB&&(n=this[r]>>t)!=(this.s&this.DM)>>t&&(e[i++]=n|this.s<<this.DB-t);r>=0;)t<8?(n=(this[r]&(1<<t)-1)<<8-t,n|=this[--r]>>(t+=this.DB-8)):(n=this[r]>>(t-=8)&255,t<=0&&(t+=this.DB,--r)),(n&128)!=0&&(n|=-256),i==0&&(this.s&128)!=(n&128)&&++i,(i>0||n!=this.s)&&(e[i++]=n);return e}function t1(r){return this.compareTo(r)==0}function r1(r){return this.compareTo(r)<0?this:r}function n1(r){return this.compareTo(r)>0?this:r}function i1(r,e,t){var n,i,o=Math.min(r.t,this.t);for(n=0;n<o;++n)t[n]=e(this[n],r[n]);if(r.t<this.t){for(i=r.s&this.DM,n=o;n<this.t;++n)t[n]=e(this[n],i);t.t=this.t}else{for(i=this.s&this.DM,n=o;n<r.t;++n)t[n]=e(i,r[n]);t.t=r.t}t.s=e(this.s,r.s),t.clamp()}function o1(r,e){return r&e}function s1(r){var e=Se();return this.bitwiseTo(r,o1,e),e}function kd(r,e){return r|e}function a1(r){var e=Se();return this.bitwiseTo(r,kd,e),e}function em(r,e){return r^e}function c1(r){var e=Se();return this.bitwiseTo(r,em,e),e}function tm(r,e){return r&~e}function l1(r){var e=Se();return this.bitwiseTo(r,tm,e),e}function u1(){for(var r=Se(),e=0;e<this.t;++e)r[e]=this.DM&~this[e];return r.t=this.t,r.s=~this.s,r}function h1(r){var e=Se();return r<0?this.rShiftTo(-r,e):this.lShiftTo(r,e),e}function d1(r){var e=Se();return r<0?this.lShiftTo(-r,e):this.rShiftTo(r,e),e}function f1(r){if(r==0)return-1;var e=0;return(r&65535)==0&&(r>>=16,e+=16),(r&255)==0&&(r>>=8,e+=8),(r&15)==0&&(r>>=4,e+=4),(r&3)==0&&(r>>=2,e+=2),(r&1)==0&&++e,e}function p1(){for(var r=0;r<this.t;++r)if(this[r]!=0)return r*this.DB+f1(this[r]);return this.s<0?this.t*this.DB:-1}function g1(r){for(var e=0;r!=0;)r&=r-1,++e;return e}function m1(){for(var r=0,e=this.s&this.DM,t=0;t<this.t;++t)r+=g1(this[t]^e);return r}function v1(r){var e=Math.floor(r/this.DB);return e>=this.t?this.s!=0:(this[e]&1<<r%this.DB)!=0}function y1(r,e){var t=O.ONE.shiftLeft(r);return this.bitwiseTo(t,e,t),t}function C1(r){return this.changeBit(r,kd)}function S1(r){return this.changeBit(r,tm)}function E1(r){return this.changeBit(r,em)}function A1(r,e){for(var t=0,n=0,i=Math.min(r.t,this.t);t<i;)n+=this[t]+r[t],e[t++]=n&this.DM,n>>=this.DB;if(r.t<this.t){for(n+=r.s;t<this.t;)n+=this[t],e[t++]=n&this.DM,n>>=this.DB;n+=this.s}else{for(n+=this.s;t<r.t;)n+=r[t],e[t++]=n&this.DM,n>>=this.DB;n+=r.s}e.s=n<0?-1:0,n>0?e[t++]=n:n<-1&&(e[t++]=this.DV+n),e.t=t,e.clamp()}function w1(r){var e=Se();return this.addTo(r,e),e}function T1(r){var e=Se();return this.subTo(r,e),e}function b1(r){var e=Se();return this.multiplyTo(r,e),e}function I1(){var r=Se();return this.squareTo(r),r}function R1(r){var e=Se();return this.divRemTo(r,e,null),e}function P1(r){var e=Se();return this.divRemTo(r,null,e),e}function k1(r){var e=Se(),t=Se();return this.divRemTo(r,e,t),new Array(e,t)}function x1(r){this[this.t]=this.am(0,r-1,this,0,0,this.t),++this.t,this.clamp()}function _1(r,e){if(r!=0){for(;this.t<=e;)this[this.t++]=0;for(this[e]+=r;this[e]>=this.DV;)this[e]-=this.DV,++e>=this.t&&(this[this.t++]=0),++this[e]}}function nc(){}function rm(r){return r}function N1(r,e,t){r.multiplyTo(e,t)}function F1(r,e){r.squareTo(e)}nc.prototype.convert=rm;nc.prototype.revert=rm;nc.prototype.mulTo=N1;nc.prototype.sqrTo=F1;function O1(r){return this.exp(r,new nc)}function D1(r,e,t){var n=Math.min(this.t+r.t,e);for(t.s=0,t.t=n;n>0;)t[--n]=0;var i;for(i=t.t-this.t;n<i;++n)t[n+this.t]=this.am(0,r[n],t,n,0,this.t);for(i=Math.min(r.t,e);n<i;++n)this.am(0,r[n],t,n,0,e-n);t.clamp()}function M1(r,e,t){--e;var n=t.t=this.t+r.t-e;for(t.s=0;--n>=0;)t[n]=0;for(n=Math.max(e-this.t,0);n<r.t;++n)t[this.t+n-e]=this.am(e-n,r[n],t,0,0,this.t+n-e);t.clamp(),t.drShiftTo(1,t)}function Ts(r){this.r2=Se(),this.q3=Se(),O.ONE.dlShiftTo(2*r.t,this.r2),this.mu=this.r2.divide(r),this.m=r}function B1(r){if(r.s<0||r.t>2*this.m.t)return r.mod(this.m);if(r.compareTo(this.m)<0)return r;var e=Se();return r.copyTo(e),this.reduce(e),e}function H1(r){return r}function L1(r){for(r.drShiftTo(this.m.t-1,this.r2),r.t>this.m.t+1&&(r.t=this.m.t+1,r.clamp()),this.mu.multiplyUpperTo(this.r2,this.m.t+1,this.q3),this.m.multiplyLowerTo(this.q3,this.m.t+1,this.r2);r.compareTo(this.r2)<0;)r.dAddOffset(1,this.m.t+1);for(r.subTo(this.r2,r);r.compareTo(this.m)>=0;)r.subTo(this.m,r)}function U1(r,e){r.squareTo(e),this.reduce(e)}function K1(r,e,t){r.multiplyTo(e,t),this.reduce(t)}Ts.prototype.convert=B1;Ts.prototype.revert=H1;Ts.prototype.reduce=L1;Ts.prototype.mulTo=K1;Ts.prototype.sqrTo=U1;function q1(r,e){var t=r.bitLength(),n,i=Zn(1),o;if(t<=0)return i;t<18?n=1:t<48?n=3:t<144?n=4:t<768?n=5:n=6,t<8?o=new no(e):e.isEven()?o=new Ts(e):o=new io(e);var s=new Array,a=3,c=n-1,l=(1<<n)-1;if(s[1]=o.convert(this),n>1){var p=Se();for(o.sqrTo(s[1],p);a<=l;)s[a]=Se(),o.mulTo(p,s[a-2],s[a]),a+=2}var g=r.t-1,h,d=!0,m=Se(),f;for(t=$l(r[g])-1;g>=0;){for(t>=c?h=r[g]>>t-c&l:(h=(r[g]&(1<<t+1)-1)<<c-t,g>0&&(h|=r[g-1]>>this.DB+t-c)),a=n;(h&1)==0;)h>>=1,--a;if((t-=a)<0&&(t+=this.DB,--g),d)s[h].copyTo(i),d=!1;else{for(;a>1;)o.sqrTo(i,m),o.sqrTo(m,i),a-=2;a>0?o.sqrTo(i,m):(f=i,i=m,m=f),o.mulTo(m,s[h],i)}for(;g>=0&&(r[g]&1<<t)==0;)o.sqrTo(i,m),f=i,i=m,m=f,--t<0&&(t=this.DB-1,--g)}return o.revert(i)}function j1(r){var e=this.s<0?this.negate():this.clone(),t=r.s<0?r.negate():r.clone();if(e.compareTo(t)<0){var n=e;e=t,t=n}var i=e.getLowestSetBit(),o=t.getLowestSetBit();if(o<0)return e;for(i<o&&(o=i),o>0&&(e.rShiftTo(o,e),t.rShiftTo(o,t));e.signum()>0;)(i=e.getLowestSetBit())>0&&e.rShiftTo(i,e),(i=t.getLowestSetBit())>0&&t.rShiftTo(i,t),e.compareTo(t)>=0?(e.subTo(t,e),e.rShiftTo(1,e)):(t.subTo(e,t),t.rShiftTo(1,t));return o>0&&t.lShiftTo(o,t),t}function V1(r){if(r<=0)return 0;var e=this.DV%r,t=this.s<0?r-1:0;if(this.t>0)if(e==0)t=this[0]%r;else for(var n=this.t-1;n>=0;--n)t=(e*t+this[n])%r;return t}function G1(r){var e=r.isEven();if(this.isEven()&&e||r.signum()==0)return O.ZERO;for(var t=r.clone(),n=this.clone(),i=Zn(1),o=Zn(0),s=Zn(0),a=Zn(1);t.signum()!=0;){for(;t.isEven();)t.rShiftTo(1,t),e?((!i.isEven()||!o.isEven())&&(i.addTo(this,i),o.subTo(r,o)),i.rShiftTo(1,i)):o.isEven()||o.subTo(r,o),o.rShiftTo(1,o);for(;n.isEven();)n.rShiftTo(1,n),e?((!s.isEven()||!a.isEven())&&(s.addTo(this,s),a.subTo(r,a)),s.rShiftTo(1,s)):a.isEven()||a.subTo(r,a),a.rShiftTo(1,a);t.compareTo(n)>=0?(t.subTo(n,t),e&&i.subTo(s,i),o.subTo(a,o)):(n.subTo(t,n),e&&s.subTo(i,s),a.subTo(o,a))}if(n.compareTo(O.ONE)!=0)return O.ZERO;if(a.compareTo(r)>=0)return a.subtract(r);if(a.signum()<0)a.addTo(r,a);else return a;return a.signum()<0?a.add(r):a}var Ot=[2,3,5,7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997],z1=(1<<26)/Ot[Ot.length-1];function $1(r){var e,t=this.abs();if(t.t==1&&t[0]<=Ot[Ot.length-1]){for(e=0;e<Ot.length;++e)if(t[0]==Ot[e])return!0;return!1}if(t.isEven())return!1;for(e=1;e<Ot.length;){for(var n=Ot[e],i=e+1;i<Ot.length&&n<z1;)n*=Ot[i++];for(n=t.modInt(n);e<i;)if(n%Ot[e++]==0)return!1}return t.millerRabin(r)}function W1(r){var e=this.subtract(O.ONE),t=e.getLowestSetBit();if(t<=0)return!1;var n=e.shiftRight(t);r=r+1>>1,r>Ot.length&&(r=Ot.length);for(var i=Se(),o=0;o<r;++o){i.fromInt(Ot[Math.floor(Math.random()*Ot.length)]);var s=i.modPow(n,this);if(s.compareTo(O.ONE)!=0&&s.compareTo(e)!=0){for(var a=1;a++<t&&s.compareTo(e)!=0;)if(s=s.modPowInt(2,this),s.compareTo(O.ONE)==0)return!1;if(s.compareTo(e)!=0)return!1}}return!0}O.prototype.chunkSize=Q0;O.prototype.toRadix=J0;O.prototype.fromRadix=X0;O.prototype.fromNumber=Z0;O.prototype.bitwiseTo=i1;O.prototype.changeBit=y1;O.prototype.addTo=A1;O.prototype.dMultiply=x1;O.prototype.dAddOffset=_1;O.prototype.multiplyLowerTo=D1;O.prototype.multiplyUpperTo=M1;O.prototype.modInt=V1;O.prototype.millerRabin=W1;O.prototype.clone=G0;O.prototype.intValue=z0;O.prototype.byteValue=$0;O.prototype.shortValue=W0;O.prototype.signum=Y0;O.prototype.toByteArray=e1;O.prototype.equals=t1;O.prototype.min=r1;O.prototype.max=n1;O.prototype.and=s1;O.prototype.or=a1;O.prototype.xor=c1;O.prototype.andNot=l1;O.prototype.not=u1;O.prototype.shiftLeft=h1;O.prototype.shiftRight=d1;O.prototype.getLowestSetBit=p1;O.prototype.bitCount=m1;O.prototype.testBit=v1;O.prototype.setBit=C1;O.prototype.clearBit=S1;O.prototype.flipBit=E1;O.prototype.add=w1;O.prototype.subtract=T1;O.prototype.multiply=b1;O.prototype.divide=R1;O.prototype.remainder=P1;O.prototype.divideAndRemainder=k1;O.prototype.modPow=q1;O.prototype.modInverse=G1;O.prototype.pow=O1;O.prototype.gcd=j1;O.prototype.isProbablePrime=$1;O.prototype.square=I1;function xd(){this.i=0,this.j=0,this.S=new Array}function Q1(r){var e,t,n;for(e=0;e<256;++e)this.S[e]=e;for(t=0,e=0;e<256;++e)t=t+this.S[e]+r[e%r.length]&255,n=this.S[e],this.S[e]=this.S[t],this.S[t]=n;this.i=0,this.j=0}function Y1(){var r;return this.i=this.i+1&255,this.j=this.j+this.S[this.i]&255,r=this.S[this.i],this.S[this.i]=this.S[this.j],this.S[this.j]=r,this.S[r+this.S[this.i]&255]}xd.prototype.init=Q1;xd.prototype.next=Y1;function J1(){return new xd}var Td=256;var ql,Xt,yt;function X1(r){Xt[yt++]^=r&255,Xt[yt++]^=r>>8&255,Xt[yt++]^=r>>16&255,Xt[yt++]^=r>>24&255,yt>=Td&&(yt-=Td)}function _d(){X1(new Date().getTime())}if(Xt==null){if(Xt=new Array,yt=0,Cs!==void 0&&(Cs.crypto!==void 0||Cs.msCrypto!==void 0)){if(Sd=Cs.crypto||Cs.msCrypto,Sd.getRandomValues)for(Ed=new Uint8Array(32),Sd.getRandomValues(Ed),sr=0;sr<32;++sr)Xt[yt++]=Ed[sr];

1else if(tc.appName=="Netscape"&&tc.appVersion<"5")for(Ad=Cs.crypto.random(32),sr=0;sr<Ad.length;++sr)Xt[yt++]=Ad.charCodeAt(sr)&255}for(;yt<Td;)sr=Math.floor(65536*Math.random()),Xt[yt++]=sr>>>8,Xt[yt++]=sr&255;yt=0,_d()}var sr,Sd,Ed,Ad;function Z1(){if(ql==null){for(_d(),ql=J1(),ql.init(Xt),yt=0;yt<Xt.length;++yt)Xt[yt]=0;yt=0}return ql.next()}function eC(r){var e;for(e=0;e<r.length;++e)r[e]=Z1()}function bs(){}bs.prototype.nextBytes=eC;function qt(r,e){return new O(r,e)}function se(){this.n=null,this.e=0,this.d=null,this.p=null,this.q=null,this.dmp1=null,this.dmq1=null,this.coeff=null}function tC(r,e){if(this.isPublic=!0,this.isPrivate=!1,typeof r!="string")this.n=r,this.e=e;else if(r!=null&&e!=null&&r.length>0&&e.length>0)this.n=qt(r,16),this.e=parseInt(e,16);else throw"Invalid RSA public key";if(this.n==null||typeof this.n.compareTo!="function"||this.n.compareTo(O.ONE)<=0||this.e==null||isNaN(this.e)||this.e<=0)throw"Invalid RSA public key"}function rC(r){return r.modPowInt(this.e,this.n)}se.prototype.doPublic=rC;se.prototype.setPublic=tC;se.prototype.type="RSA";function nC(r,e,t){if(this.isPrivate=!0,typeof r!="string")this.n=r,this.e=e,this.d=t;else if(r!=null&&e!=null&&r.length>0&&e.length>0)this.n=qt(r,16),this.e=parseInt(e,16),this.d=qt(t,16);else throw"Invalid RSA private key"}function iC(r,e,t,n,i,o,s,a){if(this.isPrivate=!0,this.isPublic=!1,r==null)throw"RSASetPrivateEx N == null";if(e==null)throw"RSASetPrivateEx E == null";if(r.length==0)throw"RSASetPrivateEx N.length == 0";if(e.length==0)throw"RSASetPrivateEx E.length == 0";if(r!=null&&e!=null&&r.length>0&&e.length>0)this.n=qt(r,16),this.e=parseInt(e,16),this.d=qt(t,16),this.p=qt(n,16),this.q=qt(i,16),this.dmp1=qt(o,16),this.dmq1=qt(s,16),this.coeff=qt(a,16);else throw"Invalid RSA private key in RSASetPrivateEx"}function oC(r,e){var t=new bs,n=r>>1;this.e=parseInt(e,16);for(var i=new O(e,16),o=r/2-100,s=O.ONE.shiftLeft(o);;){for(;this.p=new O(r-n,1,t),!(this.p.subtract(O.ONE).gcd(i).compareTo(O.ONE)==0&&this.p.isProbablePrime(10)););for(;this.q=new O(n,1,t),!(this.q.subtract(O.ONE).gcd(i).compareTo(O.ONE)==0&&this.q.isProbablePrime(10)););if(this.p.compareTo(this.q)<=0){var a=this.p;this.p=this.q,this.q=a}var c=this.q.subtract(this.p).abs();if(!(c.bitLength()<o||c.compareTo(s)<=0)){var l=this.p.subtract(O.ONE),p=this.q.subtract(O.ONE),g=l.multiply(p);if(g.gcd(i).compareTo(O.ONE)==0&&(this.n=this.p.multiply(this.q),this.n.bitLength()==r)){this.d=i.modInverse(g),this.dmp1=this.d.mod(l),this.dmq1=this.d.mod(p),this.coeff=this.q.modInverse(this.p);break}}}this.isPrivate=!0}function sC(r){if(this.p==null||this.q==null)return r.modPow(this.d,this.n);for(var e=r.mod(this.p).modPow(this.dmp1,this.p),t=r.mod(this.q).modPow(this.dmq1,this.q);e.compareTo(t)<0;)e=e.add(this.p);return e.subtract(t).multiply(this.coeff).mod(this.p).multiply(this.q).add(t)}se.prototype.doPrivate=sC;se.prototype.setPrivate=nC;se.prototype.setPrivateEx=iC;se.prototype.generate=oC;function pt(r,e){this.x=e,this.q=r}function aC(r){return r==this?!0:this.q.equals(r.q)&&this.x.equals(r.x)}function cC(){return this.x}function lC(){return new pt(this.q,this.x.negate().mod(this.q))}function uC(r){return new pt(this.q,this.x.add(r.toBigInteger()).mod(this.q))}function hC(r){return new pt(this.q,this.x.subtract(r.toBigInteger()).mod(this.q))}function dC(r){return new pt(this.q,this.x.multiply(r.toBigInteger()).mod(this.q))}function fC(){return new pt(this.q,this.x.square().mod(this.q))}function pC(r){return new pt(this.q,this.x.multiply(r.toBigInteger().modInverse(this.q)).mod(this.q))}pt.prototype.equals=aC;pt.prototype.toBigInteger=cC;pt.prototype.negate=lC;pt.prototype.add=uC;pt.prototype.subtract=hC;pt.prototype.multiply=dC;pt.prototype.square=fC;pt.prototype.divide=pC;pt.prototype.sqrt=function(){return new pt(this.q,this.x.sqrt().mod(this.q))};function Ie(r,e,t,n){this.curve=r,this.x=e,this.y=t,n==null?this.z=O.ONE:this.z=n,this.zinv=null}function gC(){return this.zinv==null&&(this.zinv=this.z.modInverse(this.curve.q)),this.curve.fromBigInteger(this.x.toBigInteger().multiply(this.zinv).mod(this.curve.q))}function mC(){return this.zinv==null&&(this.zinv=this.z.modInverse(this.curve.q)),this.curve.fromBigInteger(this.y.toBigInteger().multiply(this.zinv).mod(this.curve.q))}function vC(r){if(r==this)return!0;

1if(this.isInfinity())return r.isInfinity();if(r.isInfinity())return this.isInfinity();var e,t;return e=r.y.toBigInteger().multiply(this.z).subtract(this.y.toBigInteger().multiply(r.z)).mod(this.curve.q),e.equals(O.ZERO)?(t=r.x.toBigInteger().multiply(this.z).subtract(this.x.toBigInteger().multiply(r.z)).mod(this.curve.q),t.equals(O.ZERO)):!1}function yC(){return this.x==null&&this.y==null?!0:this.z.equals(O.ZERO)&&!this.y.toBigInteger().equals(O.ZERO)}function CC(){return new Ie(this.curve,this.x,this.y.negate(),this.z)}function SC(r){if(this.isInfinity())return r;if(r.isInfinity())return this;var e=r.y.toBigInteger().multiply(this.z).subtract(this.y.toBigInteger().multiply(r.z)).mod(this.curve.q),t=r.x.toBigInteger().multiply(this.z).subtract(this.x.toBigInteger().multiply(r.z)).mod(this.curve.q);if(O.ZERO.equals(t))return O.ZERO.equals(e)?this.twice():this.curve.getInfinity();var n=new O("3"),i=this.x.toBigInteger(),o=this.y.toBigInteger(),s=r.x.toBigInteger(),a=r.y.toBigInteger(),c=t.square(),l=c.multiply(t),p=i.multiply(c),g=e.square().multiply(this.z),h=g.subtract(p.shiftLeft(1)).multiply(r.z).subtract(l).multiply(t).mod(this.curve.q),d=p.multiply(n).multiply(e).subtract(o.multiply(l)).subtract(g.multiply(e)).multiply(r.z).add(e.multiply(l)).mod(this.curve.q),m=l.multiply(this.z).multiply(r.z).mod(this.curve.q);return new Ie(this.curve,this.curve.fromBigInteger(h),this.curve.fromBigInteger(d),m)}function EC(){if(this.isInfinity())return this;if(this.y.toBigInteger().signum()==0)return this.curve.getInfinity();var r=new O("3"),e=this.x.toBigInteger(),t=this.y.toBigInteger(),n=t.multiply(this.z),i=n.multiply(t).mod(this.curve.q),o=this.curve.a.toBigInteger(),s=e.square().multiply(r);O.ZERO.equals(o)||(s=s.add(this.z.square().multiply(o))),s=s.mod(this.curve.q);var a=s.square().subtract(e.shiftLeft(3).multiply(i)).shiftLeft(1).multiply(n).mod(this.curve.q),c=s.multiply(r).multiply(e).subtract(i.shiftLeft(1)).shiftLeft(2).multiply(i).subtract(s.square().multiply(s)).mod(this.curve.q),l=n.square().multiply(n).shiftLeft(3).mod(this.curve.q);return new Ie(this.curve,this.curve.fromBigInteger(a),this.curve.fromBigInteger(c),l)}function AC(r){if(this.isInfinity())return this;if(r.signum()==0)return this.curve.getInfinity();var e=r,t=e.multiply(new O("3")),n=this.negate(),i=this,o=this.curve.q.subtract(r),s=o.multiply(new O("3")),a=new Ie(this.curve,this.x,this.y),c=a.negate(),l;for(l=t.bitLength()-2;l>0;--l){i=i.twice();var p=t.testBit(l),g=e.testBit(l);p!=g&&(i=i.add(p?this:n))}for(l=s.bitLength()-2;l>0;--l){a=a.twice();var h=s.testBit(l),d=o.testBit(l);h!=d&&(a=a.add(h?a:c))}return i}function wC(r,e,t){var n;r.bitLength()>t.bitLength()?n=r.bitLength()-1:n=t.bitLength()-1;for(var i=this.curve.getInfinity(),o=this.add(e);n>=0;)i=i.twice(),r.testBit(n)?t.testBit(n)?i=i.add(o):i=i.add(this):t.testBit(n)&&(i=i.add(e)),--n;return i}Ie.prototype.getX=gC;Ie.prototype.getY=mC;Ie.prototype.equals=vC;Ie.prototype.isInfinity=yC;Ie.prototype.negate=CC;Ie.prototype.add=SC;Ie.prototype.twice=EC;Ie.prototype.multiply=AC;Ie.prototype.multiplyTwo=wC;function En(r,e,t){this.q=r,this.a=this.fromBigInteger(e),this.b=this.fromBigInteger(t),this.infinity=new Ie(this,null,null)}function TC(){return this.q}function bC(){return this.a}function IC(){return this.b}function RC(r){return r==this?!0:this.q.equals(r.q)&&this.a.equals(r.a)&&this.b.equals(r.b)}function PC(){return this.infinity}function kC(r){return new pt(this.q,r)}function xC(r){switch(parseInt(r.substr(0,2),16)){case 0:return this.infinity;case 2:case 3:var e=r.substr(0,2),t=r.substr(2),n=this.fromBigInteger(new O(l,16)),i=this.getA(),o=this.getB(),s=n.square().add(i).multiply(n).add(o),a=s.sqrt();return e=="03"&&(a=a.negate()),new Ie(this,n,a);case 4:case 6:case 7:var c=(r.length-2)/2,l=r.substr(2,c),p=r.substr(c+2,c);return new Ie(this,this.fromBigInteger(new O(l,16)),this.fromBigInteger(new O(p,16)));default:return null}}En.prototype.getQ=TC;En.prototype.getA=bC;En.prototype.getB=IC;En.prototype.equals=RC;En.prototype.getInfinity=PC;En.prototype.fromBigInteger=kC;En.prototype.decodePointHex=xC;pt.prototype.getByteLength=function(){return Math.floor((this.toBigInteger().bitLength()+7)/8)};Ie.prototype.getEncoded=function(r){var e=function(o,s){var a=o.toByteArrayUnsigned();if(s<a.length)a=a.slice(a.length-s);else for(;s>a.length;)a.unshift(0);return a},t=this.getX().toBigInteger(),n=this.getY().toBigInteger(),i=e(t,32);return r?n.isEven()?i.unshift(2):i.unshift(3):(i.unshift(4),i=i.concat(e(n,32))),i};Ie.decodeFrom=function(r,e){var t=e[0],n=e.length-1,i=e.slice(1,1+n/2),o=e.slice(1+n/2,1+n);i.unshift(0),o.unshift(0);var s=new O(i),a=new O(o);return new Ie(r,r.fromBigInteger(s),r.fromBigInteger(a))};Ie.decodeFromHex=function(r,e){var t=e.substr(0,2),n=e.length-2,i=e.substr(2,n/2),o=e.substr(2+n/2,n/2),s=new O(i,16),a=new O(o,16);return new Ie(r,r.fromBigInteger(s),r.fromBigInteger(a))};Ie.prototype.add2D=function(r){if(this.isInfinity())return r;if(r.isInfinity())return this;if(this.x.equals(r.x))return this.y.equals(r.y)?this.twice():this.curve.getInfinity();var e=r.x.subtract(this.x),t=r.y.subtract(this.y),n=t.divide(e),i=n.square().subtract(this.x).subtract(r.x),o=n.multiply(this.x.subtract(i)).subtract(this.y);return new Ie(this.curve,i,o)};Ie.prototype.twice2D=function(){if(this.isInfinity())return this;if(this.y.toBigInteger().signum()==0)return this.curve.getInfinity();var r=this.curve.fromBigInteger(O.valueOf(2)),e=this.curve.fromBigInteger(O.valueOf(3)),t=this.x.square().multiply(e).add(this.curve.a).divide(this.y.multiply(r)),n=t.square().subtract(this.x.multiply(r)),i=t.multiply(this.x.subtract(n)).subtract(this.y);return new Ie(this.curve,n,i)};Ie.prototype.multiply2D=function(r){if(this.isInfinity())return this;if(r.signum()==0)return this.curve.getInfinity();var e=r,t=e.multiply(new O("3")),n=this.negate(),i=this,o;for(o=t.bitLength()-2;o>0;--o){i=i.twice();var s=t.testBit(o),a=e.testBit(o);s!=a&&(i=i.add2D(s?this:n))}return i};Ie.prototype.isOnCurve=function(){var r=this.getX().toBigInteger(),e=this.getY().toBigInteger(),t=this.curve.getA

1().toBigInteger(),n=this.curve.getB().toBigInteger(),i=this.curve.getQ(),o=e.multiply(e).mod(i),s=r.multiply(r).multiply(r).add(t.multiply(r)).add(n).mod(i);return o.equals(s)};Ie.prototype.toString=function(){return"("+this.getX().toBigInteger().toString()+","+this.getY().toBigInteger().toString()+")"};Ie.prototype.validate=function(){var r=this.curve.getQ();if(this.isInfinity())throw new Error("Point is at infinity.");var e=this.getX().toBigInteger(),t=this.getY().toBigInteger();if(e.compareTo(O.ONE)<0||e.compareTo(r.subtract(O.ONE))>0)throw new Error("x coordinate out of bounds");if(t.compareTo(O.ONE)<0||t.compareTo(r.subtract(O.ONE))>0)throw new Error("y coordinate out of bounds");if(!this.isOnCurve())throw new Error("Point is not on the curve.");if(this.multiply(r).isInfinity())throw new Error("Point is not a scalar multiple of G.");return!0};var nm=(function(){var r="(?:-?\\b(?:0|[1-9][0-9]*)(?:\\.[0-9]+)?(?:[eE][+-]?[0-9]+)?\\b)",e='(?:[^\\0-\\x08\\x0a-\\x1f"\\\\]|\\\\(?:["/\\\\bfnrt]|u[0-9A-Fa-f]{4}))',t='(?:"'+e+'*")',n=new RegExp("(?:false|true|null|[\\{\\}\\[\\]]|"+r+"|"+t+")","g"),i=new RegExp("\\\\(?:([^u])|u(.{4}))","g"),o={'"':'"',"/":"/","\\":"\\",b:"\b",f:"\f",n:`
2`,r:"\r",t:"	"};function s(g,h,d){return h?o[h]:String.fromCharCode(parseInt(d,16))}var a=new String(""),c="\\",l={"{":Object,"[":Array},p=Object.hasOwnProperty;return function(g,h){var d=g.match(n),m,f=d[0],y=!1;f==="{"?m={}:f==="["?m=[]:(m=[],y=!0);for(var v,S=[m],A=1-y,T=d.length;A<T;++A){f=d[A];var b;switch(f.charCodeAt(0)){default:b=S[0],b[v||b.length]=+f,v=void 0;break;case 34:if(f=f.substring(1,f.length-1),f.indexOf(c)!==-1&&(f=f.replace(i,s)),b=S[0],!v)if(b instanceof Array)v=b.length;else{v=f||a;break}b[v]=f,v=void 0;break;case 91:b=S[0],S.unshift(b[v||b.length]=[]),v=void 0;break;case 93:S.shift();break;case 102:b=S[0],b[v||b.length]=!1,v=void 0;break;case 110:b=S[0],b[v||b.length]=null,v=void 0;break;case 116:b=S[0],b[v||b.length]=!0,v=void 0;break;case 123:b=S[0],S.unshift(b[v||b.length]={}),v=void 0;break;case 125:S.shift();break}}if(y){if(S.length!==1)throw new Error;m=m[0]}else if(S.length)throw new Error;if(h){var D=function(B,C){var E=B[C];if(E&&typeof E=="object"){var I=null;for(var R in E)if(p.call(E,R)&&E!==B){var _=D(E,R);_!==void 0?E[R]=_:(I||(I=[]),I.push(R))}if(I)for(var M=I.length;--M>=0;)delete E[I[M]]}return h.call(B,C,E)};m=D({"":m},"")}return m}})();(typeof u>"u"||!u)&&(u={});(typeof u.asn1>"u"||!u.asn1)&&(u.asn1={});u.asn1.ASN1Util=new function(){this.integerToByteHex=function(r){var e=r.toString(16);return e.length%2==1&&(e="0"+e),e},this.bigIntToMinTwosComplementsHex=function(r){return oc(r)},this.getPEMStringFromHex=function(r,e){return Tt(r,e)},this.newObject=function(r){var e=u,t=e.asn1,n=t.ASN1Object,i=t.DERBoolean,o=t.DERInteger,s=t.DERBitString,a=t.DEROctetString,c=t.DERNull,l=t.DERObjectIdentifier,p=t.DEREnumerated,g=t.DERUTF8String,h=t.DERNumericString,d=t.DERPrintableString,m=t.DERTeletexString,f=t.DERIA5String,y=t.DERUTCTime,v=t.DERGeneralizedTime,S=t.DERVisibleString,A=t.DERBMPString,T=t.DERSequence,b=t.DERSet,D=t.DERTaggedObject,B=t.ASN1Util.newObject;if(r instanceof t.ASN1Object)return r;var C=Object.keys(r);if(C.length!=1)throw new Error("key of param shall be only one.");var E=C[0];if(":asn1:bool:int:bitstr:octstr:null:oid:enum:utf8str:numstr:prnstr:telstr:ia5str:utctime:gentime:visstr:bmpstr:seq:set:tag:".indexOf(":"+E+":")==-1)throw new Error("undefined key: "+E);if(E=="bool")return new i(r[E]);if(E=="int")return new o(r[E]);if(E=="bitstr")return new s(r[E]);if(E=="octstr")return new a(r[E]);if(E=="null")return new c(r[E]);if(E=="oid")return new l(r[E]);if(E=="enum")return new p(r[E]);if(E=="utf8str")return new g(r[E]);if(E=="numstr")return new h(r[E]);if(E=="prnstr")return new d(r[E]);if(E=="telstr")return new m(r[E]);if(E=="ia5str")return new f(r[E]);if(E=="utctime")return new y(r[E]);if(E=="gentime")return new v(r[E]);if(E=="visstr")return new S(r[E]);if(E=="bmpstr")return new A(r[E]);if(E=="asn1")return new n(r[E]);if(E=="seq"){for(var I=r[E],R=[],_=0;_<I.length;_++){var M=B(I[_]);R.push(M)}return new T({array:R})}if(E=="set"){for(var I=r[E],R=[],_=0;_<I.length;_++){var M=B(I[_]);R.push(M)}return new b({array:R})}if(E=="tag"){var k=r[E];if(Object.prototype.toString.call(k)==="[object Array]"&&k.length==3){var N=B(k[2]);return new D({tag:k[0],explicit:k[1],obj:N})}else return new D(k)}},this.jsonToASN1HEX=function(r){var e=this.newObject(r);return e.tohex()}};u.asn1.ASN1Util.oidHexToInt=function(r){for(var i="",e=parseInt(r.substr(0,2),16),t=Math.floor(e/40),n=e%40,i=t+"."+n,o="",s=2;s<r.length;s+=2){var a=parseInt(r.substr(s,2),16),c=("00000000"+a.toString(2)).slice(-8);if(o=o+c.substr(1,7),c.substr(0,1)=="0"){var l=new O(o,2);i=i+"."+l.toString(10),o=""}}return i};u.asn1.ASN1Util.oidIntToHex=function(r){var e=function(a){var c=a.toString(16);return c.length==1&&(c="0"+c),c},t=function(a){var c="",l=new O(a,10),p=l.toString(2),g=7-p.length%7;g==7&&(g=0);for(var h="",d=0;d<g;d++)h+="0";p=h+p;for(var d=0;d<p.length-1;d+=7){var m=p.substr(d,7);d!=p.length-7&&(m="1"+m),c+=e(parseInt(m,2))}return c};if(!r.match(/^[0-9.]+$/))throw"malformed oid string: "+r;var n="",i=r.split("."),o=parseInt(i[0])*40+parseInt(i[1]);n+=e(o),i.splice(0,2);for(var s=0;s<i.length;s++)n+=t(i[s]);return n};u.asn1.ASN1Object=function(r){var e=!0,t=null,n="00",i="00",o="";this.params=null,this.getLengthHexFromValue=function(){if(typeof this.hV>"u"||this.hV==null)throw new Error("this.hV is null or undefined");if(this.hV.length%2==1)throw new Error("value hex must be even length: n="+o.length+",v="+this.hV);var s=this.hV.length/2,a=s.toString(16);if(a.length%2==1&&(a="0"+a),s<128)return a;var c=a.length/2;if(c>15)throw new Error("ASN.1 length too long to represent by 8x: n = "+s.toString(16));var l=128+c;return l.toString(16)+a},this.tohex=function(){return(this.hTLV==null||this.isModified)&&(this.hV=this.getFreshValueHex(),this.hL=this.getLengthHexFromValue(),this.hTLV=this.hT+this.hL+this.hV,this.isModified=!1),this.hTLV},this.getEncodedHex=function(){return this.tohex()},this.getValueHex=function(){return this.tohex(),this.hV},this.getFreshValueHex=function(){return""},this.setByParam=function(s){this.params=s},r!=null&&r.tlv!=null&&(this.hTLV=r.tlv,this.isModified=!1)};u.asn1.DERAbstractString=function(r){u.asn1.DERAbstractString.superclass.constructor.call(this);var e=null,t=null;

2this.getString=function(){return this.s},this.setString=function(n){this.hTLV=null,this.isModified=!0,this.s=n,this.hV=Ql(this.s).toLowerCase()},this.setStringHex=function(n){this.hTLV=null,this.isModified=!0,this.s=null,this.hV=n},this.getFreshValueHex=function(){return this.hV},typeof r<"u"&&(typeof r=="string"?this.setString(r):typeof r.str<"u"?this.setString(r.str):typeof r.hex<"u"&&this.setStringHex(r.hex))};U(u.asn1.DERAbstractString,u.asn1.ASN1Object);u.asn1.DERAbstractTime=function(r){u.asn1.DERAbstractTime.superclass.constructor.call(this);var e=null,t=null;this.localDateToUTC=function(n){var i=n.getTime()+n.getTimezoneOffset()*6e4,o=new Date(i);return o},this.formatDate=function(n,i,o){var s=this.zeroPadding,a=this.localDateToUTC(n),c=String(a.getFullYear());i=="utc"&&(c=c.substr(2,2));var l=s(String(a.getMonth()+1),2),p=s(String(a.getDate()),2),g=s(String(a.getHours()),2),h=s(String(a.getMinutes()),2),d=s(String(a.getSeconds()),2),m=c+l+p+g+h+d;if(o===!0){var f=a.getMilliseconds();if(f!=0){var y=s(String(f),3);y=y.replace(/[0]+$/,""),m=m+"."+y}}return m+"Z"},this.zeroPadding=function(n,i){return n.length>=i?n:new Array(i-n.length+1).join("0")+n},this.setByParam=function(n){this.hV=null,this.hTLV=null,this.params=n},this.getString=function(){},this.setString=function(n){this.hTLV=null,this.isModified=!0,this.params==null&&(this.params={}),this.params.str=n},this.setByDate=function(n){this.hTLV=null,this.isModified=!0,this.params==null&&(this.params={}),this.params.date=n},this.setByDateValue=function(n,i,o,s,a,c){var l=new Date(Date.UTC(n,i-1,o,s,a,c,0));this.setByDate(l)},this.getFreshValueHex=function(){return this.hV}};U(u.asn1.DERAbstractTime,u.asn1.ASN1Object);u.asn1.DERAbstractStructured=function(r){u.asn1.DERAbstractString.superclass.constructor.call(this);var e=null;this.setByASN1ObjectArray=function(t){this.hTLV=null,this.isModified=!0,this.asn1Array=t},this.appendASN1Object=function(t){this.hTLV=null,this.isModified=!0,this.asn1Array.push(t)},this.asn1Array=new Array,typeof r<"u"&&typeof r.array<"u"&&(this.asn1Array=r.array)};U(u.asn1.DERAbstractStructured,u.asn1.ASN1Object);u.asn1.DERBoolean=function(r){u.asn1.DERBoolean.superclass.constructor.call(this),this.hT="01",r==!1?this.hTLV="010100":this.hTLV="0101ff"};U(u.asn1.DERBoolean,u.asn1.ASN1Object);u.asn1.DERInteger=function(r){u.asn1.DERInteger.superclass.constructor.call(this),this.hT="02",this.params=null;var e=oc;this.setByBigInteger=function(t){this.isModified=!0,this.params={bigint:t}},this.setByInteger=function(t){this.isModified=!0,this.params=t},this.setValueHex=function(t){this.isModified=!0,this.params={hex:t}},this.getFreshValueHex=function(){var t=this.params,n=null;if(t==null)throw new Error("value not set");if(typeof t=="object"&&t.hex!=null)return this.hV=t.hex,this.hV;if(typeof t=="number")n=new O(String(t),10);else if(t.int!=null)n=new O(String(t.int),10);else if(t.bigint!=null)n=t.bigint;else throw new Error("wrong parameter");return this.hV=e(n),this.hV},r!=null&&(this.params=r)};U(u.asn1.DERInteger,u.asn1.ASN1Object);u.asn1.DERBitString=function(r){if(r!==void 0&&typeof r.obj<"u"){var e=u.asn1.ASN1Util.newObject(r.obj);r.hex="00"+e.tohex()}u.asn1.DERBitString.superclass.constructor.call(this),this.hT="03",this.setHexValueIncludingUnusedBits=function(t){this.hTLV=null,this.isModified=!0,this.hV=t},this.setUnusedBitsAndHexValue=function(t,n){if(t<0||7<t)throw"unused bits shall be from 0 to 7: u = "+t;var i="0"+t;this.hTLV=null,this.isModified=!0,this.hV=i+n},this.setByBinaryString=function(t){t=t.replace(/0+$/,"");var n=8-t.length%8;n==8&&(n=0),t+="0000000".substr(0,n);for(var i="",o=0;o<t.length-1;o+=8){var s=t.substr(o,8),a=parseInt(s,2).toString(16);a.length==1&&(a="0"+a),i+=a}this.hTLV=null,this.isModified=!0,this.hV="0"+n+i},this.setByBooleanArray=function(t){for(var n="",i=0;i<t.length;i++)t[i]==!0?n+="1":n+="0";this.setByBinaryString(n)},this.newFalseArray=function(t){for(var n=new Array(t),i=0;i<t;i++)n[i]=!1;return n},this.getFreshValueHex=function(){return this.hV},typeof r<"u"&&(typeof r=="string"&&r.toLowerCase().match(/^[0-9a-f]+$/)?this.setHexValueIncludingUnusedBits(r):typeof r.hex<"u"?this.setHexValueIncludingUnusedBits(r.hex):typeof r.bin<"u"?this.setByBinaryString(r.bin):typeof r.array<"u"&&this.setByBo

2oleanArray(r.array))};U(u.asn1.DERBitString,u.asn1.ASN1Object);u.asn1.DEROctetString=function(r){if(r!==void 0&&typeof r.obj<"u"){var e=u.asn1.ASN1Util.newObject(r.obj);r.hex=e.tohex()}u.asn1.DEROctetString.superclass.constructor.call(this,r),this.hT="04"};U(u.asn1.DEROctetString,u.asn1.DERAbstractString);u.asn1.DERNull=function(){u.asn1.DERNull.superclass.constructor.call(this),this.hT="05",this.hTLV="0500"};U(u.asn1.DERNull,u.asn1.ASN1Object);u.asn1.DERObjectIdentifier=function(r){u.asn1.DERObjectIdentifier.superclass.constructor.call(this),this.hT="06",this.setValueHex=function(e){this.hTLV=null,this.isModified=!0,this.s=null,this.hV=e},this.setValueOidString=function(e){var t=um(e);if(t==null)throw new Error("malformed oid string: "+e);this.hTLV=null,this.isModified=!0,this.s=null,this.hV=t},this.setValueName=function(e){var t=u.asn1.x509.OID.name2oid(e);if(t!=="")this.setValueOidString(t);else throw new Error("DERObjectIdentifier oidName undefined: "+e)},this.setValueNameOrOid=function(e){e.match(/^[0-2].[0-9.]+$/)?this.setValueOidString(e):this.setValueName(e)},this.getFreshValueHex=function(){return this.hV},this.setByParam=function(e){typeof e=="string"?this.setValueNameOrOid(e):e.oid!==void 0?this.setValueNameOrOid(e.oid):e.name!==void 0?this.setValueNameOrOid(e.name):e.hex!==void 0&&this.setValueHex(e.hex)},r!==void 0&&this.setByParam(r)};U(u.asn1.DERObjectIdentifier,u.asn1.ASN1Object);u.asn1.DEREnumerated=function(r){u.asn1.DEREnumerated.superclass.constructor.call(this),this.hT="0a",this.setByBigInteger=function(e){this.hTLV=null,this.isModified=!0,this.hV=oc(e)},this.setByInteger=function(e){var t=new O(String(e),10);this.setByBigInteger(t)},this.setValueHex=function(e){this.hV=e},this.getFreshValueHex=function(){return this.hV},typeof r<"u"&&(typeof r.int<"u"?this.setByInteger(r.int):typeof r=="number"?this.setByInteger(r):typeof r.hex<"u"&&this.setValueHex(r.hex))};U(u.asn1.DEREnumerated,u.asn1.ASN1Object);u.asn1.DERUTF8String=function(r){u.asn1.DERUTF8String.superclass.constructor.call(this,r),this.hT="0c"};U(u.asn1.DERUTF8String,u.asn1.DERAbstractString);u.asn1.DERNumericString=function(r){u.asn1.DERNumericString.superclass.constructor.call(this,r),this.hT="12"};U(u.asn1.DERNumericString,u.asn1.DERAbstractString);u.asn1.DERPrintableString=function(r){u.asn1.DERPrintableString.superclass.constructor.call(this,r),this.hT="13"};U(u.asn1.DERPrintableString,u.asn1.DERAbstractString);u.asn1.DERTeletexString=function(r){u.asn1.DERTeletexString.superclass.constructor.call(this,r),this.hT="14"};U(u.asn1.DERTeletexString,u.asn1.DERAbstractString);u.asn1.DERIA5String=function(r){u.asn1.DERIA5String.superclass.constructor.call(this,r),this.hT="16"};U(u.asn1.DERIA5String,u.asn1.DERAbstractString);u.asn1.DERVisibleString=function(r){u.asn1.DERIA5String.superclass.constructor.call(this,r),this.hT="1a"};U(u.asn1.DERVisibleString,u.asn1.DERAbstractString);u.asn1.DERBMPString=function(r){u.asn1.DERBMPString.superclass.constructor.call(this,r),this.hT="1e"};U(u.asn1.DERBMPString,u.asn1.DERAbstractString);u.asn1.DERUTCTime=function(r){u.asn1.DERUTCTime.superclass.constructor.call(this,r),this.hT="17",this.params=void 0,this.getFreshValueHex=function(){var e=this.params;if(this.params==null&&(e={date:new Date}),typeof e=="string")if(e.match(/^[0-9]{12}Z$/)||e.match(/^[0-9]{12}\.[0-9]+Z$/))this.hV=jt(e);else throw new Error("malformed string for UTCTime: "+e);else if(e.str!=null)this.hV=jt(e.str);else if(e.date==null&&e.millis==!0){var t=new Date;this.hV=jt(this.formatDate(t,"utc",!0))}else if(e.date!=null&&e.date instanceof Date){var n=e.millis===!0;this.hV=jt(this.formatDate(e.date,"utc",n))}else e instanceof Date&&(this.hV=jt(this.formatDate(e,"utc")));if(this.hV==null)throw new Error("parameter not specified properly for UTCTime");return this.hV},r!=null&&this.setByParam(r)};U(u.asn1.DERUTCTime,u.asn1.DERAbstractTime);u.asn1.DERGeneralizedTime=function(r){u.asn1.DERGeneralizedTime.superclass.constructor.call(this,r),this.hT="18",this.params=r,this.getFreshValueHex=function(){var e=this.params;if(this.params==null&&(e={date:new Date}),typeof e=="string")if(e.match(/^[0-9]{14}Z$/)||e.match(/^[0-9]{14}\.[0-9]+Z$/))this.hV=jt(e);else throw new Error("malformed string for GeneralizedTime: "+e);else if(e.str!=null)this.hV=jt(e.str);else if(e.date==null&&e.millis==!0){var t=new Date;this.hV=jt(this.formatDate(t,"gen",!0))}else if(e.date!=null&&e.date instanceof Date){var n=e.millis===!0;this.hV=jt(this.formatDate(e.date,"gen",n))}else e instanceof Date&&(this.hV=jt(this.formatDate(e,"gen")));if(this.hV==null)throw new Error("parameter not specified properly for GeneralizedTime");return this.hV},r!=null&&this.setByParam(r)};U(u.asn1.DERGeneralizedTime,u.asn1.DERAbstractTime);u.asn1.DERSequence=function(r){u.asn1.DERSequence.superclass.constructor.call(this,r),this.hT="30",this.getFreshValueHex=function(){for(var e="",t=0;t<this.asn1Array.length;t++){var n=this.asn1Array[t];e+=n.tohex()}return this.hV=e,this.hV}};U(u.asn1.DERSequence,u.asn1.DERAbstractStructured);u.asn1.DERSet=function(r){u.asn1.DERSet.superclass.constructor.call(this,r),this.hT="31",this.sortFlag=!0,this.getFreshValueHex=function(){for(var e=new Array,t=0;t<this.asn1Array.length;t++){var n=this.asn1Array[t];e.push(n.tohex())}return this.sortFlag==!0&&e.sort(),this.hV=e.join(""),this.hV},typeof r<"u"&&typeof r.sortflag<"u"&&r.sortflag==!1&&(this.sortFlag=!1)};U(u.asn1.DERSet,u.asn1.DERAbstractStructured);

2u.asn1.DERTaggedObject=function(r){u.asn1.DERTaggedObject.superclass.constructor.call(this);var e=u.asn1,t=V,n=t.getV,i=t.isASN1HEX,o=e.ASN1Util.newObject;this.hT="a0",this.hV="",this.isExplicit=!0,this.asn1Object=null,this.params={tag:"a0",explicit:!0},this.setASN1Object=function(s,a,c){this.params={tag:a,explicit:s,obj:c}},this.getFreshValueHex=function(){var s=this.params;if(s.explicit==null&&(s.explicit=!0),s.tage!=null&&(s.tag=s.tage,s.explicit=!0),s.tagi!=null&&(s.tag=s.tagi,s.explicit=!1),s.str!=null)this.hV=Ql(s.str);else if(s.hex!=null)this.hV=s.hex;else if(s.obj!=null){var a;s.obj instanceof e.ASN1Object?a=s.obj.tohex():typeof s.obj=="object"&&(a=o(s.obj).tohex()),s.explicit?this.hV=a:this.hV=n(a,0)}else throw new Error("str, hex nor obj not specified");return s.tag==null&&(s.tag="a0"),this.hT=s.tag,this.hTLV=null,this.isModified=!0,this.hV},this.setByParam=function(s){this.params=s},r!==void 0&&this.setByParam(r)};U(u.asn1.DERTaggedObject,u.asn1.ASN1Object);var V=new function(){};V.getLblen=function(r,e){if(r.substr(e+2,1)!="8")return 1;var t=parseInt(r.substr(e+3,1));return t==0?-1:0<t&&t<10?t+1:-2};V.getL=function(r,e){var t=V.getLblen(r,e);return t<1?"":r.substr(e+2,t*2)};V.getVblen=function(r,e){var t,n;return t=V.getL(r,e),t==""?-1:(t.substr(0,1)==="8"?n=new O(t.substr(2),16):n=new O(t,16),n.intValue())};V.getVidx=function(r,e){var t=V.getLblen(r,e);return t<0?t:e+(t+1)*2};V.getV=function(r,e){var t=V.getVidx(r,e),n=V.getVblen(r,e);return r.substr(t,n*2)};V.getTLV=function(r,e){return r.substr(e,2)+V.getL(r,e)+V.getV(r,e)};V.getTLVblen=function(r,e){return 2+V.getLblen(r,e)*2+V.getVblen(r,e)*2};V.getNextSiblingIdx=function(r,e){var t=V.getVidx(r,e),n=V.getVblen(r,e);return t+n*2};V.getChildIdx=function(r,e){var t=V,n=[],i,o,s;i=t.getVidx(r,e),o=t.getVblen(r,e)*2,r.substr(e,2)=="03"&&(i+=2,o-=2),s=0;for(var a=i;s<=o;){var c=t.getTLVblen(r,a);if(s+=c,s<=o&&n.push(a),a+=c,s>=o)break}return n};V.getNthChildIdx=function(r,e,t){var n=V.getChildIdx(r,e);return n[t]};V.getIdxbyList=function(r,e,t,n){var i=V,o,s;return t.length==0?n!==void 0&&r.substr(e,2)!==n?-1:e:(o=t.shift(),s=i.getChildIdx(r,e),o>=s.length?-1:i.getIdxbyList(r,s[o],t,n))};V.getIdxbyListEx=function(r,e,t,n){var i=V,o,s;if(t.length==0)return n!==void 0&&r.substr(e,2)!==n?-1:e;o=t.shift(),s=i.getChildIdx(r,e);for(var a=0,c=0;c<s.length;c++){var l=r.substr(s[c],2);if(typeof o=="number"&&!i.isContextTag(l)&&a==o||typeof o=="string"&&i.isContextTag(l,o))return i.getIdxbyListEx(r,s[c],t,n);i.isContextTag(l)||a++}return-1};V.getTLVbyList=function(r,e,t,n){var i=V,o=i.getIdxbyList(r,e,t,n);return o==-1||o>=r.length?null:i.getTLV(r,o)};V.getTLVbyListEx=function(r,e,t,n){var i=V,o=i.getIdxbyListEx(r,e,t,n);return o==-1?null:i.getTLV(r,o)};V.getVbyList=function(r,e,t,n,i){var o=V,s,a;return s=o.getIdxbyList(r,e,t,n),s==-1||s>=r.length?null:(a=o.getV(r,s),i===!0&&(a=a.substr(2)),a)};V.getVbyListEx=function(r,e,t,n,i){var o=V,s,a,c;return s=o.getIdxbyListEx(r,e,t,n),s==-1?null:(c=o.getV(r,s),r.substr(s,2)=="03"&&i!==!1&&(c=c.substr(2)),c)};V.getInt=function(r,e,t){t==null&&(t=-1);try{var n=r.substr(e,2);if(n!="02"&&n!="03")return t;var i=V.getV(r,e);return n=="02"?parseInt(i,16):dm(i)}catch{return t}};V.getOID=function(r,e,t){t==null&&(t=null);try{if(r.substr(e,2)!="06")return t;var n=V.getV(r,e);return eu(n)}catch{return t}};V.getOIDName=function(r,e,t){t==null&&(t=null);try{var n=V.getOID(r,e,t);if(n==t)return t;var i=u.asn1.x509.OID.oid2name(n);return i==""?n:i}catch{return t}};V.getString=function(r,e,t){t==null&&(t=null);try{var n=V.getV(r,e);return Vt(n)}catch{return t}};V.hextooidstr=function(r){var e=function(g,h){return g.length>=h?g:new Array(h-g.length+1).join("0")+g},t=[],n=r.substr(0,2),i=parseInt(n,16);t[0]=new String(Math.floor(i/40)),t[1]=new String(i%40);for(var o=r.substr(2),s=[],a=0;a<o.length/2;a++)s.push(parseInt(o.substr(a*2,2),16));for(var c=[],l="",a=0;a<s.length;a++)s[a]&128?l=l+e((s[a]&127).toString(2),7):(l=l+e((s[a]&127).toString(2),7),c.push(new String(parseInt(l,2))),l="");var p=t.join(".");return c.length>0&&(p=p+"."+c.join(".")),p};V.dump=function(r,e,t,n){var i=V,o=i.getV,s=i.dump,a=i.getChildIdx,c=r;r instanceof u.asn1.ASN1Object&&(c=r.tohex());var l=function(B,C){if(B.length<=C*2)return B;var E=B.substr(0,C)+"..(total "+B.length/2+"bytes).."+B.substr(B.length-C,C);return E};e===void 0&&(e={ommit_long_octet:32}),t===void 0&&(t=0),n===void 0&&(n="");var p=e.ommit_long_octet,b=c.substr(t,2);if(b=="01"){var g=o(c,t);return g=="00"?n+`BOOLEAN FALSE
3`:n+`BOOLEAN TRUE
4`}if(b=="02"){var g=o(c,t);return n+"INTEGER "+l(g,p)+`
5`}if(b=="03"){var g=o(c,t);if(i.isASN1HEX(g.substr(2))){var h=n+`BITSTRING, encapsulates
6`;return h=h+s(g.substr(2),e,0,n+"  "),h}else return n+"BITSTRING "+l(g,p)+`
7`}if(b=="04"){var g=o(c,t);if(i.isASN1HEX(g)){var h=n+`OCTETSTRING, encapsulates
8`;return h=h+s(g,e,0,n+"  "),h}

8else return n+"OCTETSTRING "+l(g,p)+`
9`}if(b=="05")return n+`NULL
10`;if(b=="06"){var d=o(c,t),m=u.asn1.ASN1Util.oidHexToInt(d),f=u.asn1.x509.OID.oid2name(m),y=m.replace(/\./g," ");return f!=""?n+"ObjectIdentifier "+f+" ("+y+`)
11`:n+"ObjectIdentifier ("+y+`)
12`}if(b=="0a")return n+"ENUMERATED "+parseInt(o(c,t))+`
13`;if(b=="0c")return n+"UTF8String '"+ke(o(c,t))+`'
14`;if(b=="13")return n+"PrintableString '"+ke(o(c,t))+`'
15`;if(b=="14")return n+"TeletexString '"+ke(o(c,t))+`'
16`;if(b=="16")return n+"IA5String '"+ke(o(c,t))+`'
17`;if(b=="17")return n+"UTCTime "+ke(o(c,t))+`
18`;if(b=="18")return n+"GeneralizedTime "+ke(o(c,t))+`
19`;if(b=="1a")return n+"VisualString '"+ke(o(c,t))+`'
20`;if(b=="1e")return n+"BMPString '"+Dd(o(c,t))+`'
21`;if(b=="30"){if(c.substr(t,4)=="3000")return n+`SEQUENCE {}
22`;var h=n+`SEQUENCE
23`,v=a(c,t),S=e;if((v.length==2||v.length==3)&&c.substr(v[0],2)=="06"&&c.substr(v[v.length-1],2)=="04"){var f=i.oidname(o(c,v[0])),A=JSON.parse(JSON.stringify(e));A.x509ExtName=f,S=A}for(var T=0;T<v.length;T++)h=h+s(c,S,v[T],n+"  ");return h}if(b=="31"){for(var h=n+`SET
24`,v=a(c,t),T=0;T<v.length;T++)h=h+s(c,e,v[T],n+"  ");return h}var b=parseInt(b,16);if((b&128)!=0){var D=b&31;if((b&32)!=0){for(var h=n+"["+D+`]
25`,v=a(c,t),T=0;T<v.length;T++)h=h+s(c,e,v[T],n+"  ");return h}else{var g=o(c,t);if(V.isASN1HEX(g)){var h=n+"["+D+`]
26`;return h=h+s(g,e,0,n+"  "),h}else(g.substr(0,8)=="68747470"||e.x509ExtName==="subjectAltName"&&D==2)&&(g=ke(g));var h=n+"["+D+"] "+g+`
27`;return h}}return n+"UNKNOWN("+b+") "+o(c,t)+`
28`};V.parse=function(r){var e=V,t=e.parse,n=e.isASN1HEX,i=e.getV,o=e.getTLV,s=e.getChildIdx,a=u.asn1,c=a.ASN1Util.oidHexToInt,l=a.x509.OID.oid2name,p=ke,g=Dd,h=MC,d={"0c":"utf8str",12:"numstr",13:"prnstr",14:"telstr",16:"ia5str",17:"utctime",18:"gentime","1a":"visstr","1e":"bmpstr",30:"seq",31:"set"},m=function(E){for(var I=[],R=s(E,0),_=0;_<R.length;_++){var M=R[_],k=o(E,M),N=t(k);I.push(N)}return I},f=r.substr(0,2),y={},v=i(r,0);if(f=="01")return r=="0101ff"?{bool:!0}:{bool:!1};if(f=="02")return{int:{hex:v}};if(f=="03")try{if(v.substr(0,2)!="00")throw"not encap";var S=v.substr(2);if(!n(S))throw"not encap";return{bitstr:{obj:t(S)}}}catch{var A=null;return v.length<=10&&(A=pm(v)),A==null?{bitstr:{hex:v}}:{bitstr:{bin:A}}}else if(f=="04")try{if(!n(v))throw"not encap";return{octstr:{obj:t(v)}}}catch{return{octstr:{hex:v}}}else{if(f=="05")return{null:""};if(f=="06"){var T=c(v),b=l(T);return b==""?{oid:T}:{oid:b}}else{if(f=="0a")return v.length>4?{enum:{hex:v}}:{enum:parseInt(v,16)};if(f=="30"||f=="31")return y[d[f]]=m(r),y;if(f=="14"){var D=h(v);return y[d[f]]={str:D},y}else if(f=="1e"){var D=g(v);return y[d[f]]={str:D},y}else if(":0c:12:13:16:17:18:1a:".indexOf(f)!=-1){var D=p(v);return y[d[f]]={str:D},y}else if(f.match(/^8[0-9]$/)){var D=p(v);return D==null|D==""?{tag:{tag:f,explicit:!1,hex:v}}:D.match(/[\x00-\x1F\x7F-\x9F]/)!=null||D.match(/[\u0000-\u001F\u0080–\u009F]/)!=null?{tag:{tag:f,explicit:!1,hex:v}}:{tag:{tag:f,explicit:!1,str:D}}}else if(f.match(/^a[0-9]$/))try{if(!n(v))throw new Error("not encap");return{tag:{tag:f,explicit:!0,obj:t(v)}}}catch{return{tag:{tag:f,explicit:!0,hex:v}}}else{var B=new u.asn1.ASN1Object;B.hV=v;var C=B.getLengthHexFromValue();return{asn1:{tlv:f+C+v}}}}}};V.isContextTag=function(r,e){r=r.toLowerCase();var t,n;try{t=parseInt(r,16)}catch{return-1}if(e===void 0)return(t&192)==128;try{var i=e.match(/^\[[0-9]+\]$/);return i==null||(n=parseInt(e.substr(1,e.length-1),10),n>31)?!1:(t&192)==128&&(t&31)==n}catch{return!1}};V.isASN1HEX=function(r){var e=V;if(r.length%2==1)return!1;var t=e.getVblen(r,0),n=r.substr(0,2),i=e.getL(r,0),o=r.length-n.length-i.length;return o==t*2};V.checkStrictDER=function(r,e,t,n,i){var o=V;if(t===void 0){if(typeof r!="string")throw new Error("not hex string");if(r=r.toLowerCase(),!u.lang.String.isHex(r))throw new Error("not hex string");t=r.length,n=r.length/2,n<128?i=1:i=Math.ceil(n.toString(16))+1}var s=o.getL(r,e);if(s.length>i*2)throw new Error("L of TLV too long: idx="+e);var a=o.getVblen(r,e);if(a>n)throw new Error("value of L too long than hex: idx="+e);var c=o.getTLV(r,e),l=c.length-2-o.getL(r,e).length;if(l!==a*2)throw new Error("V string length and L's value not the same:"+l+"/"+a*2);if(e===0&&r.length!=c.length)throw new Error("total length and TLV length unmatch:"+r.length+"!="+c.length);var p=r.substr(e,2);if(p==="02"){var g=o.getVidx(r,e);if(r.substr(g,2)=="00"&&r.charCodeAt(g+2)<56)throw new Error("not least zeros for DER INTEGER")}if(parseInt(p,16)&32){for(var h=o.getVblen(r,e),d=0,m=o.getChildIdx(r,e),f=0;f<m.length;f++){var y=o.getTLV(r,m[f]);d+=y.length,o.checkStrictDER(r,m[f],t,n,i)}if(h*2!=d)throw new Error("sum of children's TLV length and L unmatch: "+h*2+"!="+d)}};V.oidname=function(r){var e=u.asn1;u.lang.String.isHex(r)&&(r=e.ASN1Util.oidHexToInt(r));var t=e.x509.OID.oid2name(r);return t===""&&(t=r),t};(typeof u>"u"||!u)&&(u={});(typeof u.asn1>"u"||!u.asn1)&&(u.asn1={});(typeof u.asn1.x509>"u"||!u.asn1.x509)&&(u.asn1.x509={});u.asn1.x509.Certificate=function(r){u.asn1.x509.Certificate.superclass.constructor.call(this);var e=u,t=e.asn1,n=t.DERBitString,i=t.DERSequence,o=t.x509,s=o.TBSCertificate,a=o.AlgorithmIdentifier;this.params=void 0,this.setByParam=function(c){this.params=c},this.sign=function(){var c=this.params,l=c.sigalg;c.sigalg.name!=null&&(l=c.sigalg.name);var p=c.tbsobj.tohex(),g=new u.crypto.Signature({alg:l});g.init(c.cakey),g.updateHex(p),c.sighex=g.sign()},this.getPEM=function(){return Tt(this.tohex(),"CERTIFICATE")},this.tohex=function(){var c=this.params;if((c.tbsobj==null||c.tbsobj==null)&&(c.tbsobj=new s(c)),c.sighex==null&&c.cakey!=null&&this.sign(),c.sighex==null)throw new Error("sighex or cakey parameter not defined");var l=[];l.push(c.tbsobj),l.push(new a({name:c.sigalg})),l.push(new n({hex:"00"+c.sighex}));var p=new i({array:l});return p.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&(this.params=r)}

28;U(u.asn1.x509.Certificate,u.asn1.ASN1Object);u.asn1.x509.TBSCertificate=function(r){u.asn1.x509.TBSCertificate.superclass.constructor.call(this);var e=u,t=e.asn1,n=t.x509,i=t.DERTaggedObject,o=t.DERInteger,s=t.DERSequence,a=n.AlgorithmIdentifier,c=n.Time,l=n.X500Name,p=n.Extensions,g=n.SubjectPublicKeyInfo;this.params=null,this.setByParam=function(h){this.params=h},this.tohex=function(){var h=[],d=this.params;if(d.version!=null||d.version!=1){var m=2;d.version!=null&&(m=d.version-1);var f=new i({obj:new o({int:m})});h.push(f)}h.push(new o(d.serial)),h.push(new a({name:d.sigalg})),h.push(new l(d.issuer)),h.push(new s({array:[new c(d.notbefore),new c(d.notafter)]})),h.push(new l(d.subject)),h.push(new g(pe.getKey(d.sbjpubkey))),d.ext!==void 0&&d.ext.length>0&&h.push(new i({tag:"a3",obj:new p(d.ext)}));var y=new u.asn1.DERSequence({array:h});return y.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.x509.TBSCertificate,u.asn1.ASN1Object);u.asn1.x509.Extensions=function(r){u.asn1.x509.Extensions.superclass.constructor.call(this);var e=u,t=e.asn1,n=t.DERSequence,i=t.x509;this.aParam=[],this.setByParam=function(o){this.aParam=o},this.tohex=function(){for(var o=[],s=0;s<this.aParam.length;s++){var a=this.aParam[s],c=a.extname,l=null;if(a.extn!=null)l=new i.PrivateExtension(a);else if(c=="subjectKeyIdentifier")l=new i.SubjectKeyIdentifier(a);else if(c=="keyUsage")l=new i.KeyUsage(a);else if(c=="subjectAltName")l=new i.SubjectAltName(a);else if(c=="issuerAltName")l=new i.IssuerAltName(a);else if(c=="basicConstraints")l=new i.BasicConstraints(a);else if(c=="nameConstraints")l=new i.NameConstraints(a);else if(c=="cRLDistributionPoints")l=new i.CRLDistributionPoints(a);else if(c=="certificatePolicies")l=new i.CertificatePolicies(a);else if(c=="policyMappings")l=new i.PolicyMappings(a);else if(c=="policyConstraints")l=new i.PolicyConstraints(a);else if(c=="inhibitAnyPolicy")l=new i.InhibitAnyPolicy(a);else if(c=="authorityKeyIdentifier")l=new i.AuthorityKeyIdentifier(a);else if(c=="extKeyUsage")l=new i.ExtKeyUsage(a);else if(c=="authorityInfoAccess")l=new i.AuthorityInfoAccess(a);else if(c=="cRLNumber")l=new i.CRLNumber(a);else if(c=="cRLReason")l=new i.CRLReason(a);else if(c=="ocspNonce")l=new i.OCSPNonce(a);else if(c=="ocspNoCheck")l=new i.OCSPNoCheck(a);else if(c=="adobeTimeStamp")l=new i.AdobeTimeStamp(a);else if(c=="subjectDirectoryAttributes")l=new i.SubjectDirectoryAttributes(a);else throw new Error("extension not supported:"+JSON.stringify(a));l!=null&&o.push(l)}var p=new n({array:o});return p.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.x509.Extensions,u.asn1.ASN1Object);u.asn1.x509.Extension=function(r){u.asn1.x509.Extension.superclass.constructor.call(this);var e=null,t=u,n=t.asn1,i=n.DERObjectIdentifier,o=n.DEROctetString,s=n.DERBitString,a=n.DERBoolean,c=n.DERSequence;this.tohex=function(){var l=new i({oid:this.oid}),p=new o({hex:this.getExtnValueHex()}),g=new Array;g.push(l),this.critical&&g.push(new a),g.push(p);var h=new c({array:g});return h.tohex()},this.getEncodedHex=function(){return this.tohex()},this.critical=!1,r!==void 0&&r.critical!==void 0&&(this.critical=r.critical)};U(u.asn1.x509.Extension,u.asn1.ASN1Object);u.asn1.x509.KeyUsage=function(r){u.asn1.x509.KeyUsage.superclass.constructor.call(this,r);var e=Error,t={digitalSignature:0,nonRepudiation:1,keyEncipherment:2,dataEncipherment:3,keyAgreement:4,keyCertSign:5,cRLSign:6,encipherOnly:7,decipherOnly:8};this.getExtnValueHex=function(){var n=this.getBinValue();return this.asn1ExtnValue=new u.asn1.DERBitString({bin:n}),this.asn1ExtnValue.tohex()},this.getBinValue=function(){var n=this.params;if(typeof n!="object"||typeof n.names!="object"&&typeof n.bin!="string")throw new e("parameter not yet set");if(n.names!=null)return Gl(n.names,t);if(n.bin!=null)return n.bin;throw new e("parameter not set properly")},this.oid="2.5.29.15",r!==void 0&&(this.params=r)};U(u.asn1.x509.KeyUsage,u.asn1.x509.Extension);u.asn1.x509.BasicConstraints=function(r){u.asn1.x509.BasicConstraints.superclass.constructor.call(this,r);var e=u.asn1,t=e.DERBoolean,n=e.DERInteger,i=e.DERSequence,o=!1,s=-1;this.getExtnValueHex=function(){var a=new Array;this.cA&&a.push(new t),this.pathLen>-1&&a.push(new n({int:this.pathLen}));var c=new i({array:a});return this.asn1ExtnValue=c,this.asn1ExtnValue.tohex()},this.oid="2.5.29.19",this.cA=!1,this.pathLen=-1,r!==void 0&&(r.cA!==void 0&&(this.cA=r.cA),r.pathLen!==void 0&&(this.pathLen=r.pathLen))};U(u.asn1.x509.BasicConstraints,u.asn1.x509.Extension);u.asn1.x509.CRLDistributionPoints=function(r){u.asn1.x509.CRLDistributionPoints.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.x509;this.getExtnValueHex=function(){return this.asn1ExtnValue.tohex()},this.setByDPArray=function(i){for(var o=[],s=0;s<i.length;s++)if(i[s]instanceof u.asn1.ASN1Object)o.push(i[s]);else{var a=new n.DistributionPoint(i[s]);o.push(a)}this.asn1ExtnValue=new t.DERSequence({array:o})},this.setByOneURI=function(i){var o=new n.DistributionPoint({fulluri:i});

28this.setByDPArray([o])},this.oid="2.5.29.31",r!==void 0&&(r.array!==void 0?this.setByDPArray(r.array):r.uri!==void 0&&this.setByOneURI(r.uri))};U(u.asn1.x509.CRLDistributionPoints,u.asn1.x509.Extension);u.asn1.x509.DistributionPoint=function(r){u.asn1.x509.DistributionPoint.superclass.constructor.call(this);var e=null,t=u,n=t.asn1,i=n.x509.DistributionPointName;this.tohex=function(){var o=new n.DERSequence;if(this.asn1DP!=null){var s=new n.DERTaggedObject({explicit:!0,tag:"a0",obj:this.asn1DP});o.appendASN1Object(s)}return this.hTLV=o.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&(r.dpobj!==void 0?this.asn1DP=r.dpobj:r.dpname!==void 0?this.asn1DP=new i(r.dpname):r.fulluri!==void 0&&(this.asn1DP=new i({full:[{uri:r.fulluri}]})))};U(u.asn1.x509.DistributionPoint,u.asn1.ASN1Object);u.asn1.x509.DistributionPointName=function(r){u.asn1.x509.DistributionPointName.superclass.constructor.call(this);var e=null,t=null,n=null,i=null,o=u,s=o.asn1,a=s.DERTaggedObject;if(this.tohex=function(){if(this.type!="full")throw new Error("currently type shall be 'full': "+this.type);return this.asn1Obj=new a({explicit:!1,tag:this.tag,obj:this.asn1V}),this.hTLV=this.asn1Obj.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0)if(s.x509.GeneralNames.prototype.isPrototypeOf(r))this.type="full",this.tag="a0",this.asn1V=r;else if(r.full!==void 0)this.type="full",this.tag="a0",this.asn1V=new s.x509.GeneralNames(r.full);else throw new Error("This class supports GeneralNames only as argument")};U(u.asn1.x509.DistributionPointName,u.asn1.ASN1Object);u.asn1.x509.CertificatePolicies=function(r){u.asn1.x509.CertificatePolicies.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.x509,i=t.DERSequence,o=n.PolicyInformation;this.params=null,this.getExtnValueHex=function(){for(var s=[],a=0;a<this.params.array.length;a++)s.push(new o(this.params.array[a]));var c=new i({array:s});return this.asn1ExtnValue=c,this.asn1ExtnValue.tohex()},this.oid="2.5.29.32",r!==void 0&&(this.params=r)};U(u.asn1.x509.CertificatePolicies,u.asn1.x509.Extension);u.asn1.x509.PolicyInformation=function(r){u.asn1.x509.PolicyInformation.superclass.constructor.call(this,r);var e=u.asn1,t=e.DERSequence,n=e.DERObjectIdentifier,i=e.x509.PolicyQualifierInfo;this.params=null,this.tohex=function(){if(this.params.policyoid===void 0&&this.params.array===void 0)throw new Error("parameter oid and array missing");var o=[new n(this.params.policyoid)];if(this.params.array!==void 0){for(var s=[],a=0;a<this.params.array.length;a++)s.push(new i(this.params.array[a]));s.length>0&&o.push(new t({array:s}))}var c=new t({array:o});return c.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&(this.params=r)};U(u.asn1.x509.PolicyInformation,u.asn1.ASN1Object);u.asn1.x509.PolicyQualifierInfo=function(r){u.asn1.x509.PolicyQualifierInfo.superclass.constructor.call(this,r);var e=u.asn1,t=e.DERSequence,n=e.DERIA5String,i=e.DERObjectIdentifier,o=e.x509.UserNotice;this.params=null,this.tohex=function(){if(this.params.cps!==void 0){var s=new t({array:[new i({oid:"1.3.6.1.5.5.7.2.1"}),new n({str:this.params.cps})]});return s.tohex()}if(this.params.unotice!=null){var s=new t({array:[new i({oid:"1.3.6.1.5.5.7.2.2"}),new o(this.params.unotice)]});return s.tohex()}},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&(this.params=r)};U(u.asn1.x509.PolicyQualifierInfo,u.asn1.ASN1Object);u.asn1.x509.UserNotice=function(r){u.asn1.x509.UserNotice.superclass.constructor.call(this,r);var e=u.asn1.DERSequence,t=u.asn1.DERInteger,n=u.asn1.x509.DisplayText,i=u.asn1.x509.NoticeReference;this.params=null,this.tohex=function(){var o=[];this.params.noticeref!==void 0&&o.push(new i(this.params.noticeref)),this.params.exptext!==void 0&&o.push(new n(this.params.exptext));var s=new e({array:o});return s.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&(this.params=r)};U(u.asn1.x509.UserNotice,u.asn1.ASN1Object);u.asn1.x509.NoticeReference=function(r){u.asn1.x509.NoticeReference.superclass.constructor.call(this,r);var e=u.asn1.DERSequence,t=u.asn1.DERInteger,n=u.asn1.x509.DisplayText;this.params=null,this.tohex=function(){var i=[];if(this.params.org!==void 0&&i.push(new n(this.params.org)),this.params.noticenum!==void 0){for(var o=[],s=this.params.noticenum,a=0;a<s.length;a++)o.push(new t(s[a]));i.push(new e({array:o}))}if(i.length==0)throw new Error("parameter is empty");var c=new e({array:i});return c.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&(this.params=r)}

28;U(u.asn1.x509.NoticeReference,u.asn1.ASN1Object);u.asn1.x509.DisplayText=function(r){u.asn1.x509.DisplayText.superclass.constructor.call(this,r),this.hT="0c",r!==void 0&&(r.type==="ia5"?this.hT="16":r.type==="vis"?this.hT="1a":r.type==="bmp"&&(this.hT="1e"))};U(u.asn1.x509.DisplayText,u.asn1.DERAbstractString);u.asn1.x509.PolicyMappings=function(r){u.asn1.x509.PolicyMappings.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.x509,i=t.ASN1Util.newObject;this.params=null,this.getExtnValueHex=function(){for(var o=this.params,s=[],a=0;a<o.array.length;a++){var c=o.array[a];s.push({seq:[{oid:c[0]},{oid:c[1]}]})}return this.asn1ExtnValue=i({seq:s}),this.asn1ExtnValue.tohex()},this.oid="2.5.29.33",r!==void 0&&(this.params=r)};U(u.asn1.x509.PolicyMappings,u.asn1.x509.Extension);u.asn1.x509.PolicyConstraints=function(r){u.asn1.x509.PolicyConstraints.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.x509,i=t.ASN1Util.newObject;this.params=null,this.getExtnValueHex=function(){var o=this.params,s=[];return o.reqexp!=null&&s.push({tag:{tagi:"80",obj:{int:o.reqexp}}}),o.inhibit!=null&&s.push({tag:{tagi:"81",obj:{int:o.inhibit}}}),this.asn1ExtnValue=i({seq:s}),this.asn1ExtnValue.tohex()},this.oid="2.5.29.36",r!==void 0&&(this.params=r)};U(u.asn1.x509.PolicyConstraints,u.asn1.x509.Extension);u.asn1.x509.InhibitAnyPolicy=function(r){u.asn1.x509.InhibitAnyPolicy.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.x509,i=t.ASN1Util.newObject;this.params=null,this.getExtnValueHex=function(){return this.asn1ExtnValue=i({int:this.params.skip}),this.asn1ExtnValue.tohex()},this.oid="2.5.29.54",r!==void 0&&(this.params=r)};U(u.asn1.x509.InhibitAnyPolicy,u.asn1.x509.Extension);u.asn1.x509.NameConstraints=function(r){u.asn1.x509.NameConstraints.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.x509,i=t.ASN1Util.newObject,o=n.GeneralSubtree;this.params=null,this.getExtnValueHex=function(){var s=this.params,a=[];if(s.permit!=null&&s.permit.length!=null){for(var c=[],l=0;l<s.permit.length;l++)c.push(new o(s.permit[l]));a.push({tag:{tagi:"a0",obj:{seq:c}}})}if(s.exclude!=null&&s.exclude.length!=null){for(var p=[],l=0;l<s.exclude.length;l++)p.push(new o(s.exclude[l]));a.push({tag:{tagi:"a1",obj:{seq:p}}})}return this.asn1ExtnValue=i({seq:a}),this.asn1ExtnValue.tohex()},this.oid="2.5.29.30",r!==void 0&&(this.params=r)};U(u.asn1.x509.NameConstraints,u.asn1.x509.Extension);u.asn1.x509.GeneralSubtree=function(r){u.asn1.x509.GeneralSubtree.superclass.constructor.call(this);var e=u.asn1,t=e.x509,n=t.GeneralName,i=e.ASN1Util.newObject;this.params=null,this.setByParam=function(o){this.params=o},this.tohex=function(){var o=this.params,s=[new n(o)];o.min!=null&&s.push({tag:{tagi:"80",obj:{int:o.min}}}),o.max!=null&&s.push({tag:{tagi:"81",obj:{int:o.max}}});var a=i({seq:s});return a.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.x509.GeneralSubtree,u.asn1.ASN1Object);u.asn1.x509.ExtKeyUsage=function(r){u.asn1.x509.ExtKeyUsage.superclass.constructor.call(this,r);var e=u,t=e.asn1;this.setPurposeArray=function(n){this.asn1ExtnValue=new t.DERSequence;for(var i=0;i<n.length;i++){var o=new t.DERObjectIdentifier(n[i]);this.asn1ExtnValue.appendASN1Object(o)}},this.getExtnValueHex=function(){return this.asn1ExtnValue.tohex()},this.oid="2.5.29.37",r!==void 0&&r.array!==void 0&&this.setPurposeArray(r.array)};U(u.asn1.x509.ExtKeyUsage,u.asn1.x509.Extension);u.asn1.x509.AuthorityKeyIdentifier=function(r){u.asn1.x509.AuthorityKeyIdentifier.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.DERTaggedObject,i=t.x509.GeneralNames,o=e.crypto.Util.isKey;this.asn1KID=null,this.asn1CertIssuer=null,this.asn1CertSN=null,this.getExtnValueHex=function(){var s=new Array;this.asn1KID&&s.push(new n({explicit:!1,tag:"80",obj:this.asn1KID})),this.asn1CertIssuer&&s.push(new n({explicit:!1,tag:"a1",obj:new i([{dn:this.asn1CertIssuer}])})),this.asn1CertSN&&s.push(new n({explicit:!1,tag:"82",obj:this.asn1CertSN}));var a=new t.DERSequence({array:s});return this.asn1ExtnValue=a,this.asn1ExtnValue.tohex()},this.setKIDByParam=function(s){if(s.str!==void 0||s.hex!==void 0)this.asn1KID=new u.asn1.DEROctetString(s);else if(typeof s=="object"&&u.crypto.Util.isKey(s)||typeof s=="string"&&s.indexOf("BEGIN ")!=-1){var a=s;typeof s=="string"&&(a=pe.getKey(s));var c=pe.getKeyID(a);this.asn1KID=new u.asn1.DEROctetString({hex:c})}},this.setCertIssuerByParam=function(s){s.str!==void 0||s.ldapstr!==void 0||s.hex!==void 0||s.certsubject!==void 0||s.certissuer!==void 0?this.asn1CertIssuer=new u.asn1.x509.X500Name(s):typeof s=="string"&&s.indexOf("BEGIN ")!=-1&&s.indexOf("CERTIFICATE")!=-1&&(this.asn1CertIssuer=new u.asn1.x509.X500Name({certissuer:s}))},this.setCertSNByParam=function(s){if(s.str!==void 0||s.bigint!==void 0||s.hex!==void 0)this.asn1CertSN=new u.asn1.DERInteger(s);else if(typeof s=="string"&&s.indexOf("BEGIN ")!=-1&&s.indexOf("CERTIFICATE")){var a=new Z;a.readCertPEM(s);var c=a.getSerialNumberHex();this.asn1CertSN=new u.asn1.DERInteger({hex:c})}},this.oid="2.5.29.35",r!==void 0&&(r.kid!==void 0&&this.setKIDByParam(r.kid),r.issuer!==void 0&&this.setCertIssuerByParam(r.issuer),r.sn!==void 0&&this.setCertSNByParam(r.sn),r.issuersn!==void 0&&typeof r.issuersn=="str

28ing"&&r.issuersn.indexOf("BEGIN ")!=-1&&r.issuersn.indexOf("CERTIFICATE")&&(this.setCertSNByParam(r.issuersn),this.setCertIssuerByParam(r.issuersn)))};U(u.asn1.x509.AuthorityKeyIdentifier,u.asn1.x509.Extension);u.asn1.x509.SubjectKeyIdentifier=function(r){u.asn1.x509.SubjectKeyIdentifier.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.DEROctetString;this.asn1KID=null,this.getExtnValueHex=function(){return this.asn1ExtnValue=this.asn1KID,this.asn1ExtnValue.tohex()},this.setKIDByParam=function(i){if(i.str!==void 0||i.hex!==void 0)this.asn1KID=new n(i);else if(typeof i=="object"&&u.crypto.Util.isKey(i)||typeof i=="string"&&i.indexOf("BEGIN")!=-1){var o=i;typeof i=="string"&&(o=pe.getKey(i));var s=pe.getKeyID(o);this.asn1KID=new u.asn1.DEROctetString({hex:s})}},this.oid="2.5.29.14",r!==void 0&&r.kid!==void 0&&this.setKIDByParam(r.kid)};U(u.asn1.x509.SubjectKeyIdentifier,u.asn1.x509.Extension);u.asn1.x509.AuthorityInfoAccess=function(r){u.asn1.x509.AuthorityInfoAccess.superclass.constructor.call(this,r),this.setAccessDescriptionArray=function(e){for(var t=new Array,n=u,i=n.asn1,o=i.DERSequence,s=i.DERObjectIdentifier,a=i.x509.GeneralName,c=0;c<e.length;c++){var l,p=e[c];if(p.ocsp!==void 0)l=new o({array:[new s({oid:"1.3.6.1.5.5.7.48.1"}),new a({uri:p.ocsp})]});else if(p.caissuer!==void 0)l=new o({array:[new s({oid:"1.3.6.1.5.5.7.48.2"}),new a({uri:p.caissuer})]});else throw new Error("unknown AccessMethod parameter: "+JSON.stringify(p));t.push(l)}this.asn1ExtnValue=new o({array:t})},this.getExtnValueHex=function(){return this.asn1ExtnValue.tohex()},this.oid="1.3.6.1.5.5.7.1.1",r!==void 0&&r.array!==void 0&&this.setAccessDescriptionArray(r.array)};U(u.asn1.x509.AuthorityInfoAccess,u.asn1.x509.Extension);u.asn1.x509.SubjectAltName=function(r){u.asn1.x509.SubjectAltName.superclass.constructor.call(this,r),this.setNameArray=function(e){this.asn1ExtnValue=new u.asn1.x509.GeneralNames(e)},this.getExtnValueHex=function(){return this.asn1ExtnValue.tohex()},this.oid="2.5.29.17",r!==void 0&&r.array!==void 0&&this.setNameArray(r.array)};U(u.asn1.x509.SubjectAltName,u.asn1.x509.Extension);u.asn1.x509.IssuerAltName=function(r){u.asn1.x509.IssuerAltName.superclass.constructor.call(this,r),this.setNameArray=function(e){this.asn1ExtnValue=new u.asn1.x509.GeneralNames(e)},this.getExtnValueHex=function(){return this.asn1ExtnValue.tohex()},this.oid="2.5.29.18",r!==void 0&&r.array!==void 0&&this.setNameArray(r.array)};U(u.asn1.x509.IssuerAltName,u.asn1.x509.Extension);u.asn1.x509.SubjectDirectoryAttributes=function(r){u.asn1.x509.SubjectDirectoryAttributes.superclass.constructor.call(this,r);var e=u.asn1,t=e.DERSequence,n=e.ASN1Util.newObject,i=e.x509.OID.name2oid;this.params=null,this.getExtnValueHex=function(){for(var o=[],s=0;s<this.params.array.length;s++){var a=this.params.array[s];if(a.attr!=null&&a.array!=null){var c={seq:[{oid:a.attr},{set:a.array}]};o.push(n(c));continue}var l={seq:[{oid:"1.2.3.4"},{set:[{utf8str:"DE"}]}]};if(a.attr=="dateOfBirth")l.seq[0].oid=i(a.attr),l.seq[1].set[0]={gentime:a.str};else if(a.attr=="placeOfBirth")l.seq[0].oid=i(a.attr),l.seq[1].set[0]={utf8str:a.str};else if(a.attr=="gender")l.seq[0].oid=i(a.attr),l.seq[1].set[0]={prnstr:a.str};else if(a.attr=="countryOfCitizenship")l.seq[0].oid=i(a.attr),l.seq[1].set[0]={prnstr:a.str};else if(a.attr=="countryOfResidence")l.seq[0].oid=i(a.attr),l.seq[1].set[0]={prnstr:a.str};else throw new Error("unsupported attribute: "+a.attr);o.push(new n(l))}var p=new t({array:o});return this.asn1ExtnValue=p,this.asn1ExtnValue.tohex()},this.oid="2.5.29.9",r!==void 0&&(this.params=r)};U(u.asn1.x509.SubjectDirectoryAttributes,u.asn1.x509.Extension);u.asn1.x509.PrivateExtension=function(r){u.asn1.x509.PrivateExtension.superclass.constructor.call(this,r);var e=u,t=e.lang.String.isHex,n=e.asn1,i=n.x509.OID.name2oid,o=n.ASN1Util.newObject;this.params=null,this.setByParam=function(s){this.oid=i(s.extname),this.params=s},this.getExtnValueHex=function(){if(this.params.extname==null||this.params.extn==null)throw new Error("extname or extnhex not specified");var s=this.params.extn;if(typeof s=="string"&&t(s))return s;if(typeof s=="object")try{return o(s).tohex()}catch{}throw new Error("unsupported extn value")},r!=null&&this.setByParam(r)};U(u.asn1.x509.PrivateExtension,u.asn1.x509.Extension);u.asn1.x509.CRL=function(r){u.asn1.x509.CRL.superclass.constructor.call(this);var e=u,t=e.asn1,n=t.DERSequence,i=t.DERBitString,o=t.x509,s=o.AlgorithmIdentifier,a=o.TBSCertList;this.params=void 0,this.setByParam=function(c){this.params=c},this.sign=function(){var c=new a(this.params).tohex(),l=new u.crypto.Signature({alg:this.params.sigalg});l.init(this.params.cakey),l.updateHex(c);var p=l.sign();this.params.sighex=p},this.getPEM=function(){return Tt(this.tohex(),"X509 CRL")},this.tohex=function(){var c=this.params;if(c.tbsobj==null&&(c.tbsobj=new a(c)),c.sighex==null&&c.cakey!=null&&this.sign(),c.sighex==null)throw new Error("sighex or cakey parameter not defined");var l=[];l.push(c.tbsobj),l.push(new s({name:c.sigalg})),l.push(new i({hex:"00"+c.sighex}));var p=new n({array:l});return p.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&(this.params=r)}

28;U(u.asn1.x509.CRL,u.asn1.ASN1Object);u.asn1.x509.TBSCertList=function(r){u.asn1.x509.TBSCertList.superclass.constructor.call(this);var e=u,t=e.asn1,n=t.DERInteger,i=t.DERSequence,o=t.DERTaggedObject,s=t.DERObjectIdentifier,a=t.x509,c=a.AlgorithmIdentifier,l=a.Time,p=a.Extensions,g=a.X500Name;this.params=null,this.setByParam=function(h){this.params=h},this.getRevCertSequence=function(){for(var h=[],d=this.params.revcert,m=0;m<d.length;m++){var f=[new n(d[m].sn),new l(d[m].date)];d[m].ext!=null&&f.push(new p(d[m].ext)),h.push(new i({array:f}))}return new i({array:h})},this.tohex=function(){var h=[],d=this.params;if(d.version!=null){var m=d.version-1,f=new n({int:m});h.push(f)}if(h.push(new c({name:d.sigalg})),h.push(new g(d.issuer)),h.push(new l(d.thisupdate)),d.nextupdate!=null&&h.push(new l(d.nextupdate)),d.revcert!=null&&h.push(this.getRevCertSequence()),d.ext!=null){var y=new p(d.ext);h.push(new o({tag:"a0",explicit:!0,obj:y}))}var v=new i({array:h});return v.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.x509.TBSCertList,u.asn1.ASN1Object);u.asn1.x509.CRLEntry=function(r){u.asn1.x509.CRLEntry.superclass.constructor.call(this);var e=null,t=null,n=u,i=n.asn1;this.setCertSerial=function(o){this.sn=new i.DERInteger(o)},this.setRevocationDate=function(o){this.time=new i.x509.Time(o)},this.tohex=function(){var o=new i.DERSequence({array:[this.sn,this.time]});return this.TLV=o.tohex(),this.TLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&(r.time!==void 0&&this.setRevocationDate(r.time),r.sn!==void 0&&this.setCertSerial(r.sn))};U(u.asn1.x509.CRLEntry,u.asn1.ASN1Object);u.asn1.x509.CRLNumber=function(r){u.asn1.x509.CRLNumber.superclass.constructor.call(this,r),this.params=void 0,this.getExtnValueHex=function(){return this.asn1ExtnValue=new u.asn1.DERInteger(this.params.num),this.asn1ExtnValue.tohex()},this.oid="2.5.29.20",r!=null&&(this.params=r)};U(u.asn1.x509.CRLNumber,u.asn1.x509.Extension);u.asn1.x509.CRLReason=function(r){u.asn1.x509.CRLReason.superclass.constructor.call(this,r),this.params=void 0,this.getExtnValueHex=function(){return this.asn1ExtnValue=new u.asn1.DEREnumerated(this.params.code),this.asn1ExtnValue.tohex()},this.oid="2.5.29.21",r!=null&&(this.params=r)};U(u.asn1.x509.CRLReason,u.asn1.x509.Extension);u.asn1.x509.OCSPNonce=function(r){u.asn1.x509.OCSPNonce.superclass.constructor.call(this,r),this.params=void 0,this.getExtnValueHex=function(){return this.asn1ExtnValue=new u.asn1.DEROctetString(this.params),this.asn1ExtnValue.tohex()},this.oid="1.3.6.1.5.5.7.48.1.2",r!=null&&(this.params=r)};U(u.asn1.x509.OCSPNonce,u.asn1.x509.Extension);u.asn1.x509.OCSPNoCheck=function(r){u.asn1.x509.OCSPNoCheck.superclass.constructor.call(this,r),this.params=void 0,this.getExtnValueHex=function(){return this.asn1ExtnValue=new u.asn1.DERNull,this.asn1ExtnValue.tohex()},this.oid="1.3.6.1.5.5.7.48.1.5",r!=null&&(this.params=r)};U(u.asn1.x509.OCSPNoCheck,u.asn1.x509.Extension);u.asn1.x509.AdobeTimeStamp=function(r){u.asn1.x509.AdobeTimeStamp.superclass.constructor.call(this,r);var e=u,t=e.asn1,n=t.DERInteger,i=t.DERBoolean,o=t.DERSequence,s=t.x509.GeneralName;this.params=null,this.getExtnValueHex=function(){var a=this.params,c=[new n(1)];return c.push(new s({uri:a.uri})),a.reqauth!=null&&c.push(new i(a.reqauth)),this.asn1ExtnValue=new o({array:c}),this.asn1ExtnValue.tohex()},this.oid="1.2.840.113583.1.1.9.1",r!==void 0&&this.setByParam(r)};U(u.asn1.x509.AdobeTimeStamp,u.asn1.x509.Extension);u.asn1.x509.X500Name=function(r){u.asn1.x509.X500Name.superclass.constructor.call(this),this.asn1Array=[],this.paramArray=[],this.sRule="utf8";var e=u,t=e.asn1,n=t.x509,i=n.RDN,o=Ze;this.setByString=function(s,a){a!==void 0&&(this.sRule=a);var c=s.split("/");c.shift();for(var l=[],p=0;p<c.length;p++)if(c[p].match(/^[^=]+=.+$/))l.push(c[p]);else{var g=l.length-1;l[g]=l[g]+"/"+c[p]}for(var p=0;p<l.length;p++)this.asn1Array.push(new i({str:l[p],rule:this.sRule}))},this.setByLdapString=function(s,a){a!==void 0&&(this.sRule=a);var c=n.X500Name.ldapToCompat(s);this.setByString(c,a)},this.setByObject=function(s,a){a!==void 0&&(this.sRule=a);for(var c in s)if(s.hasOwnProperty(c)){var l=new i({str:c+"="+s[c],rule:this.sRule});this.asn1Array?this.asn1Array.push(l):this.asn1Array=[l]}},this.setByParam=function(s){if(s.rule!==void 0&&(this.sRule=s.rule),s.array!==void 0)this.paramArray=s.array;else if(s.str!==void 0)this.setByString(s.str);else if(s.ldapstr!==void 0)this.setByLdapString(s.ldapstr);else if(s.hex!==void 0)this.hTLV=s.hex;else if(s.certissuer!==void 0){var a=new Z;a.readCertPEM(s.certissuer),this.hTLV=a.getIssuerHex()}else if(s.certsubject!==void 0){var a=new Z;a.readCertPEM(s.certsubject),this.hTLV=a.getSubjectHex()}else typeof s=="object"&&s.certsubject===void 0&&s.certissuer===void 0&&this.setByObject(s)},this.tohex=function(){if(typeof this.hTLV=="string")return this.hTLV;if(this.asn1Array.length==0&&this.paramArray.length>0)for(var s=0;s<this.paramArray.length;s++){var a={array:this.paramArray[s]};this.sRule!="utf8"&&(a.rule=this.sRule);var c=new i(a);this.asn1Array.push(c)}var l=new t.DERSequence({array:this.asn1Array});return this.hTLV=l.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.x509.X500Name,u.asn1.ASN1Object);u.asn1.x509.X500Name.compatToLDAP=function(r){if(r.substr(0,1)!=="/")throw"malformed input";var e="";r=r.substr(1);var t=r.split("/");return t.reverse(),t=t.map(function(n){return n.replace(/,/,"\\,")}),t.join(",")};

28u.asn1.x509.X500Name.onelineToLDAP=function(r){return u.asn1.x509.X500Name.compatToLDAP(r)};u.asn1.x509.X500Name.ldapToCompat=function(r){for(var e=r.split(","),t=!1,n=[],i=0;e.length>0;i++){var o=e.shift();if(t===!0){var s=n.pop(),a=(s+","+o).replace(/\\,/g,",");n.push(a),t=!1}else n.push(o);o.substr(-1,1)==="\\"&&(t=!0)}return n=n.map(function(c){return c.replace("/","\\/")}),n.reverse(),"/"+n.join("/")};u.asn1.x509.X500Name.ldapToOneline=function(r){return u.asn1.x509.X500Name.ldapToCompat(r)};u.asn1.x509.RDN=function(r){u.asn1.x509.RDN.superclass.constructor.call(this),this.asn1Array=[],this.paramArray=[],this.sRule="utf8";var e=u.asn1.x509.AttributeTypeAndValue;this.setByParam=function(t){t.rule!==void 0&&(this.sRule=t.rule),t.str!==void 0&&this.addByMultiValuedString(t.str),t.array!==void 0&&(this.paramArray=t.array)},this.addByString=function(t){this.asn1Array.push(new u.asn1.x509.AttributeTypeAndValue({str:t,rule:this.sRule}))},this.addByMultiValuedString=function(t){for(var n=u.asn1.x509.RDN.parseString(t),i=0;i<n.length;i++)this.addByString(n[i])},this.tohex=function(){if(this.asn1Array.length==0&&this.paramArray.length>0)for(var t=0;t<this.paramArray.length;t++){var n=this.paramArray[t];n.rule!==void 0&&this.sRule!="utf8"&&(n.rule=this.sRule);var i=new e(n);this.asn1Array.push(i)}var o=new u.asn1.DERSet({array:this.asn1Array});return this.TLV=o.tohex(),this.TLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.x509.RDN,u.asn1.ASN1Object);u.asn1.x509.RDN.parseString=function(r){for(var e=r.split(/\+/),t=!1,n=[],i=0;e.length>0;i++){var o=e.shift();if(t===!0){var s=n.pop(),a=(s+"+"+o).replace(/\\\+/g,"+");n.push(a),t=!1}else n.push(o);o.substr(-1,1)==="\\"&&(t=!0)}for(var c=!1,l=[],i=0;n.length>0;i++){var o=n.shift();if(c===!0){var p=l.pop();if(o.match(/"$/)){var a=(p+"+"+o).replace(/^([^=]+)="(.*)"$/,"$1=$2");l.push(a),c=!1}else l.push(p+"+"+o)}else l.push(o);o.match(/^[^=]+="/)&&(c=!0)}return l};u.asn1.x509.AttributeTypeAndValue=function(r){u.asn1.x509.AttributeTypeAndValue.superclass.constructor.call(this),this.sRule="utf8",this.sType=null,this.sValue=null,this.dsType=null;var e=u,t=e.asn1,n=t.DERSequence,i=t.DERUTF8String,o=t.DERPrintableString,s=t.DERTeletexString,a=t.DERIA5String,c=t.DERVisibleString,l=t.DERBMPString,p=e.lang.String.isMail,g=e.lang.String.isPrintable;this.setByParam=function(h){if(h.rule!==void 0&&(this.sRule=h.rule),h.ds!==void 0&&(this.dsType=h.ds),h.value===void 0&&h.str!==void 0){var d=h.str,m=d.match(/^([^=]+)=(.+)$/);if(m)this.sType=m[1],this.sValue=m[2];else throw new Error("malformed attrTypeAndValueStr: "+attrTypeAndValueStr)}else this.sType=h.type,this.sValue=h.value},this.setByString=function(h,d){d!==void 0&&(this.sRule=d);var m=h.match(/^([^=]+)=(.+)$/);if(m)this.setByAttrTypeAndValueStr(m[1],m[2]);else throw new Error("malformed attrTypeAndValueStr: "+attrTypeAndValueStr)},this._getDsType=function(){var h=this.sType,d=this.sValue,m=this.sRule;return m==="prn"?h=="CN"&&p(d)?"ia5":g(d)?"prn":"utf8":m==="utf8"?h=="CN"&&p(d)?"ia5":h=="C"?"prn":"utf8":"utf8"},this.setByAttrTypeAndValueStr=function(h,d,m){m!==void 0&&(this.sRule=m),this.sType=h,this.sValue=d},this.getValueObj=function(h,d){if(h=="utf8")return new i({str:d});if(h=="prn")return new o({str:d});if(h=="tel")return new s({str:d});if(h=="ia5")return new a({str:d});if(h=="vis")return new c({str:d});if(h=="bmp")return new l({str:d});throw new Error("unsupported directory string type: type="+h+" value="+d)},this.tohex=function(){this.dsType==null&&(this.dsType=this._getDsType());var h=u.asn1.x509.OID.atype2obj(this.sType),d=this.getValueObj(this.dsType,this.sValue),m=new n({array:[h,d]});return this.TLV=m.tohex(),this.TLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.x509.AttributeTypeAndValue,u.asn1.ASN1Object);u.asn1.x509.SubjectPublicKeyInfo=function(r){u.asn1.x509.SubjectPublicKeyInfo.superclass.constructor.call(this);var e=null,t=null,n=u,i=n.asn1,o=i.DERInteger,s=i.DERBitString,a=i.DERObjectIdentifier,c=i.DERSequence,l=i.ASN1Util.newObject,p=i.x509,g=p.AlgorithmIdentifier,h=n.crypto,d=h.ECDSA,m=h.DSA;this.getASN1Object=function(){if(this.asn1AlgId==null||this.asn1SubjPKey==null)throw"algId and/or subjPubKey not set";var f=new c({array:[this.asn1AlgId,this.asn1SubjPKey]});return f},this.tohex=function(){var f=this.getASN1Object();return this.hTLV=f.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},this.setPubKey=function(f){try{if(f instanceof se){var y=l({seq:[{int:{bigint:f.n}},{int:{int:f.e}}]}),v=y.tohex();this.asn1AlgId=new g({name:"rsaEncryption"}),this.asn1SubjPKey=new s({hex:"00"+v})}}catch{}try{if(f instanceof u.crypto.ECDSA){var S=new a({name:f.curveName});this.asn1AlgId=new g({name:"ecPublicKey",asn1params:S}),this.asn1SubjPKey=new s({hex:"00"+f.pubKeyHex})}}catch{}try{if(f instanceof u.crypto.DSA){var S=new l({seq:[{int:{bigint:f.p}},{int:{bigint:f.q}},{int:{bigint:f.g}}]});this.asn1AlgId=new g({name:"dsa",asn1params:S});var A=new o({bigint:f.y});this.asn1SubjPKey=new s({hex:"00"+A.tohex()})}}catch{}},r!==void 0&&this.setPubKey(r)};U(u.asn1.x509.SubjectPublicKeyInfo,u.asn1.ASN1Object);u.asn1.x509.Time=function(r){u.asn1.x509.Time.superclass.constructor.call(this);var e=null,t=null,n=u,i=n.asn1,o=i.DERUTCTime,s=i.DERGeneralizedTime;this.params=null,this.type=null,this.setTimeParams=function(a){this.timeParams=a},this.setByParam=function(a){this.params=a},this.getType=function(a){return a.match(/^[0-9]{12}Z$/)?"utc":a.match(/^[0-9]{14}Z$/)?"gen":a.match(/^[0-9]{12}\.[0-9]+Z$/)?"utc":a.match(/^[0-9]{14}\.[0-9]+Z$/)?"gen":null},this.tohex=function(){var a=this.params,c=null;

28if(typeof a=="string"&&(a={str:a}),a!=null&&a.str&&(a.type==null||a.type==null)&&(a.type=this.getType(a.str)),a!=null&&a.str?(a.type=="utc"&&(c=new o(a.str)),a.type=="gen"&&(c=new s(a.str))):this.type=="gen"?c=new s:c=new o,c==null)throw new Error("wrong setting for Time");return this.TLV=c.tohex(),this.TLV},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};u.asn1.x509.Time_bak=function(r){u.asn1.x509.Time_bak.superclass.constructor.call(this);var e=null,t=null,n=u,i=n.asn1,o=i.DERUTCTime,s=i.DERGeneralizedTime;this.setTimeParams=function(a){this.timeParams=a},this.tohex=function(){var a=null;return this.timeParams!=null?this.type=="utc"?a=new o(this.timeParams):a=new s(this.timeParams):this.type=="utc"?a=new o:a=new s,this.TLV=a.tohex(),this.TLV},this.getEncodedHex=function(){return this.tohex()},this.type="utc",r!==void 0&&(r.type!==void 0?this.type=r.type:r.str!==void 0&&(r.str.match(/^[0-9]{12}Z$/)&&(this.type="utc"),r.str.match(/^[0-9]{14}Z$/)&&(this.type="gen")),this.timeParams=r)};U(u.asn1.x509.Time,u.asn1.ASN1Object);u.asn1.x509.AlgorithmIdentifier=function(r){u.asn1.x509.AlgorithmIdentifier.superclass.constructor.call(this),this.nameAlg=null,this.asn1Alg=null,this.asn1Params=null,this.paramEmpty=!1;var e=u,t=e.asn1,n=t.x509.AlgorithmIdentifier.PSSNAME2ASN1TLV;if(this.tohex=function(){if(this.nameAlg===null&&this.asn1Alg===null)throw new Error("algorithm not specified");if(this.nameAlg!==null){var o=null;for(var s in n)s===this.nameAlg&&(o=n[s]);if(o!==null)return this.hTLV=o,this.hTLV}this.nameAlg!==null&&this.asn1Alg===null&&(this.asn1Alg=t.x509.OID.name2obj(this.nameAlg));var a=[this.asn1Alg];this.asn1Params!==null&&a.push(this.asn1Params);var c=new t.DERSequence({array:a});return this.hTLV=c.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&(r.name!==void 0&&(this.nameAlg=r.name),r.asn1params!==void 0&&(this.asn1Params=r.asn1params),r.paramempty!==void 0&&(this.paramEmpty=r.paramempty)),this.asn1Params===null&&this.paramEmpty===!1&&this.nameAlg!==null){this.nameAlg.name!==void 0&&(this.nameAlg=this.nameAlg.name);var i=this.nameAlg.toLowerCase();i.substr(-7,7)!=="withdsa"&&i.substr(-9,9)!=="withecdsa"&&(this.asn1Params=new t.DERNull)}};U(u.asn1.x509.AlgorithmIdentifier,u.asn1.ASN1Object);u.asn1.x509.AlgorithmIdentifier.PSSNAME2ASN1TLV={SHAwithRSAandMGF1:"300d06092a864886f70d01010a3000",SHA256withRSAandMGF1:"303d06092a864886f70d01010a3030a00d300b0609608648016503040201a11a301806092a864886f70d010108300b0609608648016503040201a203020120",SHA384withRSAandMGF1:"303d06092a864886f70d01010a3030a00d300b0609608648016503040202a11a301806092a864886f70d010108300b0609608648016503040202a203020130",SHA512withRSAandMGF1:"303d06092a864886f70d01010a3030a00d300b0609608648016503040203a11a301806092a864886f70d010108300b0609608648016503040203a203020140"};u.asn1.x509.GeneralName=function(r){u.asn1.x509.GeneralName.superclass.constructor.call(this);var e={rfc822:"81",dns:"82",dn:"a4",uri:"86",ip:"87",otherName:"a0"},t=u,n=t.asn1,i=n.x509,o=i.X500Name,s=i.OtherName,a=n.DERIA5String,c=n.DERPrintableString,l=n.DEROctetString,p=n.DERTaggedObject,g=n.ASN1Object,h=Error;this.params=null,this.setByParam=function(d){this.params=d},this.tohex=function(){var d=this.params,m,y,f,y=!1;if(d.other!==void 0)m="a0",f=new s(d.other);else if(d.rfc822!==void 0)m="81",f=new a({str:d.rfc822});else if(d.dns!==void 0)m="82",f=new a({str:d.dns});else if(d.dn!==void 0)m="a4",y=!0,typeof d.dn=="string"?f=new o({str:d.dn}):d.dn instanceof u.asn1.x509.X500Name?f=d.dn:f=new o(d.dn);else if(d.ldapdn!==void 0)m="a4",y=!0,f=new o({ldapstr:d.ldapdn});else if(d.certissuer!==void 0||d.certsubj!==void 0){m="a4",y=!0;var v,S,A=null;if(d.certsubj!==void 0?(v=!1,S=d.certsubj):(v=!0,S=d.certissuer),S.match(/^[0-9A-Fa-f]+$/)&&A==S,S.indexOf("-----BEGIN ")!=-1&&(A=Ze(S)),A==null)throw new Error("certsubj/certissuer not cert");var T=new Z;T.hex=A;var b;v?b=T.getIssuerHex():b=T.getSubjectHex(),f=new g,f.hTLV=b}else if(d.uri!==void 0)m="86",f=new a({str:d.uri});else if(d.ip!==void 0){m="87";var D,B=d.ip;try{if(B.match(/^[0-9a-f]+$/)){var C=B.length;if(C==8||C==16||C==32||C==64)D=B;else throw"err"}else D=Od(B)}catch(I){throw new h("malformed IP address: "+d.ip+":"+I.message)}f=new l({hex:D})}else throw new h("improper params");var E=new p({tag:m,explicit:y,obj:f});return E.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.x509.GeneralName,u.asn1.ASN1Object);u.asn1.x509.GeneralNames=function(r){u.asn1.x509.GeneralNames.superclass.constructor.call(this);var e=null,t=u,n=t.asn1;this.setByParamArray=function(i){for(var o=0;o<i.length;o++){var s=new n.x509.GeneralName(i[o]);this.asn1Array.push(s)}},this.tohex=function(){var i=new n.DERSequence({array:this.asn1Array});return i.tohex()},this.getEncodedHex=function(){return this.tohex()},this.asn1Array=new Array,typeof r<"u"&&this.setByParamArray(r)};U(u.asn1.x509.GeneralNames,u.asn1.ASN1Object);u.asn1.x509.OtherName=function(r){u.asn1.x509.OtherName.superclass.constructor.call(this);var e=null,t=null,n=u,i=n.asn1,o=i.DERObjectIdentifier,s=i.DERSequence,a=i.ASN1Util.newObject;this.params=null,this.setByParam=function(c){this.params=c},this.tohex=function(){var c=this.params;if(c.oid==null||c.value==null)throw new Error("oid or value not specified");var l=new o({oid:c.oid}),p=a({tag:{tag:"a0",explicit:!0,obj:c.value}}),g=new s({array:[l,p]});return g.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.x509.OtherName,u.asn1.ASN1Object);u.asn1.x509.OID=new function(){var r=u.asn1.DERObjectIdentifier;this.name2oidList={"aes128-CBC":"2.16.840.1.101.3.4.1.2","aes256-CBC":"2.16.840.1.101.3.4.1.42",sha1:"1.3.14.3.2.26",sha256:"2.16.840.1.101.3.4.2.1",sha384:"2.16.840.1.101.3.4.2.2",sha512:"2.16.840.1.101.3.4.2.3",sha224:"2.16.840.1.101.3.4.2.4",md5:"1.2.840.113549.2.5",md2:"1.3.14.7.2.2.1",ripemd160:"1.3.36.3.2.1",hmacWithSHA1:"1.2.840.113549.2.7",hmacWithSHA224:"1.2.840.113549.2.8",hmacWithSHA256:"1.2.840.113549.2.9",hmacWithSHA384:"1.2.840.113549.2.10",hmacWithSHA512:"1.2.840.113549.2.11",MD2withRSA:"1.2.840.113549.1.1.2",MD4withRSA:"1.2.840.113549.1.1.3",MD5withRSA:"1.2.840.113549.1.1.4",SHA1withRSA:"1.2.840.113549.1.1.5","pkcs1-MGF":"1.2.840.113549.1.1.8",rsaPSS:"1.2.840.113549.1.1.10",SHA224withRSA:"1.2.840.113549.1.1.14",SHA256withRSA:"1.2.840.113549.1.1.11",SHA384withRSA:"1.2.840.113549.1.1.12",SHA512withRSA:"1.2.840.113549.1.1.13",SHA1withECDSA:"1.2.840.10045.4.1",SHA224withECDSA:"1.2.840.10045.4.3.1",SHA256withECDSA:"1.2.840.10045.4.3.2",SHA384withECDSA:"1.2.840.10045.4.3.3",SHA512withECDSA:"1.2.840.10045.4.3.4",dsa:"1.2.840.10040.4.1",SHA1withDSA:"1.2.840.10040.4.3",

28SHA224withDSA:"2.16.840.1.101.3.4.3.1",SHA256withDSA:"2.16.840.1.101.3.4.3.2",rsaEncryption:"1.2.840.113549.1.1.1",commonName:"2.5.4.3",countryName:"2.5.4.6",localityName:"2.5.4.7",stateOrProvinceName:"2.5.4.8",streetAddress:"2.5.4.9",organizationName:"2.5.4.10",organizationalUnitName:"2.5.4.11",domainComponent:"0.9.2342.19200300.100.1.25",userId:"0.9.2342.19200300.100.1.1",surname:"2.5.4.4",givenName:"2.5.4.42",title:"2.5.4.12",distinguishedName:"2.5.4.49",emailAddress:"1.2.840.113549.1.9.1",description:"2.5.4.13",businessCategory:"2.5.4.15",postalCode:"2.5.4.17",uniqueIdentifier:"2.5.4.45",organizationIdentifier:"2.5.4.97",jurisdictionOfIncorporationL:"1.3.6.1.4.1.311.60.2.1.1",jurisdictionOfIncorporationSP:"1.3.6.1.4.1.311.60.2.1.2",jurisdictionOfIncorporationC:"1.3.6.1.4.1.311.60.2.1.3",subjectDirectoryAttributes:"2.5.29.9",subjectKeyIdentifier:"2.5.29.14",keyUsage:"2.5.29.15",subjectAltName:"2.5.29.17",issuerAltName:"2.5.29.18",basicConstraints:"2.5.29.19",cRLNumber:"2.5.29.20",cRLReason:"2.5.29.21",nameConstraints:"2.5.29.30",cRLDistributionPoints:"2.5.29.31",certificatePolicies:"2.5.29.32",anyPolicy:"2.5.29.32.0",policyMappings:"2.5.29.33",authorityKeyIdentifier:"2.5.29.35",policyConstraints:"2.5.29.36",extKeyUsage:"2.5.29.37",inhibitAnyPolicy:"2.5.29.54",authorityInfoAccess:"1.3.6.1.5.5.7.1.1",ocsp:"1.3.6.1.5.5.7.48.1",ocspBasic:"1.3.6.1.5.5.7.48.1.1",ocspNonce:"1.3.6.1.5.5.7.48.1.2",ocspNoCheck:"1.3.6.1.5.5.7.48.1.5",caIssuers:"1.3.6.1.5.5.7.48.2",anyExtendedKeyUsage:"2.5.29.37.0",serverAuth:"1.3.6.1.5.5.7.3.1",clientAuth:"1.3.6.1.5.5.7.3.2",codeSigning:"1.3.6.1.5.5.7.3.3",emailProtection:"1.3.6.1.5.5.7.3.4",timeStamping:"1.3.6.1.5.5.7.3.8",ocspSigning:"1.3.6.1.5.5.7.3.9",smtpUTF8Mailbox:"1.3.6.1.5.5.7.8.9",dateOfBirth:"1.3.6.1.5.5.7.9.1",placeOfBirth:"1.3.6.1.5.5.7.9.2",gender:"1.3.6.1.5.5.7.9.3",countryOfCitizenship:"1.3.6.1.5.5.7.9.4",countryOfResidence:"1.3.6.1.5.5.7.9.5",ecPublicKey:"1.2.840.10045.2.1","P-256":"1.2.840.10045.3.1.7",secp256r1:"1.2.840.10045.3.1.7",secp256k1:"1.3.132.0.10",secp384r1:"1.3.132.0.34",secp521r1:"1.3.132.0.35",pkcs5PBES2:"1.2.840.113549.1.5.13",pkcs5PBKDF2:"1.2.840.113549.1.5.12","des-EDE3-CBC":"1.2.840.113549.3.7",data:"1.2.840.113549.1.7.1","signed-data":"1.2.840.113549.1.7.2","enveloped-data":"1.2.840.113549.1.7.3","digested-data":"1.2.840.113549.1.7.5","encrypted-data":"1.2.840.113549.1.7.6","authenticated-data":"1.2.840.113549.1.9.16.1.2",tstinfo:"1.2.840.113549.1.9.16.1.4",signingCertificate:"1.2.840.113549.1.9.16.2.12",timeStampToken:"1.2.840.113549.1.9.16.2.14",signaturePolicyIdentifier:"1.2.840.113549.1.9.16.2.15",etsArchiveTimeStamp:"1.2.840.113549.1.9.16.2.27",signingCertificateV2:"1.2.840.113549.1.9.16.2.47",etsArchiveTimeStampV2:"1.2.840.113549.1.9.16.2.48",extensionRequest:"1.2.840.113549.1.9.14",contentType:"1.2.840.113549.1.9.3",messageDigest:"1.2.840.113549.1.9.4",signingTime:"1.2.840.113549.1.9.5",counterSignature:"1.2.840.113549.1.9.6",archiveTimeStampV3:"0.4.0.1733.2.4",pdfRevocationInfoArchival:"1.2.840.113583.1.1.8",adobeTimeStamp:"1.2.840.113583.1.1.9.1",smimeMailboxLegacy:"2.23.140.1.5.1.1",smimeMailboxMulti:"2.23.140.1.5.1.2",smimeMailboxStrict:"2.23.140.1.5.1.3",smimeOrganizationLegacy:"2.23.140.1.5.2.1",smimeOrganizationMulti:"2.23.140.1.5.2.2",smimeOrganizationStrict:"2.23.140.1.5.2.3",smimeSponsorLegacy:"2.23.140.1.5.3.1",smimeSponsorMulti:"2.23.140.1.5.3.2",smimeSponsorStrict:"2.23.140.1.5.3.3",smimeIndividualLegacy:"2.23.140.1.5.4.1",smimeIndividualMulti:"2.23.140.1.5.4.2",smimeIndividualStrict:"2.23.140.1.5.4.3"},this.atype2oidList={CN:"2.5.4.3",L:"2.5.4.7",ST:"2.5.4.8",O:"2.5.4.10",OU:"2.5.4.11",C:"2.5.4.6",STREET:"2.5.4.9",DC:"0.9.2342.19200300.100.1.25",UID:"0.9.2342.19200300.100.1.1",SN:"2.5.4.4",T:"2.5.4.12",GN:"2.5.4.42",DN:"2.5.4.49",E:"1.2.840.113549.1.9.1",description:"2.5.4.13",businessCategory:"2.5.4.15",postalCode:"2.5.4.17",serialNumber:"2.5.4.5",uniqueIdentifier:"2.5.4.45",organizationIdentifier:"2.5.4.97",jurisdictionOfIncorporationL:"1.3.6.1.4.1.311.60.2.1.1",jurisdictionOfIncorporationSP:"1.3.6.1.4.1.311.60.2.1.2",jurisdictionOfIncorporationC:"1.3.6.1.4.1.311.60.2.1.3"},this.objCache={},this.name2obj=function(e){if(typeof this.objCache[e]<"u")return this.objCache[e];if(typeof this.name2oidList[e]>

28"u")throw"Name of ObjectIdentifier not defined: "+e;var t=this.name2oidList[e],n=new r({oid:t});return this.objCache[e]=n,n},this.atype2obj=function(e){if(this.objCache[e]!==void 0)return this.objCache[e];var t;if(e.match(/^\d+\.\d+\.[0-9.]+$/))t=e;else if(this.atype2oidList[e]!==void 0)t=this.atype2oidList[e];else if(this.name2oidList[e]!==void 0)t=this.name2oidList[e];else throw new Error("AttributeType name undefined: "+e);var n=new r({oid:t});return this.objCache[e]=n,n},this.registerOIDs=function(e){if(this.checkOIDs(e))for(var t in e)this.name2oidList[t]=e[t]},this.checkOIDs=function(e){try{var t=Object.keys(e);return t.length==0?!1:(t.map(function(n,i,o){var s=this[n];if(!s.match(/^[0-2]\.[0-9.]+$/))throw new Error("value is not OID")},e),!0)}catch{return!1}}};u.asn1.x509.OID.oid2name=function(r){var e=u.asn1.x509.OID.name2oidList;for(var t in e)if(e[t]==r)return t;return""};u.asn1.x509.OID.oid2atype=function(r){var e=u.asn1.x509.OID.atype2oidList;for(var t in e)if(e[t]==r)return t;return r};u.asn1.x509.OID.name2oid=function(r){if(r.match(/^[0-9.]+$/))return r;var e=u.asn1.x509.OID.name2oidList;return e[r]===void 0?"":e[r]};u.asn1.x509.X509Util={};u.asn1.x509.X509Util.newCertPEM=function(r){var e=u.asn1.x509,t=e.TBSCertificate,n=e.Certificate,i=new n(r);return i.getPEM()};(typeof u>"u"||!u)&&(u={});(typeof u.asn1>"u"||!u.asn1)&&(u.asn1={});(typeof u.asn1.cms>"u"||!u.asn1.cms)&&(u.asn1.cms={});u.asn1.cms.Attribute=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.DERSet,s=n.DERObjectIdentifier;this.params=null,this.typeOid=null,this.setByParam=function(a){this.params=a},this.getValueArray=function(){throw new e("not yet implemented abstract")},this.tohex=function(){var a=new s({oid:this.typeOid}),c=new o({array:this.getValueArray()}),l=new i({array:[a,c]});return l.tohex()},this.getEncodedHex=function(){return this.tohex()}};U(u.asn1.cms.Attribute,u.asn1.ASN1Object);u.asn1.cms.ContentType=function(r){var e=u,t=e.asn1;t.cms.ContentType.superclass.constructor.call(this),this.typeOid="1.2.840.113549.1.9.3",this.getValueArray=function(){var n=new t.DERObjectIdentifier(this.params.type);return[n]},r!=null&&this.setByParam(r)};U(u.asn1.cms.ContentType,u.asn1.cms.Attribute);u.asn1.cms.MessageDigest=function(r){var e=u,t=e.asn1,n=t.DEROctetString,i=t.cms;i.MessageDigest.superclass.constructor.call(this),this.typeOid="1.2.840.113549.1.9.4",this.getValueArray=function(){var o=new n(this.params);return[o]},r!=null&&this.setByParam(r)};U(u.asn1.cms.MessageDigest,u.asn1.cms.Attribute);u.asn1.cms.SigningTime=function(r){var e=u,t=e.asn1;t.cms.SigningTime.superclass.constructor.call(this),this.typeOid="1.2.840.113549.1.9.5",this.getValueArray=function(){var n=new t.x509.Time(this.params);return[n]},r!=null&&this.setByParam(r)};U(u.asn1.cms.SigningTime,u.asn1.cms.Attribute);u.asn1.cms.SigningCertificate=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.cms,s=o.ESSCertID,a=t.crypto;o.SigningCertificate.superclass.constructor.call(this),this.typeOid="1.2.840.113549.1.9.16.2.12",this.getValueArray=function(){if(this.params==null||this.params==null||this.params.array==null)throw new e("parameter 'array' not specified");for(var c=this.params.array,l=[],p=0;p<c.length;p++){var g=c[p];r.hasis==!1&&typeof g=="string"&&(g.indexOf("-----BEGIN")!=-1||V.isASN1HEX(g))&&(g={cert:g}),g.hasis!=!1&&r.hasis==!1&&(g.hasis=!1),l.push(new s(g))}var h=new i({array:l}),d=new i({array:[h]});return[d]},r!=null&&this.setByParam(r)};U(u.asn1.cms.SigningCertificate,u.asn1.cms.Attribute);u.asn1.cms.ESSCertID=function(r){u.asn1.cms.ESSCertID.superclass.constructor.call(this);var e=Error,t=u,n=t.asn1,i=n.DEROctetString,o=n.DERSequence,s=n.cms.IssuerSerial;this.params=null,this.getCertHash=function(a,c){if(a.hash!=null)return a.hash;if(typeof a=="string"&&a.indexOf("-----BEGIN")==-1&&!V.isASN1HEX(a))return a;var l;if(typeof a=="string")l=a;else if(a.cert!=null)l=a.cert;else throw new e("hash nor cert unspecified");var p;l.indexOf("-----BEGIN")!=-1?p=Ze(l):p=l,typeof a=="string"&&(a.indexOf("-----BEGIN")!=-1?p=Ze(a):V.isASN1HEX(a)&&(p=a));var g;if(a.alg!=null)g=a.alg;else if(c!=null)g=c;else throw new e("hash alg unspecified");return t.crypto.Util.hashHex(p,g)},this.tohex=function(){var a=this.params,c=this.getCertHash(a,"sha1"),l=[];l.push(new i({hex:c}

28)),(typeof a=="string"&&a.indexOf("-----BEGIN")!=-1||a.cert!=null&&a.hasis!=!1||a.issuer!=null&&a.serial!=null)&&l.push(new s(a));var p=new o({array:l});return p.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.ESSCertID,u.asn1.ASN1Object);u.asn1.cms.SigningCertificateV2=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.x509,s=n.cms,a=s.ESSCertIDv2,c=t.crypto;s.SigningCertificateV2.superclass.constructor.call(this),this.typeOid="1.2.840.113549.1.9.16.2.47",this.getValueArray=function(){if(this.params==null||this.params==null||this.params.array==null)throw new e("parameter 'array' not specified");for(var l=this.params.array,p=[],g=0;g<l.length;g++){var h=l[g];(r.alg!=null||r.hasis==!1)&&typeof h=="string"&&(h.indexOf("-----BEGIN")!=-1||V.isASN1HEX(h))&&(h={cert:h}),h.alg==null&&r.alg!=null&&(h.alg=r.alg),h.hasis!=!1&&r.hasis==!1&&(h.hasis=!1),p.push(new a(h))}var d=new i({array:p}),m=new i({array:[d]});return[m]},r!=null&&this.setByParam(r)};U(u.asn1.cms.SigningCertificateV2,u.asn1.cms.Attribute);u.asn1.cms.ESSCertIDv2=function(r){u.asn1.cms.ESSCertIDv2.superclass.constructor.call(this);var e=Error,t=u,n=t.asn1,i=n.DEROctetString,o=n.DERSequence,s=n.cms.IssuerSerial,a=n.x509.AlgorithmIdentifier;this.params=null,this.tohex=function(){var c=this.params,l=this.getCertHash(c,"sha256"),p=[];c.alg!=null&&c.alg!="sha256"&&p.push(new a({name:c.alg})),p.push(new i({hex:l})),(typeof c=="string"&&c.indexOf("-----BEGIN")!=-1||c.cert!=null&&c.hasis!=!1||c.issuer!=null&&c.serial!=null)&&p.push(new s(c));var g=new o({array:p});return g.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.ESSCertIDv2,u.asn1.cms.ESSCertID);u.asn1.cms.IssuerSerial=function(r){var e=Error,t=u,n=t.asn1,i=n.DERInteger,o=n.DERSequence,s=n.cms,a=n.x509,c=a.GeneralNames,l=Z;s.IssuerSerial.superclass.constructor.call(this),this.setByParam=function(p){this.params=p},this.tohex=function(){var p=this.params,g,h;if(typeof p=="string"&&p.indexOf("-----BEGIN")!=-1||p.cert!=null){var d;p.cert!=null?d=p.cert:d=p;var m=new l;m.readCertPEM(d),g=m.getIssuer(),h={hex:m.getSerialNumberHex()}}else if(p.issuer!=null&&p.serial)g=p.issuer,h=p.serial;else throw new e("cert or issuer and serial parameter not specified");var f=new c([{dn:g}]),y=new i(h),v=new o({array:[f,y]});return v.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.IssuerSerial,u.asn1.ASN1Object);u.asn1.cms.SignerIdentifier=function(r){var e=u,t=e.asn1,n=t.DERInteger,i=t.DERSequence,o=t.cms,s=o.IssuerAndSerialNumber,a=o.SubjectKeyIdentifier,c=t.x509,l=c.X500Name,p=Z,g=Error;o.SignerIdentifier.superclass.constructor.call(this),this.params=null,this.tohex=function(){var h=this.params;if(h.type=="isssn"){var d=new s(h);return d.tohex()}else if(h.type=="skid"){var m=new a(h);return m.tohex()}else throw new Error("wrong property for isssn or skid")},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.SignerIdentifier,u.asn1.ASN1Object);u.asn1.cms.IssuerAndSerialNumber=function(r){var e=u,t=e.asn1,n=t.DERInteger,i=t.DERSequence,o=t.cms,s=t.x509,a=s.X500Name,c=Z,l=Error;o.IssuerAndSerialNumber.superclass.constructor.call(this),this.params=null,this.tohex=function(){var p=this.params,g,h;if(typeof p=="string"&&p.indexOf("-----BEGIN")!=-1||p.cert!=null){var d;p.cert!=null?d=p.cert:d=p;var m=new c;m.readCertPEM(d),g=m.getIssuer(),h={hex:m.getSerialNumberHex()}}else if(p.issuer!=null&&p.serial)g=p.issuer,h=p.serial;else throw new l("cert or issuer and serial parameter not specified");var f=new a(g),y=new n(h),v=new i({array:[f,y]});return v.tohex()},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(p){this.params=p},r!=null&&this.setByParam(r)};U(u.asn1.cms.IssuerAndSerialNumber,u.asn1.ASN1Object);u.asn1.cms.SubjectKeyIdentifier=function(r){var e=u,t=e.asn1,n=t.DERInteger,i=t.DERSequence,o=t.ASN1Util.newObject,s=t.cms,a=s.IssuerAndSerialName,c=s.SubjectKeyIdentifier,l=t.x509,p=l.X500Name,g=Z,h=Error;s.SubjectKeyIdentifier.superclass.constructor.call(this),this.tohex=function(){var d=this.params;if(d.cert==null&&d.skid==null)throw new h("property cert nor skid undefined");var m;if(d.cert!=null){var f=new g(d.cert),y=f.getExtSubjectKeyIdentifier();m=y.kid.hex}else d.skid!=null&&(m=d.skid);var v=o({tag:{tage:"a0",obj:{octstr:{hex:m}}}});return v.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.SubjectKeyIdentifier,u.asn1.ASN1Object);u.asn1.cms.AttributeList=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSet,o=n.cms;o.AttributeList.superclass.constructor.call(this),this.params=null,this.hTLV=null,this.setByParam=function(s){this.params=s},this.tohex=function(){var s=this.params;if(this.hTLV!=null)return this.hTLV;var a=!0;s.sortflag!=null&&(a=s.sortflag);for(var c=s.array,l=[],p=0;p<c.length;p++){var g=c[p],h=g.attr;if(h=="contentType")l.push(new o.ContentType(g));else if(h=="messageDigest")l.push(new o.MessageDigest(g));else if(h=="signingTime")l.push(new o.SigningTime(g));else if(h=="signingCertificate")l.push(new o.SigningCertificate(g));else if(h=="signingCertificateV2")l.push(new o.SigningCertificateV2(g));

28else if(h=="signaturePolicyIdentifier")l.push(new u.asn1.cades.SignaturePolicyIdentifier(g));else if(h=="signatureTimeStamp"||h=="timeStampToken")l.push(new u.asn1.cades.SignatureTimeStamp(g));else throw new e("unknown attr: "+h)}var d=new i({array:l,sortflag:a});return this.hTLV=d.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.AttributeList,u.asn1.ASN1Object);u.asn1.cms.SignerInfo=function(r){var e=Error,t=u,n=t.asn1,i=n.DERInteger,o=n.DEROctetString,s=n.DERSequence,a=n.DERTaggedObject,c=n.cms,l=c.SignerIdentifier,p=c.AttributeList,g=c.ContentType,h=c.EncapsulatedContentInfo,d=c.MessageDigest,m=c.SignedData,f=n.x509,y=f.AlgorithmIdentifier,v=t.crypto,S=pe;c.SignerInfo.superclass.constructor.call(this),this.params=null,this.sign=function(){var A=this.params,T=A.sigalg,b=new p(A.sattrs).tohex(),D=S.getKey(A.signkey),B=new v.Signature({alg:T});B.init(D),B.updateHex(b);var C=B.sign();A.sighex=C},this.tohex=function(){var A=this.params,T=[];if(T.push(new i({int:A.version})),T.push(new l(A.id)),T.push(new y({name:A.hashalg})),A.sattrs!=null){var b=new p(A.sattrs);try{T.push(new a({tag:"a0",explicit:!1,obj:b}))}catch(B){throw new e("si sattr error: "+B)}}if(A.sigalgfield!=null?T.push(new y({name:A.sigalgfield})):T.push(new y({name:A.sigalg})),A.sighex==null&&A.signkey!=null&&this.sign(),T.push(new o({hex:A.sighex})),A.uattrs!=null){var b=new p(A.uattrs);try{T.push(new a({tag:"a1",explicit:!1,obj:b}))}catch(C){throw new e("si uattr error: "+C)}}var D=new s({array:T});return D.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.SignerInfo,u.asn1.ASN1Object);u.asn1.cms.EncapsulatedContentInfo=function(r){var e=u,t=e.asn1,n=t.DERTaggedObject,i=t.DERSequence,o=t.DERObjectIdentifier,s=t.DEROctetString,a=t.cms;a.EncapsulatedContentInfo.superclass.constructor.call(this),this.params=null,this.tohex=function(){var c=this.params,l=[];if(l.push(new o(c.type)),c.content!=null&&(c.content.hex!=null||c.content.str!=null)&&c.isDetached!=!0){var p=new s(c.content),g=new n({tag:"a0",explicit:!0,obj:p});l.push(g)}var h=new i({array:l});return h.tohex()},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(c){this.params=c},r!=null&&this.setByParam(r)};U(u.asn1.cms.EncapsulatedContentInfo,u.asn1.ASN1Object);u.asn1.cms.ContentInfo=function(r){var e=u,t=e.asn1,n=t.DERTaggedObject,i=t.DERSequence,o=t.DERObjectIdentifier,s=t.x509,a=s.OID.name2obj;u.asn1.cms.ContentInfo.superclass.constructor.call(this),this.params=null,this.tohex=function(){var c=this.params,l=[];l.push(new o(c.type));var p=new n({tag:"a0",explicit:!0,obj:c.obj});l.push(p);var g=new i({array:l});return g.tohex()},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(c){this.params=c},r!=null&&this.setByParam(r)};U(u.asn1.cms.ContentInfo,u.asn1.ASN1Object);u.asn1.cms.SignedData=function(r){var e=Error,t=u,n=t.asn1,i=n.ASN1Object,o=n.DERInteger,s=n.DERSet,a=n.DERSequence,c=n.DERTaggedObject,l=n.cms,p=l.EncapsulatedContentInfo,g=l.SignerInfo,h=l.ContentInfo,d=l.CertificateSet,m=l.RevocationInfoChoices,f=n.x509,y=f.AlgorithmIdentifier;u.asn1.cms.SignedData.superclass.constructor.call(this),this.params=null,this.checkAndFixParam=function(){var v=this.params;this._setDigestAlgs(v),this._setContentTypeByEContent(v),this._setMessageDigestByEContent(v),this._setSignerInfoVersion(v),this._setSignedDataVersion(v)},this._setDigestAlgs=function(v){for(var S={},A=v.sinfos,T=0;T<A.length;T++){var b=A[T];S[b.hashalg]=1}v.hashalgs=Object.keys(S).sort()},this._setContentTypeByEContent=function(v){for(var S=v.econtent.type,A=v.sinfos,T=0;T<A.length;T++){var b=A[T],D=this._getAttrParamByName(b,"contentType");D.type=S}},this._setMessageDigestByEContent=function(v){var S=v.econtent,A=v.econtent.type,T=S.content.hex;T==null&&S.type=="data"&&S.content.str!=null&&(T=Vr(S.content.str));for(var b=v.sinfos,D=0;D<b.length;D++){var B=b[D],C=B.hashalg,E=this._getAttrParamByName(B,"messageDigest"),I=u.crypto.Util.hashHex(T,C);E.hex=I}},this._getAttrParamByName=function(v,S){for(var A=v.sattrs.array,T=0;T<A.length;T++)if(A[T].attr==S)return A[T]},this._setSignerInfoVersion=function(v){for(var S=v.sinfos,A=0;A<S.length;A++){var T=S[A],b=1;T.id.type=="skid"&&(b=3),T.version=b}},this._setSignedDataVersion=function(v){var S=this._getSignedDataVersion(v);v.version=S},this._getSignedDataVersion=function(v){if(v.revinfos!=null)for(var S=v.revinfos,A=0;A<S.length;A++){var T=S[A];if(T.ocsp!=null)return 5}for(var b=v.sinfos,A=0;A<b.length;A++){var D=v.sinfos[A];if(D.version==3)return 3}return v.econtent.type!="data"?3:1},this.tohex=function(){var v=this.params;this.getEncodedHexPrepare!=null&&this.getEncodedHexPrepare(),v.fixed!=!0&&this.checkAndFixParam();var S=[];S.push(new o({int:v.version}));for(var A=[],T=0;T<v.hashalgs.length;T++){var b=v.hashalgs[T];A.push(new y({name:b}))}S.push(new s({array:A})),S.push(new p(v.econtent)),v.certs!=null&&S.push(new d(v.certs)),v.revinfos!=null&&S.push(new m(v.revinfos));for(var D=[],T=0;T<v.sinfos.length;T++){var B=v.sinfos[T];D.push(new g(B))}S.push(new s({array:D}));var C=new a({array:S});return C.tohex()},this.getEncodedHex=function(){return this.tohex()},this.getContentInfo=function(){var v=new h({type:"signed-data",obj:this});return v},this.getContentInfoEncodedHex=function(){return this.getContentInfo().tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.SignedData,u.asn1.ASN1Object);u.asn1.cms.CertificateSet=function(r){u.asn1.cms.CertificateSet.superclass.constructor.call(this);var e=Error,t=u.asn1,n=t.DERTaggedObject,i=t.DERSet,o=t.ASN1Object;this.params=null,this.tohex=function(){var s=this.params,a=[],c;if(s instanceof Array)c=s;else if(s.array!=null)c=s.array;else throw new e("cert array not specified");for(var l=0;l<c.length;l++){var p=c[l],g=Ze(p),h=new o;h.hTLV=g,a.push(h)}var d={array:a};s.sortflag==!1&&(d.sortflag=!1);var m=new i(d),f=new n({tag:"a0",explicit:!1,obj:m});return f.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.CertificateSet,u.asn1.ASN1Object);u.asn1.cms.RevocationInfoChoices=function(r){u.asn1.cms.RevocationInfoChoices.superclass.constructor.call(this),this.params=null,this.tohex=function(){var e=this.params;if(!e instanceof Array)throw new Error("params is not array");for(var t=[],n=0;n<e.length;n++)t.push(new u.asn1.cms.RevocationInfoChoice(e[n]));var i=u.asn1.ASN1Util.newObject({tag:{tagi:"a1",obj:{set:t}}});return i.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.RevocationInfoChoices,u.asn1.ASN1Object);u.asn1.cms.RevocationInfoChoice=function(r){u.asn1.cms.RevocationInfoChoice.superclass.constructor.call(this),this.params=null,this.tohex=function(){var e=this.params;if(e.crl!=null&&typeof e.crl=="string"){var t=e.crl;return e.crl.indexOf("-----BEGIN")!=-1&&(t=Ze(e.crl)),t}else if(e.ocsp!=null){var n=u.asn1.ASN1Util.newObject({tag:{tagi:"a1",obj:new u.asn1.cms.OtherRevocationFormat(e)}});return n.tohex()}else throw new Error("property crl or ocsp undefined")},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.RevocationInfoChoice,u.asn1.ASN1Object);u.asn1.cms.OtherRevocationFormat=function(r){u.asn1.cms.OtherRevocationFormat.superclass.constructor.call(this);var e=Error,t=u,n=t.asn1,i=n.ASN1Util.newObject,o=t.lang.String.isHex;this.params=null,this.tohex=function(){var s=this.params;if(s.ocsp==null)throw new e("property ocsp not specified");if(!o(s.ocsp)||!V.isASN1HEX(s.ocsp))throw new e("ocsp value not ASN.1 hex string");var a=i({seq:[{oid:"1.3.6.1.5.5.7.16.2"},{asn1:{tlv:s.ocsp}}]});return a.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cms.OtherRevocationFormat,u.asn1.ASN1Object);u.asn1.cms.CMSUtil=new function(){};u.asn1.cms.CMSUtil.newSignedData=function(r){return new u.asn1.cms.SignedData(r)}

28;u.asn1.cms.CMSUtil.verifySignedData=function(r){var e=u,t=e.asn1,n=t.cms,i=n.SignerInfo,o=n.SignedData,s=n.SigningTime,a=n.SigningCertificate,c=n.SigningCertificateV2,l=t.cades,p=l.SignaturePolicyIdentifier,g=e.lang.String.isHex,h=V,d=h.getVbyList,m=h.getTLVbyList,f=h.getIdxbyList,y=h.getChildIdx,v=h.getTLV,S=h.oidname,A=e.crypto.Util.hashHex;r.cms===void 0&&g(r.cms);var T=r.cms,b=function(N,P){for(var F,j=3;j<6;j++)if(F=f(N,0,[1,0,j]),F!==void 0){var $=N.substr(F,2);$==="a0"&&(P.certsIdx=F),$==="a1"&&(P.revinfosIdx=F),$==="31"&&(P.signerinfosIdx=F)}},D=function(N,P){var F=P.signerinfosIdx;if(F!==void 0){var j=y(N,F);P.signerInfoIdxList=j;for(var $=0;$<j.length;$++){var Q=j[$],oe={idx:Q};B(N,oe),P.signerInfos.push(oe)}}},B=function(N,P){var F=P.idx;P.signerid_issuer1=m(N,F,[1,0],"30"),P.signerid_serial1=d(N,F,[1,1],"02"),P.hashalg=S(d(N,F,[2,0],"06"));var j=f(N,F,[3],"a0");P.idxSignedAttrs=j,C(N,P,j);var $=y(N,F),Q=$.length;if(Q<6)throw"malformed SignerInfo";P.sigalg=S(d(N,F,[Q-2,0],"06")),P.sigval=d(N,F,[Q-1],"04")},C=function(N,P,F){var j=y(N,F);P.signedAttrIdxList=j;for(var $=0;$<j.length;$++){var Q=j[$],oe=d(N,Q,[0],"06"),ee;oe==="2a864886f70d010905"?(ee=ke(d(N,Q,[1,0])),P.saSigningTime=ee):oe==="2a864886f70d010904"&&(ee=d(N,Q,[1,0],"04"),P.saMessageDigest=ee)}},E=function(N,P){if(d(N,0,[0],"06")!=="2a864886f70d010702")return P;P.cmsType="signedData",P.econtent=d(N,0,[1,0,2,1,0]),b(N,P),P.signerInfos=[],D(N,P)},I=function(N,P){for(var F=P.parse.signerInfos,j=F.length,$=!0,Q=0;Q<j;Q++){var oe=F[Q];_(N,P,oe,Q),oe.isValid||($=!1)}P.isValid=$},R=function(N,P,F,j){var $=P.parse.certsIdx,Q;if(P.certs===void 0){Q=[],P.certkeys=[];for(var oe=y(N,$),ee=0;ee<oe.length;ee++){var me=v(N,oe[ee]),te=new Z;te.readCertHex(me),Q[ee]=te,P.certkeys[ee]=te.getPublicKey()}P.certs=Q}else Q=P.certs;P.cccc=Q.length,P.cccci=oe.length;for(var ee=0;ee<Q.length;ee++){var Zt=te.getIssuerHex(),bt=te.getSerialNumberHex();F.signerid_issuer1===Zt&&F.signerid_serial1===bt&&(F.certkey_idx=ee)}},_=function(N,P,F,j){F.verifyDetail={};var $=F.verifyDetail,Q=P.parse.econtent,oe=F.hashalg,ee=F.saMessageDigest;$.validMessageDigest=!1,A(Q,oe)===ee&&($.validMessageDigest=!0),R(N,P,F,j),$.validSignatureValue=!1;var me=F.sigalg,te="31"+v(N,F.idxSignedAttrs).substr(2);F.signedattrshex=te;var Zt=P.certs[F.certkey_idx].getPublicKey(),bt=new u.crypto.Signature({alg:me});bt.init(Zt),bt.updateHex(te);var we=bt.verify(F.sigval);$.validSignatureValue_isValid=we,we===!0&&($.validSignatureValue=!0),F.isValid=!1,$.validMessageDigest&&$.validSignatureValue&&(F.isValid=!0)},M=function(){},k={isValid:!1,parse:{}};return E(T,k.parse),I(T,k),k};u.asn1.cms.CMSParser=function(){var r=Error,e=Z,t=new e,n=V,i=n.getV,o=n.getTLV,s=n.getIdxbyList,a=n.getTLVbyList,c=n.getTLVbyListEx,l=n.getVbyList,p=n.getVbyListEx,g=n.getChildIdx;this.getCMSSignedData=function(h){var d=a(h,0,[1,0]),m=this.getSignedData(d);return m},this.getSignedData=function(h){var d=g(h,0),m={},f=i(h,d[0]),y=parseInt(f,16);m.version=y;var v=o(h,d[1]);m.hashalgs=this.getHashAlgArray(v);var S=o(h,d[2]);m.econtent=this.getEContent(S);var A=c(h,0,["[0]"]);A!=null&&(m.certs=this.getCertificateSet(A));var T=c(h,0,["[1]"]);T!=null;var b=c(h,0,[3]);return m.sinfos=this.getSignerInfos(b),m},this.getHashAlgArray=function(h){for(var d=g(h,0),m=new e,f=[],y=0;y<d.length;y++){var v=o(h,d[y]),S=m.getAlgorithmIdentifierName(v);f.push(S)}return f},this.getEContent=function(h){var d={},m=l(h,0,[0]),f=l(h,0,[1,0]);return d.type=u.asn1.x509.OID.oid2name(V.hextooidstr(m)),d.content={hex:f},d},this.getSignerInfos=function(h){for(var d=[],m=g(h,0),f=0;f<m.length;f++){var y=o(h,m[f]),v=this.getSignerInfo(y);d.push(v)}return d},this.getSignerInfo=function(h){var d={},m=g(h,0),f=n.getInt(h,m[0],-1);f!=-1&&(d.version=f);var y=o(h,m[1]),v=this.getIssuerAndSerialNumber(y);d.id=v;var S=o(h,m[2]),A=t.getAlgorithmIdentifierName(S);d.hashalg=A;var T=c(h,0,["[0]"]);if(T!=null){var b=this.getAttributeList(T);d.sattrs=b}var D=c(h,0,[3]),B=t.getAlgorithmIdentifierName(D);d.sigalg=B;var C=p(h,0,[4]);d.sighex=C;var E=c(h,0,["[1]"]);if(E!=null){var I=this.getAttributeList(E);d.uattrs=I}return d}

28,this.getSignerIdentifier=function(h){if(h.substr(0,2)=="30")return this.getIssuerAndSerialNumber(h);throw new Error("SKID of signerIdentifier not supported")},this.getIssuerAndSerialNumber=function(h){var d={type:"isssn"},m=g(h,0),f=o(h,m[0]);d.issuer=t.getX500Name(f);var y=i(h,m[1]);return d.serial={hex:y},d},this.getAttributeList=function(h){for(var d=[],m=g(h,0),f=0;f<m.length;f++){var y=o(h,m[f]),v=this.getAttribute(y);d.push(v)}return{array:d}},this.getAttribute=function(h){var d={},m=g(h,0),f=n.getOID(h,m[0]),y=u.asn1.x509.OID.oid2name(f);d.attr=y;var v=o(h,m[1]),S=g(v,0);if(S.length==1)d.valhex=o(v,S[0]);else{for(var A=[],T=0;T<S.length;T++)A.push(o(v,S[T]));d.valhex=A}return y=="contentType"?this.setContentType(d):y=="messageDigest"?this.setMessageDigest(d):y=="signingTime"?this.setSigningTime(d):y=="signingCertificate"?this.setSigningCertificate(d):y=="signingCertificateV2"?this.setSigningCertificateV2(d):y=="signaturePolicyIdentifier"&&this.setSignaturePolicyIdentifier(d),d},this.setContentType=function(h){var d=n.getOIDName(h.valhex,0,null);d!=null&&(h.type=d,delete h.valhex)},this.setSigningTime=function(h){var d=i(h.valhex,0),m=ke(d);h.str=m,delete h.valhex},this.setMessageDigest=function(h){var d=i(h.valhex,0);h.hex=d,delete h.valhex},this.setSigningCertificate=function(h){var d=g(h.valhex,0);if(d.length>0){for(var m=o(h.valhex,d[0]),f=g(m,0),y=[],v=0;v<f.length;v++){var S=o(m,f[v]),A=this.getESSCertID(S);y.push(A)}h.array=y}if(d.length>1){var T=o(h.valhex,d[1]);h.polhex=T}delete h.valhex},this.setSignaturePolicyIdentifier=function(h){var d=g(h.valhex,0);if(d.length>0){var m=n.getOID(h.valhex,d[0]);h.oid=m}if(d.length>1){var f=new e,y=g(h.valhex,d[1]),v=o(h.valhex,y[0]),S=f.getAlgorithmIdentifierName(v);h.alg=S;var A=i(h.valhex,y[1]);h.hash=A}delete h.valhex},this.setSigningCertificateV2=function(h){var d=g(h.valhex,0);if(d.length>0){for(var m=o(h.valhex,d[0]),f=g(m,0),y=[],v=0;v<f.length;v++){var S=o(m,f[v]),A=this.getESSCertIDv2(S);y.push(A)}h.array=y}if(d.length>1){var T=o(h.valhex,d[1]);h.polhex=T}delete h.valhex},this.getESSCertID=function(h){var d={},m=g(h,0);if(m.length>0){var f=i(h,m[0]);d.hash=f}if(m.length>1){var y=o(h,m[1]),v=this.getIssuerSerial(y);v.serial!=null&&(d.serial=v.serial),v.issuer!=null&&(d.issuer=v.issuer)}return d},this.getESSCertIDv2=function(h){var d={},m=g(h,0);if(m.length<1||3<m.length)throw new r("wrong number of elements");var f=0;if(h.substr(m[0],2)=="30"){var y=o(h,m[0]);d.alg=t.getAlgorithmIdentifierName(y),f++}else d.alg="sha256";var v=i(h,m[f]);if(d.hash=v,m.length>f+1){var S=o(h,m[f+1]),A=this.getIssuerSerial(S);d.issuer=A.issuer,d.serial=A.serial}return d},this.getIssuerSerial=function(h){var d={},m=g(h,0),f=o(h,m[0]),y=t.getGeneralNames(f),v=y[0].dn;d.issuer=v;var S=i(h,m[1]);return d.serial={hex:S},d},this.getCertificateSet=function(h){for(var d=g(h,0),m=[],f=0;f<d.length;f++){var y=o(h,d[f]);if(y.substr(0,2)=="30"){var v=Tt(y,"CERTIFICATE");m.push(v)}}return{array:m,sortflag:!1}}};(typeof u>"u"||!u)&&(u={});(typeof u.asn1>"u"||!u.asn1)&&(u.asn1={});(typeof u.asn1.tsp>"u"||!u.asn1.tsp)&&(u.asn1.tsp={});u.asn1.tsp.TimeStampToken=function(r){var e=u,t=e.asn1,n=t.tsp;n.TimeStampToken.superclass.constructor.call(this),this.params=null,this.getEncodedHexPrepare=function(){var i=new n.TSTInfo(this.params.econtent.content);this.params.econtent.content.hex=i.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.tsp.TimeStampToken,u.asn1.cms.SignedData);u.asn1.tsp.TSTInfo=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.DERInteger,s=n.DERBoolean,a=n.DERGeneralizedTime,c=n.DERObjectIdentifier,l=n.DERTaggedObject,p=n.tsp,g=p.MessageImprint,h=p.Accuracy,d=n.x509.X500Name,m=n.x509.GeneralName;if(p.TSTInfo.superclass.constructor.call(this),this.dVersion=new o({int:1}),this.dPolicy=null,this.dMessageImprint=null,this.dSerial=null,this.dGenTime=null,this.dAccuracy=null,this.dOrdering=null,this.dNonce=null,this.dTsa=null,this.tohex=function(){var f=[this.dVersion];if(this.dPolicy==null)throw new Error("policy shall be specified.");if(f.push(this.dPolicy),this.dMessageImprint==null)throw new Error("messageImprint shall be specified.");if(f.push(this.dMessageImprint),this.dSerial==null)throw new Error("seri

28alNumber shall be specified.");if(f.push(this.dSerial),this.dGenTime==null)throw new Error("genTime shall be specified.");f.push(this.dGenTime),this.dAccuracy!=null&&f.push(this.dAccuracy),this.dOrdering!=null&&f.push(this.dOrdering),this.dNonce!=null&&f.push(this.dNonce),this.dTsa!=null&&f.push(this.dTsa);var y=new i({array:f});return this.hTLV=y.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0){if(typeof r.policy=="string"){if(!r.policy.match(/^[0-9.]+$/))throw"policy shall be oid like 0.1.4.134";this.dPolicy=new c({oid:r.policy})}r.messageImprint!==void 0&&(this.dMessageImprint=new g(r.messageImprint)),r.serial!==void 0&&(this.dSerial=new o(r.serial)),r.genTime!==void 0&&(this.dGenTime=new a(r.genTime)),r.accuracy!==void 0&&(this.dAccuracy=new h(r.accuracy)),r.ordering!==void 0&&r.ordering==!0&&(this.dOrdering=new s),r.nonce!==void 0&&(this.dNonce=new o(r.nonce)),r.tsa!==void 0&&(this.dTsa=new l({tag:"a0",explicit:!0,obj:new m({dn:r.tsa})}))}};U(u.asn1.tsp.TSTInfo,u.asn1.ASN1Object);u.asn1.tsp.Accuracy=function(r){var e=u,t=e.asn1,n=t.ASN1Util.newObject;t.tsp.Accuracy.superclass.constructor.call(this),this.params=null,this.tohex=function(){var i=this.params,o=[];return i.seconds!=null&&typeof i.seconds=="number"&&o.push({int:i.seconds}),i.millis!=null&&typeof i.millis=="number"&&o.push({tag:{tagi:"80",obj:{int:i.millis}}}),i.micros!=null&&typeof i.micros=="number"&&o.push({tag:{tagi:"81",obj:{int:i.micros}}}),n({seq:o}).tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.tsp.Accuracy,u.asn1.ASN1Object);u.asn1.tsp.MessageImprint=function(r){var e=u,t=e.asn1,n=t.DERSequence,i=t.DEROctetString,o=t.x509,s=o.AlgorithmIdentifier;t.tsp.MessageImprint.superclass.constructor.call(this),this.params=null,this.tohex=function(){var a=this.params,c=new s({name:a.alg}),l=new i({hex:a.hash}),p=new n({array:[c,l]});return p.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.tsp.MessageImprint,u.asn1.ASN1Object);u.asn1.tsp.TimeStampReq=function(r){var e=u,t=e.asn1,n=t.DERSequence,i=t.DERInteger,o=t.DERBoolean,s=t.ASN1Object,a=t.DERObjectIdentifier,c=t.tsp,l=c.MessageImprint;c.TimeStampReq.superclass.constructor.call(this),this.params=null,this.tohex=function(){var p=this.params,g=[];g.push(new i({int:1})),p.messageImprint instanceof u.asn1.ASN1Object?g.push(p.messageImprint):g.push(new l(p.messageImprint)),p.policy!=null&&g.push(new a(p.policy)),p.nonce!=null&&g.push(new i(p.nonce)),p.certreq==!0&&g.push(new o);var h=new n({array:g});return h.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.tsp.TimeStampReq,u.asn1.ASN1Object);u.asn1.tsp.TimeStampResp=function(r){var e=u,t=e.asn1,n=t.DERSequence,i=t.ASN1Object,o=t.tsp,s=o.PKIStatusInfo;o.TimeStampResp.superclass.constructor.call(this),this.params=null,this.tohex=function(){var a=this.params,c=[];if(a.econtent!=null||a.tst!=null)if(a.statusinfo!=null?c.push(new s(a.statusinfo)):c.push(new s("granted")),a.econtent!=null)c.push(new o.TimeStampToken(a).getContentInfo());else if(a.tst instanceof t.ASN1Object)c.push(a.tst);else throw new Error("improper member tst value");else if(a.statusinfo!=null)c.push(new s(a.statusinfo));else throw new Error("parameter for token nor statusinfo not specified");var l=new n({array:c});return l.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.tsp.TimeStampResp,u.asn1.ASN1Object);u.asn1.tsp.PKIStatusInfo=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.tsp,s=o.PKIStatus,a=o.PKIFreeText,c=o.PKIFailureInfo;o.PKIStatusInfo.superclass.constructor.call(this),this.params=null,this.tohex=function(){var l=this.params,p=[];if(typeof l=="string")p.push(new s(l));else{if(l.status==null)throw new e("property 'status' unspecified");p.push(new s(l.status)),l.statusstr!=null&&p.push(new a(l.statusstr)),l.failinfo!=null&&p.push(new c(l.failinfo))}var g=new i({array:p});return g.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.tsp.PKIStatusInfo,u.asn1.ASN1Object);u.asn1.tsp.PKIStatus=function(r){var e=Error,t=u,n=t.asn1,i=n.DERInteger,o=n.tsp;o.PKIStatus.superclass.constructor.call(this);var s={granted:0,grantedWithMods:1,rejection:2,waiting:3,revocationWarning:4,revocationNotification:5};this.params=null,this.tohex=function(){var a=this.params,c,l;

28if(typeof a=="string")try{l=s[a]}catch{throw new e("undefined name: "+a)}else if(typeof a=="number")l=a;else throw new e("unsupported params");return new i({int:l}).tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.tsp.PKIStatus,u.asn1.ASN1Object);u.asn1.tsp.PKIFreeText=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.DERUTF8String,s=n.tsp;s.PKIFreeText.superclass.constructor.call(this),this.params=null,this.tohex=function(){var a=this.params;if(!(a instanceof Array))throw new e("wrong params: not array");for(var c=[],l=0;l<a.length;l++)c.push(new o({str:a[l]}));var p=new i({array:c});return p.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.tsp.PKIFreeText,u.asn1.ASN1Object);u.asn1.tsp.PKIFailureInfo=function(r){var e=Error,t=u,n=t.asn1,i=n.DERBitString,o=n.tsp,s=o.PKIFailureInfo,a={badAlg:0,badRequest:2,badDataFormat:5,timeNotAvailable:14,unacceptedPolicy:15,unacceptedExtension:16,addInfoNotAvailable:17,systemFailure:25};s.superclass.constructor.call(this),this.params=null,this.getBinValue=function(){var c=this.params,l=0;if(typeof c=="number"&&0<=c&&c<=25){l|=1<<c;for(var p=l.toString(2),g="",h=p.length-1;h>=0;h--)g+=p[h];return g}else{if(typeof c=="string"&&a[c]!=null)return Gl([c],a);if(typeof c=="object"&&c.length!=null)return Gl(c,a);throw new e("wrong params")}},this.tohex=function(){var c=this.params,l=this.getBinValue();return new i({bin:l}).tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.tsp.PKIFailureInfo,u.asn1.ASN1Object);u.asn1.tsp.AbstractTSAAdapter=function(r){this.getTSTHex=function(e,t){throw"not implemented yet"}};u.asn1.tsp.SimpleTSAAdapter=function(r){var e=u,t=e.asn1,n=t.tsp,i=e.crypto.Util.hashHex;n.SimpleTSAAdapter.superclass.constructor.call(this),this.params=null,this.serial=0,this.getTSTHex=function(o,s){var a=i(o,s);this.params.econtent.content.messageImprint={alg:s,hash:a},this.params.econtent.content.serial={int:this.serial++};var c=Math.floor(Math.random()*1e9);this.params.econtent.content.nonce={int:c};var l=new n.TimeStampToken(this.params);return l.getContentInfoEncodedHex()},r!==void 0&&(this.params=r)};U(u.asn1.tsp.SimpleTSAAdapter,u.asn1.tsp.AbstractTSAAdapter);u.asn1.tsp.FixedTSAAdapter=function(r){var e=u,t=e.asn1,n=t.tsp,i=e.crypto.Util.hashHex;n.FixedTSAAdapter.superclass.constructor.call(this),this.params=null,this.getTSTHex=function(o,s){var a=i(o,s);this.params.econtent.content.messageImprint={alg:s,hash:a};var c=new n.TimeStampToken(this.params);return c.getContentInfoEncodedHex()},r!==void 0&&(this.params=r)};U(u.asn1.tsp.FixedTSAAdapter,u.asn1.tsp.AbstractTSAAdapter);u.asn1.tsp.TSPUtil=new function(){};u.asn1.tsp.TSPUtil.newTimeStampToken=function(r){return new u.asn1.tsp.TimeStampToken(r)};u.asn1.tsp.TSPUtil.parseTimeStampReq=function(r){var e=new u.asn1.tsp.TSPParser;return e.getTimeStampReq(r)};u.asn1.tsp.TSPUtil.parseMessageImprint=function(r){var e=new u.asn1.tsp.TSPParser;return e.getMessageImprint(r)};u.asn1.tsp.TSPParser=function(){var r=Error,e=Z,t=new e,n=V,i=n.getV,o=n.getTLV,s=n.getIdxbyList,a=n.getTLVbyListEx,c=n.getChildIdx,l=["granted","grantedWithMods","rejection","waiting","revocationWarning","revocationNotification"],p={0:"badAlg",2:"badRequest",5:"badDataFormat",14:"timeNotAvailable",15:"unacceptedPolicy",16:"unacceptedExtension",17:"addInfoNotAvailable",25:"systemFailure"};this.getResponse=function(g){var h=c(g,0);if(h.length==1)return this.getPKIStatusInfo(o(g,h[0]));if(h.length>1){var d=this.getPKIStatusInfo(o(g,h[0])),m=o(g,h[1]),f=this.getToken(m);return f.statusinfo=d,f}},this.getToken=function(g){var h=new u.asn1.cms.CMSParser,d=h.getCMSSignedData(g);return this.setTSTInfo(d),d},this.setTSTInfo=function(g){var h=g.econtent;if(h.type=="tstinfo"){var d=h.content.hex,m=this.getTSTInfo(d);h.content=m}},this.getTSTInfo=function(g){var h={},d=c(g,0),m=i(g,d[1]);h.policy=eu(m);var f=o(g,d[2]);h.messageImprint=this.getMessageImprint(f);var y=i(g,d[3]);h.serial={hex:y};var v=i(g,d[4]);h.genTime={str:ke(v)};var S=0;if(d.length>5&&g.substr(d[5],2)=="30"){var A=o(g,d[5]);h.accuracy=this.getAccuracy(A),S++}if(d.length>5+S&&g.substr(d[5+S],2)=="01"){var T=i(g,d[5+S]);T=="ff"&&(h.ordering=!0),S++}if(d.length>5+S&&g.substr(d[5+S],2)=="02"){var b=i(g,d[5+S]);h.nonce={hex:b},S++}if(d.length>5+S&&g.substr(d[5+S],2)=="a0"){var D=o(g,d[5+S]);D="30"+D.substr(2),pGeneralNames=t.getGeneralNames(D);var B=pGeneralNames[0].dn;h.tsa=B,S++}if(d.length>5+S&&g.substr(d[5+S],2)=="a1"){var C=o(g,d[5+S]);C="30"+C.substr(2);var E=t.getExtParamArray(C);h.ext=E,S++}return h},this.getAccuracy=function(g){for(var h={},d=c(g,0),m=0;m<d.length;m++){var f=g.substr(d[m],2),y=i(g,d[m]),v=parseInt(y,16);f=="02"?h.seconds=v:f=="80"?h.millis=v:f=="81"&&(h.micros=v)}return h},this.getMessageImprint=function(g){if(g.substr(0,2)!="30")throw new Error("head of messageImprint hex shall be x30");var h={},d=c(g,0),m=s(g,0,[0,0]),f=i(g,m),y=n.hextooidstr(f),v=u.asn1.x509.OID.oid2name(y);if(v=="")throw new Error("hashAlg name undefined: "+y);var S=v,A=s(g,0,[1]);return h.alg=S,h.hash=i(g,A),h},this.getPKIStatusInfo=function(g){var h={},d=c(g,0),m=0;try{var f=i(g,d[0]),y=parseInt(f,16);h.status=l[y]}catch{}if(d.length>1&&g.substr(d[1],2)=="30"){var v=o(g,d[1]);h.statusstr=this.getPKIFreeText(v),m++}if(d.length>m&&g.substr(d[1+m],2)=="03"){var S=o(g,d[1+m]);h.failinfo=this.getPKIFailureInfo(S)}return h},this.getPKIFreeText=function(g){for(var h=[],d=c(g,0),m=0;m<d.length;

28m++)h.push(n.getString(g,d[m]));return h},this.getPKIFailureInfo=function(g){var h=n.getInt(g,0);return p[h]!=null?p[h]:h},this.getTimeStampReq=function(g){var h={};h.certreq=!1;var d=c(g,0);if(d.length<2)throw new Error("TimeStampReq must have at least 2 items");var m=o(g,d[1]);h.messageImprint=u.asn1.tsp.TSPUtil.parseMessageImprint(m);for(var f=2;f<d.length;f++){var y=d[f],v=g.substr(y,2);if(v=="06"){var S=i(g,y);h.policy=n.hextooidstr(S)}v=="02"&&(h.nonce=i(g,y)),v=="01"&&(h.certreq=!0)}return h}};(typeof u>"u"||!u)&&(u={});(typeof u.asn1>"u"||!u.asn1)&&(u.asn1={});(typeof u.asn1.cades>"u"||!u.asn1.cades)&&(u.asn1.cades={});u.asn1.cades.SignaturePolicyIdentifier=function(r){var e=u,t=e.asn1,n=t.cades,i=n.SignaturePolicyId;n.SignaturePolicyIdentifier.superclass.constructor.call(this),this.typeOid="1.2.840.113549.1.9.16.2.15",this.params=null,this.getValueArray=function(){return[new i(this.params)]},this.setByParam=function(o){this.params=o},r!=null&&this.setByParam(r)};U(u.asn1.cades.SignaturePolicyIdentifier,u.asn1.cms.Attribute);u.asn1.cades.SignaturePolicyId=function(r){var e=u,t=e.asn1,n=t.DERSequence,i=t.DERObjectIdentifier,o=t.x509,s=o.AlgorithmIdentifier,a=t.cades,c=a.SignaturePolicyId,l=a.OtherHashAlgAndValue;c.superclass.constructor.call(this),this.params=null,this.tohex=function(){var p=this.params,g=[];g.push(new i(p.oid)),g.push(new l(p));var h=new n({array:g});return h.tohex()},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(p){this.params=p},r!=null&&this.setByParam(r)};U(u.asn1.cades.SignaturePolicyId,u.asn1.ASN1Object);u.asn1.cades.OtherHashAlgAndValue=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.DEROctetString,s=n.x509,a=s.AlgorithmIdentifier,c=n.cades,l=c.OtherHashAlgAndValue;l.superclass.constructor.call(this),this.params=null,this.tohex=function(){var p=this.params;if(p.alg==null)throw new e("property 'alg' not specified");if(p.hash==null&&p.cert==null)throw new e("property 'hash' nor 'cert' not specified");var g=null;if(p.hash!=null)g=p.hash;else if(p.cert!=null){if(typeof p.cert!="string")throw new e("cert not string");var h=p.cert;p.cert.indexOf("-----BEGIN")!=-1&&(h=Ze(p.cert)),g=u.crypto.Util.hashHex(h,p.alg)}var d=[];d.push(new a({name:p.alg})),d.push(new o({hex:g}));var m=new i({array:d});return m.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cades.OtherHashAlgAndValue,u.asn1.ASN1Object);u.asn1.cades.OtherHashValue=function(r){u.asn1.cades.OtherHashValue.superclass.constructor.call(this);var e=Error,t=u,n=t.lang.String.isHex,i=t.asn1,o=i.DEROctetString,s=t.crypto.Util.hashHex;this.params=null,this.tohex=function(){var a=this.params;if(a.hash==null&&a.cert==null)throw new e("hash or cert not specified");var c=null;if(a.hash!=null)c=a.hash;else if(a.cert!=null){if(typeof a.cert!="string")throw new e("cert not string");var l=a.cert;a.cert.indexOf("-----BEGIN")!=-1&&(l=Ze(a.cert)),c=u.crypto.Util.hashHex(l,"sha1")}return new o({hex:c}).tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cades.OtherHashValue,u.asn1.ASN1Object);u.asn1.cades.SignatureTimeStamp=function(r){var e=Error,t=u,n=t.lang.String.isHex,i=t.asn1,o=i.ASN1Object,s=i.x509,a=i.cades;a.SignatureTimeStamp.superclass.constructor.call(this),this.typeOid="1.2.840.113549.1.9.16.2.14",this.params=null,this.getValueArray=function(){var c=this.params;if(c.tst!=null)if(n(c.tst)){var l=new o;return l.hTLV=c.tst,[l]}else{if(c.tst instanceof o)return[c.tst];throw new e("params.tst has wrong value")}else if(c.res!=null){var p=c.res;if(p instanceof o&&(p=p.tohex()),typeof p!="string"||!n(p))throw new e("params.res has wrong value");var g=V.getTLVbyList(p,0,[1]),l=new o;return l.hTLV=c.tst,[l]}},r!=null&&this.setByParam(r)};U(u.asn1.cades.SignatureTimeStamp,u.asn1.cms.Attribute);u.asn1.cades.CompleteCertificateRefs=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.cades,s=o.OtherCertID,a=t.lang.String.isHex;o.CompleteCertificateRefs.superclass.constructor.call(this),this.typeOid="1.2.840.113549.1.9.16.2.21",this.params=null,this.getValueArray=function(){for(var c=this.params,l=[],p=0;p<c.array.length;p++){var g=c.array[p];if(typeof g=="string")if(g.indexOf("-----BEGIN")!=-1)g={cert:g};else if(a(g))g={hash:g};else throw new e("unsupported value: "+g);c.alg!=null&&g.alg==null&&(g.alg=c.alg),c.hasis!=null&&g.hasis==null&&(g.hasis=c.hasis);var h=new s(g);l.push(h)}var d=new i({array:l});return[d]},r!=null&&this.setByParam(r)};

28U(u.asn1.cades.CompleteCertificateRefs,u.asn1.cms.Attribute);u.asn1.cades.OtherCertID=function(r){var e=u,t=e.asn1,n=t.DERSequence,i=t.cms,o=i.IssuerSerial,s=t.cades,a=s.OtherHashValue,c=s.OtherHashAlgAndValue;s.OtherCertID.superclass.constructor.call(this),this.params=r,this.tohex=function(){var l=this.params;typeof l=="string"&&(l.indexOf("-----BEGIN")!=-1?l={cert:l}:_isHex(l)&&(l={hash:l}));var p=[],g=null;if(l.alg!=null?g=new c(l):g=new a(l),p.push(g),l.cert!=null&&l.hasis==!0||l.issuer!=null&&l.serial!=null){var h=new o(l);p.push(h)}var d=new n({array:p});return d.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cades.OtherCertID,u.asn1.ASN1Object);u.asn1.cades.OtherHash=function(r){var e=Error,t=u,n=t.asn1,i=n.cms,o=n.cades,s=o.OtherHashAlgAndValue,a=o.OtherHashValue,c=t.crypto.Util.hashHex,l=t.lang.String.isHex;o.OtherHash.superclass.constructor.call(this),this.params=null,this.tohex=function(){var p=this.params;typeof p=="string"&&(p.indexOf("-----BEGIN")!=-1?p={cert:p}:l(p)&&(p={hash:p}));var g=null;return p.alg!=null?g=new s(p):g=new a(p),g.tohex()},this.getEncodedHex=function(){return this.tohex()},r!=null&&this.setByParam(r)};U(u.asn1.cades.OtherHash,u.asn1.ASN1Object);u.asn1.cades.CAdESUtil=new function(){};u.asn1.cades.CAdESUtil.parseSignedDataForAddingUnsigned=function(r){var e=new u.asn1.cms.CMSParser,t=e.getCMSSignedData(r);return t};u.asn1.cades.CAdESUtil.parseSignerInfoForAddingUnsigned=function(r,e,t){var n=V,i=n.getChildIdx,o=n.getTLV,s=n.getV,a=u,c=a.asn1,l=c.ASN1Object,p=c.cms,g=p.AttributeList,h=p.SignerInfo,d={},m=i(r,e);if(m.length!=6)throw"not supported items for SignerInfo (!=6)";var f=m.shift();d.version=o(r,f);var y=m.shift();d.si=o(r,y);var v=m.shift();d.digalg=o(r,v);var S=m.shift();d.sattrs=o(r,S);var A=m.shift();d.sigalg=o(r,A);var T=m.shift();d.sig=o(r,T),d.sigval=s(r,T);var b=null;return d.obj=new h,b=new l,b.hTLV=d.version,d.obj.dCMSVersion=b,b=new l,b.hTLV=d.si,d.obj.dSignerIdentifier=b,b=new l,b.hTLV=d.digalg,d.obj.dDigestAlgorithm=b,b=new l,b.hTLV=d.sattrs,d.obj.dSignedAttrs=b,b=new l,b.hTLV=d.sigalg,d.obj.dSigAlg=b,b=new l,b.hTLV=d.sig,d.obj.dSig=b,d.obj.dUnsignedAttrs=new g,d};(typeof u.asn1.csr>"u"||!u.asn1.csr)&&(u.asn1.csr={});u.asn1.csr.CertificationRequest=function(r){var e=u,t=e.asn1,n=t.DERBitString,i=t.DERSequence,o=t.csr,s=t.x509,a=o.CertificationRequestInfo;o.CertificationRequest.superclass.constructor.call(this),this.setByParam=function(c){this.params=c},this.sign=function(){var c=new a(this.params).tohex(),l=new u.crypto.Signature({alg:this.params.sigalg});l.init(this.params.sbjprvkey),l.updateHex(c);var p=l.sign();this.params.sighex=p},this.getPEM=function(){return Tt(this.tohex(),"CERTIFICATE REQUEST")},this.tohex=function(){var c=this.params,l=new u.asn1.csr.CertificationRequestInfo(this.params),p=new u.asn1.x509.AlgorithmIdentifier({name:c.sigalg});if(c.sighex==null&&c.sbjprvkey!=null&&this.sign(),c.sighex==null)throw new Error("sighex or sbjprvkey parameter not defined");var g=new n({hex:"00"+c.sighex}),h=new i({array:[l,p,g]});return h.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.csr.CertificationRequest,u.asn1.ASN1Object);u.asn1.csr.CertificationRequestInfo=function(r){var e=u,t=e.asn1,n=t.DERBitString,i=t.DERSequence,o=t.DERInteger,s=t.DERUTF8String,a=t.DERTaggedObject,c=t.ASN1Util.newObject,l=t.csr,p=t.x509,g=p.X500Name,h=p.Extensions,d=p.SubjectPublicKeyInfo,m=l.AttributeList;l.CertificationRequestInfo.superclass.constructor.call(this),this.params=null,this.setByParam=function(y){y!=null&&(this.params=y)},this.tohex=function(){var y=this.params,v=[];if(v.push(new o({int:0})),v.push(new g(y.subject)),v.push(new d(pe.getKey(y.sbjpubkey))),y.attrs!=null){var S=f(y.attrs),A=c({tag:{tage:"a0",obj:S}});v.push(A)}else if(y.extreq!=null){var T=new h(y.extreq),A=c({tag:{tage:"a0",obj:{seq:[{oid:"1.2.840.113549.1.9.14"},{set:[T]}]}}});v.push(A)}else v.push(new a({tag:"a0",explicit:!1,obj:new s({str:""})}));var b=new i({array:v});return b.tohex()},this.getEncodedHex=function(){return this.tohex()};function f(y){for(var v=Error,S=u.asn1.x509.Extensions,A=[],T=0;T<y.length;T++){var b=y[T],D=b.attr;if(D=="extensionRequest"){var B=new S(b.ext),C={seq:[{oid:"1.2.840.113549.1.9.14"},{set:[B]}]};A.push(C)}else if(D=="unstructuredName"){var C={seq:[{oid:"1.2.840.113549.1.9.2"},{set:b.names}]};A.push(C)}else if(D=="challengePassword"){var C={seq:[{oid:"1.2.840.113549.1.9.7"},{set:[{utf8str:b.password}]}]};A.push(C)}else throw new v("unknown CSR attribute")}return{set:A}}r!=null&&this.setByParam(r)};U(u.asn1.csr.CertificationRequestInfo,u.asn1.ASN1Object);u.asn1.csr.AttributeList=function(r){function e(t){}};U(u.asn1.csr.AttributeList,u.asn1.ASN1Object);u.asn1.csr.CSRUtil=new function(){};u.asn1.csr.CSRUtil.newCSRPEM=function(r){var e=pe,t=u.asn1.csr,n=new t.CertificationRequest(r),i=n.getPEM();return i};u.asn1.csr.CSRUtil.getParam=function(r,e){var t=V,n=t.getV,i=t.getIdxbyList,o=t.getTLVbyList,s=t.getTLVbyListEx,a=t.getVbyListEx,c=function(S){var A=i(S,0,[0,3,0,0],"06");return n(S,A)!="2a864886f70d01090e"?null:o(S,0,[0,3,0,1,0],"30")},l={};if(r.indexOf("-----BEGIN CERTIFICATE REQUEST")==-1)throw new Error("argument is not PEM file");

28var p=Ze(r,"CERTIFICATE REQUEST");e&&(l.tbs=o(p,0,[0]));try{var g=s(p,0,[0,1]);if(g=="3000")l.subject={};else{var f=new Z;l.subject=f.getX500Name(g)}}catch{}var h=s(p,0,[0,2]),d=pe.getKey(h,null,"pkcs8pub");l.sbjpubkey=pe.getPEM(d,"PKCS8PUB");var m=c(p),f=new Z;m!=null&&(l.extreq=f.getExtParamArray(m));try{var y=s(p,0,[1],"30"),f=new Z;l.sigalg=f.getAlgorithmIdentifierName(y)}catch{}try{var v=a(p,0,[2]);l.sighex=v}catch{}return l};u.asn1.csr.CSRUtil.verifySignature=function(r){try{var e=null;if(typeof r=="string"&&r.indexOf("-----BEGIN CERTIFICATE REQUEST")!=-1?e=u.asn1.csr.CSRUtil.getParam(r,!0):typeof r=="object"&&r.sbjpubkey!=null&&r.sigalg!=null&&r.sighex!=null&&r.tbs!=null&&(e=r),e==null)return!1;var t=new u.crypto.Signature({alg:e.sigalg});return t.init(e.sbjpubkey),t.updateHex(e.tbs),t.verify(e.sighex)}catch(n){return alert(n),!1}};(typeof u>"u"||!u)&&(u={});(typeof u.asn1>"u"||!u.asn1)&&(u.asn1={});(typeof u.asn1.ocsp>"u"||!u.asn1.ocsp)&&(u.asn1.ocsp={});u.asn1.ocsp.DEFAULT_HASH="sha1";u.asn1.ocsp.OCSPResponse=function(r){u.asn1.ocsp.OCSPResponse.superclass.constructor.call(this);var e=u.asn1.DEREnumerated,t=u.asn1.ASN1Util.newObject,n=u.asn1.ocsp.ResponseBytes,i=["successful","malformedRequest","internalError","tryLater","_not_used_","sigRequired","unauthorized"];this.params=null,this._getStatusCode=function(){var o=this.params.resstatus;return typeof o=="number"?o:typeof o!="string"?-1:i.indexOf(o)},this.setByParam=function(o){this.params=o},this.tohex=function(){var o=this.params,s=this._getStatusCode();if(s==-1)throw new Error("responseStatus not supported: "+o.resstatus);if(s!=0)return t({seq:[{enum:{int:s}}]}).tohex();var a=new n(o);return t({seq:[{enum:{int:0}},{tag:{tag:"a0",explicit:!0,obj:a}}]}).tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.OCSPResponse,u.asn1.ASN1Object);u.asn1.ocsp.ResponseBytes=function(r){u.asn1.ocsp.ResponseBytes.superclass.constructor.call(this);var e=u.asn1,t=e.DERSequence,n=e.DERObjectIdentifier,i=e.DEROctetString,o=e.ocsp.BasicOCSPResponse;this.params=null,this.setByParam=function(s){this.params=s},this.tohex=function(){var s=this.params;if(s.restype!="ocspBasic")throw new Error("not supported responseType: "+s.restype);var a=new o(s),c=[];c.push(new n({name:"ocspBasic"})),c.push(new i({hex:a.tohex()}));var l=new t({array:c});return l.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.ResponseBytes,u.asn1.ASN1Object);u.asn1.ocsp.BasicOCSPResponse=function(r){u.asn1.ocsp.BasicOCSPResponse.superclass.constructor.call(this);var e=Error,t=u.asn1,n=t.ASN1Object,i=t.DERSequence,o=t.DERGeneralizedTime,s=t.DERTaggedObject,a=t.DERBitString,c=t.x509.Extensions,l=t.x509.AlgorithmIdentifier,p=t.ocsp,g=p.ResponderID;_SingleResponseList=p.SingleResponseList,_ResponseData=p.ResponseData,this.params=null,this.setByParam=function(h){this.params=h},this.sign=function(){var h=this.params,d=h.tbsresp.tohex(),m=new u.crypto.Signature({alg:h.sigalg});m.init(h.reskey),m.updateHex(d),h.sighex=m.sign()},this.tohex=function(){var h=this.params;h.tbsresp==null&&(h.tbsresp=new _ResponseData(h)),h.sighex==null&&h.reskey!=null&&this.sign();var d=[];if(d.push(h.tbsresp),d.push(new l({name:h.sigalg})),d.push(new a({hex:"00"+h.sighex})),h.certs!=null&&h.certs.length!=null){for(var m=[],f=0;f<h.certs.length;f++){var y=h.certs[f],v=null;if(V.isASN1HEX(y))v=y;else if(y.match(/-----BEGIN/))v=Ze(y);else throw new e("certs["+f+"] not hex or PEM");m.push(new n({tlv:v}))}var S=new i({array:m});d.push(new s({tag:"a0",explicit:!0,obj:S}))}var A=new i({array:d});return A.tohex()},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.BasicOCSPResponse,u.asn1.ASN1Object);u.asn1.ocsp.ResponseData=function(r){u.asn1.ocsp.ResponseData.superclass.constructor.call(this);var e=Error,t=u.asn1,n=t.DERSequence,i=t.DERGeneralizedTime,o=t.DERTaggedObject,s=t.x509.Extensions,a=t.ocsp,c=a.ResponderID;_SingleResponseList=a.SingleResponseList,this.params=null,this.tohex=function(){var l=this.params;l.respid!=null&&new e("respid not specified"),l.prodat!=null&&new e("prodat not specified"),l.array!=null&&new e("array not specified");var p=[];if(p.push(new c(l.respid)),p.push(new i(l.prodat)),p.push(new _SingleResponseList(l.array)),l.ext!=null){var g=new s(l.ext);p.push(new o({tag:"a1",explicit:!0,obj:g}))}var h=new n({array:p});return h.tohex()},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(l){this.params=l},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.ResponseData,u.asn1.ASN1Object);u.asn1.ocsp.ResponderID=function(r){u.asn1.ocsp.ResponderID.superclass.constructor.call(this);var e=u,t=e.asn1,n=t.ASN1Util.newObject,i=t.x509.X500Name,o=e.lang.String.isHex,s=Error;this.params=null,this.tohex=function(){var a=this.params;if(a.key!=null){var c=null;if(typeof a.key=="string"){if(o(a.key)&&(c=a.key),a.key.match(/-----BEGIN CERTIFICATE/)){var l=new Z(a.key),p=l.getExtSubjectKeyIdentifier();p!=null&&(c=p.kid.hex)}}else if(a.key instanceof Z){var p=a.key.getExtSubjectKeyIdentifier();p!=null&&(c=p.kid.hex)}if(c==null)throw new s("wrong key member value");var g=n({tag:{tag:"a2",explicit:!0,obj:{octstr:{hex:c}}}});return g.tohex()}else if(a.name!=null){var h=null;if(typeof a.name=="string"&&a.name.match(/-----BEGIN CERTIFICATE/)){var l=new Z(a.name);h=l.getSubject()}else a.name instanceof Z?h=a.name.getSubject():typeof a.name=="object"&&(a.name.array!=null||a.name.str!=null)&&(h=a.name);if(h==null)throw new s("wrong name member value");var g=n({tag:{tag:"a1",explicit:!0,obj:new i(h)}});return g.tohex()}throw new s("key or name not specified")},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(a){this.params=a},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.ResponderID,u.asn1.ASN1Object);u.asn1.ocsp.SingleResponseList=function(r){u.asn1.ocsp.SingleResponseList.superclass.constructor.call(this);var e=u.asn1,t=e.DERSequence,n=e.ocsp.SingleResponse;this.params=null,this.tohex=function(){var i=this.params;if(typeof i!="object"||i.length==null)throw new Error("params not specified properly");for(var o=[],s=0;s<i.length;s++)o.push(new n(i[s]));var a=new t({array:o});return a.tohex()},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(i){this.params=i},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.SingleResponseList,u.asn1.ASN1Object);u.asn1.ocsp.SingleResponse=function(r){var e=Error,t=u,n=t.asn1,i=n.DERSequence,o=n.DERGeneralizedTime,s=n.DERTaggedObject,a=n.ocsp,c=a.CertID,l=a.CertStatus,p=n.x509,g=p.Extensions;a.SingleResponse.superclass.constructor.call(this),this.params=null,this.tohex=function(){var h=this.params,d=[];if(h.certid==null)throw new e("certid unspecified");if(h.status==null)throw new e("status unspecified");if(h.thisupdate==null)throw new e("thisupdate unspecified");if(d.push(new c(h.certid)),d.push(new l(h.status)),d.push(new o(h.thisupdate)),h.nextupdate!=null){var m=new o(h.nextupdate);d.push(new s({tag:"a0",explicit:!0,obj:m}))}if(h.ext!=null){var f=new g(h.ext);d.push(new s({tag:"a1",explicit:!0,obj:f}))}var y=new i({array:d});return y.tohex()},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(h){this.params=h},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.SingleResponse,u.asn1.ASN1Object);u.asn1.ocsp.CertID=function(r){var e=u,t=e.asn1,n=t.DEROctetString,i=t.DERInteger,o=t.DERSequence,s=t.x509,a=s.AlgorithmIdentifier,c=t.ocsp,l=c.DEFAULT_HASH,p=e.crypto,g=p.Util.hashHex,h=Z,d=V,m=d.getVbyList;c.CertID.superclass.constructor.call(this),this.DEFAULT_HASH="sha1",this.params=null,this.setByValue=function(f,y,v,S

28){S==null&&(S=this.DEFAULT_HASH),this.params={alg:S,issname:f,isskey:y,sbjsn:v}},this.setByCert=function(f,y,v){v==null&&(v=this.DEFAULT_HASH),this.params={alg:v,issuerCert:f,subjectCert:y}},this.getParamByCerts=function(f,y,v){v==null&&(v=this.DEFAULT_HASH);var S=new h(f),A=new h(y),T=g(S.getSubjectHex(),v),b=S.getPublicKeyHex(),D=g(m(b,0,[1],"03",!0),v),B=A.getSerialNumberHex(),C={alg:v,issname:T,isskey:D,sbjsn:B};return C},this.tohex=function(){if(typeof this.params!="object")throw new Error("params not set");var f=this.params,y,v,S,A;if(f.alg==null?A=this.DEFAULT_HASH:A=f.alg,f.issuerCert!=null&&f.subjectCert!=null){var T=this.getParamByCerts(f.issuerCert,f.subjectCert,A);y=T.issname,v=T.isskey,S=T.sbjsn}else if(f.issname!=null&&f.isskey!=null&&f.sbjsn!=null)y=f.issname,v=f.isskey,S=f.sbjsn;else throw new Error("required param members not defined");var b=new a({name:A}),D=new n({hex:y}),B=new n({hex:v}),C=new i({hex:S}),E=new o({array:[b,D,B,C]});return this.hTLV=E.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.CertID,u.asn1.ASN1Object);u.asn1.ocsp.CertStatus=function(r){u.asn1.ocsp.CertStatus.superclass.constructor.call(this),this.params=null,this.tohex=function(){var e=this.params;if(e.status=="good")return"8000";if(e.status=="unknown")return"8200";if(e.status=="revoked"){var t=[{gentime:{str:e.time}}];e.reason!=null&&t.push({tag:{tag:"a0",explicit:!0,obj:{enum:{int:e.reason}}}});var n={tag:"a1",explicit:!1,obj:{seq:t}};return u.asn1.ASN1Util.newObject({tag:n}).tohex()}throw new Error("bad status")},this.getEncodedHex=function(){return this.tohex()},this.setByParam=function(e){this.params=e},r!==void 0&&this.setByParam(r)};U(u.asn1.ocsp.CertStatus,u.asn1.ASN1Object);u.asn1.ocsp.Request=function(r){var e=u,t=e.asn1,n=t.DERSequence,i=t.ocsp;if(i.Request.superclass.constructor.call(this),this.dReqCert=null,this.dExt=null,this.tohex=function(){var s=[];if(this.dReqCert===null)throw"reqCert not set";s.push(this.dReqCert);var a=new n({array:s});return this.hTLV=a.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},typeof r<"u"){var o=new i.CertID(r);this.dReqCert=o}};U(u.asn1.ocsp.Request,u.asn1.ASN1Object);u.asn1.ocsp.TBSRequest=function(r){var e=u,t=e.asn1,n=t.DERSequence,i=t.ocsp;i.TBSRequest.superclass.constructor.call(this),this.version=0,this.dRequestorName=null,this.dRequestList=[],this.dRequestExt=null,this.setRequestListByParam=function(o){for(var s=[],a=0;a<o.length;a++){var c=new i.Request(o[0]);s.push(c)}this.dRequestList=s},this.tohex=function(){var o=[];if(this.version!==0)throw"not supported version: "+this.version;if(this.dRequestorName!==null)throw"requestorName not supported";var s=new n({array:this.dRequestList});if(o.push(s),this.dRequestExt!==null)throw"requestExtensions not supported";var a=new n({array:o});return this.hTLV=a.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&r.reqList!==void 0&&this.setRequestListByParam(r.reqList)};U(u.asn1.ocsp.TBSRequest,u.asn1.ASN1Object);u.asn1.ocsp.OCSPRequest=function(r){var e=u,t=e.asn1,n=t.DERSequence,i=t.ocsp;if(i.OCSPRequest.superclass.constructor.call(this),this.dTbsRequest=null,this.dOptionalSignature=null,this.tohex=function(){var s=[];if(this.dTbsRequest!==null)s.push(this.dTbsRequest);else throw"tbsRequest not set";if(this.dOptionalSignature!==null)throw"optionalSignature not supported";var a=new n({array:s});return this.hTLV=a.tohex(),this.hTLV},this.getEncodedHex=function(){return this.tohex()},r!==void 0&&r.reqList!==void 0){var o=new i.TBSRequest(r);this.dTbsRequest=o}};U(u.asn1.ocsp.OCSPRequest,u.asn1.ASN1Object);u.asn1.ocsp.OCSPUtil={};u.asn1.ocsp.OCSPUtil.getRequestHex=function(r,e,t){var n=u,i=n.asn1,o=i.ocsp;t===void 0&&(t=o.DEFAULT_HASH);var s={alg:t,issuerCert:r,subjectCert:e},a=new o.OCSPRequest({reqList:[s]});return a.tohex()};u.asn1.ocsp.OCSPUtil.getOCSPResponseInfo=function(r){var e=V,t=e.getVbyList,n=e.getVbyListEx,i=e.getIdxbyList,o=e.getIdxbyListEx,s=e.getV,a={};try{var c=n(r,0,[0],"0a");a.responseStatus=parseInt(c,16)}catch{}if(a.responseStatus!==0)return a;try{var l=i(r,0,[1,0,1,0,0,2,0,1]);r.substr(l,2)==="80"?a.certStatus="good":r.substr(l,2)==="a1"?(a.certStatus="revoked",a.revocationTime=ke(t(r,l,[0]))):r.substr(l,2)==="82"&&(a.certStatus="unknown")}catch{}try{var p=i(r,0,[1,0,1,0,0,2,0,2]);a.thisUpdate=ke(s(r,p))}catch{}try{var g=i(r,0,[1,0,1,0,0,2,0,3]);r.substr(g,2)==="a0"&&(a.nextUpdate=ke(t(r,g,[0])))}catch{}return a};u.asn1.ocsp.OCSPParser=function(){var r=Error,e=Z,t=new e,n=V,i=n.getV,o=n.getTLV,s=n.getIdxbyList,a=n.getVbyList,c=n.getTLVbyList,l=n.getVbyListEx,p=n.getTLVbyListEx,g=n.getChildIdx;this.getOCSPRequest=function(h){var d=g(h,0);if(d.length!=1&&d.length!=2)throw new r("wrong number elements: "+d.length);var m=this.getTBSRequest(o(h,d[0]));return m},this.getTBSRequest=function(h){var d={},m=p(h,0,[0],"30");d.array=this.getRequestList(m);var f=p(h,0,["[2]",0],"30");return f!=null&&(d.ext=t.getExtParamArray(f)),d},this.getRequestList=function(h){for(var d=[],m=g(h,0),f=0;f<m.length;f++){var h=o(h,m[f]);

28d.push(this.getRequest(h))}return d},this.getRequest=function(h){var d=g(h,0);if(d.length!=1&&d.length!=2)throw new r("wrong number elements: "+d.length);var m=this.getCertID(o(h,d[0]));if(d.length==2){var f=s(h,0,[1,0]);m.ext=t.getExtParamArray(o(h,f))}return m},this.getCertID=function(h){var d=g(h,0);if(d.length!=4)throw new r("wrong number elements: "+d.length);var m=new e,f={};return f.alg=m.getAlgorithmIdentifierName(o(h,d[0])),f.issname=i(h,d[1]),f.isskey=i(h,d[2]),f.sbjsn=i(h,d[3]),f},this.getOCSPResponse=function(h){var d=g(h,0),m,f=i(h,d[0]),y=parseInt(f);if(d.length==1)return{resstatus:y};var v=c(h,0,[1,0]);return m=this.getResponseBytes(v),m.resstatus=y,m},this.getResponseBytes=function(h){var d=g(h,0),m,f=c(h,0,[1,0]);m=this.getBasicOCSPResponse(f);var y=i(h,d[0]);return m.restype=u.asn1.x509.OID.oid2name(eu(y)),m},this.getBasicOCSPResponse=function(h){var d=g(h,0),m;m=this.getResponseData(o(h,d[0]));var f=new Z;m.alg=f.getAlgorithmIdentifierName(o(h,d[1]));var y=i(h,d[2]);m.sighex=y.substr(2);var v=l(h,0,["[0]"]);if(v!=null){for(var S=g(v,0),A=[],T=0;T<S.length;T++){var b=o(v,S[T]);A.push(b)}m.certs=A}return m},this.getResponseData=function(h){var d=g(h,0),m=d.length,f={},y=0;h.substr(d[0],2)=="a0"&&y++,f.respid=this.getResponderID(o(h,d[y++]));var v=i(h,d[y++]);if(f.prodat=ke(v),f.array=this.getSingleResponseList(o(h,d[y++])),h.substr(d[m-1],2)=="a1"){var S=c(h,d[m-1],[0]),A=new Z;f.ext=A.getExtParamArray(S)}return f},this.getResponderID=function(h){var d={};if(h.substr(0,2)=="a2"){var m=a(h,0,[0]);d.key=m}if(h.substr(0,2)=="a1"){var f=c(h,0,[0]),y=new Z;d.name=y.getX500Name(f)}return d},this.getSingleResponseList=function(h){for(var d=g(h,0),m=[],f=0;f<d.length;f++){var y=this.getSingleResponse(o(h,d[f]));m.push(y)}return m},this.getSingleResponse=function(h){var d=g(h,0),m={},f=this.getCertID(o(h,d[0]));m.certid=f;var y=this.getCertStatus(o(h,d[1]));if(m.status=y,h.substr(d[2],2)=="18"){var v=i(h,d[2]);m.thisupdate=ke(v)}for(var S=3;S<d.length;S++){if(h.substr(d[S],2)=="a0"){var A=a(h,d[S],[0],"18");m.nextupdate=ke(A)}if(h.substr(d[S],2)=="a1"){var T=new Z,b=c(h,0,[S,0]);m.ext=T.getExtParamArray(b)}}return m},this.getCertStatus=function(h){var d={};if(h=="8000")return{status:"good"};if(h=="8200")return{status:"unknown"};if(h.substr(0,2)=="a1"){d.status="revoked";var m=a(h,0,[0]),f=ke(m);d.time=f}return d}};var u;(typeof u>"u"||!u)&&(u={});(typeof u.lang>"u"||!u.lang)&&(u.lang={});u.lang.String=function(){};function im(r){for(var e=new Array,t=0;t<r.length;t++)e[t]=r.charCodeAt(t);return e}function om(r){for(var e="",t=0;t<r.length;t++)e=e+String.fromCharCode(r[t]);return e}function Wl(r){for(var e="",t=0;t<r.length;t++){var n=r[t].toString(16);n.length==1&&(n="0"+n),e=e+n}return e}function jt(r){return Wl(im(r))}function _C(r){return Sn(jt(r))}function NC(r){return Es(Sn(jt(r)))}function FC(r){return om(Xg(ic(r)))}function Es(r){return r=r.replace(/\=/g,""),r=r.replace(/\+/g,"-"),r=r.replace(/\//g,"_"),r}function ic(r){return r.length%4==2?r=r+"==":r.length%4==3&&(r=r+"="),r=r.replace(/-/g,"+"),r=r.replace(/_/g,"/"),r}function ft(r){return r.length%2==1&&(r="0"+r),Es(Sn(r))}function je(r){return As(ic(r))}var rc,Sr;typeof Buffer=="function"?(rc=function(r){return Es(Buffer.from(r,"utf8").toString("base64"))},Sr=function(r){return Buffer.from(ic(r),"base64").toString("utf8")}):(rc=function(r){return ft(Jl(Zl(r)))},Sr=function(r){return decodeURIComponent(Xl(je(r)))});function OC(r){return Sn(Jl(Zl(r)))}function DC(r){return decodeURIComponent(Xl(As(r)))}function Ql(r){return Jl(Zl(r)).toLowerCase()}function ke(r){try{return decodeURIComponent(Xl(r))}catch{return null}}function MC(r){return ke(BC(r))}function BC(r){for(var e=r.match(/.{1,2}/g),t=[],n=0;n<e.length;n++){var i=parseInt(e[n],16);161<=i&&i<=191?(t.push("c2"),t.push(e[n])):192<=i&&i<=255?(t.push("c3"),t.push((i-64).toString(16))):t.push(e[n])}return t.join("")}function Vt(r){for(var e="",t=0;t<r.length-1;t+=2)e+=String.fromCharCode(parseInt(r.substr(t,2),16));return e}function Vr(r){for(var e="",t=0;t<r.length;t++)e+=("0"+r.charCodeAt(t).toString(16)).slice(-2);return e}function Nd(r){return Sn(r)}

28function HC(r){return Yl(Nd(r),64)}function Yl(r,e){return r=r.replace(new RegExp("(.{"+e+"})","g"),`$1\r
29`),r=r.replace(/\s+$/,""),r}function sm(r){var e=r.replace(/[^0-9A-Za-z\/+=]*/g,""),t=As(e);return t}function LC(r,e){return"-----BEGIN "+e+`-----\r
30`+Yl(r,64)+`\r
31-----END `+e+`-----\r
32`}function Tt(r,e){return"-----BEGIN "+e+`-----\r
33`+Yl(Nd(r),64)+`\r
34-----END `+e+`-----\r
35`}function Ze(r,e){if(r.indexOf("-----BEGIN ")==-1)throw new Error("can't find PEM header");return e!==void 0?(r=r.replace(new RegExp("^[^]*-----BEGIN "+e+"-----"),""),r=r.replace(new RegExp("-----END "+e+"-----[^]*$"),"")):(r=r.replace(/^[^]*-----BEGIN [^-]+-----/,""),r=r.replace(/-----END [^-]+-----[^]*$/,"")),sm(r)}function UC(r){return r.indexOf("-----BEGIN ")==-1||r.indexOf("-----END ")==-1?null:(r=r.replace(/^[\s\S]*?-----BEGIN [^-]+-----/m,""),r=r.replace(/-----END [\s\S]+$/m,""),r=r.replace(/\s+/g,""),r.match(/^[0-9a-zA-Z+/=]+$/)?r:null)}function KC(r){if(r.length%2!=0)throw"input is not even length";if(r.match(/^[0-9A-Fa-f]+$/)==null)throw"input is not hexadecimal";for(var e=new ArrayBuffer(r.length/2),t=new DataView(e),n=0;n<r.length/2;n++)t.setUint8(n,parseInt(r.substr(n*2,2),16));return e}function qC(r){for(var e="",t=new DataView(r),n=0;n<r.byteLength;n++)e+=("00"+t.getUint8(n).toString(16)).slice(-2);return e}function Fd(r){var e,t,n,i,o,s,a,c,l,p,g,h;if(r=cm(r),h=r.match(/^(\d{4})(\d\d)(\d\d)(\d\d)(\d\d)(\d\d)(|\.\d+)Z$/),h)return e=parseInt(h[1]),t=parseInt(h[2])-1,n=parseInt(h[3]),i=parseInt(h[4]),o=parseInt(h[5]),s=parseInt(h[6]),a=0,p=h[7],p!==""&&(g=(p.substr(1)+"00").substr(0,3),a=parseInt(g)),Date.UTC(e,t,n,i,o,s,a);throw new Error("unsupported zulu format: "+r)}function jC(r){var e=new Date(r),t=("0000"+e.getUTCFullYear()).slice(-4),n=("00"+(e.getUTCMonth()+1)).slice(-2),i=("00"+e.getUTCDate()).slice(-2),o=("00"+e.getUTCHours()).slice(-2),s=("00"+e.getUTCMinutes()).slice(-2),a=("00"+e.getUTCSeconds()).slice(-2),c=("000"+e.getUTCMilliseconds()).slice(-3);return c=c.replace(/0+$/,""),c=c!=""?"."+c:c,t+n+i+o+s+a+c+"Z"}function am(r){return Math.round(Fd(r)/1e3)}function VC(r){return new Date(Fd(r))}function GC(r,e,t){var n,i=r.getUTCFullYear();if(e){if(i<1950||2049<i)throw"not proper year for UTCTime: "+i;n=(""+i).slice(-2)}else n=("000"+i).slice(-4);if(n+=("0"+(r.getUTCMonth()+1)).slice(-2),n+=("0"+r.getUTCDate()).slice(-2),n+=("0"+r.getUTCHours()).slice(-2),n+=("0"+r.getUTCMinutes()).slice(-2),n+=("0"+r.getUTCSeconds()).slice(-2),t){var o=r.getUTCMilliseconds();o!==0&&(o=("00"+o).slice(-3),o=o.replace(/0+$/g,""),n+="."+o)}return n+="Z",n}function cm(r){return r.match(/^[0-9]{12}Z$/)||r.match(/^[0-9]{12}[.][0-9]*Z$/)?r.match(/^[0-4]/)?"20"+r:"19"+r:r}function Jl(r){return r.replace(/%/g,"")}function Xl(r){return r.replace(/(..)/g,"%$1")}function bd(r){var e="malformed IPv6 address";if(!r.match(/^[0-9A-Fa-f:]+$/))throw e;r=r.toLowerCase();var t=r.split(":").length-1;if(t<2)throw e;var n=":".repeat(7-t+2);r=r.replace("::",n);var i=r.split(":");if(i.length!=8)throw e;for(var o=0;o<8;o++)i[o]=("0000"+i[o]).slice(-4);return i.join("")}function Id(r){if(!r.match(/^[0-9A-Fa-f]{32}$/))throw new Error("malformed IPv6 address: "+r);r=r.toLowerCase();var e=r.match(/.{1,4}/g);e=e.map(function(i){return i.replace(/^0+/,"")}),e=e.map(function(i){return i==""?"0":i}),r=":"+e.join(":")+":";var t=r.match(/:(0:){2,}/g);if(t==null)return r.slice(1,-1);var n=t.sort().slice(-1)[0];return r=r.replace(n.substr(0,n.length-1),":"),r.substr(0,2)!="::"&&(r=r.substr(1)),r.substr(-2,2)!="::"&&(r=r.substr(0,r.length-1)),r}function jl(r){var e=new Error("malformed hex value");if(!r.match(/^([0-9A-Fa-f][0-9A-Fa-f]){1,}$/))throw e;if(r.length==8){var t;try{return t=parseInt(r.substr(0,2),16)+"."+parseInt(r.substr(2,2),16)+"."+parseInt(r.substr(4,2),16)+"."+parseInt(r.substr(6,2),16),t}catch{throw e}}else if(r.length==16)try{return jl(r.substr(0,8))+"/"+Yg(r.substr(8))}catch{throw e}else{if(r.length==32)return Id(r);if(r.length==64){try{return Id(r.substr(0,32))+"/"+Yg(r.substr(32))}catch{throw e}return}else return r}}function Yg(r){var e=new Error("malformed mask"),t;try{t=new O(r,16).toString(2)}catch{throw e}if(!t.match(/^1*0*$/))throw e;return t.replace(/0+$/,"").length}function Od(r){var e=new Error("malformed IP address");if(r=r.toLowerCase(r),!r.match(/^[0-9a-f.:/]+$/))throw e;if(r.match(/^[0-9.]+$/)){var t=r.split(".");if(t.length!==4)throw e;var n="";try{for(var i=0;i<4;i++){var o=parseInt(t[i]);n+=("0"+o.toString(16)).slice(-2)}return n}catch{throw e}}else if(r.match(/^[0-9.]+\/[0-9]+$/)){var s=r.split("/");return Od(s[0])+Jg(parseInt(s[1]),32)}else{if(r.match(/^[0-9a-f:]+$/)&&r.indexOf(":")!==-1)return bd(r);if(r.match(/^[0-9a-f:]+\/[0-9]+$/)&&r.indexOf(":")!==-1){var s=r.split("/");return bd(s[0])+Jg(parseInt(s[1]),128)}else throw e}}function Jg(r,e){if(e==32&&r==0)return"00000000";if(e==128&&r==0)return"00000000000000000000000000000000";var t=Array(r+1).join("1")+Array(e-r+1).join("0");return new O(t,2).toString(16)}function Dd(r){function e(i){var o=parseInt(i.substr(0,2),16),s=parseInt(i.substr(2),16);if(o==0&s<128)return String.fromCharCode(s);if(o<8){var a=192|(o&7)<<3|(s&192)>>6,c=128|s&63;return ke(a.toString(16)+c.toString(16))}var a=224|(o&240)>>4,c=128|(o&15)<<2|(s&192)>>6,l=128|s&63;return ke(a.toString(16)+c.toString(16)+l.toString(16))}var t=r.match(/.{4}/g),n=t.map(e);return n.join("")}function Zl(r){for(var e=encodeURIComponent(r),t="",n=0;n<e.length;n++)e[n]=="%"?(t=t+e.substr(n,3),n=n+2):t=t+"%"+jt(e[n]);return t}function zC(r){return r=r.replace(/\r\n/mg,`
36`),r}function $C(r){return r=r.replace(/\r\n/mg,`
37`),r=r.replace(/\n/mg,`\r
38`),r}u.lang.String.isInteger=function(r){return r.match(/^[0-9]+$/)?!0:!!r.match(/^-[0-9]+$/)};u.lang.String.isHex=function(r){return lm(r)};function lm(r){return!!(r.length%2==0&&(r.match(/^[0-9a-f]+$/)||r.match(/^[0-9A-F]+$/)))}u.lang.String.isBase64=function(r){return r=r.replace(/\s+/g,""),

38!!(r.match(/^[0-9A-Za-z+\/]+={0,3}$/)&&r.length%4==0)};u.lang.String.isBase64URL=function(r){return r.match(/[+/=]/)?!1:(r=ic(r),u.lang.String.isBase64(r))};function Md(r){return!!r.match(/^[0-9A-Za-z-_.]+$/)}u.lang.String.isIntegerArray=function(r){return r=r.replace(/\s+/g,""),!!r.match(/^\[[0-9,]+\]$/)};u.lang.String.isPrintable=function(r){return r.match(/^[0-9A-Za-z '()+,-./:=?]*$/)!==null};u.lang.String.isIA5=function(r){return r.match(/^[\x20-\x21\x23-\x7f]*$/)!==null};u.lang.String.isMail=function(r){return r.match(/^[A-Za-z0-9]{1}[A-Za-z0-9_.-]*@{1}[A-Za-z0-9_.-]{1,}\.[A-Za-z0-9]{1,}$/)!==null};function Rd(r){return r.length%2==1?"0"+r:r.substr(0,1)>"7"?"00"+r:r}function WC(r){r=r.replace(/^\s*\[\s*/,""),r=r.replace(/\s*\]\s*$/,""),r=r.replace(/\s*/g,"");try{var e=r.split(/,/).map(function(t,n,i){var o=parseInt(t);if(o<0||255<o)throw"integer not in range 0-255";var s=("00"+o.toString(16)).slice(-2);return s}).join("");return e}catch(t){throw"malformed integer array string: "+t}}var QC=function(r,e){var t=r.length;r.length>e.length&&(t=e.length);for(var n=0;n<t;n++)if(r.charCodeAt(n)!=e.charCodeAt(n))return n;return r.length!=e.length?t:-1};function um(r){var e=function(a){var c=a.toString(16);return c.length==1&&(c="0"+c),c},t=function(a){var c="",l=parseInt(a,10),p=l.toString(2),g=7-p.length%7;g==7&&(g=0);for(var h="",d=0;d<g;d++)h+="0";p=h+p;for(var d=0;d<p.length-1;d+=7){var m=p.substr(d,7);d!=p.length-7&&(m="1"+m),c+=e(parseInt(m,2))}return c};try{if(!r.match(/^[0-9.]+$/))return null;var n="",i=r.split("."),o=parseInt(i[0],10)*40+parseInt(i[1],10);n+=e(o),i.splice(0,2);for(var s=0;s<i.length;s++)n+=t(i[s]);return n}catch{return null}}function eu(r){if(!lm(r))return null;try{var e=[],t=r.substr(0,2),n=parseInt(t,16);e[0]=new String(Math.floor(n/40)),e[1]=new String(n%40);for(var i=r.substr(2),o=[],s=0;s<i.length/2;s++)o.push(parseInt(i.substr(s*2,2),16));for(var a=[],c="",s=0;s<o.length;s++)o[s]&128?c=c+Vl((o[s]&127).toString(2),7):(c=c+Vl((o[s]&127).toString(2),7),a.push(new String(parseInt(c,2))),c="");var l=e.join(".");return a.length>0&&(l=l+"."+a.join(".")),l}catch{return null}}function hm(r){var e=new O(String(r),10);return oc(e)}function oc(r){var e=r.toString(16);if(e.substr(0,1)!="-")return e.length%2==1?e="0"+e:e.match(/^[0-7]/)||(e="00"+e),e;var t=e.substr(1),n=t.length;n%2==1?n+=1:e.match(/^[0-7]/)||(n+=2);for(var i="",o=0;o<n;o++)i+="f";var s=new O(i,16),a=s.xor(r).add(O.ONE);return e=a.toString(16).replace(/^-/,""),e}var Vl=function(r,e,t){return t==null&&(t="0"),r.length>=e?r:new Array(e-r.length+1).join(t)+r};function dm(r){if(r.length%2!=0||(r=r.toLowerCase(),r.match(/^[0-9a-f]+$/)==null))return-1;try{var e=r.substr(0,2);if(e=="00")return parseInt(r.substr(2),16);var t=parseInt(e,16);if(t>7)return-1;var n=r.substr(2),i=parseInt(n,16).toString(2);i=="0"&&(i="00000000"),i=i.slice(0,0-t);var o=parseInt(i,2);return o==NaN?-1:o}catch{return-1}}function fm(r){if(typeof r!="number"||r<0)return null;var e=Number(r).toString(2),t=8-e.length%8;t==8&&(t=0),e=e+Vl("",t,"0");var n=parseInt(e,2).toString(16);n.length%2==1&&(n="0"+n);var i="0"+t;return i+n}function pm(r){if(typeof r!="string"||r.length%2!=0||!r.match(/^[0-9a-f]+$/))return null;try{var e=parseInt(r.substr(0,2),16);if(e<0||7<e)return null;for(var t=r.substr(2),n="",i=0;i<t.length;i+=2){var o=t.substr(i,2),s=parseInt(o,16).toString(2);s=("0000000"+s).slice(-8),n+=s}return n.substr(0,n.length-e)}catch{return null}}function YC(r){if(typeof r!="string"||r.match(/^[01]+$/)==null)return null;try{var e=parseInt(r,2);return fm(e)}catch{return null}}function Gl(r,e){for(var t=0,n=0;n<r.length;n++)t|=1<<e[r[n]];for(var i=t.toString(2),o="",n=i.length-1;n>=0;n--)o+=i[n];return o}function Ne(r,n,t){if(typeof r=="object"){for(var n=String(n).split("."),i=0;i<n.length&&r;i++){var o=n[i];o.match(/^[0-9]+$/)&&(o=parseInt(o)),r=r[o]}return r||r===!1?r:t}}function U(r,e){var t=function(){};t.prototype=e.prototype,r.prototype=new t,r.prototype.constructor=r,r.superclass=e.prototype,e.prototype.constructor==Object.prototype.constructor&&(e.prototype.constructor=e)}(typeof u>"u"||!u)&&(u={});(typeof u.crypto>"u"||!u.crypto)&&(u.crypto={});u.crypto.Util=new function(){this.DIGESTINFOHEAD={sha1:"3021300906052b0e03021a05000414",sha224:"302d300d06096086480165030402040500041c",sha256:"3031300d060960864801650304020105000420",sha384:"3041300d060960864801650304020205000430",sha512:"3051300d060960864801650304020305000440",md2:"3020300c06082a864886f70d020205000410",md5:"3020300c06082a864886f70d020505000410",ripemd160:"3021300906052b2403020105000414"},this.DEFAULTPROVIDER={md5:"cryptojs",sha1:"cryptojs",sha224:"cryptojs",sha256:"cryptojs",sha384:"cryptojs",sha512:"cryptojs",ripemd160:"cryptojs",hmacmd5:"cryptojs",hmacsha1:"cryptojs",hmacsha224:"cryptojs",hmacsha256:"cryptojs",hmacsha384:"cryptojs",hmacsha512:"cryptojs",hmacripemd160:"cryptojs",MD5withRSA:"cryptojs/jsrsa",SHA1withRSA:"cryptojs/jsrsa",SHA224withRSA:"cryptojs/jsrsa",SHA256withRSA:"cryptojs/jsrsa",SHA384withRSA:"cryptojs/jsrsa",SHA512withRSA:"cryptojs/jsrsa",RIPEMD160withRSA:"cryptojs/jsrsa",MD5withECDSA:"cryptojs/jsrsa",SHA1withECDSA:"cryptojs/jsrsa",SHA224withECDSA:"cryptojs/jsrsa",SHA256withECDSA:"cryptojs/jsrsa",SHA384withECDSA:"cryptojs/jsrsa",SHA512withECDSA:"cryptojs/jsrsa",RIPEMD160withECDSA:"cryptojs/jsrsa",SHA1withDSA:"cryptojs/jsrsa",SHA224withDSA:"cryptojs/jsrsa",SHA256withDSA:"cryptojs/jsrsa",MD5withRSAandMGF1:"cryptojs/jsrsa",SHAwithRSAandMGF1:"cryptojs/jsrsa",SHA1withRSAandMGF1:"cryptojs/jsrsa",SHA224withRSAandMGF1:"cryptojs/jsrsa",SHA256withRSAandMGF1:"cryptojs/jsrsa",SHA384withRSAandMGF1:"cryptojs/jsrsa",SHA512withRSAandMGF1:"cryptojs/jsrsa",RIPEMD160withRSAandMGF1:"cryptojs/jsrsa"},this.CRYPTOJSMESSAGEDIGESTNAME={md5:W.algo.MD5,sha1:W.algo.SHA1,sha224:W.algo.SHA224,sha256:W.algo.SHA256,sha384:W.algo.SHA384,sha512:W.algo.SHA512,ripemd160:W.algo.RIPEMD160},this.getDigestInfoHex=function(r,e){if(typeof this.DIGESTINFOHEAD[e]>"u")throw"alg not supported in Util.DIGESTINFOHEAD: "+e;return this.DIGESTINFOHEAD[e]+r},this.getPaddedDigestInfoHex=function(r,e,t){var n=this.getDigestInfoHex(r,e),i=t/4;if(n.length+22>i)throw"key is too short for SigAlg: keylen="+t+","+e;for(var o="0001",s="00"+n,a="",c=i-o.length-s.length,l=0;l<c;l+=2)a+="ff";var p=o+a+s;return p},this.hashString=function(r,e){var t=new u.crypto.MessageDigest({alg:e});return t.digestString(r)},this.hashHex=function(r,e){var t=new u.crypto.MessageDigest({alg:e});return t.digestHex(r)}

38,this.sha1=function(r){return this.hashString(r,"sha1")},this.sha256=function(r){return this.hashString(r,"sha256")},this.sha256Hex=function(r){return this.hashHex(r,"sha256")},this.sha512=function(r){return this.hashString(r,"sha512")},this.sha512Hex=function(r){return this.hashHex(r,"sha512")},this.isKey=function(r){return r instanceof se||r instanceof u.crypto.DSA||r instanceof u.crypto.ECDSA}};u.crypto.Util.md5=function(r){var e=new u.crypto.MessageDigest({alg:"md5",prov:"cryptojs"});return e.digestString(r)};u.crypto.Util.ripemd160=function(r){var e=new u.crypto.MessageDigest({alg:"ripemd160",prov:"cryptojs"});return e.digestString(r)};u.crypto.Util.SECURERANDOMGEN=new bs;u.crypto.Util.getRandomHexOfNbytes=function(r){var e=new Array(r);return u.crypto.Util.SECURERANDOMGEN.nextBytes(e),Wl(e)};u.crypto.Util.getRandomBigIntegerOfNbytes=function(r){return new O(u.crypto.Util.getRandomHexOfNbytes(r),16)};u.crypto.Util.getRandomHexOfNbits=function(r){var e=r%8,t=(r-e)/8,n=new Array(t+1);return u.crypto.Util.SECURERANDOMGEN.nextBytes(n),n[0]=(255<<e&255^255)&n[0],Wl(n)};u.crypto.Util.getRandomBigIntegerOfNbits=function(r){return new O(u.crypto.Util.getRandomHexOfNbits(r),16)};u.crypto.Util.getRandomBigIntegerZeroToMax=function(r){for(var e=r.bitLength();;){var t=u.crypto.Util.getRandomBigIntegerOfNbits(e);if(r.compareTo(t)>=0)return t}};u.crypto.Util.getRandomBigIntegerMinToMax=function(r,e){var t=r.compareTo(e);if(t>0)throw"biMin is greater than biMax";if(t==0)return r;var n=e.subtract(r),i=u.crypto.Util.getRandomBigIntegerZeroToMax(n);return i.add(r)};u.crypto.MessageDigest=function(r){var e=null,t=null,n=null;this.setAlgAndProvider=function(i,o){if(i=u.crypto.MessageDigest.getCanonicalAlgName(i),i!==null&&o===void 0&&(o=u.crypto.Util.DEFAULTPROVIDER[i]),":md5:sha1:sha224:sha256:sha384:sha512:ripemd160:".indexOf(i)!=-1&&o=="cryptojs"){try{this.md=u.crypto.Util.CRYPTOJSMESSAGEDIGESTNAME[i].create()}catch(s){throw"setAlgAndProvider hash alg set fail alg="+i+"/"+s}this.updateString=function(s){this.md.update(s)},this.updateHex=function(s){var a=W.enc.Hex.parse(s);this.md.update(a)},this.digest=function(){var s=this.md.finalize();return s.toString(W.enc.Hex)},this.digestString=function(s){return this.updateString(s),this.digest()},this.digestHex=function(s){return this.updateHex(s),this.digest()}}if(":sha256:".indexOf(i)!=-1&&o=="sjcl"){try{this.md=new sjcl.hash.sha256}catch(s){throw"setAlgAndProvider hash alg set fail alg="+i+"/"+s}this.updateString=function(s){this.md.update(s)},this.updateHex=function(s){var a=sjcl.codec.hex.toBits(s);this.md.update(a)},this.digest=function(){var s=this.md.finalize();return sjcl.codec.hex.fromBits(s)},this.digestString=function(s){return this.updateString(s),this.digest()},this.digestHex=function(s){return this.updateHex(s),this.digest()}}},this.updateString=function(i){throw"updateString(str) not supported for this alg/prov: "+this.algName+"/"+this.provName},this.updateHex=function(i){throw"updateHex(hex) not supported for this alg/prov: "+this.algName+"/"+this.provName},this.digest=function(){throw"digest() not supported for this alg/prov: "+this.algName+"/"+this.provName},this.digestString=function(i){throw"digestString(str) not supported for this alg/prov: "+this.algName+"/"+this.provName},this.digestHex=function(i){throw"digestHex(hex) not supported for this alg/prov: "+this.algName+"/"+this.provName},r!==void 0&&r.alg!==void 0&&(this.algName=r.alg,r.prov===void 0&&(this.provName=u.crypto.Util.DEFAULTPROVIDER[this.algName]),this.setAlgAndProvider(this.algName,this.provName))};u.crypto.MessageDigest.getCanonicalAlgName=function(r){return typeof r=="string"&&(r=r.toLowerCase(),r=r.replace(/-/,"")),r};u.crypto.MessageDigest.getHashLength=function(r){var e=u.crypto.MessageDigest,t=e.getCanonicalAlgName(r);if(e.HASHLENGTH[t]===void 0)throw"not supported algorithm: "+r;return e.HASHLENGTH[t]};u.crypto.MessageDigest.HASHLENGTH={md5:16,sha1:20,sha224:28,sha256:32,sha384:48,sha512:64,ripemd160:20};u.crypto.Mac=function(r){var e=null,t=null,n=null,i=null,o=null;this.setAlgAndProvider=function(s,a){if(s=s.toLowerCase(),s==null&&(s="hmacsha1"),s=s.toLowerCase(),s.substr(0,4)!="hmac")throw"setAlgAndProvider unsupported HMAC alg: "+s;a===void 0&&(a=u.crypto.Util.DEFAULTPROVIDER[s]),this.algProv=s+"/"+a;var c=s.substr(4);if(":md5:sha1:sha224:sha256:sha384:sha512:ripemd160:".indexOf(c)!=-1&&a=="cryptojs"){try{var l=u.crypto.Util.CRYPTOJSMESSAGEDIGESTNAME[c];this.mac=W.algo.HMAC.create(l,this.pass)}catch(p){throw"setAlgAndProvider hash alg set fail hashAlg="+c+"/"+p}this.updateString=function(p){this.mac.update(p)},this.updateHex=function(p){var g=W.enc.Hex.parse(p);this.mac.update(g)},this.doFinal=function(){var p=this.mac.finalize();return p.toString(W.enc.Hex)},this.doFinalString=function(p){return this.updateString(p),this.doFinal()},this.doFinalHex=function(p){return this.updateHex(p),this.doFinal()}}},this.updateString=function(s){throw"updateString(str) not supported for this alg/prov: "+this.algProv},this.updateHex=function(s){throw"updateHex(hex) not supported for this alg/prov: "+this.algProv},this.doFinal=function(){throw"digest() not supported for this alg/prov: "+this.algProv},this.doFinalString=function(s){throw"digestString(str) not supported for this alg/prov: "+this.algProv},this.doFinalHex=function(s){throw"digestHex(hex) not supported for this alg/prov: "+this.algProv},this.setPassword=function(s){if(typeof s=="string"){var a=s;(s.length%2==1||!s.match(/^[0-9A-Fa-f]+$/))&&(a=Vr(s)),this.pass=W.enc.Hex.parse(a);return}if(typeof s!="object")throw"KJUR.crypto.Mac unsupported password type: "+s;var a=null;if(s.hex!==void 0){if(s.hex.length%2!=0||!s.hex.match(/^[0-9A-Fa-f]+$/))throw"Mac: wrong hex password: "+s.hex;a=s.hex}if(s.utf8!==void 0&&(a=Ql(s.utf8)),s.rstr!==void 0&&(a=Vr(s.rstr)),s.b64!==void 0&&(a=As(s.b64)),s.b64u!==void 0&&(a=je(s.b64u)),a==null)throw"KJUR.crypto.Mac unsupported password type: "+s;this.pass=W.enc.Hex.parse(a)},r!==void 0&&(r.pass!==void 0&&this.setPassword(r.pass),r.alg!==void 0&&(this.algName=r.alg,r.prov===void 0&&(this.provName=u.crypto.Util.DEFAULTPROVIDER[this.algName]),this.setAlgAndProvider(this.algName,this.provName)))};u.crypto.Signature=function(r){var e=null,t=null,n=null,i=null,o=null,s=null,a=null,c=null,l=null,p=null,g=-1,h=null,d=null,m=null,f=null,y=null;if(this._setAlgNames=function(){var v=this.algName.match(/^(.+)with(.+)$/);v&&(this.mdAlgName=v[1].toLowerCase(),this.pubkeyAlgName=v[2].toLowerCase(),this.pubkeyAlgName=="rsaandmgf1"&&this.mdAlgName=="sha"&&(this.mdAlgName="sha1"))},this._zeroPaddingOfSignature=function(v,S){for(var A="",T=S/4-v.length,b=0;b<T;b++)A=A+"0";return A+v},this.setAlgAndProvider=function(v,S){if(this._setAlgNames(),S!="cryptojs/jsrsa")throw new Error("provider not supported: "+S);if(":md5:sha1:sha224:sha256:sha384:sha512:ripemd160:".indexOf(this.mdAlgName)!=-1){try{this.md=new u.crypto.MessageDigest({alg:this.mdAlgName})}catch(A){throw new Error("setAlgAndProvider hash alg set fail alg="+this.mdAlgName+"/"+A)}this.init=function(A,T){var b=null;try{T===void 0?b=pe.getKey(A):b=pe.getKey(A,T)}catch(D){throw"init failed:"+D}if(b.isPrivate===!0)this.prvKey=b,this.state="SIGN";else if(b.isPublic===!0)this.pubKey=b,this.state="VERIFY";else throw"init failed.:"+b},this.updateString=function(A){this.md.updateString(A)},this.updateHex=function(A){this.md.updateHex(A)},this.sign=function(){if(this.sHashHex=this.md.digest(),this.prvKey===void 0&&this.ecprvhex!==void 0&&this.eccurvename!==void 0&&u.crypto.ECDSA!==void 0&&(this.prvKey=new u.crypto.ECDSA({curve:this.eccurvename,prv:this.ecprvhex})),this.prvKey instanceof se&&this.pubkeyAlgName==="rsaandmgf1")this.hSign=this.prvKey.signWithMessageHashPSS(this.sHashHex,this.mdAlgName,this.pssSaltLen);else if(this.prvKey instanceof se&&this.pubkeyAlgName==="rsa")this.hSign=this.prvKey.signWithMessageHash(this.sHashHex,this.mdAlgName);else if(this.prvKey instanceof u.crypto.ECDSA)this.hSign=this.prvKey.signWithMessageHash(this.sHashHex);else if(this.prvKey instanceof u.crypto.DSA)this.hSign=this.prvKey.signWithMessageHash(this.sHashHex);else throw"Signature: unsupported private key alg: "+this.pubkeyAlgName;return this.hSign},this.signString=function(A){return this.updateString(A),this.sign()},this.signHex=function(A){return this.updateHex(A),this.sign()},this.verify=function(A){if(this.sHashHex=this.md.digest(),this.pubKey===void 0&&this.ecpubhex!==void 0&&this.eccurvename!==void 0&&u.crypto.ECDSA!==void 0&&(this.pubKey=new u.crypto.ECDSA({curve:this.eccurvename,pub:this.ecpubhex})),this.pubKey instanceof se&&this.pubkeyAlgName==="rsaandmgf1")return this.pubKey.verifyWithMessageHashPSS(this.sHashHex,A,this.mdAlgName,this.pssSaltLen);if(this.pubKey instanceof se&&this.pubkeyAlgName==="rsa")return this.pubKey.verifyWithMessageHash(this.sHashHex,A);if(u.crypto.ECDSA!==void 0&&this.pubKey instanceof u.crypto.ECDSA)return this.pubKey.verifyWithMessageHash(this.sHashHex,A);if(u.crypto.DSA!==void 0&&this.pubKey instanceof u.crypto.DSA)return this.pubKey.verifyWithMessageHash(this.sHashHex,A);throw"Signature: unsupported public key alg: "+this.pubkeyAlgName}}},this.init=function(v,S){throw"init(key, pass) not supported for this alg:prov="+this.algProvName},this.updateString=function(v){throw"updateString(str) not supported for this alg:prov="+this.algProvName},this.updateHex=function(v){throw"updateHex(hex) not supported for this alg:prov="+this.algProvName},this.sign=function(){throw"sign() not supported for this alg:prov="+this.algProvName},this.signString=function(v){throw"digestString(str) not supported for this alg:prov="+this.algProvName},this.signHex=function(v){throw"digestHex(hex) not supported for this alg:prov="+this.algProvName},this.verify=function(v){throw"verify(hSigVal) not supported for this alg:prov="+this.algProvName},this.initParams=r,r!==void 0&&(r.alg!==void 0&&(this.algName=r.alg,r.prov===void 0?this.provName=u.crypto.Util.DEFAULTPROVIDER[this.algName]:this.provName=r.prov,this.algProvName=this.algName+":"+this.provName,this.setAlgAndProvider(this.algName,this.provName),this._setAlgNames()),r.psssaltlen!==void 0&&(this.pssSaltLen=r.psssaltlen),r.prvkeypem!==void 0)){if(r.prvkeypas!==void 0)throw"both prvkeypem and prvkeypas parameters not supported";try{var e=pe.getKey(r.prvkeypem);this.init(e)}catch(v){throw"fatal error to load pem private key: "+v}}};u.crypto.Cipher=function(r){};u.crypto.Cipher.encrypt=function(r,e,t,n){if(Ne(n,"enclag")!=null&&(t=n.encalg),typeof t=="string"&&t.substr(-4)=="-CBC"){var i=e,o=r;Ne(n,"key")!=null&&(i=n.key),Ne(n,"enc")!=null&&(hEnc=n.enc);var s=W.enc.Hex.parse(i),a=W.enc.Hex.parse(o),c=W.enc.Hex.parse(n.iv),l;

38if(t=="des-EDE3-CBC")l=W.TripleDES.encrypt(a,s,{iv:c});else if(t=="aes128-CBC"||t=="aes256-CBC")l=W.AES.encrypt(a,s,{iv:c});else throw new Error("unsupported algorithm: "+t);return l+""}else throw new Error("Cipher.encrypt: unsupported key or algorithm")};u.crypto.Cipher.decrypt=function(r,e,t,n){if(Ne(n,"enclag")!=null&&(t=n.encalg),typeof t=="string"&&t.substr(-4)=="-CBC"){var i=e,o=r;Ne(n,"key")!=null&&(i=n.key),Ne(n,"enc")!=null&&(o=n.enc);var s=W.enc.Hex.parse(i),a=W.enc.Hex.parse(o),c=W.enc.Hex.parse(n.iv),l;if(t=="des-EDE3-CBC")l=W.TripleDES.decrypt({ciphertext:a},s,{iv:c});else if(t=="aes128-CBC"||t=="aes256-CBC")l=W.AES.decrypt({ciphertext:a},s,{iv:c});else throw new Error("unsupported algorithm: "+t);return W.enc.Hex.stringify(l)}else throw new Error("Cipher.decrypt: unsupported key or algorithm")};u.crypto.OID=new function(){this.oidhex2name={"2a864886f70d010101":"rsaEncryption","2a8648ce3d0201":"ecPublicKey","2a8648ce380401":"dsa","2a8648ce3d030107":"secp256r1","2b8104001f":"secp192k1","2b81040021":"secp224r1","2b8104000a":"secp256k1","2b81040022":"secp384r1","2b81040023":"secp521r1","2a8648ce380403":"SHA1withDSA","608648016503040301":"SHA224withDSA","608648016503040302":"SHA256withDSA"}};(typeof u>"u"||!u)&&(u={});(typeof u.crypto>"u"||!u.crypto)&&(u.crypto={});u.crypto.ECDSA=function(r){var e="secp256r1",t=null,n=null,i=null,o=Error,s=O,a=Ie,c=u.crypto.ECDSA,l=u.crypto.ECParameterDB,p=c.getName,g=V,h=g.getVbyListEx,d=g.isASN1HEX,m=new bs,f=null;this.type="EC",this.isPrivate=!1,this.isPublic=!1;function y(v,S,A,T){for(var b=Math.max(S.bitLength(),T.bitLength()),D=v.add2D(A),B=v.curve.getInfinity(),C=b-1;C>=0;--C)B=B.twice2D(),B.z=s.ONE,S.testBit(C)?T.testBit(C)?B=B.add2D(D):B=B.add2D(v):T.testBit(C)&&(B=B.add2D(A));return B}this.getBigRandom=function(v){return new s(v.bitLength(),m).mod(v.subtract(s.ONE)).add(s.ONE)},this.setNamedCurve=function(v){this.ecparams=l.getByName(v),this.prvKeyHex=null,this.pubKeyHex=null,this.curveName=v},this.setPrivateKeyHex=function(v){this.isPrivate=!0,this.prvKeyHex=v},this.setPublicKeyHex=function(v){this.isPublic=!0,this.pubKeyHex=v},this.getPublicKeyXYHex=function(){var v=this.pubKeyHex;if(v.substr(0,2)!=="04")throw"this method supports uncompressed format(04) only";var S=this.ecparams.keycharlen;if(v.length!==2+S*2)throw"malformed public key hex length";var A={};return A.x=v.substr(2,S),A.y=v.substr(2+S),A},this.getShortNISTPCurveName=function(){var v=this.curveName;return v==="secp256r1"||v==="NIST P-256"||v==="P-256"||v==="prime256v1"?"P-256":v==="secp384r1"||v==="NIST P-384"||v==="P-384"?"P-384":v==="secp521r1"||v==="NIST P-521"||v==="P-521"?"P-521":null},this.generateKeyPairHex=function(){var v=this.ecparams.n,S=this.getBigRandom(v),A=this.ecparams.keycharlen,T=("0000000000"+S.toString(16)).slice(-A);this.setPrivateKeyHex(T);var b=this.generatePublicKeyHex();return{ecprvhex:T,ecpubhex:b}},this.generatePublicKeyHex=function(){var v=new s(this.prvKeyHex,16),S=this.ecparams.G.multiply(v),A=S.getX().toBigInteger(),T=S.getY().toBigInteger(),b=this.ecparams.keycharlen,D=("0000000000"+A.toString(16)).slice(-b),B=("0000000000"+T.toString(16)).slice(-b),C="04"+D+B;return this.setPublicKeyHex(C),C},this.signWithMessageHash=function(v){return this.signHex(v,this.prvKeyHex)},this.signHex=function(v,S){var A=new s(S,16),T=this.ecparams.n,b=new s(v.substring(0,this.ecparams.keycharlen),16);do var D=this.getBigRandom(T),B=this.ecparams.G,C=B.multiply(D),E=C.getX().toBigInteger().mod(T);while(E.compareTo(s.ZERO)<=0);var I=D.modInverse(T).multiply(b.add(A.multiply(E))).mod(T);return c.biRSSigToASN1Sig(E,I)},this.sign=function(v,S){var A=S,T=this.ecparams.n,b=s.fromByteArrayUnsigned(v);do var D=this.getBigRandom(T),B=this.ecparams.G,C=B.multiply(D),E=C.getX().toBigInteger().mod(T);while(E.compareTo(O.ZERO)<=0);var I=D.modInverse(T).multiply(b.add(A.multiply(E))).mod(T);return this.serializeSig(E,I)},this.verifyWithMessageHash=function(v,S){return this.verifyHex(v,S,this.pubKeyHex)},this.verifyHex=function(v,S,A){try{var T,b,D=c.parseSigHex(S);T=D.r,b=D.s;var B=a.decodeFromHex(this.ecparams.curve,A),C=new s(v.substring(0,this.ecparams.keycharlen),16);return this.verifyRaw(C,T,b,B)}catch{return!1}},this.verify=function(v,S,A){var T,b;if(Bitcoin.Util.isArray(S)){var D=this.parseSig(S);T=D.r,b=D.s}else if(typeof S=="object"&&S.r&&S.s)T=S.r,b=S.s;else throw"Invalid value for signature";var B;if(A instanceof Ie)B=A;else if(Bitcoin.Util.isArray(A))B=a.decodeFrom(this.ecparams.curve,A);else throw"Invalid format for pubkey value, must be byte array or ECPointFp";var C=s.fromByteArrayUnsigned(v);return this.verifyRaw(C,T,b,B)},this.verifyRaw=function(v,S,A,T){var b=this.ecparams.n,D=this.ecparams.G;if(S.compareTo(s.ONE)<0||S.compareTo(b)>=0||A.compareTo(s.ONE)<0||A.compareTo(b)>=0)return!1;var B=A.modInverse(b),C=v.multiply(B).mod(b),E=S.multiply(B).mod(b),I=D.multiply(C).add(T.multiply(E)),R=I.getX().toBigInteger().mod(b);return R.equals(S)},this.serializeSig=function(v,S){var A=v.toByteArraySigned(),T=S.toByteArraySigned(),b=[];return b.push(2),b.push(A.length),b=b.concat(A),b.push(2),b.push(T.length),b=b.concat(T),b.unshift(b.length),b.unshift(48),b},this.parseSig=function(v){var S;if(v[0]!=48)throw new Error("Signature not a valid DERSequence");if(S=2,v[S]!=2)throw new Error("First element in signature must be a DERInteger");var A=v.slice(S+2,S+2+v[S+1]);if(S+=2+v[S+1],v[S]!=2)throw new Error("Second element in signature must be a DERInteger");var T=v.slice(S+2,S+2+v[S+1]);S+=2+v[S+1];var b=s.fromByteArrayUnsigned(A),D=s.fromByteArrayUnsigned(T);return{r:b,s:D}},this.parseSigCompact=function(v){if(v.length!==65)throw"Signature has the wrong length";var S=v[0]-27;if(S<0||S>7)throw"Invalid signature type";var A=this.ecparams.n,T=s.fromByteArrayUnsigned(v.slice(1,33)).mod(A),b=s.fromByteArrayUnsigned(v.slice(33,65)).mod(A);return{r:T,s:b,i:S}},this.readPKCS5PrvKeyHex=function(v){if(d(v)===!1)throw new Error("not ASN.1 hex string");var S,A,T;try{S=h(v,0,["[0]",0],"06"),A=h(v,0,[1],"04");try{T=h(v,0,["[1]",0],"03")}catch{}}catch{throw new Error("malformed PKCS#1/5 plain ECC private key")}if(this.curveName=p(S),this.curveName===void 0)throw"unsupported curve name";this.setNamedCurve(this.curveName),this.setPublicKeyHex(T),this.setPrivateKeyHex(A),this.isPublic=!1},this.readPKCS8PrvKeyHex=function(v){if(d(v)===!1)throw new o("not ASN.1 hex string");var S,A,T,b;try{S=h(v,0,[1,0],"06"),A=h(v,0,[1,1],"06"),T=h(v,0,[2,0,1],"04");try{b=h(v,0,[2,0,"[1]",0],"03")}catch{}}catch{throw new o("malformed PKCS#8 plain ECC private key")}if(this.curveName=p(A),this.curveName===void 0)throw new o("unsupported curve name");this.setNamedCurve(this.curveName),this.setPublicKeyHex(b),this.setPrivateKeyHex(T),this.isPublic=!1},this.readPKCS8PubKeyHex=function(v){if(d(v)===!1)throw new o("not ASN.1 hex string");var S,A,T;try{S=h(v,0,[0,0],"06"),A=h(v,0,[0,1],"06"),T=h(v,0,[1],"03")}catch{throw new o("malformed PKCS#8 ECC public key")}if(this.curveName=p(A),this.curveName===null)throw new o("unsupported curve name");this.setNamedCurve(this.curveName),this.setPublicKeyHex(T)},this.readCertPubKeyHex=function(v,S){if(d(v)===!1)throw new o("not ASN.1 hex string");var A,T;try{A=h(v,0,[0,5,0,1],"06"),T=h(v,0,[0,5,1],"03")}catch{throw new o("malformed X.509 certificate ECC public key")}if(this.curveName=p(A),this.curveName===null)throw new o("unsupported curve name");this.setNamedCurve(this.curveName),this.setPublicKeyHex(T)},r!==void 0&&r.curve!==void 0&&(this.curveName=r.curve),this.curveName===void 0&&(this.curveName=e),this.setNamedCurve(this.curveName),r!==void 0&&(r.prv!==void 0&&this.setPrivateKeyHex(r.prv),r.pub!==void 0&&this.setPublicKeyHex(r.pub))};u.crypto.ECDSA.parseSigHex=function(r){var e=u.crypto.ECDSA.parseSigHexInHexRS(r),t=new O(e.r,16),n=new O(e.s,16);return{r:t,s:n}};u.crypto.ECDSA.parseSigHexInHexRS=function(r){var e=V,t=e.getChildIdx,n=e.getV;if(e.checkStrictDER(r,0),r.substr(0,2)!="30")throw new Error("signature is not a ASN.1 sequence");var i=t(r,0);if(i.length!=2)throw new Error("signature shall have two elements");var o=i[0],s=i[1];if(r.substr(o,2)!="02")throw new Error("1st item not ASN.1 integer");if(r.substr(s,2)!="02")throw new Error("2nd item not ASN.1 integer");var a=n(r,o),c=n(r,s);return{r:a,s:c}};u.crypto.ECDSA.asn1SigToConcatSig=function(r){var e=u.crypto.ECDSA.parseSigHexInHexRS(r),t=e.r,n=e.s;if(t.length>=130&&t.length<=134){if(t.length%2!=0)throw Error("unknown ECDSA sig r length error");

38if(n.length%2!=0)throw Error("unknown ECDSA sig s length error");t.substr(0,2)=="00"&&(t=t.substr(2)),n.substr(0,2)=="00"&&(n=n.substr(2));var i=Math.max(t.length,n.length);return t=("000000"+t).slice(-i),n=("000000"+n).slice(-i),t+n}if(t.substr(0,2)=="00"&&t.length%32==2&&(t=t.substr(2)),n.substr(0,2)=="00"&&n.length%32==2&&(n=n.substr(2)),t.length%32==30&&(t="00"+t),n.length%32==30&&(n="00"+n),t.length%32!=0)throw Error("unknown ECDSA sig r length error");if(n.length%32!=0)throw Error("unknown ECDSA sig s length error");return t+n};u.crypto.ECDSA.concatSigToASN1Sig=function(r){if(r.length%4!=0)throw Error("unknown ECDSA concatinated r-s sig length error");var e=r.substr(0,r.length/2),t=r.substr(r.length/2);return u.crypto.ECDSA.hexRSSigToASN1Sig(e,t)};u.crypto.ECDSA.hexRSSigToASN1Sig=function(r,e){var t=new O(r,16),n=new O(e,16);return u.crypto.ECDSA.biRSSigToASN1Sig(t,n)};u.crypto.ECDSA.biRSSigToASN1Sig=function(r,e){var t=u.asn1,n=new t.DERInteger({bigint:r}),i=new t.DERInteger({bigint:e}),o=new t.DERSequence({array:[n,i]});return o.tohex()};u.crypto.ECDSA.getName=function(r){return r==="2b8104001f"?"secp192k1":r==="2a8648ce3d030107"?"secp256r1":r==="2b8104000a"?"secp256k1":r==="2b81040021"?"secp224r1":r==="2b81040022"?"secp384r1":r==="2b81040023"?"secp521r1":"|secp256r1|NIST P-256|P-256|prime256v1|".indexOf(r)!==-1?"secp256r1":"|secp256k1|".indexOf(r)!==-1?"secp256k1":"|secp224r1|NIST P-224|P-224|".indexOf(r)!==-1?"secp224r1":"|secp384r1|NIST P-384|P-384|".indexOf(r)!==-1?"secp384r1":"|secp521r1|NIST P-521|P-521|".indexOf(r)!==-1?"secp521r1":null};(typeof u>"u"||!u)&&(u={});(typeof u.crypto>"u"||!u.crypto)&&(u.crypto={});u.crypto.ECParameterDB=new function(){var r={},e={};function t(n){return new O(n,16)}this.getByName=function(n){var i=n;if(typeof e[i]<"u"&&(i=e[n]),typeof r[i]<"u")return r[i];throw"unregistered EC curve name: "+i},this.regist=function(n,i,o,s,a,c,l,p,g,h,d,m){r[n]={};var f=t(o),y=t(s),v=t(a),S=t(c),A=t(l),T=new En(f,y,v),b=T.decodePointHex("04"+p+g);r[n].name=n,r[n].keylen=i,r[n].keycharlen=Math.ceil(i/8)*2,r[n].curve=T,r[n].G=b,r[n].n=S,r[n].h=A,r[n].oid=d,r[n].info=m;for(var D=0;D<h.length;D++)e[h[D]]=n}};u.crypto.ECParameterDB.regist("secp128r1",128,"FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFF","FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFC","E87579C11079F43DD824993C2CEE5ED3","FFFFFFFE0000000075A30D1B9038A115","1","161FF7528B899B2D0C28607CA52C5B86","CF5AC8395BAFEB13C02DA292DDED7A83",[],"","secp128r1 : SECG curve over a 128 bit prime field");u.crypto.ECParameterDB.regist("secp160k1",160,"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73","0","7","0100000000000000000001B8FA16DFAB9ACA16B6B3","1","3B4C382CE37AA192A4019E763036F4F5DD4D7EBB","938CF935318FDCED6BC28286531733C3F03C4FEE",[],"","secp160k1 : SECG curve over a 160 bit prime field");u.crypto.ECParameterDB.regist("secp160r1",160,"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFF","FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFC","1C97BEFC54BD7A8B65ACF89F81D4D4ADC565FA45","0100000000000000000001F4C8F927AED3CA752257","1","4A96B5688EF573284664698968C38BB913CBFC82","23A628553168947D59DCC912042351377AC5FB32",[],"","secp160r1 : SECG curve over a 160 bit prime field");u.crypto.ECParameterDB.regist("secp192k1",192,"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFEE37","0","3","FFFFFFFFFFFFFFFFFFFFFFFE26F2FC170F69466A74DEFD8D","1","DB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D","9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D",[]);u.crypto.ECParameterDB.regist("secp192r1",192,"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF","FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC","64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1","FFFFFFFFFFFFFFFFFFFFFFFF99DEF836146BC9B1B4D22831","1","188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF1012","07192B95FFC8DA78631011ED6B24CDD573F977A11E794811",[]);u.crypto.ECParameterDB.regist("secp224r1",224,"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF000000000000000000000001","FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFE","B4050A850C04B3ABF54132565044B0B7D7BFD8BA270B39432355FFB4","FFFFFFFFFFFFFFFFFFFFFFFFFFFF16A2E0B8F03E13DD29455C5C2A3D","1","B70E0CBD6BB4BF7F321390B94A03C1D356C21122343280D6115C1D21","BD376388B5F723FB4C22DFE6CD4375A05A07476444D5819985007E34",[]);u.crypto.ECParameterDB.regist("secp256k1",256,"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F","0","7","FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141","1","79BE667EF9DCB

38BAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798","483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8",[]);u.crypto.ECParameterDB.regist("secp256r1",256,"FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF","FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFC","5AC635D8AA3A93E7B3EBBD55769886BC651D06B0CC53B0F63BCE3C3E27D2604B","FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551","1","6B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C296","4FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5",["NIST P-256","P-256","prime256v1"]);u.crypto.ECParameterDB.regist("secp384r1",384,"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFF","FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFC","B3312FA7E23EE7E4988E056BE3F82D19181D9C6EFE8141120314088F5013875AC656398D8A2ED19D2A85C8EDD3EC2AEF","FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52973","1","AA87CA22BE8B05378EB1C71EF320AD746E1D3B628BA79B9859F741E082542A385502F25DBF55296C3A545E3872760AB7","3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f",["NIST P-384","P-384"]);u.crypto.ECParameterDB.regist("secp521r1",521,"1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF","1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC","051953EB9618E1C9A1F929A21A0B68540EEA2DA725B99B315F3B8B489918EF109E156193951EC7E937B1652C0BD3BB1BF073573DF883D2C34F1EF451FD46B503F00","1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFA51868783BF2F966B7FCC0148F709A5D03BB5C9B8899C47AEBB6FB71E91386409","1","00C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66","011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650",["NIST P-521","P-521"]);(typeof u>"u"||!u)&&(u={});(typeof u.crypto>"u"||!u.crypto)&&(u.crypto={});u.crypto.DSA=function(){var r=V,e=r.getVbyList,t=r.getVbyListEx,n=r.isASN1HEX,i=O,o=O.ONE,s=function(a,c,l,p){if(a==null||c==null||l==null||p==null)throw new Error("invalid DSA public key");if(o.compareTo(c)>=0||c.compareTo(a)>=0)throw new Error("invalid DSA public key");if(o.compareTo(l)>=0||l.compareTo(a)>=0)throw new Error("invalid DSA public key");if(o.compareTo(p)>=0||p.compareTo(a)>=0)throw new Error("invalid DSA public key");if(l.modPow(c,a).compareTo(o)!=0)throw new Error("invalid DSA public key")};this.p=null,this.q=null,this.g=null,this.y=null,this.x=null,this.type="DSA",this.isPrivate=!1,this.isPublic=!1,this.setPrivate=function(a,c,l,p,g){this.isPrivate=!0,this.p=a,this.q=c,this.g=l,this.y=p,this.x=g},this.setPrivateHex=function(a,c,l,p,g){var h,d,m,f,y;h=new O(a,16),d=new O(c,16),m=new O(l,16),typeof p=="string"&&p.length>1?f=new O(p,16):f=null,y=new O(g,16),this.setPrivate(h,d,m,f,y)},this.setPublic=function(a,c,l,p){s(a,c,l,p),this.isPublic=!0,this.p=a,this.q=c,this.g=l,this.y=p,this.x=null},this.setPublicHex=function(a,c,l,p){var g,h,d,m;g=new O(a,16),h=new O(c,16),d=new O(l,16),m=new O(p,16),this.setPublic(g,h,d,m)},this.signWithMessageHash=function(a){var c=this.p,l=this.q,p=this.g,g=this.y,h=this.x,d=a.substr(0,l.bitLength()/4),m=new O(d,16),f,y,v;do f=u.crypto.Util.getRandomBigIntegerMinToMax(O.ONE.add(O.ONE),l.subtract(O.ONE)),y=p.modPow(f,c).mod(l),v=f.modInverse(l).multiply(m.add(h.multiply(y))).mod(l);while(y.compareTo(O.ZERO)==0||v.compareTo(O.ZERO)==0);var S=u.asn1.ASN1Util.jsonToASN1HEX({seq:[{int:{bigint:y}},{int:{bigint:v}}]});return S},this.verifyWithMessageHash=function(a,c){var l=this.p,p=this.q,g=this.g,h=this.y,d=this.parseASN1Signature(c),m=d[0],f=d[1],y=a.substr(0,p.bitLength()/4),v=new O(y,16);if(O.ZERO.compareTo(m)>0||m.compareTo(p)>0||O.ZERO.compareTo(f)>=0||f.compareTo(p)>0)throw"invalid DSA signature";var S=f.modInverse(p),A=v.multiply(S).mod(p),T=m.multiply(S).mod(p),b=g.modPow(A,l).multiply(h.modPow(T,l)).mod(l).mod(p);return b.compareTo(m)==0},this.parseASN1Signature=function(a){try{var c=new i(t(a,0,[0],"02"),16),l=new i(t(a,0,[1],"02"),16);return[c,l]}catch{throw new Error("malformed ASN.1 DSA signature")}},this.readPKCS5PrvKeyHex=function(a){var c,l,p,g,h;if(n(a)===!1)throw new Error("not ASN.1 hex string");try{c=t(a,0,[1],"02"),l=t(a,0,[2],"02"),p=t(a,0,[3],"02"),g=t(a,0,[4],"02"),h=t(a,0,[5],"02")}catch{throw new Error("malformed PKCS#1/5 plain DSA private key")}this.setPrivateHex(c,l,p,g,h)},this.readPKCS8PrvKeyHex=function(a){var c,l,p,g;if(n(a)===!1)throw new Error("not ASN.1 hex string");try{c=t(a,0,[1,1,0],"02"),l=t(a,0,[1,1,1],"02"),p=t(a,0,[1,1,2],"02"),g=t(a,0,[2,0],"02")}catch{throw new Error("malformed PKCS#8 plain DSA private key")}this.setPrivateHex(c,l,p,null,g)},this.readPKCS8PubKeyHex=function(a){var c,l,p,g;if(n(a)===!1)throw new Error("not ASN.1 hex string");try{c=t(a,0,[0,1,0],"02"),l=t(a,0,[0,1,1],"02"),p=t(a,0,[0,1,2],"02"),g=t(a,0,[1,0],"02")}catch{throw new Error("malformed PKCS#8 DSA public key")}this.setPublicHex(c,l,p,g)},this.readCertPubKeyHex=function(a,c){var l,p,g,h;if(n(a)===!1)throw new Error("not ASN.1 hex string");try{l=t(a,0,[0,5,0,1,0],"02"),p=t(a,0,[0,5,0,1,1],"02"),g=t(a,0,[0,5,0,1,2],"02"),h=t(a,0,[0,5,1,0],"02")}catch{throw new Error("malformed X.509 certificate DSA public key")}this.setPublicHex(l,p,g,h)}};var pe=(function(){var r=function(f,y,v){return n(W.AES,f,y,v)},e=function(f,y,v){return n(W.TripleDES,f,y,v)}

38,t=function(f,y,v){return n(W.DES,f,y,v)},n=function(f,y,v,S){var A=W.enc.Hex.parse(y),T=W.enc.Hex.parse(v),b=W.enc.Hex.parse(S),D={};D.key=T,D.iv=b,D.ciphertext=A;var B=f.decrypt(D,T,{iv:b});return W.enc.Hex.stringify(B)},i=function(f,y,v){return a(W.AES,f,y,v)},o=function(f,y,v){return a(W.TripleDES,f,y,v)},s=function(f,y,v){return a(W.DES,f,y,v)},a=function(f,y,v,S){var A=W.enc.Hex.parse(y),T=W.enc.Hex.parse(v),b=W.enc.Hex.parse(S),D=f.encrypt(A,T,{iv:b}),B=W.enc.Hex.parse(D.toString()),C=W.enc.Base64.stringify(B);return C},c={"AES-256-CBC":{proc:r,eproc:i,keylen:32,ivlen:16},"AES-192-CBC":{proc:r,eproc:i,keylen:24,ivlen:16},"AES-128-CBC":{proc:r,eproc:i,keylen:16,ivlen:16},"DES-EDE3-CBC":{proc:e,eproc:o,keylen:24,ivlen:8},"DES-CBC":{proc:t,eproc:s,keylen:8,ivlen:8}},l=function(f){return c[f].proc},p=function(f){var y=W.lib.WordArray.random(f),v=W.enc.Hex.stringify(y);return v},g=function(f){var y={},v=f.match(new RegExp("DEK-Info: ([^,]+),([0-9A-Fa-f]+)","m"));v&&(y.cipher=v[1],y.ivsalt=v[2]);var S=f.match(new RegExp("-----BEGIN ([A-Z]+) PRIVATE KEY-----"));S&&(y.type=S[1]);var A=-1,T=0;f.indexOf(`\r
39\r
40`)!=-1&&(A=f.indexOf(`\r
41\r
42`),T=2),f.indexOf(`
43
44`)!=-1&&(A=f.indexOf(`
45
46`),T=1);var b=f.indexOf("-----END");if(A!=-1&&b!=-1){var D=f.substring(A+T*2,b-T);D=D.replace(/\s+/g,""),y.data=D}return y},h=function(f,y,v){for(var S=v.substring(0,16),A=W.enc.Hex.parse(S),T=W.enc.Utf8.parse(y),b=c[f].keylen+c[f].ivlen,D="",B=null;;){var C=W.algo.MD5.create();if(B!=null&&C.update(B),C.update(T),C.update(A),B=C.finalize(),D=D+W.enc.Hex.stringify(B),D.length>=b*2)break}var E={};return E.keyhex=D.substr(0,c[f].keylen*2),E.ivhex=D.substr(c[f].keylen*2,c[f].ivlen*2),E},d=function(f,y,v,S){var A=W.enc.Base64.parse(f),T=W.enc.Hex.stringify(A),b=c[y].proc,D=b(T,v,S);return D},m=function(f,y,v,S){var A=c[y].eproc,T=A(f,v,S);return T};return{version:"1.0.0",parsePKCS5PEM:function(f){return g(f)},getKeyAndUnusedIvByPasscodeAndIvsalt:function(f,y,v){return h(f,y,v)},decryptKeyB64:function(f,y,v,S){return d(f,y,v,S)},getDecryptedKeyHex:function(f,y){var v=g(f),S=v.type,A=v.cipher,T=v.ivsalt,b=v.data,D=h(A,y,T),B=D.keyhex,C=d(b,A,B,T);return C},getEncryptedPKCS5PEMFromPrvKeyHex:function(f,y,v,S,A){var I="";if((typeof S>"u"||S==null)&&(S="AES-256-CBC"),typeof c[S]>"u")throw new Error("KEYUTIL unsupported algorithm: "+S);if(typeof A>"u"||A==null){var T=c[S].ivlen,b=p(T);A=b.toUpperCase()}var D=h(S,v,A),B=D.keyhex,C=m(y,S,B,A),E=C.replace(/(.{64})/g,`$1\r
47`),I="-----BEGIN "+f+` PRIVATE KEY-----\r
48`;return I+=`Proc-Type: 4,ENCRYPTED\r
49`,I+="DEK-Info: "+S+","+A+`\r
50`,I+=`\r
51`,I+=E,I+=`\r
52-----END `+f+` PRIVATE KEY-----\r
53`,I},getEncryptedPKCS8PEM:function(f,y,v){var S=this.getEncryptedPKCS8Hex(f,y,v);return Tt(S,"ENCRYPTED PRIVATE KEY")},getEncryptedPKCS8Hex:function(f,y,v){var S;v==null||v==null?S={}:S=JSON.parse(JSON.stringify(v)),S.plain=f,this.initPBES2Param(S),this.encryptPBES2Param(S,y);var A=this.generatePBES2ASN1Param(S);return u.asn1.ASN1Util.newObject(A).tohex()},initPBES2Param:function(f){if(Ne(f,"encalg")==null&&(f.encalg="aes256-CBC"),Ne(f,"iter")==null&&(f.iter=2048),Ne(f,"prf")==null&&(f.prf="hmacWithSHA256"),Ne(f,"salt")==null&&(f.salt=W.enc.Hex.stringify(W.lib.WordArray.random(8))),Ne(f,"enciv")==null){var y;f.encalg=="des-EDE3-CBC"&&(y=8),f.encalg=="aes128-CBC"&&(y=16),f.encalg=="aes256-CBC"&&(y=16),f.enciv=W.enc.Hex.stringify(W.lib.WordArray.random(y))}},encryptPBES2Param:function(f,y){var v=pe.getDKFromPBES2Param(f,y);try{var S=u.crypto.Cipher.encrypt(f.plain,v,f.encalg,{iv:f.enciv})}catch{throw new Error("encrypt error: "+f.plain+" "+v+" "+f.encalg+" "+f.enciv)}f.enc=S},generatePBES2ASN1Param:function(f){var y={seq:[{seq:[{oid:"pkcs5PBES2"},{seq:[{seq:[{oid:"pkcs5PBKDF2"},{seq:[{octstr:{hex:f.salt}},{int:{hex:hm(f.iter)}}]}]},{seq:[{oid:f.encalg},{octstr:{hex:f.enciv}}]}]}]},{octstr:{hex:f.enc}}]};return f.prf!="hmacWithSHA1"&&y.seq[0].seq[1].seq[0].seq[1].seq.push({seq:[{oid:f.prf},{null:""}]}),y},parseHexOfEncryptedPKCS8:function(f){var y=V,v=y.getChildIdx,S=y.getV,A={},T=v(f,0);if(T.length!=2)throw new Error("malformed format: SEQUENCE(0).items != 2: "+T.length);A.ciphertext=S(f,T[1]);var b=v(f,T[0]);if(b.length!=2)throw new Error("malformed format: SEQUENCE(0.0).items != 2: "+b.length);if(S(f,b[0])!="2a864886f70d01050d")throw new Error("this only supports pkcs5PBES2");var D=v(f,b[1]);if(b.length!=2)throw new Error("malformed format: SEQUENCE(0.0.1).items != 2: "+D.length);var B=v(f,D[1]);if(B.length!=2)throw new Error("malformed format: SEQUENCE(0.0.1.1).items != 2: "+B.length);if(S(f,B[0])!="2a864886f70d0307")throw"this only supports TripleDES";A.encryptionSchemeAlg="TripleDES",A.encryptionSchemeIV=S(f,B[1]);var C=v(f,D[0]);if(C.length!=2)throw new Error("malformed format: SEQUENCE(0.0.1.0).items != 2: "+C.length);if(S(f,C[0])!="2a864886f70d01050c")throw new Error("this only supports pkcs5PBKDF2");var E=v(f,C[1]);if(E.length<2)throw new Error("malformed format: SEQUENCE(0.0.1.0.1).items < 2: "+E.length);A.pbkdf2Salt=S(f,E[0]);var I=S(f,E[1]);try{A.pbkdf2Iter=parseInt(I,16)}catch{throw new Error("malformed format pbkdf2Iter: "+I)}return A},getPBKDF2KeyHexFromParam:function(f,y){var v=W.enc.Hex.parse(f.pbkdf2Salt),S=f.pbkdf2Iter,A=W.PBKDF2(y,v,{keySize:192/32,iterations:S}),T=W.enc.Hex.stringify(A);return T},_getPlainPKCS8HexFromEncryptedPKCS8PEM:function(f,y){var v=Ze(f,"ENCRYPTED PRIVATE KEY"),S=this.parseHexOfEncryptedPKCS8(v),A=pe.getPBKDF2KeyHexFromParam(S,y),T={};T.ciphertext=W.enc.Hex.parse(S.ciphertext);var b=W.enc.Hex.parse(A),D=W.enc.Hex.parse(S.encryptionSchemeIV),B=W.TripleDES.decrypt(T,b,{iv:D}),C=W.enc.Hex.stringify(B);return C},parsePBES2:function(f){var y=V.parse(f);if(Ne(y,"seq.0.seq.0.oid")!="pkcs5PBES2"||Ne(y,"seq.0.seq.1.seq.0.seq.0.oid")!="pkcs5PBKDF2")throw new Error("not pkcs5PBES2 and pkcs5PBKDF2 used");var v=Ne(y,"seq.0.seq.1.seq.0.seq.1.seq");if(v==null)throw new Error("PBKDF2 parameter not found");var S=Ne(v,"0.octstr.hex"),A=Ne(v,"1.int.hex"),T=Ne(v,"2.seq.0.oid","hmacWithSHA1"),b=-1;try{b=parseInt(A,16)}catch{throw new Error("iter not proper value")}var D=Ne(y,"seq.0.seq.1.seq.1.seq.0.oid"),B=Ne(y,"seq.0.seq.1.seq.1.seq.1.octstr.hex"),C=Ne(y,"seq.1.octstr.hex");if(D==null||B==null||C==null)throw new Error("encalg, enciv or enc is undefined");var E={salt:S,iter:b,prf:T,encalg:D,enciv:B,enc:C};return E},getDKFromPBES2Param:function(f,y){var v={hmacWithSHA1:W.algo.SHA1,hmacWithSHA224:W.algo.SHA224,hmacWithSHA256:W.algo.SHA256,hmacWithSHA384:W.algo.SHA384,hmacWithSHA512:W.algo.SHA512},S={"des-EDE3-CBC":192/32,"aes128-CBC":128/32,"aes256-CBC":256/32},A=v[f.prf];if(A==null)throw new Error("unsupported prf");var T=S[f.encalg];if(T==null)throw new Error("unsupported encalg");var b=W.enc.Hex.parse(f.salt),D=f.iter;try{var B=W.PBKDF2(y,b,{keySize:T,iterations:D,hasher:A});return W.enc.Hex.stringify(B)}catch(C){throw new Error("PBKDF2 error: "+C+" "+JSON.stringify(f)+" "+y)}},getPlainHexFromEncryptedPKCS8PEM:function(f,y){if(f.indexOf("BEGIN ENCRYPTED PRIVATE KEY")==-1)throw new Error("not Encrypted PKCS#8 PEM string");var v=Ze(f),S;try{S=pe.parsePBES2(v)}catch(T){throw new Error("malformed PBES2 format: "+T.message)}var A=pe.getDKFromPBES2Param(S,y);return u.crypto.Cipher.decrypt(S.enc,A,S.encalg,{iv:S.enciv})},getKeyFromEncryptedPKCS8PEM:function(f,y){var v=this.getPlainHexFromEncryptedPKCS8PEM(f,y),S=this.getKeyFromPlainPrivateP

53KCS8Hex(v);return S},parsePlainPrivatePKCS8Hex:function(f){var y=V,v=y.getChildIdx,S=y.getV,A={};if(A.algparam=null,f.substr(0,2)!="30")throw new Error("malformed plain PKCS8 private key(code:001)");var T=v(f,0);if(T.length<3)throw new Error("malformed plain PKCS8 private key(code:002)");if(f.substr(T[1],2)!="30")throw new Error("malformed PKCS8 private key(code:003)");var b=v(f,T[1]);if(b.length!=2)throw new Error("malformed PKCS8 private key(code:004)");if(f.substr(b[0],2)!="06")throw new Error("malformed PKCS8 private key(code:005)");if(A.algoid=S(f,b[0]),f.substr(b[1],2)=="06"&&(A.algparam=S(f,b[1])),f.substr(T[2],2)!="04")throw new Error("malformed PKCS8 private key(code:006)");return A.keyidx=y.getVidx(f,T[2]),A},getKeyFromPlainPrivatePKCS8PEM:function(f){var y=Ze(f,"PRIVATE KEY"),v=this.getKeyFromPlainPrivatePKCS8Hex(y);return v},getKeyFromPlainPrivatePKCS8Hex:function(f){var y=this.parsePlainPrivatePKCS8Hex(f),v;if(y.algoid=="2a864886f70d010101")v=new se;else if(y.algoid=="2a8648ce380401")v=new u.crypto.DSA;else if(y.algoid=="2a8648ce3d0201")v=new u.crypto.ECDSA;else throw new Error("unsupported private key algorithm");return v.readPKCS8PrvKeyHex(f),v},_getKeyFromPublicPKCS8Hex:function(f){var y,v=V.getVbyList(f,0,[0,0],"06");if(v==="2a864886f70d010101")y=new se;else if(v==="2a8648ce380401")y=new u.crypto.DSA;else if(v==="2a8648ce3d0201")y=new u.crypto.ECDSA;else throw new Error("unsupported PKCS#8 public key hex");return y.readPKCS8PubKeyHex(f),y},parsePublicRawRSAKeyHex:function(f){var y=V,v=y.getChildIdx,S=y.getV,A={};if(f.substr(0,2)!="30")throw new Error("malformed RSA key(code:001)");var T=v(f,0);if(T.length!=2)throw new Error("malformed RSA key(code:002)");if(f.substr(T[0],2)!="02")throw new Error("malformed RSA key(code:003)");if(A.n=S(f,T[0]),f.substr(T[1],2)!="02")throw new Error("malformed RSA key(code:004)");return A.e=S(f,T[1]),A},parsePublicPKCS8Hex:function(f){var y=V,v=y.getChildIdx,S=y.getV,A={};A.algparam=null;var T=v(f,0);if(T.length!=2)throw new Error("outer DERSequence shall have 2 elements: "+T.length);var b=T[0];if(f.substr(b,2)!="30")throw new Error("malformed PKCS8 public key(code:001)");var D=v(f,b);if(D.length!=2)throw new Error("malformed PKCS8 public key(code:002)");if(f.substr(D[0],2)!="06")throw new Error("malformed PKCS8 public key(code:003)");if(A.algoid=S(f,D[0]),f.substr(D[1],2)=="06"?A.algparam=S(f,D[1]):f.substr(D[1],2)=="30"&&(A.algparam={},A.algparam.p=y.getVbyList(f,D[1],[0],"02"),A.algparam.q=y.getVbyList(f,D[1],[1],"02"),A.algparam.g=y.getVbyList(f,D[1],[2],"02")),f.substr(T[1],2)!="03")throw new Error("malformed PKCS8 public key(code:004)");return A.key=S(f,T[1]).substr(2),A}}})();pe.getKey=function(r,e,t){var n=V,i=n.getChildIdx,o=n.getV,s=n.getVbyList,a=u.crypto,c=a.ECDSA,l=a.DSA,p=se,g=Ze,h=pe;if(typeof p<"u"&&r instanceof p||typeof c<"u"&&r instanceof c||typeof l<"u"&&r instanceof l)return r;if(r.curve!==void 0&&r.xy!==void 0&&r.d===void 0)return new c({pub:r.xy,curve:r.curve});if(r.curve!==void 0&&r.d!==void 0)return new c({prv:r.d,curve:r.curve});if(r.kty===void 0&&r.n!==void 0&&r.e!==void 0&&r.d===void 0){var d=new p;return d.setPublic(r.n,r.e),d}if(r.kty===void 0&&r.n!==void 0&&r.e!==void 0&&r.d!==void 0&&r.p!==void 0&&r.q!==void 0&&r.dp!==void 0&&r.dq!==void 0&&r.co!==void 0&&r.qi===void 0){var d=new p;return d.setPrivateEx(r.n,r.e,r.d,r.p,r.q,r.dp,r.dq,r.co),d}if(r.kty===void 0&&r.n!==void 0&&r.e!==void 0&&r.d!==void 0&&r.p===void 0){var d=new p;return d.setPrivate(r.n,r.e,r.d),d}if(r.p!==void 0&&r.q!==void 0&&r.g!==void 0&&r.y!==void 0&&r.x===void 0){var d=new l;return d.setPublic(r.p,r.q,r.g,r.y),d}if(r.p!==void 0&&r.q!==void 0&&r.g!==void 0&&r.y!==void 0&&r.x!==void 0){var d=new l;return d.setPrivate(r.p,r.q,r.g,r.y,r.x),d}if(r.kty==="RSA"&&r.n!==void 0&&r.e!==void 0&&r.d===void 0){var d=new p;return d.setPublic(je(r.n),je(r.e)),d}if(r.kty==="RSA"&&r.n!==void 0&&r.e!==void 0&&r.d!==void 0&&r.p!==void 0&&r.q!==void 0&&r.dp!==void 0&&r.dq!==void 0&&r.qi!==void 0){var d=new p;return d.setPrivateEx(je(r.n),je(r.e),je(r.d),je(r.p),je(r.q),je(r.dp),je(r.dq),je(r.qi)),d}if(r.kty==="RSA"&&r.n!==void 0&&r.e!==void 0&&r.d!==void 0){var d=new p;return d.setPrivate(je(r.n),je(r.e),je(r.d)),d}if(r.kty==="EC"&&r.crv!==void 0&&r.x!==void 0&&r.y!==void 0&&r.d===void 0){var m=new c({curve:r.crv}),f=m.ecparams.keycharlen,y=("0000000000"+je(r.x)).slice(-f),v=("0000000000"+je(r.y)).slice(-f),S="04"+y+v;return m.setPublicKeyHex(S),m}if(r.kty==="EC"&&r.crv!==void 0&&r.x!==void 0&&r.y!==void 0&&r.d!==void 0){var m=new c({curve:r.crv}),f=m.ecparams.keycharlen,y=("0000000000"+je(r.x)).slice(-f),v=("0000000000"+je(r.y)).slice(-f),S="04"+y+v,A=("0000000000"+je(r.d)).slice(-f);return m.setPublicKeyHex(S),m.setPrivateKeyHex(A),m}if(t==="pkcs5prv"){var T=r,n=V,b,d;if(b=i(T,0),b.length===9)d=new p,d.readPKCS5PrvKeyHex(T);else if(b.length===6)d=new l,d.readPKCS5PrvKeyHex(T);else if(b.length>2&&T.substr(b[1],2)==="04")d=new c,d.readPKCS5PrvKeyHex(T);else throw new Error("unsupported PKCS#1/5 hexadecimal key");return d}

53if(t==="pkcs8prv"){var d=h.getKeyFromPlainPrivatePKCS8Hex(r);return d}if(t==="pkcs8pub")return h._getKeyFromPublicPKCS8Hex(r);if(t==="x509pub")return Z.getPublicKeyFromCertHex(r);if(r.indexOf("-END CERTIFICATE-",0)!=-1||r.indexOf("-END X509 CERTIFICATE-",0)!=-1||r.indexOf("-END TRUSTED CERTIFICATE-",0)!=-1)return Z.getPublicKeyFromCertPEM(r);if(r.indexOf("-END PUBLIC KEY-")!=-1){var D=Ze(r,"PUBLIC KEY");return h._getKeyFromPublicPKCS8Hex(D)}if(r.indexOf("-END RSA PRIVATE KEY-")!=-1&&r.indexOf("4,ENCRYPTED")==-1){var B=g(r,"RSA PRIVATE KEY");return h.getKey(B,null,"pkcs5prv")}if(r.indexOf("-END DSA PRIVATE KEY-")!=-1&&r.indexOf("4,ENCRYPTED")==-1){var C=g(r,"DSA PRIVATE KEY"),E=s(C,0,[1],"02"),I=s(C,0,[2],"02"),R=s(C,0,[3],"02"),_=s(C,0,[4],"02"),M=s(C,0,[5],"02"),d=new l;return d.setPrivate(new O(E,16),new O(I,16),new O(R,16),new O(_,16),new O(M,16)),d}if(r.indexOf("-END EC PRIVATE KEY-")!=-1&&r.indexOf("4,ENCRYPTED")==-1){var B=g(r,"EC PRIVATE KEY");return h.getKey(B,null,"pkcs5prv")}if(r.indexOf("-END PRIVATE KEY-")!=-1)return h.getKeyFromPlainPrivatePKCS8PEM(r);if(r.indexOf("-END RSA PRIVATE KEY-")!=-1&&r.indexOf("4,ENCRYPTED")!=-1){var k=h.getDecryptedKeyHex(r,e),N=new se;return N.readPKCS5PrvKeyHex(k),N}if(r.indexOf("-END EC PRIVATE KEY-")!=-1&&r.indexOf("4,ENCRYPTED")!=-1){var C=h.getDecryptedKeyHex(r,e),d=s(C,0,[1],"04"),P=s(C,0,[2,0],"06"),F=s(C,0,[3,0],"03").substr(2),j="";if(u.crypto.OID.oidhex2name[P]!==void 0)j=u.crypto.OID.oidhex2name[P];else throw new Error("undefined OID(hex) in KJUR.crypto.OID: "+P);var m=new c({curve:j});return m.setPublicKeyHex(F),m.setPrivateKeyHex(d),m.isPublic=!1,m}if(r.indexOf("-END DSA PRIVATE KEY-")!=-1&&r.indexOf("4,ENCRYPTED")!=-1){var C=h.getDecryptedKeyHex(r,e),E=s(C,0,[1],"02"),I=s(C,0,[2],"02"),R=s(C,0,[3],"02"),_=s(C,0,[4],"02"),M=s(C,0,[5],"02"),d=new l;return d.setPrivate(new O(E,16),new O(I,16),new O(R,16),new O(_,16),new O(M,16)),d}if(r.indexOf("-END ENCRYPTED PRIVATE KEY-")!=-1)return h.getKeyFromEncryptedPKCS8PEM(r,e);throw new Error("not supported argument")};pe.generateKeypair=function(r,e){if(r=="RSA"){var t=e,n=new se;n.generate(t,"10001"),n.isPrivate=!0,n.isPublic=!0;var i=new se,o=n.n.toString(16),s=n.e.toString(16);i.setPublic(o,s),i.isPrivate=!1,i.isPublic=!0;var a={};return a.prvKeyObj=n,a.pubKeyObj=i,a}else if(r=="EC"){var c=e,l=new u.crypto.ECDSA({curve:c}),p=l.generateKeyPairHex(),n=new u.crypto.ECDSA({curve:c});n.setPublicKeyHex(p.ecpubhex),n.setPrivateKeyHex(p.ecprvhex),n.isPrivate=!0,n.isPublic=!1;var i=new u.crypto.ECDSA({curve:c});i.setPublicKeyHex(p.ecpubhex),i.isPrivate=!1,i.isPublic=!0;var a={};return a.prvKeyObj=n,a.pubKeyObj=i,a}else throw new Error("unknown algorithm: "+r)};pe.getPEM=function(r,e,t,n,i,o){var s=u,a=s.asn1,c=a.DERObjectIdentifier,l=a.DERInteger,p=a.ASN1Util.newObject,g=a.x509,h=g.SubjectPublicKeyInfo,d=s.crypto,m=d.DSA,f=d.ECDSA,y=se;function v(N){var P=p({seq:[{int:0},{int:{bigint:N.n}},{int:N.e},{int:{bigint:N.d}},{int:{bigint:N.p}},{int:{bigint:N.q}},{int:{bigint:N.dmp1}},{int:{bigint:N.dmq1}},{int:{bigint:N.coeff}}]});return P}function S(N){var P=p({seq:[{int:1},{octstr:{hex:N.prvKeyHex}},{tag:["a0",!0,{oid:{name:N.curveName}}]},{tag:["a1",!0,{bitstr:{hex:"00"+N.pubKeyHex}}]}]});return P}function A(N){var P=p({seq:[{int:0},{int:{bigint:N.p}},{int:{bigint:N.q}},{int:{bigint:N.g}},{int:{bigint:N.y}},{int:{bigint:N.x}}]});return P}if((y!==void 0&&r instanceof y||m!==void 0&&r instanceof m||f!==void 0&&r instanceof f)&&r.isPublic==!0&&(e===void 0||e=="PKCS8PUB")){var T=new h(r),b=T.tohex();return Tt(b,"PUBLIC KEY")}if(e=="PKCS1PRV"&&y!==void 0&&r instanceof y&&(t===void 0||t==null)&&r.isPrivate==!0){var T=v(r),b=T.tohex();return Tt(b,"RSA PRIVATE KEY")}if(e=="PKCS1PRV"&&f!==void 0&&r instanceof f&&(t===void 0||t==null)&&r.isPrivate==!0){var D=new c({name:r.curveName}),B=D.tohex(),C=S(r),E=C.tohex(),I="";return I+=Tt(B,"EC PARAMETERS"),I+=Tt(E,"EC PRIVATE KEY"),I}if(e=="PKCS1PRV"&&m!==void 0&&r instanceof m&&(t===void 0||t==null)&&r.isPrivate==!0){var T=A(r),b=T.tohex();return Tt(b,"DSA PRIVATE KEY")}if(e=="PKCS5PRV"&&y!==void 0&&r instanceof y&&t!==void 0&&t!=null&&r.isPrivate==!0){var T=v(r),b=T.tohex();return n===void 0&&(n="DES-EDE3-CBC"),this.getEncryptedPKCS5PEMFromPrvKeyHex("RSA",b,t,n,o)}if(e=="PKCS5PRV"&&f!==void 0&&r instanceof f&&t!==void 0&&t!=null&&r.isPrivate==!0){var T=S(r),b=T.tohex();return n===void 0&&(n="DES-EDE3-CBC"),this.getEncryptedPKCS5PEMFromPrvKeyHex("EC",b,t,n,o)}if(e=="PKCS5PRV"&&m!==void 0&&r instanceof m&&t!==void 0&&t!=null&&r.isPrivate==!0){var T=A(r),b=T.tohex();return n===void 0&&(n="DES-EDE3-CBC"),this.getEncryptedPKCS5PEMFromPrvKeyHex("DSA",b,t,n,o)}var R=function(N,P){if(typeof P=="string")return pe.getEncryptedPKCS8PEM(N,P);if(typeof P=="object"&&Ne(P,"passcode")!=null){var F=JSON.parse(JSON.stringify(P)),j=F.passcode;return delete F.passcode,pe.getEncryptedPKCS8PEM(N,j,F)}};if(e=="PKCS8PRV"&&y!=null&&r instanceof y&&r.isPrivate==!0){var _=v(r),M=_.tohex(),T=p({seq:[{int:0},{seq:[{oid:{name:"rsaEncryption"}},{null:!0}]},{octstr:{hex:M}}]}),b=T.tohex();return t===void 0||t==null?Tt(b,"PRIVATE KEY"):R(b,t)}if(e=="PKCS8PRV"&&f!==void 0&&r instanceof f&&r.isPrivate==!0){var k={seq:[{int:1},{octstr:{hex:r.prvKeyHex}}]};typeof r.pubKeyHex=="string"&&k.seq.push({tag:["a1",!0,{bitstr:{hex:"00"+r.pubKeyHex}}]});var _=new p(k),M=_.tohex(),T=p({seq:[{int:0},{seq:[{oid:{name:"ecPublicKey"}},{oid:{name:r.curveName}}]},{octstr:{hex:M}}]}),b=T.tohex();return t===void 0||t==null?Tt(b,"PRIVATE KEY"):R(b,t)}if(e=="PKCS8PRV"&&m!==void 0&&r instanceof m&&r.isPrivate==!0){var _=new l({bigint:r.x}),M=_.tohex(),T=p({seq:[{int:0},{seq:[{oid:{name:"dsa"}},{seq:[{int:{bigint:r.p}},{int:{bigint:r.q}},{int:{bigint:r.g}}]}]},{octstr:{hex:M}}]}),b=T.tohex();return t===void 0||t==null?Tt(b,"PRIVATE KEY"):R(b,t)}throw new Error("unsupported object nor format")};pe.getKeyFromCSRPEM=function(r){var e=Ze(r,"CERTIFICATE REQUEST"),t=pe.getKeyFromCSRHex(e);return t};pe.getKeyFromCSRHex=function(r){var e=pe.parseCSRHex(r),t=pe.getKey(e.p8pubkeyhex,null,"pkcs8pub");return t};pe.parseCSRHex=function(r){var e=V,t=e.getChildIdx,n=e.getTLV,i={},o=r;if(o.substr(0,2)!="30")throw new Error("malformed CSR(code:001)");var s=t(o,0);if(s.length<1)throw new Error("malformed CSR(code:002)");if(o.substr(s[0],2)!="30")throw new Error("malformed CSR(code:003)");var a=t(o,s[0]);if(a.length<3)throw new Error("malformed CSR(code:004)");return i.p8pubkeyhex=n(o,a[2]),i};pe.getKeyID=function(r){var e=pe,t=V;typeof r=="string"&&r.indexOf("BEGIN ")!=-1&&(r=e.getKey(r));var n=Ze(e.getPEM(r)),i=t.getIdxbyList(n,0,[1]),o=t.getV(n,i).substring(2);return u.crypto.Util.hashHex(o,"sha1")};pe.getJWK=function(r,e,t,n,i){var o,s={},a,c=u.crypto.Util.hashHex;if(typeof r=="string")o=pe.getKey(r),r.indexOf("CERTIFICATE")!=-1&&(a=Ze(r));else if(typeof r=="object")r instanceof Z?(o=r.getPublicKey(),a=r.hex):o=r;else throw new Error("unsupported keyinfo type");if(o instanceof se&&o.isPrivate)s.kty="RSA",s.n=ft(o.n.toString(16)),s.e=ft(o.e.toString(16)),s.d=ft(o.d.toString(16)),s.p=ft(o.p.toString(16)),s.q=ft(o.q.toString(16)),s.dp=ft(o.dmp1.toString(16)),s.dq=ft(o.dmq1.toString(16)),s.qi=ft(o.coeff.toString(16));else if(o instanceof se&&o.isPublic)s.kty="RSA",s.n=ft(o.n.toString(16)),s.e=ft(o.e.toString(16));else if(o instanceof u.crypto.ECDSA&&o.isPrivate){var l=o.getShortNISTPCurveName();if(l!=="P-256"&&l!=="P-384"&&l!=="P-521")throw new Error("unsupported curve name for JWT: "+l);var p=o.getPublicKeyXYHex();s.kty="EC",s.crv=l,s.x=ft(p.x),s.y=ft(p.y),s.d=ft(o.prvKeyHex)}else if(o instanceof u.crypto.ECDSA&&o.isPublic){var l=o.getShortNISTPCurveName();if(l!=="P-256"&&l!=="P-384"&&l!=="P-521")throw new Error("unsupported curve name for JWT: "+l);var p=o.getPublicKeyXYHex();s.kty="EC",s.crv=l,s.x=ft(p.x),s.y=ft(p.y)}if(s.kty==null)throw new Error("unsupported keyinfo");return!o.isPrivate&&e!=!0&&(s.kid=u.jws.JWS.getJWKthumbprint(s)),a!=null&&t!=!0&&(s.x5c=[Sn(a)]),a!=null&&n!=!0&&(s.x5t=Es(Sn(c(a,"sha1")))),a!=null&&i!=!0&&(s["x5t#S256"]=Es(Sn(c(a,"sha256")))),s};pe.getJWKFromKey=function(r){return pe.getJWK(r,!0,!0,!0,!0)};se.getPosArrayOfChildrenFromHex=function(r){return V.getChildIdx(r,0)};se.getHexValueArrayOfChildrenFromHex=function(r){var e=V,t=e.getV,h=se.getPosArrayOfChildrenFromHex(r),n=t(r,h[0]),i=t(r,h[1]),o=t(r,h[2]),s=t(r,h[3]),a=t(r,h[4]),c=t(r,h[5]),l=t

53(r,h[6]),p=t(r,h[7]),g=t(r,h[8]),h=new Array;return h.push(n,i,o,s,a,c,l,p,g),h};se.prototype.readPrivateKeyFromPEMString=function(r){var e=Ze(r),t=se.getHexValueArrayOfChildrenFromHex(e);this.setPrivateEx(t[1],t[2],t[3],t[4],t[5],t[6],t[7],t[8])};se.prototype.readPKCS5PrvKeyHex=function(r){var e=se.getHexValueArrayOfChildrenFromHex(r);this.setPrivateEx(e[1],e[2],e[3],e[4],e[5],e[6],e[7],e[8])};se.prototype.readPKCS8PrvKeyHex=function(r){var e,t,n,i,o,s,a,c,l=V,p=l.getVbyListEx;if(l.isASN1HEX(r)===!1)throw new Error("not ASN.1 hex string");try{e=p(r,0,[2,0,1],"02"),t=p(r,0,[2,0,2],"02"),n=p(r,0,[2,0,3],"02"),i=p(r,0,[2,0,4],"02"),o=p(r,0,[2,0,5],"02"),s=p(r,0,[2,0,6],"02"),a=p(r,0,[2,0,7],"02"),c=p(r,0,[2,0,8],"02")}catch{throw new Error("malformed PKCS#8 plain RSA private key")}this.setPrivateEx(e,t,n,i,o,s,a,c)};se.prototype.readPKCS5PubKeyHex=function(r){var e=V,t=e.getV;if(e.isASN1HEX(r)===!1)throw new Error("keyHex is not ASN.1 hex string");var n=e.getChildIdx(r,0);if(n.length!==2||r.substr(n[0],2)!=="02"||r.substr(n[1],2)!=="02")throw new Error("wrong hex for PKCS#5 public key");var i=t(r,n[0]),o=t(r,n[1]);this.setPublic(i,o)};se.prototype.readPKCS8PubKeyHex=function(r){var e=V;if(e.isASN1HEX(r)===!1)throw new Error("not ASN.1 hex string");if(e.getTLVbyListEx(r,0,[0,0])!=="06092a864886f70d010101")throw new Error("not PKCS8 RSA public key");var t=e.getTLVbyListEx(r,0,[1,0]);this.readPKCS5PubKeyHex(t)};se.prototype.readCertPubKeyHex=function(r,e){var t,n;t=new Z,t.readCertHex(r),n=t.getPublicKeyHex(),this.readPKCS8PubKeyHex(n)};var IF=new RegExp("[^0-9a-f]","gi");function gm(r,e){for(var t="",n=e/4-r.length,i=0;i<n;i++)t=t+"0";return t+r}se.prototype.sign=function(r,e){var t=function(i){return u.crypto.Util.hashString(i,e)},n=t(r);return this.signWithMessageHash(n,e)};se.prototype.signWithMessageHash=function(r,e){var t=u.crypto.Util.getPaddedDigestInfoHex(r,e,this.n.bitLength()),n=qt(t,16),i=this.doPrivate(n),o=i.toString(16);return gm(o,this.n.bitLength())};function mm(r,e,t){for(var n="",i=0;n.length<e;)n+=Vt(t(Vr(r+String.fromCharCode.apply(String,[(i&4278190080)>>24,(i&16711680)>>16,(i&65280)>>8,i&255])))),i+=1;return n}se.prototype.signPSS=function(r,e,t){var n=function(o){return u.crypto.Util.hashHex(o,e)},i=n(Vr(r));return t===void 0&&(t=-1),this.signWithMessageHashPSS(i,e,t)};se.prototype.signWithMessageHashPSS=function(r,e,t){var n=Vt(r),i=n.length,o=this.n.bitLength()-1,s=Math.ceil(o/8),a,c=function(y){return u.crypto.Util.hashHex(y,e)};if(t===-1||t===void 0)t=i;else if(t===-2)t=s-i-2;else if(t<-2)throw new Error("invalid salt length");if(s<i+t+2)throw new Error("data too long");var l="";t>0&&(l=new Array(t),new bs().nextBytes(l),l=String.fromCharCode.apply(String,l));var p=Vt(c(Vr("\0\0\0\0\0\0\0\0"+n+l))),g=[];for(a=0;a<s-t-i-2;a+=1)g[a]=0;var h=String.fromCharCode.apply(String,g)+"�"+l,d=mm(p,h.length,c),m=[];for(a=0;a<h.length;a+=1)m[a]=h.charCodeAt(a)^d.charCodeAt(a);var f=65280>>8*s-o&255;for(m[0]&=~f,a=0;a<i;

53a++)m.push(p.charCodeAt(a));return m.push(188),gm(this.doPrivate(new O(m)).toString(16),this.n.bitLength())};function vm(r){for(var e in u.crypto.Util.DIGESTINFOHEAD){var t=u.crypto.Util.DIGESTINFOHEAD[e],n=t.length;if(r.substring(0,n)==t){var i=[e,r.substring(n)];return i}}return[]}se.prototype.verify=function(r,e){if(e=e.toLowerCase(),e.match(/^[0-9a-f]+$/)==null)return!1;var t=qt(e,16),n=this.n.bitLength();if(t.bitLength()>n)return!1;var i=this.doPublic(t),o=i.toString(16);if(o.length+3!=n/4)return!1;var s=o.replace(/^1f+00/,""),a=vm(s);if(a.length==0)return!1;var c=a[0],l=a[1],p=function(h){return u.crypto.Util.hashString(h,c)},g=p(r);return l==g};se.prototype.verifyWithMessageHash=function(r,e){if(e.length!=Math.ceil(this.n.bitLength()/4))return!1;var t=qt(e,16);if(t.bitLength()>this.n.bitLength())return 0;var n=this.doPublic(t),i=n.toString(16).replace(/^1f+00/,""),o=vm(i);if(o.length==0)return!1;var s=o[0],a=o[1];return a==r};se.prototype.verifyPSS=function(r,e,t,n){var i=function(s){return u.crypto.Util.hashHex(s,t)},o=i(Vr(r));return n===void 0&&(n=-1),this.verifyWithMessageHashPSS(o,e,t,n)};se.prototype.verifyWithMessageHashPSS=function(r,e,t,n){if(e.length!=Math.ceil(this.n.bitLength()/4))return!1;var i=new O(e,16),o=function(S){return u.crypto.Util.hashHex(S,t)},s=Vt(r),a=s.length,c=this.n.bitLength()-1,l=Math.ceil(c/8),p;if(n===-1||n===void 0)n=a;else if(n===-2)n=l-a-2;else if(n<-2)throw new Error("invalid salt length");if(l<a+n+2)throw new Error("data too long");var g=this.doPublic(i).toByteArray();for(p=0;p<g.length;p+=1)g[p]&=255;for(;g.length<l;)g.unshift(0);if(g[l-1]!==188)throw new Error("encoded message does not end in 0xbc");g=String.fromCharCode.apply(String,g);var h=g.substr(0,l-a-1),d=g.substr(h.length,a),m=65280>>8*l-c&255;if((h.charCodeAt(0)&m)!==0)throw new Error("bits beyond keysize not zero");var f=mm(d,h.length,o),y=[];for(p=0;p<h.length;p+=1)y[p]=h.charCodeAt(p)^f.charCodeAt(p);y[0]&=~m;var v=l-a-n-2;for(p=0;p<v;p+=1)if(y[p]!==0)throw new Error("leftmost octets not zero");if(y[v]!==1)throw new Error("0x01 marker not found");return d===Vt(o(Vr("\0\0\0\0\0\0\0\0"+s+String.fromCharCode.apply(String,y.slice(-n)))))};se.SALT_LEN_HLEN=-1;se.SALT_LEN_MAX=-2;se.SALT_LEN_RECOVER=-2;function Z(r){var e=V,t=e.getChildIdx,n=e.getV,i=e.dump,o=e.parse,s=e.getTLV,a=e.getVbyList,c=e.getVbyListEx,l=e.getTLVbyList,p=e.getTLVbyListEx,g=e.getIdxbyList,h=e.getIdxbyListEx,d=e.getVidx,m=e.getInt,f=e.oidname,y=e.hextooidstr,v=Z,S=Ze,A,T=Error;try{A=u.asn1.x509.AlgorithmIdentifier.PSSNAME2ASN1TLV}catch{}this.HEX2STAG={"0c":"utf8",13:"prn",16:"ia5","1a":"vis","1e":"bmp"},this.hex=null,this.version=0,this.foffset=0,this.aExtInfo=null,this.getVersion=function(){if(this.hex===null||this.version!==0)return this.version;var C=l(this.hex,0,[0,0]);if(C.substr(0,2)=="a0"){var E=l(C,0,[0]),I=m(E,0);if(I<0||2<I)throw new Error("malformed version field");return this.version=I+1,this.version}else return this.version=1,this.foffset=-1,1},this.getSerialNumberHex=function(){return c(this.hex,0,[0,0],"02")},this.getSignatureAlgorithmField=function(){var C=p(this.hex,0,[0,1]);return this.getAlgorithmIdentifierName(C)},this.getAlgorithmIdentifierName=function(C){for(var E in A)if(C===A[E])return E;return f(c(C,0,[0],"06"))},this.getIssuer=function(C,E){return this.getX500Name(this.getIssuerHex(),C,E)},this.getIssuerHex=function(){return l(this.hex,0,[0,3+this.foffset],"30")},this.getIssuerString=function(){var C=this.getIssuer();return C.str},this.getSubject=function(C,E){return this.getX500Name(this.getSubjectHex(),C,E)},this.getSubjectHex=function(){return l(this.hex,0,[0,5+this.foffset],"30")},this.getSubjectString=function(){var C=this.getSubject();return C.str},this.getNotBefore=function(){var C=a(this.hex,0,[0,4+this.foffset,0]);return C=C.replace(/(..)/g,"%$1"),C=decodeURIComponent(C),C},this.getNotAfter=function(){var C=a(this.hex,0,[0,4+this.foffset,1]);return C=C.replace(/(..)/g,"%$1"),C=decodeURIComponent(C),C},this.getPublicKeyHex=function(){return this.getSPKI()}

53,this.getSPKI=function(){return l(this.hex,0,[0,6+this.foffset],"30")},this.getSPKIValue=function(){var C=this.getSPKI();return C==null?null:a(C,0,[1],"03",!0)},this.getPublicKeyIdx=function(){return g(this.hex,0,[0,6+this.foffset],"30")},this.getPublicKeyContentIdx=function(){var C=this.getPublicKeyIdx();return g(this.hex,C,[1,0],"30")},this.getPublicKey=function(){return pe.getKey(this.getPublicKeyHex(),null,"pkcs8pub")},this.getSignatureAlgorithmName=function(){var C=l(this.hex,0,[1],"30");return this.getAlgorithmIdentifierName(C)},this.getSignatureValueHex=function(){return a(this.hex,0,[2],"03",!0)},this.verifySignature=function(C){var E=this.getSignatureAlgorithmField(),I=this.getSignatureValueHex(),R=l(this.hex,0,[0],"30"),_=new u.crypto.Signature({alg:E});return _.init(C),_.updateHex(R),_.verify(I)},this.parseExt=function(C){var E,I,R;if(C===void 0){if(R=this.hex,this.version!==3)return-1;E=g(R,0,[0,7,0],"30"),I=t(R,E)}else{R=Ze(C);var _=g(R,0,[0,3,0,0],"06");if(n(R,_)!="2a864886f70d01090e"){this.aExtInfo=new Array;return}E=g(R,0,[0,3,0,1,0],"30"),I=t(R,E),this.hex=R}this.aExtInfo=new Array;for(var M=0;M<I.length;M++){var k={};k.critical=!1;var N=t(R,I[M]),P=0;N.length===3&&(k.critical=!0,P=1),k.oid=e.hextooidstr(a(R,I[M],[0],"06"));var F=g(R,I[M],[1+P]);k.vidx=d(R,F),this.aExtInfo.push(k)}},this.getExtInfo=function(C){var E=this.aExtInfo,I=C;if(C.match(/^[0-9.]+$/)||(I=u.asn1.x509.OID.name2oid(C)),I!==""){for(var R=0;R<E.length;R++)if(E[R].oid===I)return E[R]}},this.getCriticalExtV=function(C,E,I){if(E!=null)return[E,I];var R=this.getExtInfo(C);return R==null?[null,null]:[s(this.hex,R.vidx),R.critical]},this.getExtBasicConstraints=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("basicConstraints");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"basicConstraints"};if(E&&(R.critical=!0),C==="3000")return R;if(C==="30030101ff")return R.cA=!0,R;if(C.substr(0,12)==="30060101ff02"){var _=n(C,10),M=parseInt(_,16);return R.cA=!0,R.pathLen=M,R}throw new Error("hExtV parse error: "+C)},this.getExtNameConstraints=function(C,E){var I=this.getCriticalExtV("nameConstraints",C,E);if(C=I[0],E=I[1],C!=null){var R={extname:"nameConstraints"};E&&(R.critical=!0);for(var _=t(C,0),M=0;M<_.length;M++){for(var k=[],N=t(C,_[M]),P=0;P<N.length;P++){var F=s(C,N[P]),j=this.getGeneralSubtree(F);k.push(j)}var $=C.substr(_[M],2);$=="a0"?R.permit=k:$=="a1"&&(R.exclude=k)}return R}},this.getGeneralSubtree=function(C){var E=t(C,0),I=E.length;if(I<1||2<I)throw new Error("wrong num elements");for(var R=this.getGeneralName(s(C,E[0])),_=1;_<I;_++){var M=C.substr(E[_],2),k=n(C,E[_]),N=parseInt(k,16);M=="80"&&(R.min=N),M=="81"&&(R.max=N)}return R},this.getExtKeyUsage=function(C,E){var I=this.getCriticalExtV("keyUsage",C,E);if(C=I[0],E=I[1],C!=null){var R={extname:"keyUsage"};return E&&(R.critical=!0),R.names=this.getExtKeyUsageString(C).split(","),R}},this.getExtKeyUsageBin=function(C){if(C===void 0){var E=this.getExtInfo("keyUsage");if(E===void 0)return"";C=s(this.hex,E.vidx)}if(C.length!=8&&C.length!=10)throw new Error("malformed key usage value: "+C);var I="000000000000000"+parseInt(C.substr(6),16).toString(2);return C.length==8&&(I=I.slice(-8)),C.length==10&&(I=I.slice(-16)),I=I.replace(/0+$/,""),I==""&&(I="0"),I},this.getExtKeyUsageString=function(C){for(var E=this.getExtKeyUsageBin(C),I=new Array,R=0;R<E.length;R++)E.substr(R,1)=="1"&&I.push(Z.KEYUSAGE_NAME[R]);return I.join(",")},this.getExtSubjectKeyIdentifier=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("subjectKeyIdentifier");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"subjectKeyIdentifier"};E&&(R.critical=!0);var _=n(C,0);return R.kid={hex:_},R},this.getExtAuthorityKeyIdentifier=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("authorityKeyIdentifier");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"authorityKeyIdentifier"};E&&(R.critical=!0);for(var _=t(C,0),M=0;M<_.length;M++){var k=C.substr(_[M],2);

53if(k==="80"&&(R.kid={hex:n(C,_[M])}),k==="a1"){var N=s(C,_[M]),P=this.getGeneralNames(N);R.issuer=P[0].dn}k==="82"&&(R.sn={hex:n(C,_[M])})}return R},this.getExtExtKeyUsage=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("extKeyUsage");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"extKeyUsage",array:[]};E&&(R.critical=!0);for(var _=t(C,0),M=0;M<_.length;M++)R.array.push(f(n(C,_[M])));return R},this.getExtExtKeyUsageName=function(){var C=this.getExtInfo("extKeyUsage");if(C===void 0)return C;var E=new Array,I=s(this.hex,C.vidx);if(I==="")return E;for(var R=t(I,0),_=0;_<R.length;_++)E.push(f(n(I,R[_])));return E},this.getExtSubjectAltName=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("subjectAltName");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"subjectAltName",array:[]};return E&&(R.critical=!0),R.array=this.getGeneralNames(C),R},this.getExtIssuerAltName=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("issuerAltName");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"issuerAltName",array:[]};return E&&(R.critical=!0),R.array=this.getGeneralNames(C),R},this.getGeneralNames=function(C){for(var E=t(C,0),I=[],R=0;R<E.length;R++){var _=this.getGeneralName(s(C,E[R]));_!==void 0&&I.push(_)}return I},this.getGeneralName=function(C){var E=C.substr(0,2),I=n(C,0),R=Vt(I);if(E=="81")return{rfc822:R};if(E=="82")return{dns:R};if(E=="86")return{uri:R};if(E=="87")return{ip:jl(I)};if(E=="a4")return{dn:this.getX500Name(I)};if(E=="a0")return{other:this.getOtherName(C)}},this.getExtSubjectAltName2=function(){var C,E,I,R=this.getExtInfo("subjectAltName");if(R===void 0)return R;for(var _=new Array,M=s(this.hex,R.vidx),k=t(M,0),N=0;N<k.length;N++)I=M.substr(k[N],2),C=n(M,k[N]),I==="81"&&(E=ke(C),_.push(["MAIL",E])),I==="82"&&(E=ke(C),_.push(["DNS",E])),I==="84"&&(E=Z.hex2dn(C,0),_.push(["DN",E])),I==="86"&&(E=ke(C),_.push(["URI",E])),I==="87"&&(E=jl(C),_.push(["IP",E]));return _},this.getExtCRLDistributionPoints=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("cRLDistributionPoints");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"cRLDistributionPoints",array:[]};E&&(R.critical=!0);for(var _=t(C,0),M=0;M<_.length;M++){var k=s(C,_[M]);R.array.push(this.getDistributionPoint(k))}return R},this.getDistributionPoint=function(C){for(var E={},I=t(C,0),R=0;R<I.length;R++){var _=C.substr(I[R],2),M=s(C,I[R]);_=="a0"&&(E.dpname=this.getDistributionPointName(M))}return E},this.getDistributionPointName=function(C){for(var E={},I=t(C,0),R=0;R<I.length;R++){var _=C.substr(I[R],2),M=s(C,I[R]);_=="a0"&&(E.full=this.getGeneralNames(M))}return E},this.getExtCRLDistributionPointsURI=function(){var C=this.getExtCRLDistributionPoints();if(C==null)return C;for(var E=C.array,I=[],R=0;R<E.length;R++)try{E[R].dpname.full[0].uri!=null&&I.push(E[R].dpname.full[0].uri)}catch{}return I},this.getExtAIAInfo=function(){var C=this.getExtInfo("authorityInfoAccess");if(C===void 0)return C;for(var E={ocsp:[],caissuer:[]},I=t(this.hex,C.vidx),R=0;R<I.length;R++){var _=a(this.hex,I[R],[0],"06"),M=a(this.hex,I[R],[1],"86");_==="2b06010505073001"&&E.ocsp.push(ke(M)),_==="2b06010505073002"&&E.caissuer.push(ke(M))}return E},this.getExtAuthorityInfoAccess=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("authorityInfoAccess");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"authorityInfoAccess",array:[]};E&&(R.critical=!0);for(var _=t(C,0),M=0;M<_.length;M++){var k=c(C,_[M],[0],"06"),N=a(C,_[M],[1],"86"),P=ke(N);if(k=="2b06010505073001")R.array.push({ocsp:P});else if(k=="2b06010505073002")R.array.push({caissuer:P});else throw new Error("unknown method: "+k)}return R},this.getExtCertificatePolicies=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("certificatePolicies");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"certificatePolicies",array:[]};E&&(R.critical=!0);for(var _=t(C,0),M=0;M<_.length;M++){var k=s(C,_[M]),N=this.getPolicyInformation(k);R.array.push(N)}return R},this.getPolicyInformation=function(C){var E={},I=a(C,0,[0],"06");E.policyoid=f(I);var R=h(C,0,[1],"30");if(R!=-1){E.array=[];for(var _=t(C,R),M=0;M<_.length;M++){var k=s(C,_[M]),N=this.getPolicyQualifierInfo(k);E.array.push(N)}}return E},this.getOtherName=function(C){var E={},I=t(C,0),R=a(C,I[0],[],"06"),_=a(C,I[1],[]);return E.oid=f(R),E.value=o(_),E},this.getPolicyQualifierInfo=function(C){var E={},I=a(C,0,[0],"06");

53if(I==="2b06010505070201"){var R=c(C,0,[1],"16");E.cps=Vt(R)}else if(I==="2b06010505070202"){var _=l(C,0,[1],"30");E.unotice=this.getUserNotice(_)}return E},this.getUserNotice=function(C){var E=null,I={};try{E=e.parse(C);var R=this._asn1ToUnotice(E);return R}catch{return}},this._asn1ToUnotice=function(C){try{for(var E={},I=Ne(C,"seq"),R=0;R<I.length;R++){var _=this._asn1ToNoticeRef(I[R]);_!=null&&(E.noticeref=_);var M=this.asn1ToDisplayText(I[R]);M!=null&&(E.exptext=M)}return Object.keys(E).length>0?E:void 0}catch{return}},this._asn1ToNoticeRef=function(C){try{for(var E={},I=Ne(C,"seq"),R=0;R<I.length;R++){var _=this._asn1ToNoticeNum(I[R]);_!=null&&(E.noticenum=_);var M=this.asn1ToDisplayText(I[R]);M!=null&&(E.org=M)}return Object.keys(E).length>0?E:void 0}catch{return}},this._asn1ToNoticeNum=function(C){try{for(var E=Ne(C,"seq"),I=[],R=0;R<E.length;R++){var _=E[R];I.push(parseInt(Ne(_,"int.hex"),16))}return I}catch{return}},this.getDisplayText=function(C){var E={"0c":"utf8",16:"ia5","1a":"vis","1e":"bmp"},I={};return I.type=E[C.substr(0,2)],I.str=Vt(n(C,0)),I},this.asn1ToDisplayText=function(C){if(C.utf8str!=null)return{type:"utf8",str:C.utf8str.str};if(C.ia5str!=null)return{type:"ia5",str:C.ia5str.str};if(C.visstr!=null)return{type:"vis",str:C.visstr.str};if(C.bmpstr!=null)return{type:"bmp",str:C.bmpstr.str};if(C.prnstr!=null)return{type:"prn",str:C.prnstr.str}},this.getExtPolicyMappings=function(C,E){var I=this.getCriticalExtV("policyMappings",C,E);if(C=I[0],E=I[1],C!=null){var R={extname:"policyMappings"};E&&(R.critical=!0);try{for(var _=o(C),M=_.seq,k=[],N=0;N<M.length;N++){var P=M[N].seq;k.push([P[0].oid,P[1].oid])}R.array=k}catch{throw new T("malformed policyMappings")}return R}},this.getExtPolicyConstraints=function(C,E){var I=this.getCriticalExtV("policyConstraints",C,E);if(C=I[0],E=I[1],C!=null){var R={extname:"policyConstraints"};E&&(R.critical=!0);var _=o(C);try{for(var M=_.seq,k=0;k<M.length;k++){var N=M[k].tag;N.explicit==!1&&(N.tag=="80"&&(R.reqexp=parseInt(N.hex,16)),N.tag=="81"&&(R.inhibit=parseInt(N.hex,16)))}}catch{return new T("malformed policyConstraints value")}return R}},this.getExtInhibitAnyPolicy=function(C,E){var I=this.getCriticalExtV("inhibitAnyPolicy",C,E);if(C=I[0],E=I[1],C!=null){var R={extname:"inhibitAnyPolicy"};E&&(R.critical=!0);var _=m(C,0);return _==-1?new T("wrong value"):(R.skip=_,R)}},this.getExtCRLNumber=function(C,E){var I={extname:"cRLNumber"};if(E&&(I.critical=!0),C.substr(0,2)=="02")return I.num={hex:n(C,0)},I;throw new T("hExtV parse error: "+C)},this.getExtCRLReason=function(C,E){var I={extname:"cRLReason"};if(E&&(I.critical=!0),C.substr(0,2)=="0a")return I.code=parseInt(n(C,0),16),I;throw new Error("hExtV parse error: "+C)},this.getExtOcspNonce=function(C,E){var I={extname:"ocspNonce"};E&&(I.critical=!0);var R=n(C,0);return I.hex=R,I},this.getExtOcspNoCheck=function(C,E){var I={extname:"ocspNoCheck"};return E&&(I.critical=!0),I},this.getExtAdobeTimeStamp=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("adobeTimeStamp");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"adobeTimeStamp"};E&&(R.critical=!0);var _=t(C,0);if(_.length>1){var M=s(C,_[1]),k=this.getGeneralName(M);k.uri!=null&&(R.uri=k.uri)}if(_.length>2){var N=s(C,_[2]);N=="0101ff"&&(R.reqauth=!0),N=="010100"&&(R.reqauth=!1)}return R},this.getExtSubjectDirectoryAttributes=function(C,E){if(C===void 0&&E===void 0){var I=this.getExtInfo("subjectDirectoryAttributes");if(I===void 0)return;C=s(this.hex,I.vidx),E=I.critical}var R={extname:"subjectDirectoryAttributes"};E&&(R.critical=!0);try{for(var _=o(C),M=[],k=0;k<_.seq.length;k++){var N=_.seq[k],P=Ne(N,"seq.0.oid"),F=Ne(N,"seq.1.set");if(P==null||F==null)throw"error";M.push({attr:P,array:F})}return R.array=M,R}catch{throw new Error("malformed subjectDirectoryAttributes extension value")}};var b=function(C){var E={};try{var I=C.seq[0].oid,R=u.asn1.x509.OID.name2oid(I);E.type=u.asn1.x509.OID.oid2atype(R);var _=C.seq[1];if(_.utf8str!=null)E.ds="utf8",E.value=_.utf8str.str;else if(_.numstr!=null)E.ds="num",E.value=_.numstr.str;else if(_.telstr!=null)E.ds="tel",E.value=_.telstr.str;

53else if(_.prnstr!=null)E.ds="prn",E.value=_.prnstr.str;else if(_.ia5str!=null)E.ds="ia5",E.value=_.ia5str.str;else if(_.visstr!=null)E.ds="vis",E.value=_.visstr.str;else if(_.bmpstr!=null)E.ds="bmp",E.value=_.bmpstr.str;else throw"error";return E}catch{throw new Erorr("improper ASN.1 parsed AttrTypeAndValue")}},D=function(C){try{return C.set.map(function(E){return b(E)})}catch(E){throw new Error("improper ASN.1 parsed RDN: "+E)}},B=function(C){try{return C.seq.map(function(E){return D(E)})}catch(E){throw new Error("improper ASN.1 parsed X500Name: "+E)}};this.getX500NameRule=function(C){for(var E=!0,I=!0,R=!1,_="",M="",k=null,N=[],P=0;P<C.length;P++)for(var F=C[P],j=0;j<F.length;j++)N.push(F[j]);for(var P=0;P<N.length;P++){var $=N[P],Q=$.ds,oe=$.value,ee=$.type;if(_+=":"+Q,Q!="prn"&&Q!="utf8"&&Q!="ia5")return"mixed";if(Q=="ia5"){if(ee!="CN")return"mixed";if(u.lang.String.isMail(oe))continue;return"mixed"}if(ee=="C"){if(Q=="prn")continue;return"mixed"}if(M+=":"+Q,k==null)k=Q;else if(k!==Q)return"mixed"}return k??"prn"},this.getAttrTypeAndValue=function(C){var E=o(C);return b(E)},this.getRDN=function(C){var E=o(C);return D(E)},this.getX500NameArray=function(C){var E=o(C);return B(E)},this.getX500Name=function(C,E,I){var R=this.getX500NameArray(C),_=this.dnarraytostr(R),M={str:_};return M.array=R,I==!0&&(M.hex=C),E==!0&&(M.canon=this.c14nRDNArray(R)),M},this.readCertPEM=function(C){this.readCertHex(S(C))},this.readCertHex=function(C){this.hex=C,this.getVersion();try{g(this.hex,0,[0,7],"a3"),this.parseExt()}catch{}},this.getParam=function(C){var E={};return C==null&&(C={}),E.version=this.getVersion(),E.serial={hex:this.getSerialNumberHex()},E.sigalg=this.getSignatureAlgorithmField(),E.issuer=this.getIssuer(C.dncanon,C.dnhex),E.notbefore=this.getNotBefore(),E.notafter=this.getNotAfter(),E.subject=this.getSubject(C.dncanon,C.dnhex),E.sbjpubkey=Tt(this.getPublicKeyHex(),"PUBLIC KEY"),this.aExtInfo!=null&&this.aExtInfo.length>0&&(E.ext=this.getExtParamArray()),E.sighex=this.getSignatureValueHex(),C.tbshex==!0&&(E.tbshex=l(this.hex,0,[0])),C.nodnarray==!0&&(delete E.issuer.array,delete E.subject.array),E},this.getExtParamArray=function(C){if(C==null){var E=h(this.hex,0,[0,"[3]"]);E!=-1&&(C=p(this.hex,0,[0,"[3]",0],"30"))}for(var I=[],R=t(C,0),_=0;_<R.length;_++){var M=s(C,R[_]),k=this.getExtParam(M);k!=null&&I.push(k)}return I},this.getExtParam=function(C){var E={},I=t(C,0),R=I.length;if(R!=2&&R!=3)throw new Error("wrong number elements in Extension: "+R+" "+C);var _=y(a(C,0,[0],"06")),M=!1;R==3&&l(C,0,[1])=="0101ff"&&(M=!0);var k=l(C,0,[R-1,0]),N=void 0;if(_=="2.5.29.14"?N=this.getExtSubjectKeyIdentifier(k,M):_=="2.5.29.15"?N=this.getExtKeyUsage(k,M):_=="2.5.29.17"?N=this.getExtSubjectAltName(k,M):_=="2.5.29.18"?N=this.getExtIssuerAltName(k,M):_=="2.5.29.19"?N=this.getExtBasicConstraints(k,M):_=="2.5.29.30"?N=this.getExtNameConstraints(k,M):_=="2.5.29.31"?N=this.getExtCRLDistributionPoints(k,M):_=="2.5.29.32"?N=this.getExtCertificatePolicies(k,M):_=="2.5.29.33"?N=this.getExtPolicyMappings(k,M):_=="2.5.29.35"?N=this.getExtAuthorityKeyIdentifier(k,M):_=="2.5.29.36"?N=this.getExtPolicyConstraints(k,M):_=="2.5.29.37"?N=this.getExtExtKeyUsage(k,M):_=="2.5.29.54"?N=this.getExtInhibitAnyPolicy(k,M):_=="1.3.6.1.5.5.7.1.1"?N=this.getExtAuthorityInfoAccess(k,M):_=="2.5.29.20"?N=this.getExtCRLNumber(k,M):_=="2.5.29.21"?N=this.getExtCRLReason(k,M):_=="2.5.29.9"?N=this.getExtSubjectDirectoryAttributes(k,M):_=="1.3.6.1.5.5.7.48.1.2"?N=this.getExtOcspNonce(k,M):_=="1.3.6.1.5.5.7.48.1.5"?N=this.getExtOcspNoCheck(k,M):_=="1.2.840.113583.1.1.9.1"?N=this.getExtAdobeTimeStamp(k,M):Z.EXT_PARSER[_]!=null&&(N=Z.EXT_PARSER[_](_,M,k)),N!=null)return N;var P={extname:_,extn:k};try{P.extn=o(k)}catch{}return M&&(P.critical=!0),P},this.findExt=function(C,E){for(var I=0;I<C.length;I++)if(C[I].extname==E)return C[I];return null},this.updateExtCDPFullURI=function(C,E){var I=this.findExt(C,"cRLDistributionPoints");if(I!=null&&I.array!=null){for(var R=I.array,_=0;_<R.length;_++)if(R[_].dpname!=null&&R[_].dpname.full!=null)for(var M=R[_].dpname.full,k=0;k<M.length;k++){var N=M[_];N.uri!=null&&(N.uri=E)}}},this.updateExtAIAOCSP=function(C,E){var I=this.findExt(C,"authorityInfoAccess");if(I!=null&&I.array!=null)for(var R=I.array,_=0;_<R.length;_++)R[_].ocsp!=null&&(R[_].ocsp=E)},this.updateExtAIACAIssuer=function(C,E){var I=this.findExt(C,"authorityInfoAccess");if(I!=null&&I.array!=null)for(var R=I.array,_=0;_<R.length;_++)R[_].caissuer!=null&&(R[_].caissuer=E)},this.dnarraytostr=function(C){function E(R){return R.map(function(_){return I(_).replace(/\+/,"\\+")}).join("+")}function I(R){return R.type+"="+R.value}return"/"+C.map(function(R){return E(R).replace(/\//,"\\/")}).join("/")},this.setCanonicalizedDN=function(C){var E;

53if(C.str!=null&&C.array==null){var I=new u.asn1.x509.X500Name({str:C.str}),R=I.tohex();E=this.getX500NameArray(R)}else E=C.array;C.canon==null&&(C.canon=this.c14nRDNArray(E))},this.c14nRDNArray=function(C){for(var E=[],I=0;I<C.length;I++){for(var R=C[I],_=[],M=0;M<R.length;M++){var k=R[M],N=k.value;N=N.replace(/^\s*/,""),N=N.replace(/\s*$/,""),N=N.replace(/\s+/g," "),N=N.toLowerCase(),_.push(k.type.toLowerCase()+"="+N)}E.push(_.join("+"))}return"/"+E.join("/")},this.getInfo=function(){var C=function(Fe){for(var ve="",Ve="    ",Ge=`
54`,rt=Fe.array,It=0;It<rt.length;It++){var xe=rt[It];if(xe.dn!=null&&(ve+=Ve+"dn: "+xe.dn.str+Ge),xe.ip!=null&&(ve+=Ve+"ip: "+xe.ip+Ge),xe.rfc822!=null&&(ve+=Ve+"rfc822: "+xe.rfc822+Ge),xe.dns!=null&&(ve+=Ve+"dns: "+xe.dns+Ge),xe.uri!=null&&(ve+=Ve+"uri: "+xe.uri+Ge),xe.other!=null){var Dt=xe.other.oid,_s=JSON.stringify(xe.other.value).replace(/\"/g,"");ve+=Ve+"other: "+Dt+"="+_s+Ge}}return ve=ve.replace(/\n$/,""),ve},E=function(Fe){for(var ve="",Ve=Fe.array,Ge=0;Ge<Ve.length;Ge++){var rt=Ve[Ge];if(ve+="    policy oid: "+rt.policyoid+`
55`,rt.array!==void 0)for(var It=0;It<rt.array.length;It++){var xe=rt.array[It];xe.cps!==void 0&&(ve+="    cps: "+xe.cps+`
56`)}}return ve},I=function(Fe){for(var ve="",Ve=Fe.array,Ge=0;Ge<Ve.length;Ge++){var rt=Ve[Ge];try{rt.dpname.full[0].uri!==void 0&&(ve+="    "+rt.dpname.full[0].uri+`
57`)}catch{}try{rt.dname.full[0].dn.hex!==void 0&&(ve+="    "+Z.hex2dn(rt.dpname.full[0].dn.hex)+`
58`)}catch{}}return ve},R=function(Fe){for(var ve="",Ve=Fe.array,Ge=0;Ge<Ve.length;Ge++){var rt=Ve[Ge];rt.caissuer!==void 0&&(ve+="    caissuer: "+rt.caissuer+`
59`),rt.ocsp!==void 0&&(ve+="    ocsp: "+rt.ocsp+`
60`)}return ve},_=Z,M,k,N;if(M=`Basic Fields
61`,M+="  serial number: "+this.getSerialNumberHex()+`
62`,M+="  signature algorithm: "+this.getSignatureAlgorithmField()+`
63`,M+="  issuer: "+this.getIssuerString()+`
64`,M+="  notBefore: "+this.getNotBefore()+`
65`,M+="  notAfter: "+this.getNotAfter()+`
66`,M+="  subject: "+this.getSubjectString()+`
67`,M+=`  subject public key info: 
68`,k=this.getPublicKey(),M+="    key algorithm: "+k.type+`
69`,k.type==="RSA"&&(M+="    n="+Rd(k.n.toString(16)).substr(0,16)+`...
70`,M+="    e="+Rd(k.e.toString(16))+`
71`),N=this.aExtInfo,N!=null){M+=`X509v3 Extensions:
72`;for(var P=0;P<N.length;P++){var F=N[P],j=u.asn1.x509.OID.oid2name(F.oid);j===""&&(j=F.oid);var $="";if(F.critical===!0&&($="CRITICAL"),M+="  "+j+" "+$+`:
73`,j==="basicConstraints"){var Q=this.getExtBasicConstraints();Q.cA===void 0?M+=`    {}
74`:(M+="    cA=true",Q.pathLen!==void 0&&(M+=", pathLen="+Q.pathLen),M+=`
75`)}else if(j=="policyMappings"){var oe=this.getExtPolicyMappings().array,ee=oe.map(function(Fe){var ve=Fe;return ve[0]+":"+ve[1]}).join(", ");M+="    "+ee+`
76`}else if(j=="policyConstraints"){var me=this.getExtPolicyConstraints();M+="    ",me.reqexp!=null&&(M+=" reqexp="+me.reqexp),me.inhibit!=null&&(M+=" inhibit="+me.inhibit),M+=`
77`}else if(j=="inhibitAnyPolicy"){var me=this.getExtInhibitAnyPolicy();M+="    skip="+me.skip+`
78`}else if(j=="keyUsage")M+="    "+this.getExtKeyUsageString()+`
79`;else if(j=="subjectKeyIdentifier")M+="    "+this.getExtSubjectKeyIdentifier().kid.hex+`
80`;else if(j=="authorityKeyIdentifier"){var te=this.getExtAuthorityKeyIdentifier();te.kid!==void 0&&(M+="    kid="+te.kid.hex+`
81`)}else if(j=="extKeyUsage"){var Zt=this.getExtExtKeyUsage().array;M+="    "+Zt.join(", ")+`
82`}else if(j=="subjectAltName"){var bt=C(this.getExtSubjectAltName());M+=bt+`
83`}else if(j=="cRLDistributionPoints"){var we=this.getExtCRLDistributionPoints();M+=I(we)}else if(j=="authorityInfoAccess"){var We=this.getExtAuthorityInfoAccess();M+=R(We)}else j=="certificatePolicies"&&(M+=E(this.getExtCertificatePolicies()))}}return M+="signature algorithm: "+this.getSignatureAlgorithmName()+`
84`,M+="signature: "+this.getSignatureValueHex().substr(0,16)+`...
85`,M},typeof r=="string"&&(r.indexOf("-----BEGIN")!=-1?this.readCertPEM(r):u.lang.String.isHex(r)&&this.readCertHex(r))}Z.EXT_PARSER={};Z.registExtParser=function(r,e){Z.EXT_PARSER[r]=e};Z.hex2dn=function(r,e){e===void 0&&(e=0);var t=new Z,n=V.getTLV(r,e),i=t.getX500Name(r);return i.str};Z.hex2rdn=function(r,e){if(e===void 0&&(e=0),r.substr(e,2)!=="31")throw new Error("malformed RDN");for(var t=new Array,n=V.getChildIdx(r,e),i=0;i<n.length;i++)t.push(Z.hex2attrTypeValue(r,n[i]));return t=t.map(function(o){return o.replace("+","\\+")}),t.join("+")};Z.hex2attrTypeValue=function(r,e){var t=V,n=t.getV;if(e===void 0&&(e=0),r.substr(e,2)!=="30")throw new Error("malformed attribute type and value");var i=t.getChildIdx(r,e);i.length!==2||r.substr(i[0],2);var o=n(r,i[0]),s=u.asn1.ASN1Util.oidHexToInt(o),a=u.asn1.x509.OID.oid2atype(s),c=n(r,i[1]),l=Vt(c);return a+"="+l};Z.getPublicKeyFromCertHex=function(r){var e=new Z;return e.readCertHex(r),e.getPublicKey()};Z.getPublicKeyFromCertPEM=function(r){var e=new Z;return e.readCertPEM(r),e.getPublicKey()};Z.getPublicKeyInfoPropOfCertPEM=function(r){var e=V,t=e.getVbyList,n={},i,o,s;return n.algparam=null,i=new Z,i.readCertPEM(r),o=i.getPublicKeyHex(),n.keyhex=t(o,0,[1],"03").substr(2),n.algoid=t(o,0,[0,0],"06"),n.algoid==="2a8648ce3d0201"&&(n.algparam=t(o,0,[0,1],"06")),n};Z.KEYUSAGE_NAME=["digitalSignature","nonRepudiation","keyEncipherment","dataEncipherment","keyAgreement","keyCertSign","cRLSign","encipherOnly","decipherOnly"];var JC=function(r){var e=u,t=e.lang.String.isHex,n=V,i=n.getV,o=n.getTLV,s=n.getVbyList,a=n.getTLVbyList,c=n.getTLVbyListEx,l=n.getIdxbyList,p=n.getIdxbyListEx,g=n.getChildIdx,h=new Z;this.hex=null,this.posSigAlg=null,this.posRevCert=null,this.parsed=null,this._setPos=function(){var d=l(this.hex,0,[0,0]),m=this.hex.substr(d,2);

85if(m=="02")this.posSigAlg=1;else if(m=="30")this.posSigAlg=0;else throw new Error("malformed 1st item of TBSCertList: "+m);var f=l(this.hex,0,[0,this.posSigAlg+3]),y=this.hex.substr(f,2);if(y=="17"||y=="18"){var v,S;v=l(this.hex,0,[0,this.posSigAlg+4]),this.posRevCert=null,v!=-1&&(S=this.hex.substr(v,2),S=="30"&&(this.posRevCert=this.posSigAlg+4))}else if(y=="30")this.posRevCert=this.posSigAlg+3;else if(y=="a0")this.posRevCert=null;else throw new Error("malformed nextUpdate or revCert tag: "+y)},this.getVersion=function(){return this.posSigAlg==0?null:parseInt(s(this.hex,0,[0,0],"02"),16)+1},this.getSignatureAlgorithmField=function(){var d=a(this.hex,0,[0,this.posSigAlg],"30");return h.getAlgorithmIdentifierName(d)},this.getIssuer=function(){return h.getX500Name(this.getIssuerHex())},this.getIssuerHex=function(){return a(this.hex,0,[0,this.posSigAlg+1],"30")},this.getThisUpdate=function(){var d=s(this.hex,0,[0,this.posSigAlg+2]);return result=Vt(d)},this.getNextUpdate=function(){var d=l(this.hex,0,[0,this.posSigAlg+3]),m=this.hex.substr(d,2);return m!="17"&&m!="18"?null:Vt(i(this.hex,d))},this.getRevCertArray=function(){if(this.posRevCert==null)return null;for(var d=[],m=l(this.hex,0,[0,this.posRevCert]),f=g(this.hex,m),y=0;y<f.length;y++){var v=o(this.hex,f[y]);d.push(this.getRevCert(v))}return d},this.getRevCert=function(d){var m={},f=g(d,0);return m.sn={hex:s(d,0,[0],"02")},m.date=Vt(s(d,0,[1])),f.length==3&&(m.ext=h.getExtParamArray(a(d,0,[2]))),m},this.findRevCert=function(d){var m=new Z(d),f=m.getSerialNumberHex();return this.findRevCertBySN(f)},this.findRevCertBySN=function(d){if(this.parsed==null&&this.getParam(),this.parsed.revcert==null)return null;for(var m=this.parsed.revcert,f=0;f<m.length;f++)if(d==m[f].sn.hex)return m[f];return null},this.getSignatureValueHex=function(){return s(this.hex,0,[2],"03",!0)},this.verifySignature=function(d){var m=this.getSignatureAlgorithmField(),f=this.getSignatureValueHex(),y=a(this.hex,0,[0],"30"),v=new u.crypto.Signature({alg:m});return v.init(d),v.updateHex(y),v.verify(f)},this.getParam=function(d){var m={},f=this.getVersion();f!=null&&(m.version=f),m.sigalg=this.getSignatureAlgorithmField(),m.issuer=this.getIssuer(),m.thisupdate=this.getThisUpdate();var y=this.getNextUpdate();y!=null&&(m.nextupdate=y);var v=this.getRevCertArray();v!=null&&(m.revcert=v);var S=p(this.hex,0,[0,"[0]"]);if(S!=-1){var A=c(this.hex,0,[0,"[0]",0]);m.ext=h.getExtParamArray(A)}return m.sighex=this.getSignatureValueHex(),this.parsed=m,typeof d=="object"&&(d.tbshex==!0&&(m.tbshex=a(this.hex,0,[0])),d.nodnarray==!0&&delete m.issuer.array),m},typeof r=="string"&&(t(r)?this.hex=r:r.match(/-----BEGIN X509 CRL/)&&(this.hex=Ze(r)),this._setPos())};(typeof u>"u"||!u)&&(u={});(typeof u.jws>"u"||!u.jws)&&(u.jws={});u.jws.JWS=function(){var r=u,e=r.jws.JWS,t=e.isSafeJSONString;this.parseJWS=function(n,i){if(!(this.parsedJWS!==void 0&&(i||this.parsedJWS.sigvalH!==void 0))){var o=n.match(/^([^.]+)\.([^.]+)\.([^.]+)$/);if(o==null)throw"JWS signature is not a form of 'Head.Payload.SigValue'.";var s=o[1],a=o[2],c=o[3],l=s+"."+a;if(this.parsedJWS={},this.parsedJWS.headB64U=s,this.parsedJWS.payloadB64U=a,this.parsedJWS.sigvalB64U=c,this.parsedJWS.si=l,!i){var p=je(c),g=qt(p,16);this.parsedJWS.sigvalH=p,this.parsedJWS.sigvalBI=g}var h=Sr(s),d=Sr(a);if(this.parsedJWS.headS=h,this.parsedJWS.payloadS=d,!t(h,this.parsedJWS,"headP"))throw"malformed JSON string for JWS Head: "+h}}};u.jws.JWS.sign=function(r,e,t,n,i){var o=u,s=o.jws,a=s.JWS,c=a.readSafeJSONString,l=a.isSafeJSONString,p=o.crypto,g=p.ECDSA,h=p.Mac,d=p.Signature,m=JSON,f,y,v;if(typeof e!="string"&&typeof e!="object")throw"spHeader must be JSON string or object: "+e;if(typeof e=="object"&&(y=e,f=m.stringify(y)),typeof e=="string"){if(f=e,!l(f))throw"JWS Head is not safe JSON string: "+f;y=c(f)}if(v=t,typeof t=="object"&&(v=m.stringify(t)),(r==""||r==null)&&y.alg!==void 0&&(r=y.alg),r!=""&&r!=null&&y.alg===void 0&&(y.alg=r,f=m.stringify(y)),r!==y.alg)throw"alg and sHeader.alg doesn't match: "+r+"!="+y.alg;var S=null;if(a.jwsalg2sigalg[r]===void 0)throw"unsupported alg name: "+r;S=a.jwsalg2sigalg[r];var A=rc(f),T=rc(v),b=A+"."+T,D="";if(S.substr(0,4)=="Hmac"){if(n===void 0)throw"mac key shall be specified for HS* alg";var B=new h({alg:S,prov:"cryptojs",pass:n});B.updateString(b),D=B.doFinal()}else if(S.indexOf("withECDSA")!=-1){var C=new d({alg:S});C.init(n,i),C.updateString(b);var E=C.sign();D=u.crypto.ECDSA.asn1SigToConcatSig(E)}

85else if(S!="none"){var C=new d({alg:S});C.init(n,i),C.updateString(b),D=C.sign()}var I=ft(D);return b+"."+I};u.jws.JWS.verify=function(r,e,t){var n=u,i=n.jws,o=i.JWS,s=o.readSafeJSONString,a=n.crypto,c=a.ECDSA,l=a.Mac,p=a.Signature,g;if(typeof se!==void 0&&(g=se),!Md(r))return!1;var h=r.split(".");if(h.length!==3)return!1;var d=h[0],m=h[1],f=d+"."+m,y=je(h[2]),v=s(Sr(h[0])),S=null,A=null;if(v.alg===void 0)throw"algorithm not specified in header";if(S=v.alg,A=S.substr(0,2),t!=null&&Object.prototype.toString.call(t)==="[object Array]"&&t.length>0){var T=":"+t.join(":")+":";if(T.indexOf(":"+S+":")==-1)throw"algorithm '"+S+"' not accepted in the list"}if(S!="none"&&e===null)throw"key shall be specified to verify.";if(typeof e=="string"&&e.indexOf("-----BEGIN ")!=-1&&(e=pe.getKey(e)),(A=="RS"||A=="PS")&&!(e instanceof g))throw"key shall be a RSAKey obj for RS* and PS* algs";if(A=="ES"&&!(e instanceof c))throw"key shall be a ECDSA obj for ES* algs";S=="none";var b=null;if(o.jwsalg2sigalg[v.alg]===void 0)throw"unsupported alg name: "+S;if(b=o.jwsalg2sigalg[S],b=="none")throw"not supported";if(b.substr(0,4)=="Hmac"){var D=null;if(e===void 0)throw"hexadecimal key shall be specified for HMAC";var B=new l({alg:b,pass:e});return B.updateString(f),D=B.doFinal(),y==D}else if(b.indexOf("withECDSA")!=-1){var C=null;try{C=c.concatSigToASN1Sig(y)}catch{return!1}var E=new p({alg:b});return E.init(e),E.updateString(f),E.verify(C)}else{var E=new p({alg:b});return E.init(e),E.updateString(f),E.verify(y)}};u.jws.JWS.parse=function(r){var e=r.split("."),t={},n,i,o;if(e.length!=2&&e.length!=3)throw"malformed sJWS: wrong number of '.' splitted elements";return n=e[0],i=e[1],e.length==3&&(o=e[2]),t.headerObj=u.jws.JWS.readSafeJSONString(Sr(n)),t.payloadObj=u.jws.JWS.readSafeJSONString(Sr(i)),t.headerPP=JSON.stringify(t.headerObj,null,"  "),t.payloadObj==null?t.payloadPP=Sr(i):t.payloadPP=JSON.stringify(t.payloadObj,null,"  "),o!==void 0&&(t.sigHex=je(o)),t};u.jws.JWS.verifyJWT=function(r,e,t){var n=u,i=n.jws,o=i.JWS,s=o.readSafeJSONString,a=o.inArray,c=o.includedArray;if(!Md(r))return!1;var l=r.split(".");if(l.length!=3)return!1;var p=l[0],g=l[1],h=p+"."+g,d=je(l[2]),m=s(Sr(p)),f=s(Sr(g));if(m.alg===void 0)return!1;if(t.alg===void 0)throw"acceptField.alg shall be specified";if(!a(m.alg,t.alg)||f.iss!==void 0&&typeof t.iss=="object"&&!a(f.iss,t.iss)||f.sub!==void 0&&typeof t.sub=="object"&&!a(f.sub,t.sub))return!1;if(f.aud!==void 0&&typeof t.aud=="object"){if(typeof f.aud=="string"){if(!a(f.aud,t.aud))return!1}else if(typeof f.aud=="object"&&!c(f.aud,t.aud))return!1}var y=i.IntDate.getNow();return t.verifyAt!==void 0&&typeof t.verifyAt=="number"&&(y=t.verifyAt),(t.gracePeriod===void 0||typeof t.gracePeriod!="number")&&(t.gracePeriod=0),!(f.exp!==void 0&&typeof f.exp=="number"&&f.exp+t.gracePeriod<y||f.nbf!==void 0&&typeof f.nbf=="number"&&y<f.nbf-t.gracePeriod||f.iat!==void 0&&typeof f.iat=="number"&&y<f.iat-t.gracePeriod||f.jti!==void 0&&t.jti!==void 0&&f.jti!==t.jti||!o.verify(r,e,t.alg))};u.jws.JWS.includedArray=function(r,e){var t=u.jws.JWS.inArray;if(r===null||typeof r!="object"||typeof r.length!="number")return!1;for(var n=0;n<r.length;n++)if(!t(r[n],e))return!1;return!0};u.jws.JWS.inArray=function(r,e){if(e===null||typeof e!="object"||typeof e.length!="number")return!1;for(var t=0;t<e.length;t++)if(e[t]==r)return!0;return!1};u.jws.JWS.jwsalg2sigalg={HS256:"HmacSHA256",HS384:"HmacSHA384",HS512:"HmacSHA512",RS256:"SHA256withRSA",RS384:"SHA384withRSA",RS512:"SHA512withRSA",ES256:"SHA256withECDSA",ES384:"SHA384withECDSA",ES512:"SHA512withECDSA",PS256:"SHA256withRSAandMGF1",PS384:"SHA384withRSAandMGF1",PS512:"SHA512withRSAandMGF1",none:"none"};u.jws.JWS.isSafeJSONString=function(r,e,t){var n=null;try{return n=nm(r),typeof n!="object"||n.constructor===Array?0:(e&&(e[t]=n),1)}catch{return 0}};u.jws.JWS.readSafeJSONString=function(r){var e=null;try{return e=nm(r),typeof e!="object"||e.constructor===Array?null:e}catch{return null}};u.jws.JWS.getEncodedSignatureValueFromJWS=function(r){var e=r.match(/^[^.]+\.[^.]+\.([^.]+)$/);if(e==null)throw"JWS signature is not a form of 'Head.Payload.SigValue'.";return e[1]};u.jws.JWS.getJWKthumbprint=function(r){if(r.kty!=="RSA"&&r.kty!=="EC"&&r.kty!=="oct")throw"unsupported algorithm for JWK Thumprint";var e="{";if(r.kty==="RSA"){if(typeof r.n!="string"||typeof r.e!="string")throw"wrong n and e value for RSA key";e+='"e":"'+r.e+'",',e+='"kty":"'+r.kty+'",',e+='"n":"'+r.n+'"}'}else if(r.kty==="EC"){if(typeof r.crv!="string"||typeof r.x!="string"||typeof r.y!="string")throw"wrong crv, x and y value for EC key";e+='"crv":"'+r.crv+'",',e+='"kty":"'+r.kty+'",',e+='"x":"'+r.x+'",',e+='"y":"'+r.y+'"}'}

85else if(r.kty==="oct"){if(typeof r.k!="string")throw"wrong k value for oct(symmetric) key";e+='"kty":"'+r.kty+'",',e+='"k":"'+r.k+'"}'}var t=Vr(e),n=u.crypto.Util.hashHex(t,"sha256"),i=ft(n);return i};u.jws.IntDate={};u.jws.IntDate.get=function(r){var e=u.jws.IntDate,t=e.getNow,n=e.getZulu;if(r=="now")return t();if(r=="now + 1hour")return t()+3600;if(r=="now + 1day")return t()+3600*24;if(r=="now + 1month")return t()+3600*24*30;if(r=="now + 1year")return t()+3600*24*365;if(r.match(/Z$/))return n(r);if(r.match(/^[0-9]+$/))return parseInt(r);throw"unsupported format: "+r};u.jws.IntDate.getZulu=function(r){return am(r)};u.jws.IntDate.getNow=function(){var r=~~(new Date/1e3);return r};u.jws.IntDate.intDate2UTCString=function(r){var e=new Date(r*1e3);return e.toUTCString()};u.jws.IntDate.intDate2Zulu=function(r){var e=new Date(r*1e3),t=("0000"+e.getUTCFullYear()).slice(-4),n=("00"+(e.getUTCMonth()+1)).slice(-2),i=("00"+e.getUTCDate()).slice(-2),o=("00"+e.getUTCHours()).slice(-2),s=("00"+e.getUTCMinutes()).slice(-2),a=("00"+e.getUTCSeconds()).slice(-2);return t+n+i+o+s+a+"Z"};(typeof u>"u"||!u)&&(u={});(typeof u.jws>"u"||!u.jws)&&(u.jws={});u.jws.JWSJS=function(){var r=u,e=r.jws,t=e.JWS,n=t.readSafeJSONString;this.aHeader=[],this.sPayload="",this.aSignature=[],this.init=function(){this.aHeader=[],this.sPayload=void 0,this.aSignature=[]},this.initWithJWS=function(i){this.init();var o=i.split(".");if(o.length!=3)throw"malformed input JWS";this.aHeader.push(o[0]),this.sPayload=o[1],this.aSignature.push(o[2])},this.addSignature=function(i,o,s,a){if(this.sPayload===void 0||this.sPayload===null)throw"there's no JSON-JS signature to add.";var c=this.aHeader.length;if(this.aHeader.length!=this.aSignature.length)throw"aHeader.length != aSignature.length";try{var l=u.jws.JWS.sign(i,o,this.sPayload,s,a),p=l.split("."),g=p[0],h=p[2];this.aHeader.push(p[0]),this.aSignature.push(p[2])}catch(d){throw this.aHeader.length>c&&this.aHeader.pop(),this.aSignature.length>c&&this.aSignature.pop(),"addSignature failed: "+d}},this.verifyAll=function(i){if(this.aHeader.length!==i.length||this.aSignature.length!==i.length)return!1;for(var o=0;o<i.length;o++){var s=i[o];if(s.length!==2)return!1;var a=this.verifyNth(o,s[0],s[1]);if(a===!1)return!1}return!0},this.verifyNth=function(i,o,s){if(this.aHeader.length<=i||this.aSignature.length<=i)return!1;var a=this.aHeader[i],c=this.aSignature[i],l=a+"."+this.sPayload+"."+c,p=!1;try{p=t.verify(l,o,s)}catch{return!1}return p},this.readJWSJS=function(i){if(typeof i=="string"){var o=n(i);if(o==null)throw"argument is not safe JSON object string";this.aHeader=o.headers,this.sPayload=o.payload,this.aSignature=o.signatures}else try{if(i.headers.length>0)this.aHeader=i.headers;else throw"malformed header";if(typeof i.payload=="string")this.sPayload=i.payload;else throw"malformed signatures";if(i.signatures.length>0)this.aSignature=i.signatures;else throw"malformed signatures"}catch(s){throw"malformed JWS-JS JSON object: "+s}},this.getJSON=function(){return{headers:this.aHeader,payload:this.sPayload,signatures:this.aSignature}},this.isEmpty=function(){return this.aHeader.length==0?1:0}};z.SecureRandom=bs;z.rng_seed_time=_d;z.BigInteger=O;z.RSAKey=se;z.ECDSA=u.crypto.ECDSA;z.DSA=u.crypto.DSA;z.Signature=u.crypto.Signature;z.MessageDigest=u.crypto.MessageDigest;z.Mac=u.crypto.Mac;z.KEYUTIL=pe;z.ASN1HEX=V;z.X509=Z;z.X509CRL=JC;z.CryptoJS=W;z.b64tohex=As;z.b64toBA=Xg;z.ECFieldElementFp=pt;z.ECPointFp=Ie;z.ECCurveFp=En;z.stoBA=im;z.BAtos=om;z.BAtohex=Wl;z.stohex=jt;z.stob64=_C;z.stob64u=NC;z.b64utos=FC;z.b64tob64u=Es;z.b64utob64=ic;z.hex2b64=Sn;z.hextob64u=ft;z.b64utohex=je;z.utf8tob64u=rc;z.b64utoutf8=Sr;z.utf8tob64=OC;z.b64toutf8=DC;z.utf8tohex=Ql;z.hextoutf8=ke;z.hextorstr=Vt;z.rstrtohex=Vr;z.hextob64=Nd;z.hextob64nl=HC;z.b64nltohex=sm;z.hextopem=Tt;z.pemtohex=Ze;z.hextoArrayBuffer=KC;z.ArrayBuffertohex=qC;z.zulutomsec=Fd;z.msectozulu=jC;z.zulutosec=am;z.zulutodate=VC;z.datetozulu=GC;z.uricmptohex=Jl;z.hextouricmp=Xl;z.ipv6tohex=bd;z.hextoipv6=Id;z.hextoip=jl;z.iptohex=Od;z.ucs2hextoutf8=Dd;z.encodeURIComponentAll=Zl;z.newline_toUnix=zC;z.newline_toDos=$C;z.hextoposhex=Rd;z.intarystrtohex=WC;z.strdiffidx=QC;z.oidtohex=um;z.hextooid=eu;z.strpad=Vl;z.bitstrtoint=dm;z.inttobitstr=fm;z.bitstrtobinstr=pm;z.binstrtobitstr=YC;z.isBase64URLDot=Md;z.namearraytobinstr=Gl;z.extendClass=U;z.foldnl=Yl;z.b64topem=LC;z.pemtob64=UC;z.timeogen=cm;z.aryval=Ne;z.inttohex=hm;z.twoscompl=oc;z.KJUR=u;z.crypto=u.crypto;z.asn1=u.asn1;z.jws=u.jws;z.lang=u.lang;z.VERSION=s0;z.VERSION_FULL=a0});var gl={};Mt(gl,{addClientCapabilitiesToClaims:()=>By,blockAPICallsBeforeInitialize:()=>fl,blockAcquireTokenInPopups:()=>cg,blockNonBrowserEnvironment:()=>dl,blockRedirectInIframe:()=>ag,blockReloadInHiddenIframes:()=>sg,clearHash:()=>za,createGuid:()=>fd,getCurrentUri:()=>Nt,getHomepage:()=>

85dd,invoke:()=>$e,invokeAsync:()=>H,isInIframe:()=>$a,isInPopup:()=>og,preconnect:()=>Qa,preflightCheck:()=>Wa,redirectPreflightCheck:()=>pl,replaceHash:()=>hd});var L={LIBRARY_NAME:"MSAL.JS",SKU:"msal.js.common",DEFAULT_AUTHORITY:"https://login.microsoftonline.com/common/",DEFAULT_AUTHORITY_HOST:"login.microsoftonline.com",DEFAULT_COMMON_TENANT:"common",ADFS:"adfs",DSTS:"dstsv2",AAD_INSTANCE_DISCOVERY_ENDPT:"https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=",CIAM_AUTH_URL:".ciamlogin.com",AAD_TENANT_DOMAIN_SUFFIX:".onmicrosoft.com",RESOURCE_DELIM:"|",NO_ACCOUNT:"NO_ACCOUNT",CLAIMS:"claims",CONSUMER_UTID:"9188040d-6c67-4c5b-b112-36a304b66dad",OPENID_SCOPE:"openid",PROFILE_SCOPE:"profile",OFFLINE_ACCESS_SCOPE:"offline_access",EMAIL_SCOPE:"email",CODE_GRANT_TYPE:"authorization_code",RT_GRANT_TYPE:"refresh_token",S256_CODE_CHALLENGE_METHOD:"S256",URL_FORM_CONTENT_TYPE:"application/x-www-form-urlencoded;charset=utf-8",AUTHORIZATION_PENDING:"authorization_pending",NOT_DEFINED:"not_defined",EMPTY_STRING:"",NOT_APPLICABLE:"N/A",NOT_AVAILABLE:"Not Available",FORWARD_SLASH:"/",IMDS_ENDPOINT:"http://169.254.169.254/metadata/instance/compute/location",IMDS_VERSION:"2020-06-01",IMDS_TIMEOUT:2e3,AZURE_REGION_AUTO_DISCOVER_FLAG:"TryAutoDetect",REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX:"login.microsoft.com",KNOWN_PUBLIC_CLOUDS:["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],SHR_NONCE_VALIDITY:240,INVALID_INSTANCE:"invalid_instance"},hr={SUCCESS:200,SUCCESS_RANGE_START:200,SUCCESS_RANGE_END:299,REDIRECT:302,CLIENT_ERROR:400,CLIENT_ERROR_RANGE_START:400,BAD_REQUEST:400,UNAUTHORIZED:401,NOT_FOUND:404,REQUEST_TIMEOUT:408,GONE:410,TOO_MANY_REQUESTS:429,CLIENT_ERROR_RANGE_END:499,SERVER_ERROR:500,SERVER_ERROR_RANGE_START:500,SERVICE_UNAVAILABLE:503,GATEWAY_TIMEOUT:504,SERVER_ERROR_RANGE_END:599,MULTI_SIDED_ERROR:600},tr={GET:"GET",POST:"POST"},Wt=[L.OPENID_SCOPE,L.PROFILE_SCOPE,L.OFFLINE_ACCESS_SCOPE],Ou=[...Wt,L.EMAIL_SCOPE],nt={CONTENT_TYPE:"Content-Type",CONTENT_LENGTH:"Content-Length",RETRY_AFTER:"Retry-After",CCS_HEADER:"X-AnchorMailbox",WWWAuthenticate:"WWW-Authenticate",AuthenticationInfo:"Authentication-Info",X_MS_REQUEST_ID:"x-ms-request-id",X_MS_HTTP_VERSION:"x-ms-httpver"},Ic={ACTIVE_ACCOUNT_FILTERS:"active-account-filters"},dr={COMMON:"common",ORGANIZATIONS:"organizations",CONSUMERS:"consumers"},fo={ACCESS_TOKEN:"access_token",XMS_CC:"xms_cc"},ze={LOGIN:"login",SELECT_ACCOUNT:"select_account",CONSENT:"consent",NONE:"none",CREATE:"create",NO_SESSION:"no_session"};var Bs={CODE:"code",IDTOKEN_TOKEN:"id_token token",IDTOKEN_TOKEN_REFRESHTOKEN:"id_token token refresh_token"},Pr={QUERY:"query",FRAGMENT:"fragment"},Du={QUERY:"query",FRAGMENT:"fragment",FORM_POST:"form_post"},Hs={IMPLICIT_GRANT:"implicit",AUTHORIZATION_CODE_GRANT:"authorization_code",CLIENT_CREDENTIALS_GRANT:"client_credentials",RESOURCE_OWNER_PASSWORD_GRANT:"password",REFRESH_TOKEN_GRANT:"refresh_token",DEVICE_CODE_GRANT:"device_code",JWT_BEARER:"urn:ietf:params:oauth:grant-type:jwt-bearer"},po={MSSTS_ACCOUNT_TYPE:"MSSTS",ADFS_ACCOUNT_TYPE:"ADFS",MSAV1_ACCOUNT_TYPE:"MSA",GENERIC_ACCOUNT_TYPE:"Generic"},Qr={CACHE_KEY_SEPARATOR:"-",CLIENT_INFO_SEPARATOR:"."},it={ID_TOKEN:"IdToken",ACCESS_TOKEN:"AccessToken",ACCESS_TOKEN_WITH_AUTH_SCHEME:"AccessToken_With_AuthScheme",REFRESH_TOKEN:"RefreshToken"};var Ls="appmetadata",yp="client_info",oi="1",go={CACHE_KEY:"authority-metadata",REFRESH_TIME_SECONDS:3600*24},Rt={CONFIG:"config",CACHE:"cache",NETWORK:"network",HARDCODED_VALUES:"hardcoded_values"},ut={SCHEMA_VERSION:5,MAX_LAST_HEADER_BYTES:330,MAX_CACHED_ERRORS:50,CACHE_KEY:"server-telemetry",CATEGORY_SEPARATOR:"|",VALUE_SEPARATOR:",",OVERFLOW_TRUE:"1",OVERFLOW_FALSE:"0",UNKNOWN_ERROR:"unknown_error"},de={BEARER:"Bearer",POP:"pop",SSH:"ssh-cert"},Yr={DEFAULT_THROTTLE_TIME_SECONDS:60,DEFAULT_MAX_THROTTLE_TIME_SECONDS:3600,THROTTLING_PREFIX:"throttling",X_MS_LIB_CAPABILITY_VALUE:"retry-after, h429"},Rc={INVALID_GRANT_ERROR:"invalid_grant",CLIENT_MISMATCH_ERROR:"client_mismatch"},Pc={username:"username",password:"password"},si={FAILED_AUTO_DETECTION:"1",INTERNAL_CACHE:"2",ENVIRONMENT_VARIABLE:"3",IMDS:"4"},kc={CONFIGURED_NO_AUTO_DETECTION:"2",AUTO_DETECTION_REQUESTED_SUCCESSFUL:"4",AUTO_DETECTION_REQUESTED_FAILED:"5"},kr={NOT_APPLICABLE:"0",FORCE_REFRESH_OR_CLAIMS:"1",NO_CACHED_ACCESS_TOKEN:"2",CACHED_ACCESS_TOKEN_EXPIRED:"3",PROACTIVELY_REFRESHED:"4"},xc={Jwt:"JWT",Jwk:"JWK",Pop:"pop"};var Us=300;var Pn={};Mt(Pn,{postRequestFailed:()=>

85qs,unexpectedError:()=>Ks});var Ks="unexpected_error",qs="post_request_failed";var _c={[Ks]:"Unexpected error in authentication.",[qs]:"Post request failed from the network, could be a 4xx/5xx or a network unavailability. Please check the exact error code for details."},Cp={unexpectedError:{code:Ks,desc:_c[Ks]},postRequestFailed:{code:qs,desc:_c[qs]}},ie=class r extends Error{constructor(e,t,n){let i=t?`${e}: ${t}`:e;super(i),Object.setPrototypeOf(this,r.prototype),this.errorCode=e||L.EMPTY_STRING,this.errorMessage=t||L.EMPTY_STRING,this.subError=n||L.EMPTY_STRING,this.name="AuthError"}setCorrelationId(e){this.correlationId=e}};function mo(r,e){return new ie(r,e?`${_c[r]} ${e}`:_c[r])}var ht={};Mt(ht,{authTimeNotFound:()=>Jr,authorizationCodeMissingFromServerResponse:()=>Ei,bindingKeyNotRemoved:()=>Zs,cannotAppendScopeSet:()=>yi,cannotRemoveEmptyScope:()=>vi,clientInfoDecodingError:()=>kn,clientInfoEmptyError:()=>ai,deviceCodeExpired:()=>zs,deviceCodePollingCancelled:()=>Gs,deviceCodeUnknownError:()=>$s,emptyInputScopeSet:()=>Nn,endSessionEndpointNotSupported:()=>Ai,endpointResolutionError:()=>Pt,hashNotDeserialized:()=>hi,invalidAssertion:()=>Ys,invalidCacheEnvironment:()=>Zr,invalidCacheRecord:()=>Ci,invalidClientCredential:()=>Js,invalidState:()=>fr,keyIdMissing:()=>wi,maxAgeTranspired:()=>pi,methodNotImplemented:()=>le,missingTenantIdError:()=>ra,multipleMatchingAccounts:()=>Vs,multipleMatchingAppMetadata:()=>gi,multipleMatchingTokens:()=>js,nestedAppAuthBridgeDisabled:()=>na,networkError:()=>li,noAccountFound:()=>Ws,noAccountInSilentRequest:()=>Xr,noCryptoObject:()=>Fn,noNetworkConnectivity:()=>ea,nonceMismatch:()=>fi,nullOrEmptyToken:()=>ci,openIdConfigError:()=>ui,platformBrokerError:()=>ia,requestCannotBeMade:()=>mi,stateMismatch:()=>di,stateNotFound:()=>_n,tokenClaimsCnfRequiredForSignedJwt:()=>Si,tokenParsingError:()=>xn,tokenRefreshRequired:()=>en,unexpectedCredentialType:()=>Qs,userCanceled:()=>ta,userTimeoutReached:()=>Xs});var kn="client_info_decoding_error",ai="client_info_empty_error",xn="token_parsing_error",ci="null_or_empty_token",Pt="endpoints_resolution_error",li="network_error",ui="openid_config_error",hi="hash_not_deserialized",fr="invalid_state",di="state_mismatch",_n="state_not_found",fi="nonce_mismatch",Jr="auth_time_not_found",pi="max_age_transpired",js="multiple_matching_tokens",Vs="multiple_matching_accounts",gi="multiple_matching_appMetadata",mi="request_cannot_be_made",vi="cannot_remove_empty_scope",yi="cannot_append_scopeset",Nn="empty_input_scopeset",Gs="device_code_polling_cancelled",zs="device_code_expired",$s="device_code_unknown_error",Xr="no_account_in_silent_request",Ci="invalid_cache_record",Zr="invalid_cache_environment",Ws="no_account_found",Fn="no_crypto_object",Qs="unexpected_credential_type",Ys="invalid_assertion",Js="invalid_client_credential",en="token_refresh_required",Xs="user_timeout_reached",Si="token_claims_cnf_required_for_signedjwt",Ei="authorization_code_missing_from_server_response",Zs="binding_key_not_removed",Ai="end_session_endpoint_not_supported",wi="key_id_missing",ea="no_network_connectivity",ta="user_canceled",ra="missing_tenant_id_error",le="method_not_implemented",na="nested_app_auth_bridge_disabled",ia="platform_broker_error";var ae={[kn]:"The client info could not be parsed/decoded correctly",[ai]:"The client info was empty",[xn]:"Token cannot be parsed",[ci]:"The token is null or empty",[Pt]:"Endpoints cannot be resolved",[li]:"Network request failed",[ui]:"Could not retrieve endpoints. Check your authority and verify the .well-known/openid-configuration endpoint returns the required endpoints.",[hi]:"The hash parameters could not be deserialized",[fr]:"State was not the expected format",[di]:"State mismatch error",[_n]:"State not found",[fi]:"Nonce mismatch error",[Jr]:"Max Age was requested and the ID token is missing the auth_time variable. auth_time is an optional claim and is not enabled by default - it must be enabled. See https://aka.ms/msaljs/optional-claims for more information.",[pi]:"Max Age is set to 0, or too much time has elapsed since the last end-user authentication.",[js]:"The cache contains multiple tokens satisfying the requirements. Call AcquireToken again providing more requirements such as authority or account.",[Vs]:"The cache contains multiple accounts satisfying the given parameters. Please pass more info to obtain the correct account",[gi]:"The cache contains multiple appMetadata satisfying the given parameters. Please pass more info to obtain the correct appMetadata",[mi]:"Token request cannot be made without authorization code or refresh token.",[vi]:"Cannot remove null or empty scope from ScopeSet",[yi]:"Cannot append ScopeSet",[Nn]:"Empty input ScopeSet cannot be processed",[Gs]:"Caller has cancelled token endpoint polling during device code flow by setting DeviceCodeRequest.cancel = true.",[zs]:"Device code is expired.",[$s]:"Device code stopped polling for unknown reasons.",[Xr]:"Please pass an account object, silent flow is not supported without account information",[Ci]:"Cache record object was null or undefined.",[Zr]:"Invalid environment when attempting to create cache entry",[Ws]:"No account found in cache for given key.",[Fn]:"No crypto object detected.",[Qs]:"Unexpected credential type.",[Ys]:"Client assertion must meet requirements described 

85in https://tools.ietf.org/html/rfc7515",[Js]:"Client credential (secret, certificate, or assertion) must not be empty when creating a confidential client. An application should at most have one credential",[en]:"Cannot return token from cache because it must be refreshed. This may be due to one of the following reasons: forceRefresh parameter is set to true, claims have been requested, there is no cached access token or it is expired.",[Xs]:"User defined timeout for device code polling reached",[Si]:"Cannot generate a POP jwt if the token_claims are not populated",[Ei]:"Server response does not contain an authorization code to proceed",[Zs]:"Could not remove the credential's binding key from storage.",[Ai]:"The provided authority does not support logout",[wi]:"A keyId value is missing from the requested bound token's cache record and is required to match the token to it's stored binding key.",[ea]:"No network connectivity. Check your internet connection.",[ta]:"User cancelled the flow.",[ra]:"A tenant id - not common, organizations, or consumers - must be specified when using the client_credentials flow.",[le]:"This method has not been implemented",[na]:"The nested app auth bridge is disabled",[ia]:"An error occurred in the native broker. See the platformBrokerError property for details."},Sp={clientInfoDecodingError:{code:kn,desc:ae[kn]},clientInfoEmptyError:{code:ai,desc:ae[ai]},tokenParsingError:{code:xn,desc:ae[xn]},nullOrEmptyToken:{code:ci,desc:ae[ci]},endpointResolutionError:{code:Pt,desc:ae[Pt]},networkError:{code:li,desc:ae[li]},unableToGetOpenidConfigError:{code:ui,desc:ae[ui]},hashNotDeserialized:{code:hi,desc:ae[hi]},invalidStateError:{code:fr,desc:ae[fr]},stateMismatchError:{code:di,desc:ae[di]},stateNotFoundError:{code:_n,desc:ae[_n]},nonceMismatchError:{code:fi,desc:ae[fi]},authTimeNotFoundError:{code:Jr,desc:ae[Jr]},maxAgeTranspired:{code:pi,desc:ae[pi]},multipleMatchingTokens:{code:js,desc:ae[js]},multipleMatchingAccounts:{code:Vs,desc:ae[Vs]},multipleMatchingAppMetadata:{code:gi,desc:ae[gi]},tokenRequestCannotBeMade:{code:mi,desc:ae[mi]},removeEmptyScopeError:{code:vi,desc:ae[vi]},appendScopeSetError:{code:yi,desc:ae[yi]},emptyInputScopeSetError:{code:Nn,desc:ae[Nn]},DeviceCodePollingCancelled:{code:Gs,desc:ae[Gs]},DeviceCodeExpired:{code:zs,desc:ae[zs]},DeviceCodeUnknownError:{code:$s,desc:ae[$s]},NoAccountInSilentRequest:{code:Xr,desc:ae[Xr]},invalidCacheRecord:{code:Ci,desc:ae[Ci]},invalidCacheEnvironment:{code:Zr,desc:ae[Zr]},noAccountFound:{code:Ws,desc:ae[Ws]},noCryptoObj:{code:Fn,desc:ae[Fn]},unexpectedCredentialType:{code:Qs,desc:ae[Qs]},invalidAssertion:{code:Ys,desc:ae[Ys]},invalidClientCredential:{code:Js,desc:ae[Js]},tokenRefreshRequired:{code:en,desc:ae[en]},userTimeoutReached:{code:Xs,desc:ae[Xs]},tokenClaimsRequired:{code:Si,desc:ae[Si]},noAuthorizationCodeFromServer:{code:Ei,desc:ae[Ei]},bindingKeyNotRemovedError:{code:Zs,desc:ae[Zs]},logoutNotSupported:{code:Ai,desc:ae[Ai]},keyIdMissing:{code:wi,desc:ae[wi]},noNetworkConnectivity:{code:ea,desc:ae[ea]},userCanceledError:{code:ta,desc:ae[ta]},missingTenantIdError:{code:ra,desc:ae[ra]},nestedAppAuthBridgeDisabled:{code:na,desc:ae[na]},platformBrokerError:{code:ia,desc:ae[ia]}},oa=class r extends ie{constructor(e,t){super(e,t?`${ae[e]}: ${t}`:ae[e]),this.name="ClientAuthError",Object.setPrototypeOf(this,r.prototype)}};function K(r,e){return new oa(r,e)}var On={createNewGuid:()=>{throw K(le)},base64Decode:()=>{throw K(le)},base64Encode:()=>{throw K(le)},base64UrlEncode:()=>{throw K(le)},encodeKid:()=>{throw K(le)},getPublicKeyThumbprint(){return x(this,null,function*(){throw K(le)})},removeTokenBindingKey(){return x(this,null,function*(){throw K(le)})},clearKeystore(){return x(this,null,function*(){throw K(le)})},signJwt(){return x(this,null,function*(){throw K(le)})},hashString(){return x(this,null,function*(){throw K(le)})}};var Ae=(function(r){return r[r.Error=0]="Error",r[r.Warning=1]="Warning",r[r.Info=2]="Info",r[r.Verbose=3]="Verbose",r[r.Trace=4]="Trace",r})(Ae||{}

85),kt=class r{constructor(e,t,n){this.level=Ae.Info;let i=()=>{},o=e||r.createDefaultLoggerOptions();this.localCallback=o.loggerCallback||i,this.piiLoggingEnabled=o.piiLoggingEnabled||!1,this.level=typeof o.logLevel=="number"?o.logLevel:Ae.Info,this.correlationId=o.correlationId||L.EMPTY_STRING,this.packageName=t||L.EMPTY_STRING,this.packageVersion=n||L.EMPTY_STRING}static createDefaultLoggerOptions(){return{loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:Ae.Info}}clone(e,t,n){return new r({loggerCallback:this.localCallback,piiLoggingEnabled:this.piiLoggingEnabled,logLevel:this.level,correlationId:n||this.correlationId},e,t)}logMessage(e,t){if(t.logLevel>this.level||!this.piiLoggingEnabled&&t.containsPii)return;let o=`${`[${new Date().toUTCString()}] : [${t.correlationId||this.correlationId||""}]`} : ${this.packageName}@${this.packageVersion} : ${Ae[t.logLevel]} - ${e}`;this.executeCallback(t.logLevel,o,t.containsPii||!1)}executeCallback(e,t,n){this.localCallback&&this.localCallback(e,t,n)}error(e,t){this.logMessage(e,{logLevel:Ae.Error,containsPii:!1,correlationId:t||L.EMPTY_STRING})}errorPii(e,t){this.logMessage(e,{logLevel:Ae.Error,containsPii:!0,correlationId:t||L.EMPTY_STRING})}warning(e,t){this.logMessage(e,{logLevel:Ae.Warning,containsPii:!1,correlationId:t||L.EMPTY_STRING})}warningPii(e,t){this.logMessage(e,{logLevel:Ae.Warning,containsPii:!0,correlationId:t||L.EMPTY_STRING})}info(e,t){this.logMessage(e,{logLevel:Ae.Info,containsPii:!1,correlationId:t||L.EMPTY_STRING})}infoPii(e,t){this.logMessage(e,{logLevel:Ae.Info,containsPii:!0,correlationId:t||L.EMPTY_STRING})}verbose(e,t){this.logMessage(e,{logLevel:Ae.Verbose,containsPii:!1,correlationId:t||L.EMPTY_STRING})}verbosePii(e,t){this.logMessage(e,{logLevel:Ae.Verbose,containsPii:!0,correlationId:t||L.EMPTY_STRING})}trace(e,t){this.logMessage(e,{logLevel:Ae.Trace,containsPii:!1,correlationId:t||L.EMPTY_STRING})}tracePii(e,t){this.logMessage(e,{logLevel:Ae.Trace,containsPii:!0,correlationId:t||L.EMPTY_STRING})}isPiiLoggingEnabled(){return this.piiLoggingEnabled||!1}};var Nc="@azure/msal-common",vo="15.17.0";var Dn={None:"none",AzurePublic:"https://login.microsoftonline.com",AzurePpe:"https://login.windows-ppe.net",AzureChina:"https://login.chinacloudapi.cn",AzureGermany:"https://login.microsoftonline.de",AzureUsGovernment:"https://login.microsoftonline.us"};var St={};Mt(St,{authorityMismatch:()=>fa,authorityUriInsecure:()=>bi,cannotAllowPlatformBroker:()=>da,cannotSetOIDCOptions:()=>ha,claimsRequestParsingError:()=>sa,emptyInputScopesError:()=>Ri,invalidAuthenticationHeader:()=>ua,invalidAuthorityMetadata:()=>_i,invalidAuthorizePostBodyParameters:()=>ga,invalidClaims:()=>Mn,invalidCloudDiscoveryMetadata:()=>Bn,invalidCodeChallengeMethod:()=>aa,invalidPlatformBrokerConfiguration:()=>ma,invalidRequestMethodForEAR:()=>pa,logoutRequestEmpty:()=>ki,missingNonceAuthenticationHeader:()=>la,missingSshJwk:()=>tn,missingSshKid:()=>ca,pkceParamsMissing:()=>xi,redirectUriEmpty:()=>Ti,tokenRequestEmpty:()=>Pi,untrustedAuthority:()=>Ni,urlEmptyError:()=>Ii,urlParseError:()=>xr});var Ti="redirect_uri_empty",sa="claims_request_parsing_error",bi="authority_uri_insecure",xr="url_parse_error",Ii="empty_url_error",Ri="empty_input_scopes_error",Mn="invalid_claims",Pi="token_request_empty",ki="logout_request_empty",aa="invalid_code_challenge_method",xi="pkce_params_missing",Bn="invalid_cloud_discovery_metadata",_i="invalid_authority_metadata",Ni="untrusted_authority",tn="missing_ssh_jwk",ca="missing_ssh_kid",la="missing_nonce_authentication_header",ua="invalid_authentication_header",ha="cannot_set_OIDCOptions",da="cannot_allow_platform_broker",fa="authority_mismatch",pa="invalid_request_method_for_EAR",ga="invalid_authorize_post_body_parameters",ma="invalid_platform_broker_configuration";var Le={[Ti]:"A redirect URI is required for all calls, and none has been set.",[sa]:"Could not parse the given claims request object.",[bi]:"Authority URIs must use https.  Please see here for valid authority configuration options: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-js-initializing-client-applications#configuration-options",[xr]:"URL could not be parsed into appropriate segments.",[Ii]:"URL was empty or null.",[Ri]:"Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.",[Mn]:"Given claims parameter must be a stringified JSON object.",[Pi]:"Token request was empty and not found in cache.",[ki]:"The logout request was null or undefined.",[aa]:'code_challenge_method passed is invali

85d. Valid values are "plain" and "S256".',[xi]:"Both params: code_challenge and code_challenge_method are to be passed if to be sent in the request",[Bn]:"Invalid cloudDiscoveryMetadata provided. Must be a stringified JSON object containing tenant_discovery_endpoint and metadata fields",[_i]:"Invalid authorityMetadata provided. Must by a stringified JSON object containing authorization_endpoint, token_endpoint, issuer fields.",[Ni]:"The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter.",[tn]:"Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme.",[ca]:"Missing sshKid in SSH certificate request. A string that uniquely identifies the public SSH key is required when using the SSH authentication scheme.",[la]:"Unable to find an authentication header containing server nonce. Either the Authentication-Info or WWW-Authenticate headers must be present in order to obtain a server nonce.",[ua]:"Invalid authentication header provided",[ha]:"Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",[da]:"Cannot set allowPlatformBroker parameter to true when not in AAD protocol mode.",[fa]:"Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",[ga]:"Invalid authorize post body parameters provided. If you are using authorizePostBodyParameters, the request method must be POST. Please check the request method and parameters.",[pa]:"Invalid request method for EAR protocol mode. The request method cannot be GET when using EAR protocol mode. Please change the request method to POST.",[ma]:"Invalid platform broker configuration. `allowPlatformBrokerWithDOM` can only be enabled when `allowPlatformBroker` is enabled."},Ep={redirectUriNotSet:{code:Ti,desc:Le[Ti]},claimsRequestParsingError:{code:sa,desc:Le[sa]},authorityUriInsecure:{code:bi,desc:Le[bi]},urlParseError:{code:xr,desc:Le[xr]},urlEmptyError:{code:Ii,desc:Le[Ii]},emptyScopesError:{code:Ri,desc:Le[Ri]},invalidClaimsRequest:{code:Mn,desc:Le[Mn]},tokenRequestEmptyError:{code:Pi,desc:Le[Pi]},logoutRequestEmptyError:{code:ki,desc:Le[ki]},invalidCodeChallengeMethod:{code:aa,desc:Le[aa]},invalidCodeChallengeParams:{code:xi,desc:Le[xi]},invalidCloudDiscoveryMetadata:{code:Bn,desc:Le[Bn]},invalidAuthorityMetadata:{code:_i,desc:Le[_i]},untrustedAuthority:{code:Ni,desc:Le[Ni]},missingSshJwk:{code:tn,desc:Le[tn]},missingSshKid:{code:ca,desc:Le[ca]},missingNonceAuthenticationHeader:{code:la,desc:Le[la]},invalidAuthenticationHeader:{code:ua,desc:Le[ua]},cannotSetOIDCOptions:{code:ha,desc:Le[ha]},cannotAllowPlatformBroker:{code:da,desc:Le[da]},authorityMismatch:{code:fa,desc:Le[fa]},invalidAuthorizePostBodyParameters:{code:ga,desc:Le[ga]},invalidRequestMethodForEAR:{code:pa,desc:Le[pa]},invalidPlatformBrokerConfiguration:{code:ma,desc:Le[ma]}},va=class r extends ie{constructor(e){super(e,Le[e]),this.name="ClientConfigurationError",Object.setPrototypeOf(this,r.prototype)}};function fe(r){return new va(r)}var Be=class{static isEmptyObj(e){if(e)try{let t=JSON.parse(e);return Object.keys(t).length===0}catch{}return!0}static startsWith(e,t){return e.indexOf(t)===0}static endsWith(e,t){return e.length>=t.length&&e.lastIndexOf(t)===e.length-t.length}static queryStringToObject(e){let t={},n=e.split("&"),i=o=>decodeURIComponent(o.replace(/\+/g," "));return n.forEach(o=>{if(o.trim()){let[s,a]=o.split(/=(.+)/g,2);s&&a&&(t[i(s)]=i(a))}}),t}static trimArrayEntries(e){return e.map(t=>t.trim())}static removeEmptyStringsFromArray(e){return e.filter(t=>!!t)}static jsonParseHelper(e){try{return JSON.parse(e)}catch{return null}}static matchPattern(e,t){return new RegExp(e.replace(/\\/g,"\\\\").replace(/\*/g,"[^ ]*").replace(/\?/g,"\\?")).test(t)}static matchPatternStrict(e,t,n){let i=n?.component,o=e.replace(/[.+^${}()|[\]\\*?]/g,"\\$&");return i==="host"?o=o.replace(/\\\*/g,"[^.]*"):o=o.replace(/\\\*/g,".*"),new RegExp(`^${o}$`).test(t)}};

85var Qe=class r{constructor(e){let t=e?Be.trimArrayEntries([...e]):[],n=t?Be.removeEmptyStringsFromArray(t):[];if(!n||!n.length)throw fe(Ri);this.scopes=new Set,n.forEach(i=>this.scopes.add(i))}static fromString(e){let n=(e||L.EMPTY_STRING).split(" ");return new r(n)}static createSearchScopes(e){let t=e&&e.length>0?e:[...Wt],n=new r(t);return n.containsOnlyOIDCScopes()?n.removeScope(L.OFFLINE_ACCESS_SCOPE):n.removeOIDCScopes(),n}containsScope(e){let t=this.printScopesLowerCase().split(" "),n=new r(t);return e?n.scopes.has(e.toLowerCase()):!1}containsScopeSet(e){return!e||e.scopes.size<=0?!1:this.scopes.size>=e.scopes.size&&e.asArray().every(t=>this.containsScope(t))}containsOnlyOIDCScopes(){let e=0;return Ou.forEach(t=>{this.containsScope(t)&&(e+=1)}),this.scopes.size===e}appendScope(e){e&&this.scopes.add(e.trim())}appendScopes(e){try{e.forEach(t=>this.appendScope(t))}catch{throw K(yi)}}removeScope(e){if(!e)throw K(vi);this.scopes.delete(e.trim())}removeOIDCScopes(){Ou.forEach(e=>{this.scopes.delete(e)})}unionScopeSets(e){if(!e)throw K(Nn);let t=new Set;return e.scopes.forEach(n=>t.add(n.toLowerCase())),this.scopes.forEach(n=>t.add(n.toLowerCase())),t}intersectingScopeSets(e){if(!e)throw K(Nn);e.containsOnlyOIDCScopes()||e.removeOIDCScopes();let t=this.unionScopeSets(e),n=e.getScopeCount(),i=this.getScopeCount();return t.size<i+n}getScopeCount(){return this.scopes.size}asArray(){let e=[];return this.scopes.forEach(t=>e.push(t)),e}printScopes(){return this.scopes?this.asArray().join(" "):L.EMPTY_STRING}printScopesLowerCase(){return this.printScopes().toLowerCase()}};function yo(r,e){if(!r)throw K(ai);try{let t=e(r);return JSON.parse(t)}catch{throw K(kn)}}function _r(r){if(!r)throw K(kn);let e=r.split(Qr.CLIENT_INFO_SEPARATOR,2);return{uid:e[0],utid:e.length<2?L.EMPTY_STRING:e[1]}}function Mu(r,e){return!!r&&!!e&&r===e.split(".")[1]}function Nr(r,e,t,n){if(n){let{oid:i,sub:o,tid:s,name:a,tfp:c,acr:l,preferred_username:p,upn:g,login_hint:h}=n,d=s||c||l||"";return{tenantId:d,localAccountId:i||o||"",name:a,username:p||g||"",loginHint:h,isHomeTenant:Mu(d,r)}}else return{tenantId:t,localAccountId:e,username:"",isHomeTenant:Mu(t,r)}}function Fi(r,e,t,n){let i=r;if(e){let o=e,{isHomeTenant:a}=o,c=lr(o,["isHomeTenant"]);i=q(q({},r),c)}if(t){let s=Nr(r.homeAccountId,r.localAccountId,r.tenantId,t),{isHomeTenant:a}=s,c=lr(s,["isHomeTenant"]);return i=re(q(q({},i),c),{idTokenClaims:t,idToken:n}),i}return i}var xt={Default:0,Adfs:1,Dsts:2,Ciam:3};function Oi(r){return r&&(r.tid||r.tfp||r.acr)||null}var Ue={AAD:"AAD",OIDC:"OIDC",EAR:"EAR"};var _e=class r{static getAccountInfo(e){let t=e.tenantProfiles||[];return t.length===0&&e.realm&&e.localAccountId&&t.push(Nr(e.homeAccountId,e.localAccountId,e.realm)),{homeAccountId:e.homeAccountId,environment:e.environment,tenantId:e.realm,username:e.username,localAccountId:e.localAccountId,loginHint:e.loginHint,name:e.name,nativeAccountId:e.nativeAccountId,authorityType:e.authorityType,tenantProfiles:new Map(t.map(n=>[n.tenantId,n])),dataBoundary:e.dataBoundary}}isSingleTenant(){return!this.tenantProfiles}static createAccount(e,t,n){let i=new r;t.authorityType===xt.Adfs?i.authorityType=po.ADFS_ACCOUNT_TYPE:t.protocolMode===Ue.OIDC?i.authorityType=po.GENERIC_ACCOUNT_TYPE:i.authorityType=po.MSSTS_ACCOUNT_TYPE;let o;e.clientInfo&&n&&(o=yo(e.clientInfo,n),o.xms_tdbr&&(i.dataBoundary=o.xms_tdbr==="EU"?"EU":"None")),i.clientInfo=e.clientInfo,i.homeAccountId=e.homeAccountId,i.nativeAccountId=e.nativeAccountId;let s=e.environment||t&&t.getPreferredCache();if(!s)throw K(Zr);i.environment=s,i.realm=o?.utid||Oi(e.idTokenClaims)||"",i.localAccountId=o?.uid||e.idTokenClaims?.oid||e.idTokenClaims?.sub||"";let a=e.idTokenClaims?.preferred_username||e.idTokenClaims?.upn,c=e.idTokenClaims?.emails?e.idTokenClaims.emails[0]:null;if(i.username=a||c||"",i.loginHint=e.idTokenClaims?.login_hint,i.name=e.idTokenClaims?.name||"",i.cloudGraphHostName=e.cloudGraphHostName,i.msGraphHost=e.msGraphHost,e.tenantProfiles)i.tenantProfiles=e.tenantProfiles;else{let l=Nr(e.homeAccountId,i.localAccountId,i.realm,e.idTokenClaims);i.tenantProfiles=[l]}return i}static createFromAccountInfo(e,t,n){let i=new r;i.authorityType=e.authorityType||po.GENERIC_ACCOUNT_TYPE,i.homeAccountId=e.homeAccountId,i.localAccountId=e.localAccountId,i.nativeAccountId=e.nativeAccountId,i.realm=e.tenantId,i.environment=e.environment,i.username=e.username,i.name=e.name,i.loginHint=e.loginHint,i.cloudGraphHostName=t,i.msGraphHost=n;let o=Array.from(e.tenantProfiles?.values()||[]);return o.length===0&&e.tenantId&&e.localAccountId&&o.push(Nr(e.homeAccountId,e.localAccountId,e.tenantId,e.idTokenClaims)),i.tenantProfiles=o,i.dataBoundary=e.dataBoundary,i}static generateHomeAccountId(e,t,n,i,o){if(!(t===xt.Adfs||t===xt.Dsts)){if(e)try{let s=yo(e,i.base64Decode);

85if(s.uid&&s.utid)return`${s.uid}.${s.utid}`}catch{}n.warning("No client info in response")}return o?.sub||""}static isAccountEntity(e){return e?e.hasOwnProperty("homeAccountId")&&e.hasOwnProperty("environment")&&e.hasOwnProperty("realm")&&e.hasOwnProperty("localAccountId")&&e.hasOwnProperty("username")&&e.hasOwnProperty("authorityType"):!1}static accountInfoIsEqual(e,t,n){if(!e||!t)return!1;let i=!0;if(n){let o=e.idTokenClaims||{},s=t.idTokenClaims||{};i=o.iat===s.iat&&o.nonce===s.nonce}return e.homeAccountId===t.homeAccountId&&e.localAccountId===t.localAccountId&&e.username===t.username&&e.tenantId===t.tenantId&&e.loginHint===t.loginHint&&e.environment===t.environment&&e.nativeAccountId===t.nativeAccountId&&i}};var ot={};Mt(ot,{checkMaxAge:()=>ya,extractTokenClaims:()=>rn,getJWSPayload:()=>Ap,isKmsi:()=>Bu});function rn(r,e){let t=Ap(r);try{let n=e(t);return JSON.parse(n)}catch{throw K(xn)}}function Bu(r){if(!r.signin_state)return!1;let e=["kmsi","dvc_dmjd"];return r.signin_state.some(n=>e.includes(n.trim().toLowerCase()))}function Ap(r){if(!r)throw K(ci);let t=/^([^\.\s]*)\.([^\.\s]+)\.([^\.\s]*)$/.exec(r);if(!t||t.length<4)throw K(xn);return t[2]}function ya(r,e){if(e===0||Date.now()-3e5>r+e)throw K(pi)}var Or={};Mt(Or,{getDeserializedResponse:()=>Hu,mapToQueryString:()=>Fr,normalizeUrlForComparison:()=>xv,stripLeadingHashOrQuery:()=>Tp});function wp(r){if(!r)return r;let e=r.toLowerCase();return Be.endsWith(e,"?")?e=e.slice(0,-1):Be.endsWith(e,"?/")&&(e=e.slice(0,-2)),Be.endsWith(e,"/")||(e+="/"),e}function Tp(r){return r.startsWith("#/")?r.substring(2):r.startsWith("#")||r.startsWith("?")?r.substring(1):r}function Hu(r){if(!r||r.indexOf("=")<0)return null;try{let e=Tp(r),t=Object.fromEntries(new URLSearchParams(e));if(t.code||t.ear_jwe||t.error||t.error_description||t.state)return t}catch{throw K(hi)}return null}function Fr(r,e=!0,t){let n=new Array;return r.forEach((i,o)=>{!e&&t&&o in t?n.push(`${o}=${i}`):n.push(`${o}=${encodeURIComponent(i)}`)}),n.join("&")}function xv(r){if(!r)return r;let e=r.split("#")[0];try{let t=new URL(e),n=t.origin+t.pathname+t.search;return wp(n)}catch{return wp(e)}}var ue=class r{get urlString(){return this._urlString}constructor(e){if(this._urlString=e,!this._urlString)throw fe(Ii);e.includes("#")||(this._urlString=r.canonicalizeUri(e))}static canonicalizeUri(e){if(e){let t=e.toLowerCase();return Be.endsWith(t,"?")?t=t.slice(0,-1):Be.endsWith(t,"?/")&&(t=t.

85slice(0,-2)),Be.endsWith(t,"/")||(t+="/"),t}return e}validateAsUri(){let e;try{e=this.getUrlComponents()}catch{throw fe(xr)}if(!e.HostNameAndPort||!e.PathSegments)throw fe(xr);if(!e.Protocol||e.Protocol.toLowerCase()!=="https:")throw fe(bi)}static appendQueryString(e,t){return t?e.indexOf("?")<0?`${e}?${t}`:`${e}&${t}`:e}static removeHashFromUrl(e){return r.canonicalizeUri(e.split("#")[0])}replaceTenantPath(e){let t=this.getUrlComponents(),n=t.PathSegments;return e&&n.length!==0&&(n[0]===dr.COMMON||n[0]===dr.ORGANIZATIONS)&&(n[0]=e),r.constructAuthorityUriFromObject(t)}getUrlComponents(){let e=RegExp("^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?"),t=this.urlString.match(e);if(!t)throw fe(xr);let n={Protocol:t[1],HostNameAndPort:t[4],AbsolutePath:t[5],QueryString:t[7]},i=n.AbsolutePath.split("/");return i=i.filter(o=>o&&o.length>0),n.PathSegments=i,n.QueryString&&n.QueryString.endsWith("/")&&(n.QueryString=n.QueryString.substring(0,n.QueryString.length-1)),n}static getDomainFromUrl(e){let t=RegExp("^([^:/?#]+://)?([^/?#]*)"),n=e.match(t);if(!n)throw fe(xr);return n[2]}static getAbsoluteUrl(e,t){if(e[0]===L.FORWARD_SLASH){let i=new r(t).getUrlComponents();return i.Protocol+"//"+i.HostNameAndPort+e}return e}static constructAuthorityUriFromObject(e){return new r(e.Protocol+"//"+e.HostNameAndPort+"/"+e.PathSegments.join("/"))}static hashContainsKnownProperties(e){return!!Hu(e)}};var Ip={endpointMetadata:{"login.microsoftonline.com":{token_endpoint:"https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/token",jwks_uri:"https://login.microsoftonline.com/{tenantid}/discovery/v2.0/keys",issuer:"https://login.microsoftonline.com/{tenantid}/v2.0",authorization_endpoint:"https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/authorize",end_session_endpoint:"https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/logout"},"login.chinacloudapi.cn":{token_endpoint:"https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/token",jwks_uri:"https://login.chinacloudapi.cn/{tenantid}/discovery/v2.0/keys",issuer:"https://login.partner.microsoftonline.cn/{tenantid}/v2.0",authorization_endpoint:"https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/authorize",end_session_endpoint:"https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/logout"},"login.microsoftonline.us":{token_endpoint:"https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/token",jwks_uri:"https://login.microsoftonline.us/{tenantid}/discovery/v2.0/keys",issuer:"https://login.microsoftonline.us/{tenantid}/v2.0",authorization_endpoint:"https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/authorize",end_session_endpoint:"https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/logout"},"login.sovcloud-identity.fr":{token_endpoint:"https://login.sovcloud-identity.fr/{tenantid}/oauth2/v2.0/token",jwks_uri:"https://login.sovcloud-identity.fr/{tenantid}/discovery/v2.0/keys",issuer:"https://login.sovcloud-identity.fr/{tenantid}/v2.0",authorization_endpoint:"https://login.sovcloud-identity.fr/{tenantid}/oauth2/v2.0/authorize",end_session_endpoint:"https://login.sovcloud-identity.fr/{tenantid}/oauth2/v2.0/logout"},"login.sovcloud-identity.de":{token_endpoint:"https://login.sovcloud-identity.de/{tenantid}/oauth2/v2.0/token",jwks_uri:"https://login.sovcloud-identity.de/{tenantid}/discovery/v2.0/keys",issuer:"https://login.sovcloud-identity.de/{tenantid}/v2.0",authorization_endpoint:"https://login.sovcloud-identity.de/{tenantid}/oauth2/v2.0/authorize",end_session_endpoint:"https://login.sovcloud-identity.de/{tenantid}/oauth2/v2.0/logout"},"login.sovcloud-identity.sg":{token_endpoint:"https://login.sovcloud-identity.sg/common/oauth2/v2.0/token",jwks_uri:"https://login.sovcloud-identity.sg/common/discovery/v2.0/keys",issuer:"https://login.sovcloud-identity.sg/{tenantid}/v2.0",authorization_endpoint:"https://login.sovcloud-identity.sg/common/oauth2/v2.0/authorize",end_session_endpoint:"https://login.sovcloud-identity.sg/common/oauth2/v2.0/logout"}},instanceDiscoveryMetadata:{metadata:[{preferred_network:"login.microsoftonline.com",preferred_cache:"login.windows.net",aliases:["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"]},{preferred_network:"login.partner.microsoftonline.cn",preferred_cache:"login.partner.microsoftonline.cn",aliases:["login.partner.microsoftonline.cn","login.chinacloudapi.cn"]},{preferred_network:"login.microsoftonline.de",preferred_cache:"login.microsoftonline.de",aliases:["login.microsoftonline.de"]},{preferred_network:"login.microsoftonline.us",preferred_cache:"login.microsoftonline.us",aliases:["login.microsoftonline.us","login.usgovcloudapi.net"]},{preferred_network:"login-us.microsoftonline.com",preferred_cache:"login-us.microsoftonline.com",aliases:["login-us.microsoftonline.com"]},{preferred_network:"login.sovcloud-identity.fr",preferred_cache:"login.sovcloud-identity.fr",aliases:["login.sovcloud-identity.fr"]},{preferred_network:"login.sovcloud-identity.de",preferred_cache:"login.sovcloud-identity.de",aliases:["login.sovcloud-identity.de"]},{preferred_network:"login.sovcloud-identity.sg",preferred_cache:"login.sovcloud-identity.sg",aliases:["login.sovcloud-identity.sg"]}]}},Lu=Ip.endpointMetadata,Uu=Ip.instanceDiscoveryMetadata,Ku=new Set;Uu.metadata.forEach(r=>

85{r.aliases.forEach(e=>{Ku.add(e)})});function Rp(r,e){let t,n=r.canonicalAuthority;if(n){let i=new ue(n).getUrlComponents().HostNameAndPort;t=bp(i,r.cloudDiscoveryMetadata?.metadata,Rt.CONFIG,e)||bp(i,Uu.metadata,Rt.HARDCODED_VALUES,e)||r.knownAuthorities}return t||[]}function bp(r,e,t,n){if(n?.trace(`getAliasesFromMetadata called with source: ${t}`),r&&e){let i=Ca(e,r);if(i)return n?.trace(`getAliasesFromMetadata: found cloud discovery metadata in ${t}, returning aliases`),i.aliases;n?.trace(`getAliasesFromMetadata: did not find cloud discovery metadata in ${t}`)}return null}function Pp(r){return Ca(Uu.metadata,r)}function Ca(r,e){for(let t=0;t<r.length;t++){let n=r[t];if(n.aliases.includes(e))return n}return null}var Ea={};Mt(Ea,{cacheErrorUnknown:()=>Sa,cacheQuotaExceeded:()=>Fc});var Fc="cache_quota_exceeded",Sa="cache_error_unknown";var qu={[Fc]:"Exceeded cache storage capacity.",[Sa]:"Unexpected error occurred when using cache storage."},Hn=class r extends ie{constructor(e,t){let n=t||(qu[e]?qu[e]:qu[Sa]);super(`${e}: ${n}`),Object.setPrototypeOf(this,r.prototype),this.name="CacheError",this.errorCode=e,this.errorMessage=n}};function Co(r){return r instanceof Error?r.name==="QuotaExceededError"||r.name==="NS_ERROR_DOM_QUOTA_REACHED"||r.message.includes("exceeded the quota")?new Hn(Fc):new Hn(r.name,r.message):new Hn(Sa)}var Di=class{constructor(e,t,n,i,o){this.clientId=e,this.cryptoImpl=t,this.commonLogger=n.clone(Nc,vo),this.staticAuthorityOptions=o,this.performanceClient=i}getAllAccounts(e,t){return this.buildTenantProfiles(this.getAccountsFilteredBy(e,t),t,e)}getAccountInfoFilteredBy(e,t){if(Object.keys(e).length===0||Object.values(e).every(i=>!i))return this.commonLogger.warning("getAccountInfoFilteredBy: Account filter is empty or invalid, returning null"),null;let n=this.getAllAccounts(e,t);return n.length>1?n.sort(o=>o.idTokenClaims?-1:1)[0]:n.length===1?n[0]:null}getBaseAccountInfo(e,t){let n=this.getAccountsFilteredBy(e,t);return n.length>0?_e.getAccountInfo(n[0]):null}buildTenantProfiles(e,t,n){return e.flatMap(i=>this.getTenantProfilesFromAccountEntity(i,t,n?.tenantId,n))}getTenantedAccountInfoByFilter(e,t,n,i,o){let s=null,a;if(o&&!this.tenantProfileMatchesFilter(n,o))return null;let c=this.getIdToken(e,i,t,n.tenantId);return c&&(a=rn(c.secret,this.cryptoImpl.base64Decode),!this.idTokenClaimsMatchTenantProfileFilter(a,o))?null:(s=Fi(e,n,a,c?.secret),s)}getTenantProfilesFromAccountEntity(e,t,n,i){let o=_e.getAccountInfo(e),s=o.tenantProfiles||new Map,a=this.getTokenKeys();if(n){let l=s.get(n);if(l)s=new Map([[n,l]]);else return[]}let c=[];return s.forEach(l=>{let p=this.getTenantedAccountInfoByFilter(o,a,l,t,i);p&&c.push(p)}),c}tenantProfileMatchesFilter(e,t){return!(t.localAccountId&&!this.matchLocalAccountIdFromTenantProfile(e,t.localAccountId)||t.name&&e.name!==t.name||t.isHomeTenant!==void 0&&e.isHomeTenant!==t.isHomeTenant)}idTokenClaimsMatchTenantProfileFilter(e,t){return!(t&&(t.localAccountId&&!this.matchLocalAccountIdFromTokenClaims(e,t.localAccountId)||t.loginHint&&!this.matchLoginHintFromTokenClaims(e,t.loginHint)||t.username&&!this.matchUsername(e.preferred_username,t.username)||t.name&&!this.matchName(e,t.name)||t.sid&&!this.matchSid(e,t.sid)))}saveCacheRecord(e,t,n,i,o){return x(this,null,function*(){if(!e)throw K(Ci);try{e.account&&(yield this.setAccount(e.account,t,n,i)),e.idToken&&o?.idToken!==!1&&(yield this.setIdTokenCredential(e.idToken,t,n)),e.accessToken&&o?.accessToken!==!1&&(yield this.saveAccessToken(e.accessToken,t,n)),e.refreshToken&&o?.refreshToken!==!1&&(yield this.setRefreshTokenCredential(e.refreshToken,t,n)),e.appMetadata&&this.setAppMetadata(e.appMetadata,t)}catch(s){throw this.commonLogger?.error("CacheManager.saveCacheRecord: failed"),s instanceof ie?s:Co(s)}})}saveAccessToken(e,t,n){return x(this,null,function*(){let i={clientId:e.clientId,credentialType:e.credentialType,environment:e.environment,homeAccountId:e.homeAccountId,realm:e.realm,tokenType:e.tokenType,requestedClaimsHash:e.requestedClaimsHash},o=this.getTokenKeys(),s=Qe.fromString(e.target);

85o.accessToken.forEach(a=>{if(!this.accessTokenKeyMatchesFilter(a,i,!1))return;let c=this.getAccessTokenCredential(a,t);c&&this.credentialMatchesFilter(c,i)&&Qe.fromString(c.target).intersectingScopeSets(s)&&this.removeAccessToken(a,t)}),yield this.setAccessTokenCredential(e,t,n)})}getAccountsFilteredBy(e,t){let n=this.getAccountKeys(),i=[];return n.forEach(o=>{let s=this.getAccount(o,t);if(!s||e.homeAccountId&&!this.matchHomeAccountId(s,e.homeAccountId)||e.username&&!this.matchUsername(s.username,e.username)||e.environment&&!this.matchEnvironment(s,e.environment)||e.realm&&!this.matchRealm(s,e.realm)||e.nativeAccountId&&!this.matchNativeAccountId(s,e.nativeAccountId)||e.authorityType&&!this.matchAuthorityType(s,e.authorityType))return;let a={localAccountId:e?.localAccountId,name:e?.name},c=s.tenantProfiles?.filter(l=>this.tenantProfileMatchesFilter(l,a));c&&c.length===0||i.push(s)}),i}credentialMatchesFilter(e,t){return!(t.clientId&&!this.matchClientId(e,t.clientId)||t.userAssertionHash&&!this.matchUserAssertionHash(e,t.userAssertionHash)||typeof t.homeAccountId=="string"&&!this.matchHomeAccountId(e,t.homeAccountId)||t.environment&&!this.matchEnvironment(e,t.environment)||t.realm&&!this.matchRealm(e,t.realm)||t.credentialType&&!this.matchCredentialType(e,t.credentialType)||t.familyId&&!this.matchFamilyId(e,t.familyId)||t.target&&!this.matchTarget(e,t.target)||(t.requestedClaimsHash||e.requestedClaimsHash)&&e.requestedClaimsHash!==t.requestedClaimsHash||e.credentialType===it.ACCESS_TOKEN_WITH_AUTH_SCHEME&&(t.tokenType&&!this.matchTokenType(e,t.tokenType)||t.tokenType===de.SSH&&t.keyId&&!this.matchKeyId(e,t.keyId)))}getAppMetadataFilteredBy(e){let t=this.getKeys(),n={};return t.forEach(i=>{if(!this.isAppMetadata(i))return;let o=this.getAppMetadata(i);o&&(e.environment&&!this.matchEnvironment(o,e.environment)||e.clientId&&!this.matchClientId(o,e.clientId)||(n[i]=o))}),n}getAuthorityMetadataByAlias(e){let t=this.getAuthorityMetadataKeys(),n=null;return t.forEach(i=>{if(!this.isAuthorityMetadata(i)||i.indexOf(this.clientId)===-1)return;let o=this.getAuthorityMetadata(i);o&&o.aliases.indexOf(e)!==-1&&(n=o)}),n}removeAllAccounts(e){this.getAllAccounts({},e).forEach(n=>{this.removeAccount(n,e)})}removeAccount(e,t){this.removeAccountContext(e,t);let n=this.getAccountKeys(),i=o=>o.includes(e.homeAccountId)&&o.includes(e.environment);n.filter(i).forEach(o=>{this.removeItem(o,t),this.performanceClient.incrementFields({accountsRemoved:1},t)})}removeAccountContext(e,t){let n=this.getTokenKeys(),i=o=>o.includes(e.homeAccountId)&&o.includes(e.environment);n.idToken.filter(i).forEach(o=>{this.removeIdToken(o,t)}),n.accessToken.filter(i).forEach(o=>{this.removeAccessToken(o,t)}),n.refreshToken.filter(i).forEach(o=>{this.removeRefreshToken(o,t)})}removeAccessToken(e,t){let n=this.getAccessTokenCredential(e,t);if(this.removeItem(e,t),this.performanceClient.incrementFields({accessTokensRemoved:1},t),!n||n.credentialType.toLowerCase()!==it.ACCESS_TOKEN_WITH_AUTH_SCHEME.toLowerCase()||n.tokenType!==de.POP)return;let i=n.keyId;i&&this.cryptoImpl.removeTokenBindingKey(i).catch(()=>{this.commonLogger.error(`Failed to remove token binding key ${i}`,t),this.performanceClient?.incrementFields({removeTokenBindingKeyFailure:1},t)})}removeAppMetadata(e){return this.getKeys().forEach(n=>{this.isAppMetadata(n)&&this.removeItem(n,e)}),!0}getIdToken(e,t,n,i,o){this.commonLogger.trace("CacheManager - getIdToken called");let s={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:it.ID_TOKEN,clientId:this.clientId,realm:i},a=this.getIdTokensByFilter(s,t,n),c=a.size;if(c<1)return this.commonLogger.info("CacheManager:getIdToken - No token found"),null;if(c>1){let l=a;if(!i){let p=new Map;a.forEach((h,d)=>{h.realm===e.tenantId&&p.set(d,h)});let g=p.size;if(g<1)return this.commonLogger.info("CacheManager:getIdToken - Multiple ID tokens found for account but none match account entity tenant id, returning first result"),a.values().next().value;if(g===1)return this.commonLogger.info("CacheManager:getIdToken - Multiple ID tokens found for account, defaulting to home tenant profile"),p.values().next().value;l=p}return this.commonLogger.info("CacheManager:getIdToken - Multiple matching ID tokens found, clearing them"),l.forEach((p,g)=>{this.removeIdToken(g,t)}),o&&t&&o.addFields({multiMatchedID:a.size},t),null}return this.commonLogger.info("CacheManager:getIdToken - Returning ID token"),a.values().next().value}getIdTokensByFilter(e,t,n){let i=n&&n.idToken||this.getTokenKeys().idToken,o=new Map;

85return i.forEach(s=>{if(!this.idTokenKeyMatchesFilter(s,q({clientId:this.clientId},e)))return;let a=this.getIdTokenCredential(s,t);a&&this.credentialMatchesFilter(a,e)&&o.set(s,a)}),o}idTokenKeyMatchesFilter(e,t){let n=e.toLowerCase();return!(t.clientId&&n.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&n.indexOf(t.homeAccountId.toLowerCase())===-1)}removeIdToken(e,t){this.removeItem(e,t)}removeRefreshToken(e,t){this.removeItem(e,t)}getAccessToken(e,t,n,i){let o=t.correlationId;this.commonLogger.trace("CacheManager - getAccessToken called",o);let s=Qe.createSearchScopes(t.scopes),a=t.authenticationScheme||de.BEARER,c=a&&a.toLowerCase()!==de.BEARER.toLowerCase()?it.ACCESS_TOKEN_WITH_AUTH_SCHEME:it.ACCESS_TOKEN,l={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:c,clientId:this.clientId,realm:i||e.tenantId,target:s,tokenType:a,keyId:t.sshKid,requestedClaimsHash:t.requestedClaimsHash},p=n&&n.accessToken||this.getTokenKeys().accessToken,g=[];p.forEach(d=>{if(this.accessTokenKeyMatchesFilter(d,l,!0)){let m=this.getAccessTokenCredential(d,o);m&&this.credentialMatchesFilter(m,l)&&g.push(m)}});let h=g.length;return h<1?(this.commonLogger.info("CacheManager:getAccessToken - No token found",o),null):h>1?(this.commonLogger.info("CacheManager:getAccessToken - Multiple access tokens found, clearing them",o),g.forEach(d=>{this.removeAccessToken(this.generateCredentialKey(d),o)}),this.performanceClient.addFields({multiMatchedAT:g.length},o),null):(this.commonLogger.info("CacheManager:getAccessToken - Returning access token",o),g[0])}accessTokenKeyMatchesFilter(e,t,n){let i=e.toLowerCase();if(t.clientId&&i.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&i.indexOf(t.homeAccountId.toLowerCase())===-1||t.realm&&i.indexOf(t.realm.toLowerCase())===-1||t.requestedClaimsHash&&i.indexOf(t.requestedClaimsHash.toLowerCase())===-1)return!1;if(t.target){let o=t.target.asArray();for(let s=0;s<o.length;s++){if(n&&!i.includes(o[s].toLowerCase()))return!1;if(!n&&i.includes(o[s].toLowerCase()))return!0}}return!0}getAccessTokensByFilter(e,t){let n=this.getTokenKeys(),i=[];return n.accessToken.forEach(o=>{if(!this.accessTokenKeyMatchesFilter(o,e,!0))return;let s=this.getAccessTokenCredential(o,t);s&&this.credentialMatchesFilter(s,e)&&i.push(s)}),i}getRefreshToken(e,t,n,i,o){this.commonLogger.trace("CacheManager - getRefreshToken called");let s=t?oi:void 0,a={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:it.REFRESH_TOKEN,clientId:this.clientId,familyId:s},c=i&&i.refreshToken||this.getTokenKeys().refreshToken,l=[];c.forEach(g=>{if(this.refreshTokenKeyMatchesFilter(g,a)){let h=this.getRefreshTokenCredential(g,n);h&&this.credentialMatchesFilter(h,a)&&l.push(h)}});let p=l.length;return p<1?(this.commonLogger.info("CacheManager:getRefreshToken - No refresh token found."),null):(p>1&&o&&n&&o.addFields({multiMatchedRT:p},n),this.commonLogger.info("CacheManager:getRefreshToken - returning refresh token"),l[0])}refreshTokenKeyMatchesFilter(e,t){let n=e.toLowerCase();return!(t.familyId&&n.indexOf(t.familyId.toLowerCase())===-1||!t.familyId&&t.clientId&&n.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&n.indexOf(t.homeAccountId.toLowerCase())===-1)}readAppMetadataFromCache(e){let t={environment:e,clientId:this.clientId},n=this.getAppMetadataFilteredBy(t),i=Object.keys(n).map(s=>n[s]),o=i.length;if(o<1)return null;if(o>1)throw K(gi);return i[0]}isAppMetadataFOCI(e){let t=this.readAppMetadataFromCache(e);return!!(t&&t.familyId===oi)}matchHomeAccountId(e,t){return typeof e.homeAccountId=="string"&&t===e.homeAccountId}matchLocalAccountIdFromTokenClaims(e,t){let n=e.oid||e.sub;return t===n}matchLocalAccountIdFromTenantProfile(e,t){return e.localAccountId===t}matchName(e,t){return t.toLowerCase()===e.name?.toLowerCase()}matchUsername(e,t){return!!(e&&typeof e=="string"&&t?.toLowerCase()===e.toLowerCase())}matchUserAssertionHash(e,t){return!!(e.userAssertionHash&&t===e.userAssertionHash)}matchEnvironment(e,t){if(this.staticAuthorityOptions){let i=Rp(this.staticAuthorityOptions,this.commonLogger);if(i.includes(t)&&i.includes(e.environment))return!0}let n=this.getAuthorityMetadataByAlias(t);return!!(n&&n.aliases.indexOf(e.environment)>-1)}matchCredentialType(e,t){return e.credentialType&&t.toLowerCase()===e.credentialType.toLowerCase()}matchClientId(e,t){return!!(e.clientId&&t===e.clientId)}matchFamilyId(e,t){return!!(e.familyId&&t===e.familyId)}matchRealm(e,t){return e.realm?.toLowerCase()===t.toLowerCase()}matchNativeAccountId(e,t){return!!(e.nativeAccountId&&t===e.nativeAccountId)}matchLoginHintFromTokenClaims(e,t){return e.login_hint===t||e.preferred_username===t||e.upn===t}matchSid(e,t){return e.sid===t}matchAuthorityType(e,t){return!!(e.authorityType&&t.toLowerCase()===e.authorityType.toLowerCase())}matchTarget(e,t){return e.credentialType!==it.ACCESS_TOKEN&&e.credentialType!==it.ACCESS_TOKEN_WITH_AUTH_SCHEME||!e.target?!1:Qe.fromString(e.target).containsScopeSet(t)}matchTokenType(e,t){return!!(e.tokenType&&e.tokenType===t)}matchKeyId(e,t){return!!(e.keyId&&e.keyId===t)}isAppMetadata(e){return e.indexOf(Ls)!==-1}isAuthorityMetadata(e){return e.indexOf(go.CACHE_KEY)!==-1}generateAuthorityMetadataCacheKey(e){return`${go.CACHE_KEY}-${this.clientId}-${e}`}static toObject(e,t){for(let n in t)e[n]=t[n];return e}},Aa=class extends Di{setAccount(){return x(this,null,function*(){throw K(le)})}getAccount(){throw K(le)}setIdTokenCredential(){return x(this,null,function*(){throw K(le)})}getIdTokenCredential(){throw K(le)}setAccessTokenCredential(){return x(this,null,function*(){throw K(le)})}getAccessTokenCredential(){throw K(le)}setRefreshTokenCredential(){return x(this,null,function*(){throw K(le)})}getRefreshTokenCredential(){throw K(le)}setAppMetadata(){throw K(le)}getAppMetadata(){throw K(le)}setServerTelemetry(){throw K(le)}getServerTelemetry(){throw K(le)}setAuthorityMetadata(){throw K(le)}getAuthorityMetadata(){throw K(le)}getAuthorityMetadataKeys(){throw K(le)}setThrottlingCache(){throw K(le)}getThrottlingCache(){throw K(le)}removeItem(){throw K(le)}getKeys(){throw K(le)}getAccountKeys(){throw K(le)}getTokenKeys(){throw K(le)}generateCredentialKey(){throw K(le)}generateAccountKey(){throw K(le)}};var w={AcquireTokenByCode:"acquireTokenByCode",AcquireTokenByRefreshToken:"acquireTokenByRefreshToken",AcquireTokenSilent:"acquireTokenSilent",AcquireTokenSilentAsync:"acquireTokenSilentAsync",AcquireTokenPopup:"acquireTokenPopup",AcquireTokenPreRedirect:"acquireTokenPreRedirect",AcquireTokenRedirect:"acquireTokenRedirect",CryptoOptsGetPublicKeyThumbprint:"cryptoOptsGetPublicKeyThumbprint",CryptoOptsSignJwt:"cryptoOptsSignJwt",SilentCacheClientAcquireToken:"silentCacheClientAcquireToken",SilentIframeClientAcquireToken:"silentIframeClientAcquireToken",AwaitConcurrentIframe:"awaitConcurrentIframe",SilentRefreshClientAcquireToken:"silentRefreshClientAcquireToken",SsoSilent:"ssoSilent",StandardInteractionClientGetDiscoveredAuthority:"standardInteractionClientGetDiscoveredAuthority",FetchAccountIdWithNativeBroker:"fetchAccountIdWithNativeBroker",NativeInteractionClientAcquireToken:"nativeInteractionClientAcquireToken",BaseClientCreateTokenRequestHeaders:"baseClientCreateTokenRequestHeaders",NetworkClientSendPostRequestAsync:"networkClientSendPostRequestAsync",RefreshTokenClientExecutePostToTokenEndpoint:"refreshTokenClientExecutePostToTokenEndpoint",AuthorizationCodeClientExecutePostToTokenEndpoint:"authorizationCodeClientExecutePostToTokenEndpoint",BrokerHandhshake:"brokerHandshake",AcquireTokenByRefreshTokenInBroker:"acquireTokenByRefreshTokenInBroker",AcquireTokenByBroker:"acquireTokenByBroker",RefreshTokenClientExecuteTokenRequest:"refreshTokenClientExecuteTokenRequest",RefreshTokenClientAcquireToken:"refreshTokenClientAcquireToken",RefreshTokenClientAcquireTokenWithCachedRefreshToken:"refreshTokenClientAcquireTokenWithCachedRefreshToken",RefreshTokenClientAcquireTokenByRefreshToken:"refreshTokenClientAcquireTokenByRefreshToken",RefreshTokenClientCreateTokenRequestBody:"refreshTokenClientCreateTokenRequestBody",AcquireTokenFromCache:"acquireTokenFromCache",SilentFlowClientAcquireCachedToken:"silentFlowClientAcquireCachedToken",SilentFlowClientGenerateResultFromCacheRecord:"silentFlowClientGenerateResultFromCacheRecord",AcquireTokenBySilentIframe:"acquireTokenBySilentIframe",InitializeBaseRequest:"initializeBaseRequest",InitializeSilentRequest:"initializeSilentRequest",InitializeClientApplication:"initializeClientApplication",InitializeCache:"initializeCache",SilentIframeClientTokenHelper:"silentIframeClientTokenHelper",SilentHandlerInitiateAuthRequest:"silentHandlerInitiateAuthRequest",SilentHandlerMonitorIframeForHash:"silentHandlerMonitorIframeForHash",SilentHandlerLoadFrame:"silentHandlerLoadFrame",SilentHandlerLoadFrameSync:"silentHandlerLoadFrameSync",StandardInteractionClientCreateAuthCodeClient:"standardInteractionClientCreateAuthCodeClient",

85StandardInteractionClientGetClientConfiguration:"standardInteractionClientGetClientConfiguration",StandardInteractionClientInitializeAuthorizationRequest:"standardInteractionClientInitializeAuthorizationRequest",GetAuthCodeUrl:"getAuthCodeUrl",GetStandardParams:"getStandardParams",HandleCodeResponseFromServer:"handleCodeResponseFromServer",HandleCodeResponse:"handleCodeResponse",HandleResponseEar:"handleResponseEar",HandleResponsePlatformBroker:"handleResponsePlatformBroker",HandleResponseCode:"handleResponseCode",UpdateTokenEndpointAuthority:"updateTokenEndpointAuthority",AuthClientAcquireToken:"authClientAcquireToken",AuthClientExecuteTokenRequest:"authClientExecuteTokenRequest",AuthClientCreateTokenRequestBody:"authClientCreateTokenRequestBody",PopTokenGenerateCnf:"popTokenGenerateCnf",PopTokenGenerateKid:"popTokenGenerateKid",HandleServerTokenResponse:"handleServerTokenResponse",DeserializeResponse:"deserializeResponse",AuthorityFactoryCreateDiscoveredInstance:"authorityFactoryCreateDiscoveredInstance",AuthorityResolveEndpointsAsync:"authorityResolveEndpointsAsync",AuthorityResolveEndpointsFromLocalSources:"authorityResolveEndpointsFromLocalSources",AuthorityGetCloudDiscoveryMetadataFromNetwork:"authorityGetCloudDiscoveryMetadataFromNetwork",AuthorityUpdateCloudDiscoveryMetadata:"authorityUpdateCloudDiscoveryMetadata",AuthorityGetEndpointMetadataFromNetwork:"authorityGetEndpointMetadataFromNetwork",AuthorityUpdateEndpointMetadata:"authorityUpdateEndpointMetadata",AuthorityUpdateMetadataWithRegionalInformation:"authorityUpdateMetadataWithRegionalInformation",RegionDiscoveryDetectRegion:"regionDiscoveryDetectRegion",RegionDiscoveryGetRegionFromIMDS:"regionDiscoveryGetRegionFromIMDS",RegionDiscoveryGetCurrentVersion:"regionDiscoveryGetCurrentVersion",AcquireTokenByCodeAsync:"acquireTokenByCodeAsync",GetEndpointMetadataFromNetwork:"getEndpointMetadataFromNetwork",GetCloudDiscoveryMetadataFromNetworkMeasurement:"getCloudDiscoveryMetadataFromNetworkMeasurement",HandleRedirectPromiseMeasurement:"handleRedirectPromise",HandleNativeRedirectPromiseMeasurement:"handleNativeRedirectPromise",UpdateCloudDiscoveryMetadataMeasurement:"updateCloudDiscoveryMetadataMeasurement",UsernamePasswordClientAcquireToken:"usernamePasswordClientAcquireToken",NativeMessageHandlerHandshake:"nativeMessageHandlerHandshake",NativeGenerateAuthResult:"nativeGenerateAuthResult",RemoveHiddenIframe:"removeHiddenIframe",ClearTokensAndKeysWithClaims:"clearTokensAndKeysWithClaims",CacheManagerGetRefreshToken:"cacheManagerGetRefreshToken",ImportExistingCache:"importExistingCache",SetUserData:"setUserData",LocalStorageUpdated:"localStorageUpdated",GeneratePkceCodes:"generatePkceCodes",GenerateCodeVerifier:"generateCodeVerifier",GenerateCodeChallengeFromVerifier:"generateCodeChallengeFromVerifier",Sha256Digest:"sha256Digest",GetRandomValues:"getRandomValues",GenerateHKDF:"generateHKDF",GenerateBaseKey:"generateBaseKey",Base64Decode:"base64Decode",UrlEncodeArr:"urlEncodeArr",Encrypt:"encrypt",Decrypt:"decrypt",GenerateEarKey:"generateEarKey",DecryptEarResponse:"decryptEarResponse",LoadExternalTokens:"LoadExternalTokens",LoadAccount:"loadAccount",LoadIdToken:"loadIdToken",LoadAccessToken:"loadAccessToken",LoadRefreshToken:"loadRefreshToken",SsoCapable:"ssoCapable"},JA=new Map([[w.AcquireTokenByCode,"ATByCode"],[w.AcquireTokenByRefreshToken,"ATByRT"],[w.AcquireTokenSilent,"ATS"],[w.AcquireTokenSilentAsync,"ATSAsync"],[w.AcquireTokenPopup,"ATPopup"],[w.AcquireTokenRedirect,"ATRedirect"],[w.CryptoOptsGetPublicKeyThumbprint,"CryptoGetPKThumb"],[w.CryptoOptsSignJwt,"CryptoSignJwt"],[w.SilentCacheClientAcquireToken,"SltCacheClientAT"],[w.SilentIframeClientAcquireToken,"SltIframeClientAT"],[w.SilentRefreshClientAcquireToken,"SltRClientAT"],[w.SsoSilent,"SsoSlt"],[w.StandardInteractionClientGetDiscoveredAuthority,"StdIntClientGetDiscAuth"],[w.FetchAccountIdWithNativeBroker,"FetchAccIdWithNtvBroker"],[w.NativeInteractionClientAcquireToken,"NtvIntClientAT"],[w.BaseClientCreateTokenRequestHeaders,"BaseClientCreateTReqHead"],[w.NetworkClientSendPostRequestAsync,"NetClientSendPost"],[w.RefreshTokenClientExecutePostToTokenEndpoint,"RTClientExecPost"],[w.AuthorizationCodeClientExecutePostToTokenEndpoint,"AuthCodeClientExecPost"],[w.BrokerHandhshake,"BrokerHandshake"],[w.AcquireTokenByRefreshTokenInBroker,"ATByRTInBroker"],[w.AcquireTokenByBroker,"ATByBroker"],[w.RefreshTokenClientExecuteTokenRequest,"RTClientExecTReq"],[w.RefreshTokenClientAcquireToken,"RTClientAT"],[w.RefreshTokenClientAcquireTokenWithCachedRefreshToken,"RTClientATWithCachedRT"],[w.RefreshTokenClientAcquireTokenByRefreshToken,"RTClientATByRT"],[w.RefreshTokenClientCreateTokenRequestBody,"RTClientCreateTReqBody"],[w.AcquireTokenFromCache,"ATFromCache"],[w.SilentFlowClientAcquireCachedToken,"SltFlowClientATCached"],[w.SilentFlowClientGenerateResultFromCacheRecord,"SltFlowClientGenResFromCache"],[w.AcquireTokenBySilentIframe,"ATBySltIframe"],[w.InitializeBaseRequest,"InitBaseReq"],[w.InitializeSilentRequest,"InitSltReq"],[w.InitializeClientApplication,"InitClientApplication"],[w.InitializeCache,"InitCache"],[w.ImportExistingCache,"importCache"],[w.SetUserData,"setUserData"],[w.LocalStorageUpdated,"localStorageUpdated"],[w.SilentIframeClientTokenHelper,"SIClientTHelper"],[w.SilentHandlerInitiateAuthRequest,"SHandlerInitAuthReq"],[w.SilentHandlerMonitorIframeForHash,"SltHandlerMonitorIframeForHash"],[w.SilentHandlerLoadFrame,"SHandlerLoadFrame"],[w.SilentHandlerLoadFrameSync,"SHandlerLoadFrameSync"],[w.StandardInteractionClientCreateAuthCodeClient,"StdIntClientCreateAuthCodeClient"],[w.StandardInteractionClientGetClientConfiguration,"StdIntClientGetClientConf"],[w.StandardInteractionClientInitializeAuthorizationRequest,"StdIntClientInitAuthReq"],[w.GetAuthCodeUrl,"GetAuthCodeUrl"],[w.HandleCodeResponseFromServer,"HandleCodeResFromServer"],[w.HandleCodeResponse,"HandleCodeResp"],[w.HandleResponseEar,"HandleRespEar"],[w.HandleResponseCode,"HandleRespCode"],[w.HandleResponsePlatformBroker,"HandleRespPlatBroker"],[w.UpdateTokenEndpointAuthority,"UpdTEndpointAuth"],[w.AuthClientAcquireToken,"AuthClientAT"],[w.AuthClientExecuteTokenRequest,"AuthClientExecTReq"],[w.AuthClientCreateTokenRequestBody,"AuthClientCreateTReqBody"],[w.PopTokenGenerateCnf,"PopTGenCnf"],[w.PopTokenGenerateKid,"PopTGenKid"],[w.HandleServerTokenResponse,"HandleServerTRes"],[w.DeserializeResponse,"DeserializeRes"],[w.AuthorityFactoryCreateDiscoveredInstance,"AuthFactCreateDiscInst"],[w.AuthorityResolveEndpointsAsync,"AuthResolveEndpointsAsync"],[w.AuthorityResolveEndpointsFromLocalSources,"AuthResolveEndpointsFromLocal"],[w.AuthorityGetCloudDiscoveryMetadataFromNetwork,"AuthGetCDMetaFromNet"],[w.AuthorityUpdateCloudDiscoveryMetadata,"AuthUpdCDMeta"],[w.AuthorityGetEndpointMetadataFromNetwork,"AuthUpdCDMetaFromNet"],[w.AuthorityUpdateEndpointMetadata,"AuthUpdEndpointMeta"],[w.AuthorityUpdateMetadataWithRegionalInformation,"AuthUpdMetaWithRegInfo"],[w.RegionDiscoveryDetectRegion,"RegDiscDetectReg"],[w.RegionDiscoveryGetRegionFromIMDS,"RegDiscGetRegFromIMDS"],[w.RegionDiscoveryGetCurrentVersion,"RegDiscGetCurrentVer"],[w.AcquireTokenByCodeAsync,"ATByCodeAsync"],[w.GetEndpointMetadataFromNetwork,"GetEndpointMetaFromNet"],[w.GetCloudDiscoveryMetadataFromNetworkMeasurement,"GetCDMetaFromNet"],[w.HandleRedirectPromiseMeasurement,"HandleRedirectPromise"],[w.HandleNativeRedirectPromiseMeasurement,"HandleNtvRedirectPromise"],[w.UpdateCloudDiscoveryMetadataMeasurement,"UpdateCDMeta"],[w.UsernamePasswordCl

85ientAcquireToken,"UserPassClientAT"],[w.NativeMessageHandlerHandshake,"NtvMsgHandlerHandshake"],[w.NativeGenerateAuthResult,"NtvGenAuthRes"],[w.RemoveHiddenIframe,"RemoveHiddenIframe"],[w.ClearTokensAndKeysWithClaims,"ClearTAndKeysWithClaims"],[w.CacheManagerGetRefreshToken,"CacheManagerGetRT"],[w.GeneratePkceCodes,"GenPkceCodes"],[w.GenerateCodeVerifier,"GenCodeVerifier"],[w.GenerateCodeChallengeFromVerifier,"GenCodeChallengeFromVerifier"],[w.Sha256Digest,"Sha256Digest"],[w.GetRandomValues,"GetRandomValues"],[w.GenerateHKDF,"genHKDF"],[w.GenerateBaseKey,"genBaseKey"],[w.Base64Decode,"b64Decode"],[w.UrlEncodeArr,"urlEncArr"],[w.Encrypt,"encrypt"],[w.Decrypt,"decrypt"],[w.GenerateEarKey,"genEarKey"],[w.DecryptEarResponse,"decryptEarResp"],[w.SsoCapable,"SsoCapable"]]),ju={NotStarted:0,InProgress:1,Completed:2};var Oc=class{startMeasurement(){}endMeasurement(){}flushMeasurement(){return null}},nn=class{generateId(){return"callback-id"}startMeasurement(e,t){return{end:()=>null,discard:()=>{},add:()=>{},increment:()=>{},event:{eventId:this.generateId(),status:ju.InProgress,authority:"",libraryName:"",libraryVersion:"",clientId:"",name:e,startTimeMs:Date.now(),correlationId:t||""},measurement:new Oc}}startPerformanceMeasurement(){return new Oc}calculateQueuedTime(){return 0}addQueueMeasurement(){}setPreQueueTime(){}endMeasurement(){return null}discardMeasurements(){}removePerformanceCallback(){return!0}addPerformanceCallback(){return""}emitEvents(){}addFields(){}incrementFields(){}cacheEventByCorrelationId(){}};var Dc={tokenRenewalOffsetSeconds:Us,preventCorsPreflight:!1},_v={loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:Ae.Info,correlationId:L.EMPTY_STRING},Nv={claimsBasedCachingEnabled:!1},Fv={sendGetRequestAsync(){return x(this,null,function*(){throw K(le)})},sendPostRequestAsync(){return x(this,null,function*(){throw K(le)})}},Ov={sku:L.SKU,version:vo,cpu:L.EMPTY_STRING,os:L.EMPTY_STRING},Dv={clientSecret:L.EMPTY_STRING,clientAssertion:void 0},Mv={azureCloudInstance:Dn.None,tenant:`${L.DEFAULT_COMMON_TENANT}`},Bv={application:{appName:"",appVersion:""}};function kp({authOptions:r,systemOptions:e,loggerOptions:t,cacheOptions:n,storageInterface:i,networkInterface:o,cryptoInterface:s,clientCredentials:a,libraryInfo:c,telemetry:l,serverTelemetryManager:p,persistencePlugin:g,serializableCache:h}){let d=q(q({},_v),t);return{authOptions:Hv(r),systemOptions:q(q({},Dc),e),loggerOptions:d,cacheOptions:q(q({},Nv),n),storageInterface:i||new Aa(r.clientId,On,new kt(d),new nn),networkInterface:o||Fv,cryptoInterface:s||On,clientCredentials:a||Dv,libraryInfo:q(q({},Ov),c),telemetry:q(q({},Bv),l),serverTelemetryManager:p||null,persistencePlugin:g||null,serializableCache:h||null}}function Hv(r){return q({clientCapabilities:[],azureCloudOptions:Mv,skipAuthorityMetadataCache:!1,instanceAware:!1,encodeExtraQueryParams:!1},r)}function Mc(r){return r.authOptions.authority.options.protocolMode===Ue.OIDC}var wt={HOME_ACCOUNT_ID:"home_account_id",UPN:"UPN"};var Ke={};Mt(Ke,{addApplicationTelemetry:()=>Ta,addAuthorizationCode:()=>Dh,addBrokerParameters:()=>cn,addCcsOid:()=>sn,addCcsUpn:()=>Ln,addClaims:()=>Ui,addCliData:()=>Hh,addClientAssertion:()=>Ra,addClientAssertionType:()=>Pa,addClientCapabilitiesToClaims:()=>xp,addClientId:()=>Hi,addClientInfo:()=>qi,addClientSecret:()=>Ia,addCodeChallengeParams:()=>Zv,addCodeVerifier:()=>Bh,addCorrelationId:()=>Ki,addDeviceCode:()=>ey,addDomainHint:()=>Nh,addEARParameters:()=>oy,addExtraQueryParameters:()=>an,addGrantType:()=>ka,addIdTokenHint:()=>_h,addInstanceAware:()=>xa,addLibraryInfo:()=>wa,addLoginHint:()=>Eo,addLogoutHint:()=>Lh,addNativeBroker:()=>Xv,addNonce:()=>Oh,addOboAssertion:()=>ty,addPassword:()=>iy,addPopToken:()=>_a,addPostBodyParameters:()=>sy,addPostLogoutRedirectUri:()=>xh,addPrompt:()=>Fh,addRedirectUri:()=>Li,addRefreshToken:()=>Mh,addRequestTokenUse:()=>ry,addResponseMode:()=>kh,addResponseType:()=>Jv,addScopes:()=>Bi,addServerTelemetry:()=>Fa,addSid:()=>qc,addSshJwk:()=>Na,addState:()=>ba,addThrottling:()=>Oa,addUsername:()=>ny,instrumentBrokerParams:()=>Mi});var on={};Mt(on,{ACCESS_TOKEN:()=>Kv,BROKER_CLIENT_ID:()=>pr,BROKER_REDIRECT_URI:()=>Kc,CCS_HEADER:()=>Qv,CLAIMS:()=>$u,CLIENT_ASSERTION:()=>vh,CLIENT_ASSERTION_TYPE:()=>yh,CLIENT_ID:()=>Dr,CLIENT_INFO:()=>zv,CLIENT_REQUEST_ID:()=>nh,CLIENT_SECRET:()=>mh,CLI_DATA:()=>Ph,CODE:()=>Zu,CODE_CHALLENGE:()=>eh,CODE_CHALLENGE_METHOD:()=>th,CODE_VERIFIER:()=>rh,DEVICE_CODE:()=>gh,DOMAIN_HINT:()=>bh,EAR_JWE_CRYPTO:()=>Rh,EAR_JWK:()=>Ih,ERROR:()=>Lv,ERROR_DESCRIPTION:()=>Uv,EXPIRES_IN:()=>jv,FOCI:()=>Wv,GRANT_TYPE:()=>zu,ID_TOKEN:()=>qv,ID_TOKEN_HINT:()=>ph,INSTANCE_AWARE:()=>So,LOGIN_HINT:()=>Th,LOGOUT_HINT:()=>Ah,NATIVE_BROKER:()=>Eh,NONCE:()=>Ju,OBO_ASSERTION:()=>Ch,ON_BEHALF_OF:()=>$v,POST_LOGOUT_URI:()=>fh,PROMPT:()=>Xu,REDIRECT_URI:()=>Bc,REFRESH_TOKEN:()=>Qu,REFRESH_TOKEN_EXPIRES_IN:()=>Vv,REQUESTED_TOKEN_USE:()=>Sh,REQ_CNF:()=>Lc,RESPONSE_MODE:()=>Gu,RESPONSE_TYPE:()=>Vu,RETURN_SPA_CODE:()=>Uc,SCOPE:()=>Wu,SESSION_STATE:()=>Gv,SID:()=>wh,STATE:()=>Yu,TOKEN_TYPE:()=>Hc,X_APP_NAME:()=>hh,X_APP_VER:()=>dh,X_CLIENT_CPU:()=>ah,X_CLIENT_CURR_TELEM:()=>ch,X_CLIENT_EXTRA_SKU:()=>Yv,X_CLIENT_LAST_TELEM:()=>lh,X_CLIENT_OS:()=>sh,X_CLIENT_SKU:()=>ih,X_CLIENT_VER:()=>oh,X_MS_LIB_CAPABILITY:()=>uh});var Dr="client_id",Bc="redirect_uri",Vu="response_type",Gu="response_mode",zu="grant_type",$u="claims",Wu="scope",Lv="error",Uv="error_description",Kv="access_token",qv="id_token",Qu="refresh_token",jv="expires_in",Vv="refresh_token_expires_in",Yu="state",Ju="nonce",Xu="prompt",Gv="session_state",zv="client_info",Zu="code",eh="code_challenge",th="code_challenge_method",rh="code_verifier",nh="client-request-id",ih="x-client-SKU",oh="x-client-VER",sh="x-client-OS",ah="x-client-CPU",ch="x-client-current-telemetry",lh="x-client-last-telemetry",uh="x-ms-lib-capability",hh="x-app-name",dh="x-app-ver",fh="post_logout_redirect_uri",ph="id_token_hint",gh="device_code",mh="client_secret",vh="client_assertion",yh="client_assertion_type",Hc="token_type",Lc="req_cnf",Ch="assertion",Sh="requested_token_use",$v="on_behalf_of",Wv="foci",Qv="X-AnchorMailbox",Uc="return_spa_code",Eh="nativebroker",Ah="logout_hint",wh="sid",Th="login_hint",bh="domain_hint",Yv="x-client-xtra-sku",pr="brk_client_id",Kc="brk_redirect_uri",So="instance_aware",Ih="ear_jwk",Rh="ear_jwe_crypto",Ph="clidata";function Mi(r,e,t){if(!e)return;let n=r.get(Dr);n&&r.has(pr)&&t?.addFields({embeddedClientId:n,embeddedRedirectUri:r.get(Bc)},e)}function Jv(r,e){r.set(Vu,e)}function kh(r,e){r.set(Gu,e||Du.QUERY)}function Xv(r){r.set(Eh,"1")}function Bi(r,e,t=!0,n=Wt){t&&!n.includes("openid")&&!e.includes("openid")&&n.push("openid");let i=t?[...e||[],...n]:e||[],o=new Qe(i);r.set(Wu,o.printScopes())}function Hi(r,e){r.set(Dr,e)}function Li(r,e){r.set(Bc,e)}function xh(r,e){r.set(fh,e)}function _h(r,e){r.set(ph,e)}function Nh(r,e){r.set(bh,e)}function Eo(r,e){r.set(Th,e)}function Ln(r,e){r.set(nt.CCS_HEADER,`UPN:${e}`)}function sn(r,e){r.set(nt.CCS_HEADER,`Oid:${e.uid}@${e.utid}`)}function qc(r,e){r.set("sid",e)}function Ui(r,e,t){let n=xp(e,t);try{JSON.parse(n)}catch{throw fe(Mn)}r.set($u,n)}function Ki(r,e){r.set(nh,e)}

85function wa(r,e){r.set(ih,e.sku),r.set(oh,e.version),e.os&&r.set(sh,e.os),e.cpu&&r.set(ah,e.cpu)}function Ta(r,e){e?.appName&&r.set(hh,e.appName),e?.appVersion&&r.set(dh,e.appVersion)}function Fh(r,e){r.set(Xu,e)}function ba(r,e){e&&r.set(Yu,e)}function Oh(r,e){r.set(Ju,e)}function Zv(r,e,t){if(e&&t)r.set(eh,e),r.set(th,t);else throw fe(xi)}function Dh(r,e){r.set(Zu,e)}function ey(r,e){r.set(gh,e)}function Mh(r,e){r.set(Qu,e)}function Bh(r,e){r.set(rh,e)}function Ia(r,e){r.set(mh,e)}function Ra(r,e){e&&r.set(vh,e)}function Pa(r,e){e&&r.set(yh,e)}function ty(r,e){r.set(Ch,e)}function ry(r,e){r.set(Sh,e)}function ka(r,e){r.set(zu,e)}function qi(r){r.set(yp,"1")}function Hh(r){r.set(Ph,"1")}function xa(r){r.has(So)||r.set(So,"true")}function an(r,e){Object.entries(e).forEach(([t,n])=>{!r.has(t)&&n&&r.set(t,n)})}function xp(r,e){let t;if(!r)t={};else try{t=JSON.parse(r)}catch{throw fe(Mn)}return e&&e.length>0&&(t.hasOwnProperty(fo.ACCESS_TOKEN)||(t[fo.ACCESS_TOKEN]={}),t[fo.ACCESS_TOKEN][fo.XMS_CC]={values:e}),JSON.stringify(t)}function ny(r,e){r.set(Pc.username,e)}function iy(r,e){r.set(Pc.password,e)}function _a(r,e){e&&(r.set(Hc,de.POP),r.set(Lc,e))}function Na(r,e){e&&(r.set(Hc,de.SSH),r.set(Lc,e))}function Fa(r,e){r.set(ch,e.generateCurrentRequestHeaderValue()),r.set(lh,e.generateLastRequestHeaderValue())}function Oa(r){r.set(uh,Yr.X_MS_LIB_CAPABILITY_VALUE)}function Lh(r,e){r.set(Ah,e)}function cn(r,e,t){r.has(pr)||r.set(pr,e),r.has(Kc)||r.set(Kc,t)}function oy(r,e){r.set(Ih,encodeURIComponent(e)),r.set(Rh,"eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0")}function sy(r,e){Object.entries(e).forEach(([t,n])=>{n&&r.set(t,n)})}var To={};Mt(To,{createDiscoveredInstance:()=>Gh});function _p(r){return r.hasOwnProperty("authorization_endpoint")&&r.hasOwnProperty("token_endpoint")&&r.hasOwnProperty("issuer")&&r.hasOwnProperty("jwks_uri")}function Np(r){return r.hasOwnProperty("tenant_discovery_endpoint")&&r.hasOwnProperty("metadata")}function Fp(r){return r.hasOwnProperty("error")&&r.hasOwnProperty("error_description")}var $e=(r,e,t,n,i)=>(...o)=>{t.trace(`Executing function ${e}`);let s=n?.startMeasurement(e,i);if(i){let a=e+"CallCount";n?.incrementFields({[a]:1},i)}try{let a=r(...o);return s?.end({success:!0}),t.trace(`Returning result from ${e}`),a}catch(a){t.trace(`Error occurred in ${e}`);try{t.trace(JSON.stringify(a))}catch{t.trace("Unable to print error message.")}throw s?.end({success:!1},a),a}},H=(r,e,t,n,i)=>(...o)=>{t.trace(`Executing function ${e}`);let s=n?.startMeasurement(e,i);if(i){let a=e+"CallCount";n?.incrementFields({[a]:1},i)}return n?.setPreQueueTime(e,i),r(...o).then(a=>(t.trace(`Returning result from ${e}`),s?.end({success:!0}),a)).catch(a=>{t.trace(`Error occurred in ${e}`);try{t.trace(JSON.stringify(a))}catch{t.trace("Unable to print error message.")}throw s?.end({success:!1},a),a})};var Op=(()=>{class r{constructor(t,n,i,o){this.networkInterface=t,this.logger=n,this.performanceClient=i,this.correlationId=o}detectRegion(t,n){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.RegionDiscoveryDetectRegion,this.correlationId);let i=t;if(i)n.region_source=si.ENVIRONMENT_VARIABLE;else{let o=r.IMDS_OPTIONS;try{let s=yield H(this.getRegionFromIMDS.bind(this),w.RegionDiscoveryGetRegionFromIMDS,this.logger,this.performanceClient,this.correlationId)(L.IMDS_VERSION,o);if(s.status===hr.SUCCESS&&(i=s.body,n.region_source=si.IMDS),s.status===hr.BAD_REQUEST){let a=yield H(this.getCurrentVersion.bind(this),w.RegionDiscoveryGetCurrentVersion,this.logger,this.performanceClient,this.correlationId)(o);if(!a)return n.region_source=si.FAILED_AUTO_DETECTION,null;let c=yield H(this.getRegionFromIMDS.bind(this),w.RegionDiscoveryGetRegionFromIMDS,this.logger,this.performanceClient,this.correlationId)(a,o);c.status===hr.SUCCESS&&(i=c.body,n.region_source=si.IMDS)}}catch{return n.region_source=si.FAILED_AUTO_DETECTION,null}}return i||(n.region_source=si.FAILED_AUTO_DETECTION),i||null})}getRegionFromIMDS(t,n){return x(this,null,function*(){return this.performanceClient?.addQueueMeasurement(w.RegionDiscoveryGetRegionFromIMDS,this.correlationId),this.networkInterface.sendGetRequestAsync(`${L.IMDS_ENDPOINT}?api-version=${t}&format=text`,n,L.IMDS_TIMEOUT)})}getCurrentVersion(t){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.RegionDiscoveryGetCurrentVersion,this.correlationId);try{let n=yield this.networkInterface.sendGetRequestAsync(`${L.IMDS_ENDPOINT}?format=json`,t);return n.status===hr.BAD_REQUEST&&n.body&&n.body["newest-versions"]&&n.body["newest-versions"].length>0?n.body["newest-versions"][0]:null}catch{return null}})}}return r.IMDS_OPTIONS={headers:{Metadata:"true"}},r})();var Ye={};Mt(Ye,{createAccessTokenEntity:()=>qh,createIdTokenEntity:()=>Kh,createRefreshTokenEntity:()=>jh,generateAppMetadataKey:()=>gy,generateAuthorityMetadataExpiresAt:()=>Vc,isAccessTokenEntity:()=>uy,isAppMetadataEntity:()=>my,isAuthorityMetadataEntity:()=>vy,isAuthorityMetadataExpired:()=>Gc,isCredentialEntity:()=>jc,isIdTokenEntity:()=>hy,isRefreshTokenEntity:()=>dy,isServerTelemetryEntity:()=>fy,isThrottlingEntity:()=>py,updateAuthorityEndpointMetadata:()=>wo,updateCloudDiscoveryMetadata:()=>Ma});var st={};Mt(st,{delay:()=>ly,isCacheExpired:()=>cy,isTokenExpired:()=>Ao,nowSeconds:()=>Qt,toDateFromSeconds:()=>Da,toSecondsFromDate:()=>ay,wasClockTurnedBack:()=>Uh});function Qt(){return Math.round(new Date().getTime()/1e3)}function ay(r){return r.getTime()/1e3}function Da(r){return r?new Date(Number(r)*1e3):new Date}function Ao(r,e){let t=Number(r)||0;return Qt()+e>t}function cy(r,e){let t=Number(r)+e*24*60*60*1e3;return Date.now()>t}function Uh(r){return Number(r)>Qt()}function ly(r,e){return new Promise(t=>setTimeout(()=>t(e),r))}function Kh(r,e,t,n,i){return{credentialType:it.ID_TOKEN,homeAccountId:r,environment:e,clientId:n,secret:t,realm:i,lastUpdatedAt:Date.now().toString()}}function qh(r,e,t,n,i,o,s,a,c,l,p,g,h,d,m){let f={homeAccountId:r,credentialType:it.ACCESS_TOKEN,secret:t,cachedAt:Qt().toString(),expiresOn:s.toString(),extendedExpiresOn:a.toString(),environment:e,clientId:n,realm:i,target:o,tokenType:p||de.BEARER,lastUpdatedAt:Date.now().toString()};if(g&&(f.userAssertionHash=g),l&&(f.refreshOn=l.toString()),d&&(f.requestedClaims=d,f.requestedClaimsHash=m),f.tokenType?.toLowerCase()!==de.BEARER.toLowerCase())switch(f.credentialType=it.ACCESS_TOKEN_WITH_AUTH_SCHEME,f.tokenType){case de.POP:let y=rn(t,c);if(!y?.cnf?.kid)throw K(Si);f.keyId=y.cnf.kid;break;case de.SSH:f.keyId=h}return f}function jh(r,e,t,n,i,o,s){let a={credentialType:it.REFRESH_TOKEN,homeAccountId:r,environment:e,clientId:n,secret:t,lastUpdatedAt:Date.now().toString()};return o&&(a.userAssertionHash=o),i&&(a.familyId=i),s&&(a.expiresOn=s.toString()),a}function jc(r){return r.hasOwnProperty("homeAccountId")&&r.hasOwnProperty("environment")&&r.hasOwnProperty("credentialType")&&r.hasOwnProperty("clientId")&&r.hasOwnProperty("secret")}function uy(r){return r?jc(r)&&r.hasOwnProperty("realm")&&r.hasOwnProperty("target")&&(r.credentialType===it.ACCESS_TOKEN||r.credentialType===it.ACCESS_TOKEN_WITH_AUTH_SCHEME):!1}function hy(r){return r?jc(r)&&r.hasOwnProperty("realm")&&r.credentialType===it.ID_TOKEN:!1}

85function dy(r){return r?jc(r)&&r.credentialType===it.REFRESH_TOKEN:!1}function fy(r,e){let t=r.indexOf(ut.CACHE_KEY)===0,n=!0;return e&&(n=e.hasOwnProperty("failedRequests")&&e.hasOwnProperty("errors")&&e.hasOwnProperty("cacheHits")),t&&n}function py(r,e){let t=!1;r&&(t=r.indexOf(Yr.THROTTLING_PREFIX)===0);let n=!0;return e&&(n=e.hasOwnProperty("throttleTime")),t&&n}function gy({environment:r,clientId:e}){return[Ls,r,e].join(Qr.CACHE_KEY_SEPARATOR).toLowerCase()}function my(r,e){return e?r.indexOf(Ls)===0&&e.hasOwnProperty("clientId")&&e.hasOwnProperty("environment"):!1}function vy(r,e){return e?r.indexOf(go.CACHE_KEY)===0&&e.hasOwnProperty("aliases")&&e.hasOwnProperty("preferred_cache")&&e.hasOwnProperty("preferred_network")&&e.hasOwnProperty("canonical_authority")&&e.hasOwnProperty("authorization_endpoint")&&e.hasOwnProperty("token_endpoint")&&e.hasOwnProperty("issuer")&&e.hasOwnProperty("aliasesFromNetwork")&&e.hasOwnProperty("endpointsFromNetwork")&&e.hasOwnProperty("expiresAt")&&e.hasOwnProperty("jwks_uri"):!1}function Vc(){return Qt()+go.REFRESH_TIME_SECONDS}function wo(r,e,t){r.authorization_endpoint=e.authorization_endpoint,r.token_endpoint=e.token_endpoint,r.end_session_endpoint=e.end_session_endpoint,r.issuer=e.issuer,r.endpointsFromNetwork=t,r.jwks_uri=e.jwks_uri}function Ma(r,e,t){r.aliases=e.aliases,r.preferred_cache=e.preferred_cache,r.preferred_network=e.preferred_network,r.aliasesFromNetwork=t}function Gc(r){return r.expiresAt<=Qt()}var gr=class r{constructor(e,t,n,i,o,s,a,c){this.canonicalAuthority=e,this._canonicalAuthority.validateAsUri(),this.networkInterface=t,this.cacheManager=n,this.authorityOptions=i,this.regionDiscoveryMetadata={region_used:void 0,region_source:void 0,region_outcome:void 0},this.logger=o,this.performanceClient=a,this.correlationId=s,this.managedIdentity=c||!1,this.regionDiscovery=new Op(t,this.logger,this.performanceClient,this.correlationId)}getAuthorityType(e){if(e.HostNameAndPort.endsWith(L.CIAM_AUTH_URL))return xt.Ciam;let t=e.PathSegments;if(t.length)switch(t[0].toLowerCase()){case L.ADFS:return xt.Adfs;case L.DSTS:return xt.Dsts}return xt.Default}get authorityType(){return this.getAuthorityType(this.canonicalAuthorityUrlComponents)}get protocolMode(){return this.authorityOptions.protocolMode}get options(){return this.authorityOptions}get canonicalAuthority(){return this._canonicalAuthority.urlString}set canonicalAuthority(e){this._canonicalAuthority=new ue(e),this._canonicalAuthority.validateAsUri(),this._canonicalAuthorityUrlComponents=null}get canonicalAuthorityUrlComponents(){return this._canonicalAuthorityUrlComponents||(this._canonicalAuthorityUrlComponents=this._canonicalAuthority.getUrlComponents()),this._canonicalAuthorityUrlComponents}get hostnameAndPort(){return this.canonicalAuthorityUrlComponents.HostNameAndPort.toLowerCase()}get tenant(){return this.canonicalAuthorityUrlComponents.PathSegments[0]}get authorizationEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.authorization_endpoint);throw K(Pt)}get tokenEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint);throw K(Pt)}get deviceCodeEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint.replace("/token","/devicecode"));throw K(Pt)}get endSessionEndpoint(){if(this.discoveryComplete()){if(!this.metadata.end_session_endpoint)throw K(Ai);return this.replacePath(this.metadata.end_session_endpoint)}else throw K(Pt)}get selfSignedJwtAudience(){if(this.discoveryComplete())return this.replacePath(this.metadata.issuer);throw K(Pt)}get jwksUri(){if(this.discoveryComplete())return this.replacePath(this.metadata.jwks_uri);throw K(Pt)}canReplaceTenant(e){return e.PathSegments.length===1&&!r.reservedTenantDomains.has(e.PathSegments[0])&&this.getAuthorityType(e)===xt.Default&&this.protocolMode!==Ue.OIDC}replaceTenant(e){return e.replace(/{tenant}|{tenantid}/g,this.tenant)}replacePath(e){let t=e,i=new ue(this.metadata.canonical_authority).getUrlComponents(),o=i.PathSegments;

85return this.canonicalAuthorityUrlComponents.PathSegments.forEach((a,c)=>{let l=o[c];if(c===0&&this.canReplaceTenant(i)){let p=new ue(this.metadata.authorization_endpoint).getUrlComponents().PathSegments[0];l!==p&&(this.logger.verbose(`Replacing tenant domain name ${l} with id ${p}`),l=p)}a!==l&&(t=t.replace(`/${l}/`,`/${a}/`))}),this.replaceTenant(t)}get defaultOpenIdConfigurationEndpoint(){let e=this.hostnameAndPort;return this.canonicalAuthority.endsWith("v2.0/")||this.authorityType===xt.Adfs||this.protocolMode===Ue.OIDC&&!this.isAliasOfKnownMicrosoftAuthority(e)?`${this.canonicalAuthority}.well-known/openid-configuration`:`${this.canonicalAuthority}v2.0/.well-known/openid-configuration`}discoveryComplete(){return!!this.metadata}resolveEndpointsAsync(){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.AuthorityResolveEndpointsAsync,this.correlationId);let e=this.getCurrentMetadataEntity(),t=yield H(this.updateCloudDiscoveryMetadata.bind(this),w.AuthorityUpdateCloudDiscoveryMetadata,this.logger,this.performanceClient,this.correlationId)(e);this.canonicalAuthority=this.canonicalAuthority.replace(this.hostnameAndPort,e.preferred_network);let n=yield H(this.updateEndpointMetadata.bind(this),w.AuthorityUpdateEndpointMetadata,this.logger,this.performanceClient,this.correlationId)(e);this.updateCachedMetadata(e,t,{source:n}),this.performanceClient?.addFields({cloudDiscoverySource:t,authorityEndpointSource:n},this.correlationId)})}getCurrentMetadataEntity(){let e=this.cacheManager.getAuthorityMetadataByAlias(this.hostnameAndPort);return e||(e={aliases:[],preferred_cache:this.hostnameAndPort,preferred_network:this.hostnameAndPort,canonical_authority:this.canonicalAuthority,authorization_endpoint:"",token_endpoint:"",end_session_endpoint:"",issuer:"",aliasesFromNetwork:!1,endpointsFromNetwork:!1,expiresAt:Vc(),jwks_uri:""}),e}updateCachedMetadata(e,t,n){t!==Rt.CACHE&&n?.source!==Rt.CACHE&&(e.expiresAt=Vc(),e.canonical_authority=this.canonicalAuthority);let i=this.cacheManager.generateAuthorityMetadataCacheKey(e.preferred_cache);this.cacheManager.setAuthorityMetadata(i,e),this.metadata=e}updateEndpointMetadata(e){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.AuthorityUpdateEndpointMetadata,this.correlationId);let t=this.updateEndpointMetadataFromLocalSources(e);if(t){if(t.source===Rt.HARDCODED_VALUES&&this.authorityOptions.azureRegionConfiguration?.azureRegion&&t.metadata){let i=yield H(this.updateMetadataWithRegionalInformation.bind(this),w.AuthorityUpdateMetadataWithRegionalInformation,this.logger,this.performanceClient,this.correlationId)(t.metadata);wo(e,i,!1),e.canonical_authority=this.canonicalAuthority}return t.source}let n=yield H(this.getEndpointMetadataFromNetwork.bind(this),w.AuthorityGetEndpointMetadataFromNetwork,this.logger,this.performanceClient,this.correlationId)();if(n)return this.authorityOptions.azureRegionConfiguration?.azureRegion&&(n=yield H(this.updateMetadataWithRegionalInformation.bind(this),w.AuthorityUpdateMetadataWithRegionalInformation,this.logger,this.performanceClient,this.correlationId)(n)),wo(e,n,!0),Rt.NETWORK;throw K(ui,this.defaultOpenIdConfigurationEndpoint)})}updateEndpointMetadataFromLocalSources(e){this.logger.verbose("Attempting to get endpoint metadata from authority configuration");let t=this.getEndpointMetadataFromConfig();if(t)return this.logger.verbose("Found endpoint metadata in authority configuration"),wo(e,t,!1),{source:Rt.CONFIG};if(this.logger.verbose("Did not find endpoint metadata in the config... Attempting to get endpoint metadata from the hardcoded values."),this.authorityOptions.skipAuthorityMetadataCache)this.logger.verbose("Skipping hardcoded metadata cache since skipAuthorityMetadataCache is set to true. Attempting to get endpoint metadata from the network metadata cache.");else{let i=this.getEndpointMetadataFromHardcodedValues();if(i)return wo(e,i,!1),{source:Rt.HARDCODED_VALUES,metadata:i};this.logger.verbose("Did not find endpoint metadata in hardcoded values... Attempting to get endpoint metadata from the network metadata cache.")}let n=Gc(e);return this.isAuthoritySameType(e)&&e.endpointsFromNetwork&&!n?(this.logger.verbose("Found endpoint metadata in the cache."),{source:Rt.CACHE}):(n&&this.logger.verbose("The metadata entity is expired."),null)}isAuthoritySameType(e){return new ue(e.canonical_authority).getUrlComponents().PathSegments.length===this.canonicalAuthorityUrlComponents.PathSegments.length}getEndpointMetadataFromConfig(){if(this.authorityOptions.authorityMetadata)try{return JSON.parse(this.authorityOptions.authorityMetadata)}catch{throw fe(_i)}return null}getEndpointMetadataFromNetwork(){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.AuthorityGetEndpointMetadataFromNetwork,this.correlationId);let e={},t=this.defaultOpenIdConfigurationEndpoint;this.logger.verbose(`Authority.getEndpointMetadataFromNetwork: attempting to retrieve OAuth endpoints from ${t}`);try{let n=yield this.networkInterface.sendGetRequestAsync(t,e);return _p(n.body)?n.body:(this.logger.verbose("Authority.getEndpointMetadataFromNetwork: could not parse response as OpenID configuration"),null)}catch(n){return this.logger.verbose(`Authority.getEndpointMetadataFromNetwork: ${n}`),null}})}getEndpointMetadataFromHardcodedValues(){return this.hostnameAndPort in Lu?Lu[this.hostnameAndPort]:null}updateMetadataWithRegionalInformation(e){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.AuthorityUpdateMetadataWithRegionalInformation,this.correlationId);let t=this.authorityOptions.azureRegionConfiguration?.azureRegion;if(t){if(t!==L.AZURE_REGION_AUTO_DISCOVER_FLAG)return this.regionDiscoveryMetadata.region_outcome=kc.CONFIGURED_NO_AUTO_DETECTION,this.regionDiscoveryMetadata.region_used=t,r.replaceWithRegionalInformation(e,t);let n=yield H(this.regionDiscovery.detectRegion.bind(this.regionDiscovery),w.RegionDiscoveryDetectRegion,this.logger,this.performanceClient,this.correlationId)(this.authorityOptions.azureRegionConfiguration?.environmentRegion,this.regionDiscoveryMetadata);if(n)return this.regionDiscoveryMetadata.region_outcome=kc.AUTO_DETECTION_REQUESTED_SUCCESSFUL,this.regionDiscoveryMetadata.region_used=n,r.replaceWithRegionalInformation(e,n);this.regionDiscoveryMetadata.region_outcome=kc.AUTO_DETECTION_REQUESTED_FAILED}return e})}updateCloudDiscoveryMetadata(e){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.AuthorityUpdateCloudDiscoveryMetadata,this.correlationId);let t=this.updateCloudDiscoveryMetadataFromLocalSources(e);if(t)return t;let n=yield H(this.getCloudDiscoveryMetadataFromNetwork.bind(this),w.AuthorityGetCloudDiscoveryMetadataFromNetwork,this.logger,this.performanceClient,this.correlationId)();if(n)return Ma(e,n,!0),Rt.NETWORK;throw fe(Ni)})}updateCloudDiscoveryMetadataFromLocalSources(e){this.logger.verbose("Attempting to get cloud discovery metadata  from authority configuration"),this.logger.verbosePii(`Known Authorities: ${this.authorityOptions.knownAuthorities||L.NOT_APPLICABLE}`),this.logger.verbosePii(`Authority Metadata: ${this.authorityOptions.authorityMetadata||L.NOT_APPLICABLE}`),this.logger.verbosePii(`Canonical Authority: ${e.canonical_authority||L.NOT_APPLICABLE}`);let t=this.getCloudDiscoveryMetadataFromConfig();if(t)return this.logger.verbose("Found cloud discovery metadata in authority configuration"),Ma(e,t,!1),Rt.CONFIG;if(this.logger.verbose("Did not find cloud discovery metadata in the config... Attempting to get cloud discovery metadata from the hardcoded values."),this.options.skipAuthorityMetadataCache)this.logger.verbose("Skipping hardcoded cloud discovery metadata cache since skipAuthorityMetadataCache is set to true. Attempting to get cloud discovery metadata from the network metadata cache.");else{let i=Pp(this.hostnameAndPort);if(i)return this.logger.verbose("Found cloud discovery metadata from hardcoded values."),Ma(e,i,!1),Rt.HARDCODED_VALUES;this.logger.verbose("Did not find cloud discovery metadata in hardcoded values... Attempting to get cloud discovery metadata from the network metadata cache.")}let n=Gc(e);return this.isAuthoritySameType(e)&&e.aliasesFromNetwork&&!n?(this.logger.verbose("Found cloud discovery metadata in the cache."),Rt.CACHE):(n&&this.logger.verbose("The metadata entity is expired."),null)}getCloudDiscoveryMetadataFromConfig(){if(this.authorityType===xt.Ciam)return this.logger.verbose("CIAM authorities do not support cloud discovery metadata, generate the aliases from authority host."),r.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);if(this.authorityOptions.cloudDiscoveryMetadata){this.logger.verbose("The cloud discovery metadata has been provided as a network response, in the config.");try{this.logger.verbose("Attempting to parse the cloud discovery metadata.");let e=JSON.parse(this.authorityOptions.cloudDiscoveryMetadata),t=Ca(e.metadata,this.hostnameAndPort);if(this.logger.verbose("Parsed the cloud discovery metadata."),t)return this.logger.verbose("There is returnable metadata attached to the parsed cloud discovery metadata."),t;this.logger.verbose("There is no metadata attached to the parsed cloud discovery metadata.")}catch{throw this.logger.verbose("Unable to parse the cloud discovery metadata. Throwing Invalid Cloud Discovery Metadata Error."),fe(Bn)}}return this.isInKnownAuthorities()?(this.logger.verbose("The host is included in knownAuthorities. Creating new cloud discovery metadata from the host."),r.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)):null}getCloudDiscoveryMetadataFromNetwork(){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.AuthorityGetCloudDiscoveryMetadataFromNetwork,this.correlationId);let e=`${L.AAD_INSTANCE_DISCOVERY_ENDPT}${this.canonicalAuthority}oauth2/v2.0/authorize`,t={},n=null;try{let i=yield this.networkInterface.sendGetRequestAsync(e,t),o,s;if(Np(i.body))o=i.body,s=o.metadata,this.logger.verbosePii(`tenant_discovery_endpoint is: ${o.tenant_discovery_endpoint}`);

85else if(Fp(i.body)){if(this.logger.warning(`A CloudInstanceDiscoveryErrorResponse was returned. The cloud instance discovery network request's status code is: ${i.status}`),o=i.body,o.error===L.INVALID_INSTANCE)return this.logger.error("The CloudInstanceDiscoveryErrorResponse error is invalid_instance."),null;this.logger.warning(`The CloudInstanceDiscoveryErrorResponse error is ${o.error}`),this.logger.warning(`The CloudInstanceDiscoveryErrorResponse error description is ${o.error_description}`),this.logger.warning("Setting the value of the CloudInstanceDiscoveryMetadata (returned from the network) to []"),s=[]}else return this.logger.error("AAD did not return a CloudInstanceDiscoveryResponse or CloudInstanceDiscoveryErrorResponse"),null;this.logger.verbose("Attempting to find a match between the developer's authority and the CloudInstanceDiscoveryMetadata returned from the network request."),n=Ca(s,this.hostnameAndPort)}catch(i){if(i instanceof ie)this.logger.error(`There was a network error while attempting to get the cloud discovery instance metadata.
86Error: ${i.errorCode}
87Error Description: ${i.errorMessage}`);else{let o=i;this.logger.error(`A non-MSALJS error was thrown while attempting to get the cloud instance discovery metadata.
88Error: ${o.name}
89Error Description: ${o.message}`)}return null}return n||(this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the network request."),this.logger.verbose("Creating custom Authority for custom domain scenario."),n=r.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)),n})}isInKnownAuthorities(){return this.authorityOptions.knownAuthorities.filter(t=>t&&ue.getDomainFromUrl(t).toLowerCase()===this.hostnameAndPort).length>0}static generateAuthority(e,t){let n;if(t&&t.azureCloudInstance!==Dn.None){let i=t.tenant?t.tenant:L.DEFAULT_COMMON_TENANT;n=`${t.azureCloudInstance}/${i}/`}return n||e}static createCloudDiscoveryMetadataFromHost(e){return{preferred_network:e,preferred_cache:e,aliases:[e]}}getPreferredCache(){if(this.managedIdentity)return L.DEFAULT_AUTHORITY_HOST;if(this.discoveryComplete())return this.metadata.preferred_cache;throw K(Pt)}isAlias(e){return this.metadata.aliases.indexOf(e)>-1}isAliasOfKnownMicrosoftAuthority(e){return Ku.has(e)}static isPublicCloudAuthority(e){return L.KNOWN_PUBLIC_CLOUDS.indexOf(e)>=0}static buildRegionalAuthorityString(e,t,n){let i=new ue(e);i.validateAsUri();let o=i.getUrlComponents(),s=`${t}.${o.HostNameAndPort}`;this.isPublicCloudAuthority(o.HostNameAndPort)&&(s=`${t}.${L.REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX}`);let a=ue.constructAuthorityUriFromObject(re(q({},i.getUrlComponents()),{HostNameAndPort:s})).urlString;return n?`${a}?${n}`:a}static replaceWithRegionalInformation(e,t){let n=q({},e);return n.authorization_endpoint=r.buildRegionalAuthorityString(n.authorization_endpoint,t),n.token_endpoint=r.buildRegionalAuthorityString(n.token_endpoint,t),n.end_session_endpoint&&(n.end_session_endpoint=r.buildRegionalAuthorityString(n.end_session_endpoint,t)),n}static transformCIAMAuthority(e){let t=e,i=new ue(e).getUrlComponents();if(i.PathSegments.length===0&&i.HostNameAndPort.endsWith(L.CIAM_AUTH_URL)){let o=i.HostNameAndPort.split(".")[0];t=`${t}${o}${L.AAD_TENANT_DOMAIN_SUFFIX}`}return t}};gr.reservedTenantDomains=new Set(["{tenant}","{tenantid}",dr.COMMON,dr.CONSUMERS,dr.ORGANIZATIONS]);function Dp(r){let n=new ue(r).getUrlComponents().PathSegments.slice(-1)[0]?.toLowerCase();switch(n){case dr.COMMON:case dr.ORGANIZATIONS:case dr.CONSUMERS:return;default:return n}}function zc(r){return r.endsWith(L.FORWARD_SLASH)?r:`${r}${L.FORWARD_SLASH}`}function Vh(r){let e=r.cloudDiscoveryMetadata,t;if(e)try{t=JSON.parse(e)}catch{throw fe(Bn)}return{canonicalAuthority:r.authority?zc(r.authority):void 0,knownAuthorities:r.knownAuthorities,cloudDiscoveryMetadata:t}}function Gh(r,e,t,n,i,o,s){return x(this,null,function*(){s?.addQueueMeasurement(w.AuthorityFactoryCreateDiscoveredInstance,o);let a=gr.transformCIAMAuthority(zc(r)),c=new gr(a,e,t,n,i,o,s);try{return yield H(c.resolveEndpointsAsync.bind(c),w.AuthorityResolveEndpointsAsync,i,s,o)(),c}catch{throw K(Pt)}})}var Lt=class r extends ie{constructor(e,t,n,i,o){super(e,t,n),this.name="ServerError",this.errorNo=i,this.status=o,Object.setPrototypeOf(this,r.prototype)}};function ln(r,e,t){return{clientId:r,authority:e.authority,scopes:e.scopes,homeAccountIdentifier:t,claims:e.claims,authenticationScheme:e.authenticationScheme,resourceRequestMethod:e.resourceRequestMethod,resourceRequestUri:e.resourceRequestUri,shrClaims:e.shrClaims,sshKid:e.sshKid,embeddedClientId:e.embeddedClientId||e.tokenBodyParameters?.clientId}}var un=class r{static generateThrottlingStorageKey(e){return`${Yr.THROTTLING_PREFIX}.${JSON.stringify(e)}`}static preProcess(e,t,n){let i=r.generateThrottlingStorageKey(t),o=e.getThrottlingCache(i);if(o){if(o.throttleTime<Date.now()){e.removeItem(i,n);return}throw new Lt(o.errorCodes?.join(" ")||L.EMPTY_STRING,o.errorMessage,o.subError)}}static postProcess(e,t,n,i){if(r.checkResponseStatus(n)||r.checkResponseForRetryAfter(n)){let o={throttleTime:r.calculateThrottleTime(parseInt(n.headers[nt.RETRY_AFTER])),error:n.body.error,errorCodes:n.body.error_codes,errorMessage:n.body.error_description,subError:n.body.suberror};e.setThrottlingCache(r.generateThrottlingStorageKey(t),o,i)}}static checkResponseStatus(e){return e.status===429||e.status>=500&&e.status<600}static checkResponseForRetryAfter(e){return e.headers?e.headers.hasOwnProperty(nt.RETRY_AFTER)&&(e.status<200||e.status>=300):!1}static calculateThrottleTime(e){let t=e<=0?0:e,n=Date.now()/1e3;return Math.floor(Math.min(n+(t||Yr.DEFAULT_THROTTLE_TIME_SECONDS),n+Yr.DEFAULT_MAX_THROTTLE_TIME_SECONDS)*1e3)}static removeThrottle(e,t,n,i){let o=ln(t,n,i),s=this.generateThrottlingStorageKey(o);e.removeItem(s,n.correlationId)}};var bo=class r extends ie{constructor(e,t,n){super(e.errorCode,e.errorMessage,e.subError),Object.setPrototypeOf(this,r.prototype),this.name="NetworkError",this.error=e,this.httpStatus=t,this.responseHeaders=n}};function ji(r,e,t,n){return r.errorMessage=`${r.errorMessage}, additionalErrorInfo: error.name:${n?.name}, error.message:${n?.message}`,new bo(r,e,t)}var Un=class{constructor(e,t){this.config=kp(e),this.logger=new kt(this.config.loggerOptions,Nc,vo),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}createTokenRequestHeaders(e){let t={};if(t[nt.CONTENT_TYPE]=L.URL_FORM_CONTENT_TYPE,!this.config.systemOptions.preventCorsPreflight&&e)switch(e.type){case wt.HOME_ACCOUNT_ID:try{let n=_r(e.credential);t[nt.CCS_HEADER]=`Oid:${n.uid}@${n.utid}`}catch(n){this.logger.verbose("Could not parse home account ID for CCS Header: "+n)}break;case wt.UPN:t[nt.CCS_HEADER]=`UPN: ${e.credential}`;break}return t}executePostToTokenEndpoint(e,t,n,i,o,s){return x(this,null,function*(){s&&this.performanceClient?.addQueueMeasurement(s,o);let a=yield this.sendPostRequest(i,e,{body:t,headers:n},o);return this.config.serverTelemetryManager&&a.status<500&&a.status!==429&&this.config.serverTelemetryManager.clearTelemetryCache(),a})}sendPostRequest(e,t,n,i){return x(this,null,function*(){un.preProcess(this.cacheManager,e,i);let o;try{o=yield H(this.networkClient.sendPostRequestAsync.bind(this.networkClient),w.NetworkClientSendPostRequestAsync,this.logger,this.performanceClient,i)(t,n);let s=o.headers||{};this.performanceClient?.addFields({refreshTokenSize:o.body.refresh_token?.length||0,httpVerToken:s[nt.X_MS_HTTP_VERSION]||"",requestId:s[nt.X_MS_REQUEST_ID]||""},i)}catch(s){if(s instanceof bo){let a=s.responseHeaders;throw a&&this.performanceClient?.addFields({httpVerToken:a[nt.X_MS_HTTP_VERSION]||"",requestId:a[nt.X_MS_REQUEST_ID]||"",contentTypeHeader:a[nt.CONTENT_TYPE]||void 0,contentLengthHeader:a[nt.CONTENT_LENGTH]||void 0,httpStatus:s.httpStatus},i),s.error}throw s instanceof ie?s:K(li)}return un.postProcess(this.cacheManager,e,o,i),o})}updateAuthority(e,t){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.UpdateTokenEndpointAuthority,t);let n=`https://${e}/${this.authority.tenant}/`,i=yield Gh(n,this.networkClient,this.cacheManager,this.authority.options,this.logger,t,this.performanceClient);this.authority=i})}createTokenQueryParameters(e){let t=new Map;return e.embeddedClientId&&cn(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.tokenQueryParameters&&an(t,e.tokenQueryParameters),Ki(t,e.correlationId),Mi(t,e.correlationId,this.performanceClient),Fr(t)}};var Mr={};Mt(Mr,{badToken:()=>qn,consentRequired:()=>$h,interactionRequired:()=>zh,interruptedUser:()=>Io,loginRequired:()=>Wh,nativeAccountUnavailable:()=>Ba,noTokensFound:()=>Kn,refreshTokenExpired:()=>Ha,uxNotAllowed:()=>$c});var Kn="no_tokens_found",Ba="native_account_unavailable",Ha="refresh_token_expired",$c="ux_not_allowed",zh="interaction_required",$h="consent_required",Wh="login_required",qn="bad_token",Io="interrupted_user";var Mp=[zh,$h,Wh,qn,$c,Io],yy=["message_only","additional_action","basic_action","user_password_expired","consent_required","bad_token","interrupted_user"],La={[Kn]:"No refresh token found in the cache. Please sign-in.",[Ba]:"The requested account is not available in the native broker. It may have been deleted or logged out. Please sign-in again using an interactive API.",[Ha]:"Refresh token has expired.",[qn]:"Identity provider returned bad_token due to an expired or invalid refresh token. Please invoke an interactive API to resolve.",[$c]:"`canShowUI` flag in Edge was set to false. User interaction required on web page. Please invoke an interactive API to resolve.",[Io]:"The user could not be authenticated due to an interrupted state. Please invoke an interactive API to resolve."},Bp={noTokensFoundError:{code:Kn,desc:La[Kn]},native_account_unavailable:{code:Ba,desc:La[Ba]},bad_token:{code:qn,desc:La[qn]},interrupted_user:{code:Io,desc:La[Io]}},gt=class r extends ie{constructor(e,t,n,i,o,s,a,c){super(e,t,n),Object.setPrototypeOf(this,r.prototype),this.timestamp=i||L.EMPTY_STRING,this.traceId=o||L.EMPTY_STRING,this.correlationId=s||L.EMPTY_STRING,this.claims=a||L.EMPTY_STRING,this.name="InteractionRequiredAuthError",this.errorNo=c}};function Wc(r,e,t){let n=!!r&&Mp.indexOf(r)>-1,i=!!t&&yy.indexOf(t)>-1,o=!!e&&Mp.some(s=>e.indexOf(s)>-1);return n||o||i}function Vi(r){return new gt(r,La[r])}var mr=class r{static setRequestState(e,t,n){let i=r.generateLibraryState(e,n);return t?`${i}${L.RESOURCE_DELIM}${t}`:i}static generateLibraryState(e,t){if(!e)throw K(Fn);let n={id:e.createNewGuid()};t&&(n.meta=t);let i=JSON.stringify(n);return e.base64Encode(i)}static parseRequestState(e,t){if(!e)throw K(Fn);if(!t)throw K(fr);try{let n=t.split(L.RESOURCE_DELIM),i=n[0],o=n.length>1?n.slice(1).join(L.RESOURCE_DELIM):L.EMPTY_STRING,s=e.base64Decode(i),a=JSON.parse(s);return{userRequestState:o||L.EMPTY_STRING,libraryState:a}}catch{throw K(fr)}}};var Cy={SW:"sw"},Ut=class{constructor(e,t){this.cryptoUtils=e,this.performanceClient=t}generateCnf(e,t){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.PopTokenGenerateCnf,e.correlationId);let n=yield H(this.generateKid.bind(this),w.PopTokenGenerateCnf,t,this.performanceClient,e.correlationId)(e),i=this.cryptoUtils.base64UrlEncode(JSON.stringify(n));return{kid:n.kid,reqCnfString:i}})}generateKid(e){return x(this,null,function*(){return this.performanceClient?.addQueueMeasurement(w.PopTokenGenerateKid,e.correlationId),{kid:yield this.cryptoUtils.getPublicKeyThumbprint(e),xms_ksl:Cy.SW}})}signPopToken(e,t,n){return x(this,null,function*(){return this.signPayload(e,t,n)})}signPayload(e,t,n,i){return x(this,null,function*(){let{resourceRequestMethod:o,resourceRequestUri:s,shrClaims:a,shrNonce:c,shrOptions:l}=n,g=(s?new ue(s):void 0)?.getUrlComponents();return this.cryptoUtils.signJwt(q({at:e,ts:Qt(),m:o?.toUpperCase(),u:g?.HostNameAndPort,nonce:c||this.cryptoUtils.createNewGuid(),p:g?.AbsolutePath,q:g?.QueryString?[[],g.QueryString]:void 0,client_claims:a||void 0},i),t,l,n.correlationId)})}};var Qc=class{constructor(e,t){this.cache=e,this.hasChanged=t}get cacheHasChanged(){return this.hasChanged}get tokenCache(){return this.cache}};

89var vr=class r{constructor(e,t,n,i,o,s,a){this.clientId=e,this.cacheStorage=t,this.cryptoObj=n,this.logger=i,this.serializableCache=o,this.persistencePlugin=s,this.performanceClient=a}validateTokenResponse(e,t){if(e.error||e.error_description||e.suberror){let n=`Error(s): ${e.error_codes||L.NOT_AVAILABLE} - Timestamp: ${e.timestamp||L.NOT_AVAILABLE} - Description: ${e.error_description||L.NOT_AVAILABLE} - Correlation ID: ${e.correlation_id||L.NOT_AVAILABLE} - Trace ID: ${e.trace_id||L.NOT_AVAILABLE}`,i=e.error_codes?.length?e.error_codes[0]:void 0,o=new Lt(e.error,n,e.suberror,i,e.status);if(t&&e.status&&e.status>=hr.SERVER_ERROR_RANGE_START&&e.status<=hr.SERVER_ERROR_RANGE_END){this.logger.warning(`executeTokenRequest:validateTokenResponse - AAD is currently unavailable and the access token is unable to be refreshed.
90${o}`);return}else if(t&&e.status&&e.status>=hr.CLIENT_ERROR_RANGE_START&&e.status<=hr.CLIENT_ERROR_RANGE_END){this.logger.warning(`executeTokenRequest:validateTokenResponse - AAD is currently available but is unable to refresh the access token.
91${o}`);return}throw Wc(e.error,e.error_description,e.suberror)?new gt(e.error,e.error_description,e.suberror,e.timestamp||L.EMPTY_STRING,e.trace_id||L.EMPTY_STRING,e.correlation_id||L.EMPTY_STRING,e.claims||L.EMPTY_STRING,i):o}}handleServerTokenResponse(e,t,n,i,o,s,a,c,l,p){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.HandleServerTokenResponse,e.correlation_id);let g;if(e.id_token){if(g=rn(e.id_token||L.EMPTY_STRING,this.cryptoObj.base64Decode),s&&s.nonce&&g.nonce!==s.nonce)throw K(fi);if(i.maxAge||i.maxAge===0){let f=g.auth_time;if(!f)throw K(Jr);ya(f,i.maxAge)}}this.homeAccountIdentifier=_e.generateHomeAccountId(e.client_info||L.EMPTY_STRING,t.authorityType,this.logger,this.cryptoObj,g);let h;s&&s.state&&(h=mr.parseRequestState(this.cryptoObj,s.state)),e.key_id=e.key_id||i.sshKid||void 0;let d=this.generateCacheRecord(e,t,n,i,g,a,s),m;try{if(this.persistencePlugin&&this.serializableCache&&(this.logger.verbose("Persistence enabled, calling beforeCacheAccess"),m=new Qc(this.serializableCache,!0),yield this.persistencePlugin.beforeCacheAccess(m)),c&&!l&&d.account&&this.cacheStorage.getAllAccounts({homeAccountId:d.account.homeAccountId,environment:d.account.environment},i.correlationId).length<1)return this.logger.warning("Account used to refresh tokens not in persistence, refreshed tokens will not be stored in the cache"),this.performanceClient?.addFields({acntLoggedOut:!0},i.correlationId),yield r.generateAuthenticationResult(this.cryptoObj,t,d,!1,i,g,h,void 0,p);yield this.cacheStorage.saveCacheRecord(d,i.correlationId,Bu(g||{}),o,i.storeInCache)}finally{this.persistencePlugin&&this.serializableCache&&m&&(this.logger.verbose("Persistence enabled, calling afterCacheAccess"),yield this.persistencePlugin.afterCacheAccess(m))}return r.generateAuthenticationResult(this.cryptoObj,t,d,!1,i,g,h,e,p)})}generateCacheRecord(e,t,n,i,o,s,a){let c=t.getPreferredCache();if(!c)throw K(Zr);let l=Oi(o),p,g;e.id_token&&o&&(p=Kh(this.homeAccountIdentifier,c,e.id_token,this.clientId,l||""),g=Ro(this.cacheStorage,t,this.homeAccountIdentifier,this.cryptoObj.base64Decode,i.correlationId,o,e.client_info,c,l,a,void 0,this.logger));let h=null;if(e.access_token){let f=e.scope?Qe.fromString(e.scope):new Qe(i.scopes||[]),y=(typeof e.expires_in=="str

91ing"?parseInt(e.expires_in,10):e.expires_in)||0,v=(typeof e.ext_expires_in=="string"?parseInt(e.ext_expires_in,10):e.ext_expires_in)||0,S=(typeof e.refresh_in=="string"?parseInt(e.refresh_in,10):e.refresh_in)||void 0,A=n+y,T=A+v,b=S&&S>0?n+S:void 0;h=qh(this.homeAccountIdentifier,c,e.access_token,this.clientId,l||t.tenant||"",f.printScopes(),A,T,this.cryptoObj.base64Decode,b,e.token_type,s,e.key_id,i.claims,i.requestedClaimsHash)}let d=null;if(e.refresh_token){let f;if(e.refresh_token_expires_in){let y=typeof e.refresh_token_expires_in=="string"?parseInt(e.refresh_token_expires_in,10):e.refresh_token_expires_in;f=n+y,this.performanceClient?.addFields({ntwkRtExpiresOnSeconds:f},i.correlationId)}d=jh(this.homeAccountIdentifier,c,e.refresh_token,this.clientId,e.foci,s,f)}let m=null;return e.foci&&(m={clientId:this.clientId,environment:c,familyId:e.foci}),{account:g,idToken:p,accessToken:h,refreshToken:d,appMetadata:m}}static generateAuthenticationResult(e,t,n,i,o,s,a,c,l){return x(this,null,function*(){let p=L.EMPTY_STRING,g=[],h=null,d,m,f=L.EMPTY_STRING;if(n.accessToken){if(n.accessToken.tokenType===de.POP&&!o.popKid){let A=new Ut(e),{secret:T,keyId:b}=n.accessToken;if(!b)throw K(wi);p=yield A.signPopToken(T,b,o)}else p=n.accessToken.secret;g=Qe.fromString(n.accessToken.target).asArray(),h=Da(n.accessToken.expiresOn),d=Da(n.accessToken.extendedExpiresOn),n.accessToken.refreshOn&&(m=Da(n.accessToken.refreshOn))}n.appMetadata&&(f=n.appMetadata.familyId===oi?oi:"");let y=s?.oid||s?.sub||"",v=s?.tid||"";c?.spa_accountid&&n.account&&(n.account.nativeAccountId=c?.spa_accountid);let S=n.account?Fi(_e.getAccountInfo(n.account),void 0,s,n.idToken?.secret):null;return{authority:t.canonicalAuthority,uniqueId:y,tenantId:v,scopes:g,account:S,idToken:n?.idToken?.secret||"",idTokenClaims:s||{},accessToken:p,fromCache:i,expiresOn:h,extExpiresOn:d,refreshOn:m,correlationId:o.correlationId,requestId:l||L.EMPTY_STRING,familyId:f,tokenType:n.accessToken?.tokenType||L.EMPTY_STRING,state:a?a.userRequestState:L.EMPTY_STRING,cloudGraphHostName:n.account?.cloudGraphHostName||L.EMPTY_STRING,msGraphHost:n.account?.msGraphHost||L.EMPTY_STRING,code:c?.spa_code,fromNativeBroker:!1}})}};function Ro(r,e,t,n,i,o,s,a,c,l,p,g){g?.verbose("setCachedAccount called");let d=r.getAccountKeys().find(S=>S.startsWith(t)),m=null;d&&(m=r.getAccount(d,i));let f=m||_e.createAccount({homeAccountId:t,idTokenClaims:o,clientInfo:s,environment:a,cloudGraphHostName:l?.cloud_graph_host_name,msGraphHost:l?.msgraph_host,nativeAccountId:p},e,n),y=f.tenantProfiles||[],v=c||f.realm;if(v&&!y.find(S=>S.tenantId===v)){let S=Nr(t,f.localAccountId,v,o);y.push(S)}return f.tenantProfiles=y,f}function Yc(r,e,t){return x(this,null,function*(){return typeof r=="string"?r:r({clientId:e,tokenEndpoint:t})})}var Gi=class extends Un{constructor(e,t){super(e,t),this.includeRedirectUri=!0,this.oidcDefaultScopes=this.config.authOptions.authority.options.OIDCOptions?.defaultScopes}acquireToken(e,t,n){return x(this,null,function*(){if(this.performanceClient?.addQueueMeasurement(w.AuthClientAcquireToken,e.correlationId),!e.code)throw K(mi);let i=Qt(),o=yield H(this.executeTokenRequest.bind(this),w.AuthClientExecuteTokenRequest,this.logger,this.performanceClient,e.correlationId)(this.authority,e),s=o.headers?.[nt.X_MS_REQUEST_ID],a=new vr(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.config.serializableCache,this.config.persistencePlugin,this.performanceClient);return a.validateTokenResponse(o.body),H(a.handleServerTokenResponse.bind(a),w.HandleServerTokenResponse,this.logger,this.performanceClient,e.correlationId)(o.body,this.authority,i,e,t,n,void 0,void 0,void 0,s)})}getLogoutUri(e){if(!e)throw fe(ki);let t=this.createLogoutUrlQueryString(e);return ue.appendQueryString(this.authority.endSessionEndpoint,t)}executeTokenRequest(e,t){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.AuthClientExecuteTokenRequest,t.correlationId);let n=this.createTokenQueryParameters(t),i=ue.appendQueryString(e.tokenEndpoint,n),o=yield H(this.createTokenRequestBody.bind(this),w.AuthClientCreateTokenRequestBody,this.logger,this.performanceClient,t.correlationId)(t),s;if(t.clientInfo)try{let l=yo(t.clientInfo,this.cryptoUtils.base64Decode);s={credential:`${l.uid}${Qr.CLIENT_INFO_SEPARATOR}${l.utid}`,type:wt.HOME_ACCOUNT_ID}}catch(l){this.logger.verbose("Could not parse client info for CCS Header: "+l)}let a=this.createTokenRequestHeaders(s||t.ccsCredential),c=ln(this.config.authOptions.clientId,t);return H(this.executePostToTokenEndpoint.bind(this),w.AuthorizationCodeClientExecutePostToTokenEndpoint,this.logger,this.performanceClient,t.correlationId)(i,o,a,c,t.correlationId,w.AuthorizationCodeClientExecutePostToTokenEndpoint)})}createTokenRequestBody(e){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.AuthClientCreateTokenRequestBody,e.correlationId);let t=new Map;if(Hi(t,e.embeddedClientId||e.tokenBodyParameters?.[Dr]||this.config.authOptions.clientId),this.includeRedirectUri)Li(t,e.redirectUri);

91else if(!e.redirectUri)throw fe(Ti);if(Bi(t,e.scopes,!0,this.oidcDefaultScopes),Dh(t,e.code),wa(t,this.config.libraryInfo),Ta(t,this.config.telemetry.application),Oa(t),this.serverTelemetryManager&&!Mc(this.config)&&Fa(t,this.serverTelemetryManager),e.codeVerifier&&Bh(t,e.codeVerifier),this.config.clientCredentials.clientSecret&&Ia(t,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let o=this.config.clientCredentials.clientAssertion;Ra(t,yield Yc(o.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),Pa(t,o.assertionType)}if(ka(t,Hs.AUTHORIZATION_CODE_GRANT),qi(t),e.authenticationScheme===de.POP){let o=new Ut(this.cryptoUtils,this.performanceClient),s;e.popKid?s=this.cryptoUtils.encodeKid(e.popKid):s=(yield H(o.generateCnf.bind(o),w.PopTokenGenerateCnf,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,_a(t,s)}else if(e.authenticationScheme===de.SSH)if(e.sshJwk)Na(t,e.sshJwk);else throw fe(tn);let n;if(e.clientInfo)try{let o=yo(e.clientInfo,this.cryptoUtils.base64Decode);n={credential:`${o.uid}${Qr.CLIENT_INFO_SEPARATOR}${o.utid}`,type:wt.HOME_ACCOUNT_ID}}catch(o){this.logger.verbose("Could not parse client info for CCS Header: "+o)}else n=e.ccsCredential;if(this.config.systemOptions.preventCorsPreflight&&n)switch(n.type){case wt.HOME_ACCOUNT_ID:try{let o=_r(n.credential);sn(t,o)}catch(o){this.logger.verbose("Could not parse home account ID for CCS Header: "+o)}break;case wt.UPN:Ln(t,n.credential);break}e.embeddedClientId&&cn(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.tokenBodyParameters&&an(t,e.tokenBodyParameters),e.enableSpaAuthorizationCode&&(!e.tokenBodyParameters||!e.tokenBodyParameters[Uc])&&an(t,{[Uc]:"1"}),Mi(t,e.correlationId,this.performanceClient);let i=e.skipBrokerClaims&&t.has(pr)?void 0:this.config.authOptions.clientCapabilities;return(!Be.isEmptyObj(e.claims)||i&&i.length>

910)&&Ui(t,e.claims,i),Fr(t)})}createLogoutUrlQueryString(e){let t=new Map;return e.postLogoutRedirectUri&&xh(t,e.postLogoutRedirectUri),e.correlationId&&Ki(t,e.correlationId),e.idTokenHint&&_h(t,e.idTokenHint),e.state&&ba(t,e.state),e.logoutHint&&Lh(t,e.logoutHint),e.extraQueryParameters&&an(t,e.extraQueryParameters),this.config.authOptions.instanceAware&&xa(t),Fr(t,this.config.authOptions.encodeExtraQueryParams,e.extraQueryParameters)}};var Sy=300,Ua=class extends Un{constructor(e,t){super(e,t)}acquireToken(e,t){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.RefreshTokenClientAcquireToken,e.correlationId);let n=Qt(),i=yield H(this.executeTokenRequest.bind(this),w.RefreshTokenClientExecuteTokenRequest,this.logger,this.performanceClient,e.correlationId)(e,this.authority),o=i.headers?.[nt.X_MS_REQUEST_ID],s=new vr(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.config.serializableCache,this.config.persistencePlugin);return s.validateTokenResponse(i.body),H(s.handleServerTokenResponse.bind(s),w.HandleServerTokenResponse,this.logger,this.performanceClient,e.correlationId)(i.body,this.authority,n,e,t,void 0,void 0,!0,e.forceCache,o)})}acquireTokenByRefreshToken(e,t){return x(this,null,function*(){if(!e)throw fe(Pi);if(this.performanceClient?.addQueueMeasurement(w.RefreshTokenClientAcquireTokenByRefreshToken,e.correlationId),!e.account)throw K(Xr);if(this.cacheManager.isAppMetadataFOCI(e.account.environment))try{return yield H(this.acquireTokenWithCachedRefreshToken.bind(this),w.RefreshTokenClientAcquireTokenWithCachedRefreshToken,this.logger,this.performanceClient,e.correlationId)(e,!0,t)}catch(i){let o=i instanceof gt&&i.errorCode===Kn,s=i instanceof Lt&&i.errorCode===Rc.INVALID_GRANT_ERROR&&i.subError===Rc.CLIENT_MISMATCH_ERROR;if(o||s)return H(this.acquireTokenWithCachedRefreshToken.bind(this),w.RefreshTokenClientAcquireTokenWithCachedRefreshToken,this.logger,this.performanceClient,e.correlationId)(e,!1,t);throw i}return H(this.acquireTokenWithCachedRefreshToken.bind(this),w.RefreshTokenClientAcquireTokenWithCachedRefreshToken,this.logger,this.performanceClient,e.correlationId)(e,!1,t)})}acquireTokenWithCachedRefreshToken(e,t,n){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.RefreshTokenClientAcquireTokenWithCachedRefreshToken,e.correlationId);let i=$e(this.cacheManager.getRefreshToken.bind(this.cacheManager),w.CacheManagerGetRefreshToken,this.logger,this.performanceClient,e.correlationId)(e.account,t,e.correlationId,void 0,this.performanceClient);if(!i)throw Vi(Kn);if(i.expiresOn){let s=e.refreshTokenExpirationOffsetSeconds||Sy;if(this.performanceClient?.addFields({cacheRtExpiresOnSeconds:Number(i.expiresOn),rtOffsetSeconds:s},e.correlationId),Ao(i.expiresOn,s))throw Vi(Ha)}let o=re(q({},e),{refreshToken:i.secret,authenticationScheme:e.authenticationScheme||de.BEARER,ccsCredential:{credential:e.account.homeAccountId,type:wt.HOME_ACCOUNT_ID}});try{return yield H(this.acquireToken.bind(this),w.RefreshTokenClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(o,n)}catch(s){if(s instanceof gt&&s.subError===qn){this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");let a=this.cacheManager.generateCredentialKey(i);this.cacheManager.removeRefreshToken(a,e.correlationId)}throw s}})}executeTokenRequest(e,t){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.RefreshTokenClientExecuteTokenRequest,e.correlationId);let n=this.createTokenQueryParameters(e),i=ue.appendQueryString(t.tokenEndpoint,n),o=yield H(this.createTokenRequestBody.bind(this),w.RefreshTokenClientCreateTokenRequestBody,this.logger,this.performanceClient,e.correlationId)(e),s=this.createTokenRequestHeaders(e.ccsCredential),a=ln(this.config.authOptions.clientId,e);return H(this.executePostToTokenEndpoint.bind(this),w.RefreshTokenClientExecutePostToTokenEndpoint,this.logger,this.performanceClient,e.correlationId)(i,o,s,a,e.correlationId,w.RefreshTokenClientExecutePostToTokenEndpoint)})}createTokenRequestBody(e){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.RefreshTokenClientCreateTokenRequestBody,e.correlationId);let t=new Map;if(Hi(t,e.embeddedClientId||e.tokenBodyParameters?.[Dr]||this.config.authOptions.clientId),e.redirectUri&&Li(t,e.redirectUri),Bi(t,e.scopes,!0,this.config.authOptions.authority.options.OIDCOptions?.defaultScopes),ka(t,Hs.REFRESH_TOKEN_GRANT),qi(t),wa(t,this.config.libraryInfo),Ta(t,this.config.telemetry.application),Oa(t),this.serverTelemetryManager&&!Mc(this.config)&&Fa(t,this.serverTelemetryManager),Mh(t,e.refreshToken),this.config.clientCredentials.clientSecret&&Ia(t,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let i=this.config.clientCredentials.clientAssertion;Ra(t,yield Yc(i.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),Pa(t,i.assertionType)}if(e.authenticationScheme===de.POP){let i=new Ut(this.cryptoUtils,this.performanceClient),o;e.popKid?o=this.cryptoUtils.encodeKid(e.popKid):o=(yield H(i.generateCnf.bind(i),w.PopTokenGenerateCnf,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,_a(t,o)}else if(e.authenticationScheme===de.SSH)if(e.sshJwk)Na(t,e.sshJwk);else throw fe(tn);if(this.config.systemOptions.preventCorsPreflight&&e.ccsCredential)switch(e.ccsCredential.type){case wt.HOME_ACCOUNT_ID:try{let i=_r(e.ccsCredential.credential);sn(t,i)}catch(i){this.logger.verbose("Could not parse home account ID for CCS Header: "+i)}break;case wt.UPN:Ln(t,e.ccsCredential.credential);break}e.embeddedClientId&&cn(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.tokenBodyParameters&&an(t,e.tokenBodyParameters),Mi(t,e.correlationId,this.performanceClient);let n=e.skipBrokerClaims&&t.has(pr)?void 0:this.config.authOptions.clientCapabilities;return(!Be.isEmptyObj(e.claims)||n&&n.length>0)&&Ui(t,e.claims,n),Fr(t)})}};var Ka=class extends Un{constructor(e,t){super(e,t)}acquireCachedToken(e){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.SilentFlowClientAcquireCachedToken,e.correlationId);let t=kr.NOT_APPLICABLE;if(e.forceRefresh||!this.config.cacheOptions.claimsBasedCachingEnabled&&!Be.isEmptyObj(e.claims))throw this.setCacheOutcome(kr.FORCE_REFRESH_OR_CLAIMS,e.correlationId),K(en);if(!e.account)throw K(Xr);let n=e.account.tenantId||Dp(e.authority),i=this.cacheManager.getTokenKeys(),o=this.cacheManager.getAccessToken(e.account,e,i,n);if(o){if(Uh(o.cachedAt)||Ao(o.expiresOn,this.config.systemOptions.tokenRenewalOffsetSeconds))throw this.setCacheOutcome(kr.CACHED_ACCESS_TOKEN_EXPIRED,e.correlationId),K(en);o.refreshOn&&Ao(o.refreshOn,0)&&(t=kr.PROACTIVELY_REFRESHED)}else throw this.setCacheOutcome(kr.NO_CACHED_ACCESS_TOKEN,e.correlationId),K(en);let s=e.authority||this.authority.getPreferredCache(),a={account:this.cacheManager.getAccount(this.cacheManager.generateAccountKey(e.account),e.correlationId),accessToken:o,idToken:this.cacheManager.getIdToken(e.account,e.correlationId,i,n,this.performanceClient),refreshToken:null,appMetadata:this.cacheManager.readAppMetadataFromCac

91he(s)};return this.setCacheOutcome(t,e.correlationId),this.config.serverTelemetryManager&&this.config.serverTelemetryManager.incrementCacheHits(),[yield H(this.generateResultFromCacheRecord.bind(this),w.SilentFlowClientGenerateResultFromCacheRecord,this.logger,this.performanceClient,e.correlationId)(a,e),t]})}setCacheOutcome(e,t){this.serverTelemetryManager?.setCacheOutcome(e),this.performanceClient?.addFields({cacheOutcome:e},t),e!==kr.NOT_APPLICABLE&&this.logger.info(`Token refresh is required due to cache outcome: ${e}`)}generateResultFromCacheRecord(e,t){return x(this,null,function*(){this.performanceClient?.addQueueMeasurement(w.SilentFlowClientGenerateResultFromCacheRecord,t.correlationId);let n;if(e.idToken&&(n=rn(e.idToken.secret,this.config.cryptoInterface.base64Decode)),t.maxAge||t.maxAge===0){let i=n?.auth_time;if(!i)throw K(Jr);ya(i,t.maxAge)}return vr.generateAuthenticationResult(this.cryptoUtils,this.authority,e,!0,t,n)})}};var Qh={sendGetRequestAsync:()=>Promise.reject(K(le)),sendPostRequestAsync:()=>Promise.reject(K(le))};var rr={};Mt(rr,{getAuthorizationCodePayload:()=>wy,getAuthorizeUrl:()=>Ay,getStandardAuthorizeRequestParameters:()=>Ey,validateAuthorizationResponse:()=>Hp});function Ey(r,e,t,n){let i=e.correlationId,o=new Map;Hi(o,e.embeddedClientId||e.extraQueryParameters?.[Dr]||r.clientId);let s=[...e.scopes||[],...e.extraScopesToConsent||[]];if(Bi(o,s,!0,r.authority.options.OIDCOptions?.defaultScopes),Li(o,e.redirectUri),Ki(o,i),kh(o,e.responseMode),qi(o),Hh(o),e.prompt&&(Fh(o,e.prompt),n?.addFields({prompt:e.prompt},i)),e.domainHint&&(Nh(o,e.domainHint),n?.addFields({domainHintFromRequest:!0},i)),e.prompt!==ze.SELECT_ACCOUNT)if(e.sid&&e.prompt===ze.NONE)t.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from request"),qc(o,e.sid),n?.addFields({sidFromRequest:!0},i);else if(e.account){let c=by(e.account),l=Iy(e.account);if(l&&e.domainHint&&(t.warning('AuthorizationCodeClient.createAuthCodeUrlQueryString: "domainHint" param is set, skipping opaque "login_hint" claim. Please consider not passing domainHint'),l=null),l){t.verbose("createAuthCodeUrlQueryString: login_hint claim present on account"),Eo(o,l),n?.addFields({loginHintFromClaim:!0},i);try{let p=_r(e.account.homeAccountId);sn(o,p)}catch{t.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header")}}else if(c&&e.prompt===ze.NONE){t.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account"),qc(o,c),n?.addFields({sidFromClaim:!0},i);try{let p=_r(e.account.homeAccountId);sn(o,p)}catch{t.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header")}}else if(e.loginHint)t.verbose("createAuthCodeUrlQueryString: Adding login_hint from request"),Eo(o,e.loginHint),Ln(o,e.loginHint),n?.addFields({loginHintFromRequest:!0},i);else if(e.account.username){t.verbose("createAuthCodeUrlQueryString: Adding login_hint from account"),Eo(o,e.account.username),n?.addFields({loginHintFromUpn:!0},i);try{let p=_r(e.account.homeAccountId);sn(o,p)}catch{t.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header")}}}else e.loginHint&&(t.verbose("createAuthCodeUrlQueryString: No account, adding login_hint from request"),Eo(o,e.loginHint),Ln(o,e.loginHint),n?.addFields({loginHintFromRequest:!0},i));else t.verbose("createAuthCodeUrlQueryString: Prompt is select_account, ignoring account hints");e.nonce&&Oh(o,e.nonce),e.state&&ba(o,e.state),e.embeddedClientId&&cn(o,r.clientId,r.redirectUri);let a=e.skipBrokerClaims&&o.has(pr)?void 0:r.clientCapabilities;return(e.claims||a&&a.length>0)&&Ui(o,e.claims,a),r.instanceAware&&(!e.extraQueryParameters||!Object.keys(e.extraQueryParameters).includes(So))&&xa(o),o}function Ay(r,e,t,n){let i=Fr(e,t,n);return ue.appendQueryString(r.authorizationEndpoint,i)}function wy(r,e){if(Hp(r,e),!r.code)throw K(Ei);return r}function Hp(r,e){if(!r.state||!e)throw r.state?K(_n,"Cached State"):K(_n,"Server State");let t,n;try{t=decodeURIComponent(r.state)}catch{throw K(fr,r.state)}try{n=decodeURIComponent(e)}catch{throw K(fr,r.state)}if(t!==n)throw K(di);if(r.error||r.error_description||r.suberror){let i=Ty(r);throw Wc(r.error,r.error_description,r.suberror)?new gt(r.error||"",r.error_description,r.suberror,r.timestamp||"",r.trace_id||"",r.correlation_id||"",r.claims||"",i):new Lt(r.error||"",r.error_description,r.suberror,i)}}function Ty(r){let e="code=",t=r.error_uri?.lastIndexOf(e);return t&&t>=0?r.error_uri?.substring(t+e.length):void 0}function by(r){return r.idTokenClaims?.sid||null}function Iy(r){return r.loginHint||r.idTokenClaims?.login_hint||null}var Lp=",",Up="|";function Ry(r){let{skus:e,libraryName:t,libraryVersion:n,extensionName:i,extensionVersion:o}=r,s=new Map([[0,[t,n]],[2,[i,o]]]),a=[];if(e?.length){if(a=e.split(Lp),a.length<4)return e}else a=Array.from({length:4},()=>Up);

91return s.forEach((c,l)=>{c.length===2&&c[0]?.length&&c[1]?.length&&Py({skuArr:a,index:l,skuName:c[0],skuVersion:c[1]})}),a.join(Lp)}function Py(r){let{skuArr:e,index:t,skuName:n,skuVersion:i}=r;t>=e.length||(e[t]=[n,i].join(Up))}var zi=class r{constructor(e,t){this.cacheOutcome=kr.NOT_APPLICABLE,this.cacheManager=t,this.apiId=e.apiId,this.correlationId=e.correlationId,this.wrapperSKU=e.wrapperSKU||L.EMPTY_STRING,this.wrapperVer=e.wrapperVer||L.EMPTY_STRING,this.telemetryCacheKey=ut.CACHE_KEY+Qr.CACHE_KEY_SEPARATOR+e.clientId}generateCurrentRequestHeaderValue(){let e=`${this.apiId}${ut.VALUE_SEPARATOR}${this.cacheOutcome}`,t=[this.wrapperSKU,this.wrapperVer],n=this.getNativeBrokerErrorCode();n?.length&&t.push(`broker_error=${n}`);let i=t.join(ut.VALUE_SEPARATOR),o=this.getRegionDiscoveryFields(),s=[e,o].join(ut.VALUE_SEPARATOR);return[ut.SCHEMA_VERSION,s,i].join(ut.CATEGORY_SEPARATOR)}generateLastRequestHeaderValue(){let e=this.getLastRequests(),t=r.maxErrorsToSend(e),n=e.failedRequests.slice(0,2*t).join(ut.VALUE_SEPARATOR),i=e.errors.slice(0,t).join(ut.VALUE_SEPARATOR),o=e.errors.length,s=t<o?ut.OVERFLOW_TRUE:ut.OVERFLOW_FALSE,a=[o,s].join(ut.VALUE_SEPARATOR);return[ut.SCHEMA_VERSION,e.cacheHits,n,i,a].join(ut.CATEGORY_SEPARATOR)}cacheFailedRequest(e){let t=this.getLastRequests();t.errors.length>=ut.MAX_CACHED_ERRORS&&(t.failedRequests.shift(),t.failedRequests.shift(),t.errors.shift()),t.failedRequests.push(this.apiId,this.correlationId),e instanceof Error&&e&&e.toString()?e instanceof ie?e.subError?t.errors.push(e.subError):e.errorCode?t.errors.push(e.errorCode):t.errors.push(e.toString()):t.errors.push(e.toString()):t.errors.push(ut.UNKNOWN_ERROR),this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}incrementCacheHits(){let e=this.getLastRequests();return e.cacheHits+=1,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId),e.cacheHits}getLastRequests(){let e={failedRequests:[],errors:[],cacheHits:0};return this.cacheManager.getServerTelemetry(this.telemetryCacheKey)||e}clearTelemetryCache(){let e=this.getLastRequests(),t=r.maxErrorsToSend(e),n=e.errors.length;if(t===n)this.cacheManager.removeItem(this.telemetryCacheKey,this.correlationId);else{let i={failedRequests:e.failedRequests.slice(t*2),errors:e.errors.slice(t),cacheHits:0};this.cacheManager.setServerTelemetry(this.telemetryCacheKey,i,this.correlationId)}}static maxErrorsToSend(e){let t,n=0,i=0,o=e.errors.length;for(t=0;t<o;t++){let s=e.failedRequests[2*t]||L.EMPTY_STRING,a=e.failedRequests[2*t+1]||L.EMPTY_STRING,c=e.errors[t]||L.EMPTY_STRING;if(i+=s.toString().length+a.toString().length+c.length+3,i<ut.MAX_LAST_HEADER_BYTES)n+=1;else break}return n}getRegionDiscoveryFields(){let e=[];return e.push(this.regionUsed||L.EMPTY_STRING),e.push(this.regionSource||L.EMPTY_STRING),e.push(this.regionOutcome||L.EMPTY_STRING),e.join(",")}updateRegionDiscoveryMetadata(e){this.regionUsed=e.region_used,this.regionSource=e.region_source,this.regionOutcome=e.region_outcome}setCacheOutcome(e){this.cacheOutcome=e}setNativeBrokerErrorCode(e){let t=this.getLastRequests();t.nativeBrokerErrorCode=e,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}getNativeBrokerErrorCode(){return this.getLastRequests().nativeBrokerErrorCode}clearNativeBrokerErrorCode(){let e=this.getLastRequests();delete e.nativeBrokerErrorCode,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId)}static makeExtraSkuString(e){return Ry(e)}};var Jc="missing_kid_error",Xc="missing_alg_error";var ky={[Jc]:"The JOSE Header for the requested JWT, JWS or JWK object requires a keyId to be configured as the 'kid' header claim. No 'kid' value was provided.",[Xc]:"The JOSE Header for the requested JWT, JWS or JWK object requires an algorithm to be specified as the 'alg' header claim. No 'alg' value was provided."},Yh=class r extends ie{constructor(e,t){super(e,t),this.name="JoseHeaderError",Object.setPrototypeOf(this,r.prototype)}};function Jh(r){return new Yh(r,ky[r])}var qa=class r{constructor(e){this.typ=e.typ,this.alg=e.alg,this.kid=e.kid}static getShrHeaderString(e){if(!e.kid)throw Jh(Jc);if(!e.alg)throw Jh(Xc);let t=new r({typ:e.typ||xc.Pop,kid:e.kid,alg:e.alg});return JSON.stringify(t)}};

91var $i="pkce_not_created",ja="ear_jwk_empty",Zc="ear_jwe_empty",Wi="crypto_nonexistent",Br="empty_navigate_uri",Po="hash_empty_error",jn="no_state_in_hash",ko="hash_does_not_contain_known_properties",xo="unable_to_parse_state",_o="state_interaction_type_mismatch",No="interaction_in_progress",Fo="popup_window_error",Oo="empty_window_error",yr="user_cancelled",el="monitor_popup_timeout",Do="monitor_window_timeout",Mo="redirect_in_iframe",Bo="block_iframe_reload",Ho="block_nested_popups",tl="iframe_closed_prematurely",Hr="silent_logout_unsupported",Lo="no_account_error",rl="silent_prompt_value_error",Uo="no_token_request_cache_error",Ko="unable_to_parse_token_request_cache_error",nl="auth_request_not_set_error",il="invalid_cache_type",Lr="non_browser_environment",Ur="database_not_open",hn="no_network_connectivity",qo="post_request_failed",jo="get_request_failed",Qi="failed_to_parse_response",Vo="unable_to_load_token",Vn="crypto_key_not_found",Go="auth_code_required",zo="auth_code_or_nativeAccountId_required",$o="spa_code_and_nativeAccountId_present",Gn="database_unavailable",Wo="unable_to_acquire_token_from_native_platform",Qo="native_handshake_timeout",Yo="native_extension_not_installed",zn="native_connection_not_established",Kr="uninitialized_public_client_application",Jo="native_prompt_not_supported",Xo="invalid_base64_string",Zo="invalid_pop_token_request",ol="failed_to_build_headers",sl="failed_to_parse_headers",es="failed_to_decrypt_ear_response",Yi="timed_out";var dn="For more visit: aka.ms/msaljs/browser-errors",ce={[$i]:"The PKCE code challenge and verifier could not be generated.",[ja]:"No EAR encryption key provided. This is unexpected.",[Zc]:"Server response does not contain ear_jwe property. This is unexpected.",[Wi]:"The crypto object or function is not available.",[Br]:"Navigation URI is empty. Please check stack trace for more info.",[Po]:`Hash value cannot be processed because it is empty. Please verify that your redirectUri is not clearing the hash. ${dn}`,[jn]:"Hash does not contain state. Please verify that the request originated from msal.",[ko]:`Hash does not contain known properites. Please verify that your redirectUri is not changing the hash.  ${dn}`,[xo]:"Unable to parse state. Please verify that the request originated from msal.",[_o]:"Hash contains state but the interaction type does not match the caller.",[No]:`Interaction is currently in progress. Please ensure that this interaction has been completed before calling an interactive API.   ${dn}`,[Fo]:"Error opening popup window. This can happen if you are using IE or if popups are blocked in the browser.",[Oo]:"window.open returned null or undefined window object.",[yr]:"User cancelled the flow.",[el]:`Token acquisition in popup failed due to timeout.  ${dn}`,[Do]:`Token acquisition in iframe failed due to timeout.  ${dn}`,[Mo]:"Redirects are not supported for iframed or brokered applications. Please ensure you are using MSAL.js in a top frame of the window if using the redirect APIs, or use the popup APIs.",[Bo]:`Request was blocked inside an iframe because MSAL detected an authentication response.  ${dn}`,[Ho]:"Request was blocked inside a popup because MSAL detected it was running in a popup.",[tl]:"The iframe being monitored was closed prematurely.",[Hr]:"Silent logout not supported. Please call logoutRedirect or logoutPopup instead.",[Lo]:"No account object provided to acquireTokenSilent and no active account has been set. Please call setActiveAccount or provide an account on the request.",[rl]:"The value given for the prompt value is not valid for silent requests - must be set to 'none' or 'no_session'.",[Uo]:"No token request found in cache.",[Ko]:"The cached token request could not be parsed.",[nl]:"Auth Request not set. Please ensure initiateAuthRequest was called from the InteractionHandler",[il]:"Invalid cache type",[Lr]:"Login and token requests are not supported in non-browser environments.",[Ur]:"Database is not open!",[hn]:"No network connectivity. Check your internet connection.",[qo]:"Network request failed: If the browser threw a CORS error, check that the redirectUri is registered in the Azure App Portal as type 'SPA'",[jo]:"Network request failed. Please check the network trace to determine root cause.",[Qi]:"Failed to parse network response. Check network trace.",[Vo]:"Error loading token to cache.",[Vn]:"Cryptographic Key or Keypair not found in browser storage.",[Go]:"An authorization code must be provided (as the `code` property on the request) to this flow.",[zo]:"An authorization code or nativeAccountId must be provided to this flow.",[$o]:"Request cannot contain both spa code and native account id.",[Gn]:"IndexedDB, which is required for persistent cryptographic key storage, is unavailable. This may be caused by browser privacy features which block persistent storage in third-party contexts.",[Wo]:`Unable to acquire token from native platform.  ${dn}`,[Qo]:"Timed out while attempting to establish connection to browser extension",[Yo]:"Native extension is not installed. If you think this is a mistake call the initialize function.",[zn]:`Connection to native platform has not been established. Please install a compatible browser extension and run initialize().  ${dn}`,[Kr]:`You must call and await the initialize function before attempting to call any other MSAL API.  ${dn}`,[Jo]:"The provided prompt is not supported by the native platform. This request should be routed to the web based flow.",[Xo]:"Invalid base64 encoded string.",[Zo]:"Invalid PoP token request. The request should not have both a popKid value and signPopToken set to true.",[ol]:"Failed to build request headers object.",[sl]:"Failed to parse response headers",[es]:"Failed to decrypt ear response",[Yi]:"The request timed out."},B2={pkceNotGenerated:{code:$i,desc:ce[$i]},cryptoDoesNotExist:{code:Wi,desc:ce[Wi]},emptyNavigateUriError:{code:Br,desc:ce[Br]},hashEmptyError:{code:Po,desc:ce[Po]},hashDoesNotContainStateError:{code:jn,desc:ce[jn]},hashDoesNotContainKnownPropertiesError:{code:ko,desc:ce[ko]},unableToParseStateError:{code:xo,desc:ce[xo]},stateInteractionTypeMismatchError:{code:_o,desc:ce[_o]},interactionInProgress:{code:No,desc:ce[No]},popupWindowError:{code:Fo,desc:ce[Fo]},emptyWindowError:{code:Oo,desc:ce[Oo]},userCancelledError:{code:yr,desc:ce[yr]},monitorPopupTimeoutError:{code:el,desc:ce[el]},monitorIframeTimeoutError:{code:Do,desc:ce[Do]},redirectInIframeError:{code:Mo,desc:ce[Mo]},blockTokenRequestsInHiddenIframeError:{code:Bo,desc:ce[Bo]},blockAcquireTokenInPopupsError:{code:Ho,desc:ce[Ho]},iframeClosedPrematurelyError:{code:tl,desc:ce[tl]},silentLogoutUnsupportedError:{code:Hr,desc:ce[Hr]},noAccountError:{code:Lo,desc:ce[Lo]}

91,silentPromptValueError:{code:rl,desc:ce[rl]},noTokenRequestCacheError:{code:Uo,desc:ce[Uo]},unableToParseTokenRequestCacheError:{code:Ko,desc:ce[Ko]},authRequestNotSet:{code:nl,desc:ce[nl]},invalidCacheType:{code:il,desc:ce[il]},notInBrowserEnvironment:{code:Lr,desc:ce[Lr]},databaseNotOpen:{code:Ur,desc:ce[Ur]},noNetworkConnectivity:{code:hn,desc:ce[hn]},postRequestFailed:{code:qo,desc:ce[qo]},getRequestFailed:{code:jo,desc:ce[jo]},failedToParseNetworkResponse:{code:Qi,desc:ce[Qi]},unableToLoadTokenError:{code:Vo,desc:ce[Vo]},signingKeyNotFoundInStorage:{code:Vn,desc:ce[Vn]},authCodeRequired:{code:Go,desc:ce[Go]},authCodeOrNativeAccountRequired:{code:zo,desc:ce[zo]},spaCodeAndNativeAccountPresent:{code:$o,desc:ce[$o]},databaseUnavailable:{code:Gn,desc:ce[Gn]},unableToAcquireTokenFromNativePlatform:{code:Wo,desc:ce[Wo]},nativeHandshakeTimeout:{code:Qo,desc:ce[Qo]},nativeExtensionNotInstalled:{code:Yo,desc:ce[Yo]},nativeConnectionNotEstablished:{code:zn,desc:ce[zn]},uninitializedPublicClientApplication:{code:Kr,desc:ce[Kr]},nativePromptNotSupported:{code:Jo,desc:ce[Jo]},invalidBase64StringError:{code:Xo,desc:ce[Xo]},invalidPopTokenRequest:{code:Zo,desc:ce[Zo]}},Ji=class r extends ie{constructor(e,t){super(e,ce[e],t),Object.setPrototypeOf(this,r.prototype),this.name="BrowserAuthError"}};function G(r,e){return new Ji(r,e)}var Je={INVALID_GRANT_ERROR:"invalid_grant",POPUP_WIDTH:483,POPUP_HEIGHT:600,POPUP_NAME_PREFIX:"msal",DEFAULT_POLL_INTERVAL_MS:30,MSAL_SKU:"msal.js.browser"},_t={CHANNEL_ID:"53ee284d-920a-4b59-9d30-a60315b26836",PREFERRED_EXTENSION_ID:"ppnbnpeolgkicgegkbkbjmhlideopiji",MATS_TELEMETRY:"MATS",MICROSOFT_ENTRA_BROKERID:"MicrosoftEntra",DOM_API_NAME:"DOM API",PLATFORM_DOM_APIS:"get-token-and-sign-out",PLATFORM_DOM_PROVIDER:"PlatformAuthDOMHandler",PLATFORM_EXTENSION_PROVIDER:"PlatformAuthExtensionHandler"},ts={HandshakeRequest:"Handshake",HandshakeResponse:"HandshakeResponse",GetToken:"GetToken",Response:"Response"},qe={LocalStorage:"localStorage",SessionStorage:"sessionStorage",MemoryStorage:"memoryStorage"},Xh={GET:"GET",POST:"POST"},Cr={SIGNIN:"signin",SIGNOUT:"signout"},Xe={ORIGIN_URI:"request.origin",URL_HASH:"urlHash",REQUEST_PARAMS:"request.params",VERIFIER:"code.verifier",INTERACTION_STATUS_KEY:"interaction.status",NATIVE_REQUEST:"request.native"},Va={WRAPPER_SKU:"wrapper.sku",WRAPPER_VER:"wrapper.version"},he={acquireTokenRedirect:861,acquireTokenPopup:862,ssoSilent:863,acquireTokenSilent_authCode:864,handleRedirectPromise:865,acquireTokenByCode:866,acquireTokenSilent_silentFlow:61,logout:961,logoutPopup:962,hydrateCache:963,loadExternalTokens:964},Kp={861:"acquireTokenRedirect",862:"acquireTokenPopup",863:"ssoSilent",864:"acquireTokenSilent_authCode",865:"handleRedirectPromise",866:"acquireTokenByCode",61:"acquireTokenSilent_silentFlow",961:"logout",962:"logoutPopup",963:"hydrateCache",964:"loadExternalTokens"},qp=r=>typeof r=="number"&&r in Kp?Kp[r]:"unknown",J=(function(r){return r.Redirect="redirect",r.Popup="popup",r.Silent="silent",r.None="none",r})(J||{}),tt={Startup:"startup",Login:"login",Logout:"logout",AcquireToken:"acquireToken",SsoSilent:"ssoSilent",HandleRedirect:"handleRedirect",None:"none"},Zh={scopes:Wt},ed="jwk",td={React:"@azure/msal-react",Angular:"@azure/msal-angular"},al="msal.db",jp=1,Vp=`${al}.keys`,mt={Default:0,AccessToken:1,AccessTokenAndRefreshToken:2,RefreshToken:3,RefreshTokenAndNetwork:4,Skip:5},Gp=[mt.Default,mt.Skip,mt.RefreshTokenAndNetwork];function Ga(r){return encodeURIComponent($n(r).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_"))}function nr(r){return zp(r).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function $n(r){return zp(new TextEncoder().encode(r))}function zp(r){let e=Array.from(r,t=>String.fromCodePoint(t)).join("");return btoa(e)}function at(r){return new TextDecoder().decode(qr(r))}function qr(r){let e=r.replace(/-/g,"+").replace(/_/g,"/");switch(e.length%4){case 0:break;case 2:e+="==";break;case 3:e+="=";break;default:throw G(Xo)}let t=atob(e);return Uint8Array.from(t,n=>n.codePointAt(0)||0)}var xy="RSASSA-PKCS1-v1_5",rs="AES-GCM",Qp="HKDF",nd="SHA-256",_y=2048,Ny=new Uint8Array([1,0,1]),$p="0123456789abcdef",Wp=new Uint32Array(1),id="raw",Yp="encrypt",od="decrypt",Fy="deriveKey",Oy="crypto_subtle_undefined",sd={name:xy,hash:nd,modulusLength:_y,publicExponent:Ny};function Jp(r){if(!window)throw G(Lr);if(!window.crypto)throw G(Wi);if(!r&&!window.crypto.subtle)throw G(Wi,Oy)}function ad(r,e,t){return x(this,null,function*(){e?.addQueueMeasurement(w.Sha256Digest,t);let i=new TextEncoder().encode(r);return window.crypto.subtle.digest(nd,i)})}function Xp(r){return window.crypto.getRandomValues(r)}function rd(){return window.crypto.getRandomValues(Wp),Wp[0]}function vt(){let r=Date.now(),e=rd()*1024+(rd()&1023),t=new Uint8Array(16),n=Math.trunc(e/2**30),i=e&2**30-1,o=rd();t[0]=r/2**40,t[1]=r/2**32,t[2]=r/2**24,t[3]=r/2**16,t[4]=r/2**8,t[5]=r,t[6]=112|n>>>8,t[7]=n,t[8]=128|i>>>24,t[9]=i>>>16,t[10]=i>>>8,t[11]=i,t[12]=o>>>24,t[13]=o>>>16,t[14]=o>>>8,t[15]=o;let s="";for(let a=0;a<t.length;a++)s+=$p.charAt(t[a]>>>4),s+=$p.charAt(t[a]&15),(a===3||a===5||a===7||a===9)&&(s+="-");return s}function Zp(r,e){return x(this,null,function*(){return window.crypto.subtle.generateKey(sd,r,e)})}function cl(r){return x(this,null,function*(){return window.crypto.subtle.exportKey(ed,r)})}function eg(r,e,t){return x(this,null,function*(){return window.crypto.subtle.importKey(ed,r,sd,e,t)})}function tg(r,e){return x(this,null,function*(){return window.crypto.subtle.sign(sd,r,e)})}function ns(){return x(this,null,function*(){let r=yield cd(),t={alg:"dir",kty:"oct",k:nr(new 

91Uint8Array(r))};return $n(JSON.stringify(t))})}function Dy(r){return x(this,null,function*(){let e=at(r),n=JSON.parse(e).k,i=qr(n);return window.crypto.subtle.importKey(id,i,rs,!1,[od])})}function rg(r,e){return x(this,null,function*(){let t=e.split(".");if(t.length!==5)throw G(es,"jwe_length");let n=yield Dy(r).catch(()=>{throw G(es,"import_key")});try{let i=new TextEncoder().encode(t[0]),o=qr(t[2]),s=qr(t[3]),a=qr(t[4]),c=a.byteLength*8,l=new Uint8Array(s.length+a.length);l.set(s),l.set(a,s.length);let p=yield window.crypto.subtle.decrypt({name:rs,iv:o,tagLength:c,additionalData:i},n,l);return new TextDecoder().decode(p)}catch{throw G(es,"decrypt")}})}function cd(){return x(this,null,function*(){let r=yield window.crypto.subtle.generateKey({name:rs,length:256},!0,[Yp,od]);return window.crypto.subtle.exportKey(id,r)})}function ld(r){return x(this,null,function*(){return window.crypto.subtle.importKey(id,r,Qp,!1,[Fy])})}function ng(r,e,t){return x(this,null,function*(){return window.crypto.subtle.deriveKey({name:Qp,salt:e,hash:nd,info:new TextEncoder().encode(t)},r,{name:rs,length:256},!1,[Yp,od])})}function ig(r,e,t){return x(this,null,function*(){let n=new TextEncoder().encode(e),i=window.crypto.getRandomValues(new Uint8Array(16)),o=yield ng(r,i,t),s=yield window.crypto.subtle.encrypt({name:rs,iv:new Uint8Array(12)},o,n);return{data:nr(new Uint8Array(s)),nonce:nr(i)}})}function ud(r,e,t,n){return x(this,null,function*(){let i=qr(n),o=yield ng(r,qr(e),t),s=yield window.crypto.subtle.decrypt({name:rs,iv:new Uint8Array(12)},o,i);return new TextDecoder().decode(s)})}function ll(r){return x(this,null,function*(){let e=yield ad(r),t=new Uint8Array(e);return nr(t)})}var Wn="storage_not_supported",ul="stubbed_public_client_application_called",is="in_mem_redirect_unavailable";var hl={[Wn]:"Given storage configuration option was not supported.",[ul]:"Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors",[is]:"Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true."},My={storageNotSupportedError:{code:Wn,desc:hl[Wn]},stubPcaInstanceCalled:{code:ul,desc:hl[ul]},inMemRedirectUnavailable:{code:is,desc:hl[is]}},os=class r extends ie{constructor(e,t){super(e,t),this.name="BrowserConfigurationAuthError",Object.setPrototypeOf(this,r.prototype)}};function ss(r){return new os(r,hl[r])}function za(r){r.location.hash="",typeof r.history.replaceState=="function"&&r.history.replaceState(null,"",`${r.location.origin}${r.location.pathname}${r.location.search}`)}function hd(r){let e=r.split("#");e.shift(),window.location.hash=e.length>0?e.join("#"):""}function $a(){return window.parent!==window}function og(){return typeof window<"u"&&!!window.opener&&window.opener!==window&&typeof window.name=="string"&&window.name.indexOf(`${Je.POPUP_NAME_PREFIX}.`)===0}function Nt(){return typeof window<"u"&&window.location?window.location.href.split("?")[0].split("#")[0]:""}function dd(){let e=new ue(window.location.href).getUrlComponents();return`${e.Protocol}//${e.HostNameAndPort}/`}function sg(){if(ue.hashContainsKnownProperties(window.location.hash)&&$a())throw G(Bo)}function ag(r){if($a()&&!r)throw G(Mo)}function cg(){if(og())throw G(Ho)}function dl(){if(typeof window>"u")throw G(Lr)}function fl(r){if(!r)throw G(Kr)}function Wa(r){dl(),sg(),cg(),fl(r)}function pl(r,e){if(Wa(r),ag(e.system.allowRedirectInIframe),e.cache.cacheLocation===qe.MemoryStorage&&!e.cache.storeAuthStateInCookie)throw ss(is)}function Qa(r){let e=document.createElement("link");e.rel="preconnect",e.href=new URL(r).origin,e.crossOrigin="anonymous",document.head.appendChild(e),window.setTimeout(()=>{try{document.head.removeChild(e)}catch{}},1e4)}function fd(){return vt()}var By=Ke.addClientCapabilitiesToClaims;var Ya=class r{navigateInternal(e,t){return r.defaultNavigateWindow(e,t)}navigateExternal(e,t){return r.defaultNavigateWindow(e,t)}static defaultNavigateWindow(e,t){return t.noHistory?window.location.replace(e):window.location.assign(e),new Promise((n,i)=>{setTimeout(()=>{i(G(Yi,"failed_to_redirect"))},t.timeout)})}};var ml=class{sendGetRequestAsync(e,t){return x(this,null,function*(){let n,i={},o=0,s=lg(t);try{n=yield fetch(e,{method:Xh.GET,headers:s})}catch(a){throw ji(G(window.navigator.onLine?jo:hn),void 0,void 0,a)}i=ug(n.headers);try{return o=n.status,{headers:i,body:yield n.json(),status:o}}catch(a){throw ji(G(Qi),o,i,a)}})}sendPostRequestAsync(e,t){return x(this,null,function*(){let n=t&&t.body||"",i=lg(t),o,s=0,a={};try{o=yield fetch(e,{method:Xh.POST,headers:i,body:n})}catch(c){throw ji(G(window.navigator.onLine?qo:hn),void 0,void 0,c)}a=ug(o.headers);try{return s=o.status,{headers:a,body:yield o.json(),status:s}}catch(c){throw ji(G(Qi),s,a,c)}})}};function lg(r){try{let e=new Headers;if(!(r&&r.headers))return e;let t=r.headers;return Object.entries(t).forEach(([n,i])=>{e.append(n,i)}),e}catch(e){throw ji(G(ol),void 0,void 0,e)}}function ug(r){try{let e={};return r.forEach((t,n)=>{e[n]=t}),e}catch{throw G(sl)}}var Hy=6e4,vl=1e4,Ly=3e4,pd=2e3;function hg({auth:r,cache:e,system:t,telemetry:n},i){let o={clientId:L.EMPTY_STRING,authority:`${L.DEFAULT_AUTHORITY}`,knownAuthorities:[],cloudDiscoveryMetadata:L.EMPTY_STRING,authorityMetadata:L.EMPTY_STRING,redirectUri:typeof window<"u"?Nt():"",postLogoutRedirectUri:L.EMPTY_STRING,navigateToLoginRequestUrl:!0,clientCapabilities:[],protocolMode:Ue.AAD,OIDCOptions:{serverResponseType:Pr.FRAGMENT,defaultScopes:[L.OPENID_SCOPE,L.PROFILE_SCOPE,L.OFFLINE_ACCESS_SCOPE]},azureCloudOptions:{azureCloudInstance:Dn.None,tenant:L.EMPTY_STRING},skipAuthorityMetadataCache:!1,supportsNestedAppAuth:!1,instanceAware:!1,encodeExtraQueryParams:!1,verifySSO:!1},s={cacheLocation:qe.SessionStorage,cacheRetentionDays:5,temporaryCacheLocation:qe.SessionStorage,storeAuthStateInCookie:!1,secureCookies:!1,cacheMigrationEnabled:!!(e&&e.cacheLocation===qe.LocalStorage),claimsBasedCachingEnabled:!1},a={loggerCallback:()=>{},logLevel:Ae.Info,piiLoggingEnabled:!1},c=re(q({},Dc),{loggerOptions:a,networkClient:i?new ml:Qh,navigationClient:new Ya,loadFrameTimeout:0,windowHashTimeout:t?.loadFrameTimeout||Hy,iframeHashTimeout:t?.loadFrameTimeout||vl,navigateFrameWait:0,redirectNavigationTimeout:Ly,asyncPopups:!1,allowRedirectInIframe:!1,allowPlatformBroker:!1,allowPlatformBrokerWithDOM:!1,nativeBrokerHandshakeTimeout:t?.nativeBrokerHandshakeTimeout||pd,pollIntervalMilliseconds:Je.DEFAULT_POLL_INTERVAL_MS}),l=re(q(q({},c),t),{loggerOptions:t?.loggerOptions||a}

91),p={application:{appName:L.EMPTY_STRING,appVersion:L.EMPTY_STRING},client:new nn};if(r?.protocolMode!==Ue.OIDC&&r?.OIDCOptions&&new kt(l.loggerOptions).warning(JSON.stringify(fe(St.cannotSetOIDCOptions))),r?.protocolMode&&r.protocolMode===Ue.OIDC&&l?.allowPlatformBroker)throw fe(St.cannotAllowPlatformBroker);return{auth:re(q(q({},o),r),{OIDCOptions:q(q({},o.OIDCOptions),r?.OIDCOptions)}),cache:q(q({},s),e),system:l,telemetry:q(q({},p),n)}}var dg="@azure/msal-browser",Yt="4.30.0";var dt="msal",gd="browser";var gg=`${dt}.${gd}.log.level`,mg=`${dt}.${gd}.log.pii`,PR=`${dt}.${gd}.performance.enabled`,md=`${dt}.version`,fg="account.keys",pg="token.keys";function fn(r=2){return r<1?`${dt}.${fg}`:`${dt}.${r}.${fg}`}function pn(r,e=2){return e<1?`${dt}.${pg}.${r}`:`${dt}.${e}.${pg}.${r}`}var yl=class r{static loggerCallback(e,t){switch(e){case Ae.Error:console.error(t);return;case Ae.Info:console.info(t);return;case Ae.Verbose:console.debug(t);return;case Ae.Warning:console.warn(t);return;default:console.log(t);return}}constructor(e){this.browserEnvironment=typeof window<"u",this.config=hg(e,this.browserEnvironment);let t;try{t=window[qe.SessionStorage]}catch{}let n=t?.getItem(gg),i=t?.getItem(mg)?.toLowerCase(),o=i==="true"?!0:i==="false"?!1:void 0,s=q({},this.config.system.loggerOptions),a=n&&Object.keys(Ae).includes(n)?Ae[n]:void 0;a&&(s.loggerCallback=r.loggerCallback,s.logLevel=a),o!==void 0&&(s.piiLoggingEnabled=o),this.logger=new kt(s,dg,Yt),this.available=!1}getConfig(){return this.config}getLogger(){return this.logger}isAvailable(){return this.available}isBrowserEnvironment(){return this.browserEnvironment}};var Cl=(()=>{class r extends yl{getModuleName(){return r.MODULE_NAME}getId(){return r.ID}initialize(){return x(this,null,function*(){return this.available=typeof window<"u",this.available})}}return r.MODULE_NAME="",r.ID="StandardOperatingContext",r})();var Sl=class{constructor(){this.dbName=al,this.version=jp,this.tableName=Vp,this.dbOpen=!1}open(){return x(this,null,function*(){return new Promise((e,t)=>{let n=window.indexedDB.open(this.dbName,this.version);n.addEventListener("upgradeneeded",i=>{i.target.result.createObjectStore(this.tableName)}),n.addEventListener("success",i=>{let o=i;this.db=o.target.result,this.dbOpen=!0,e()}),n.addEventListener("error",()=>t(G(Gn)))})})}closeConnection(){let e=this.db;e&&this.dbOpen&&(e.close(),this.dbOpen=!1)}validateDbIsOpen(){return x(this,null,function*(){if(!this.dbOpen)return this.open()})}getItem(e){return x(this,null,function*(){return yield this.validateDbIsOpen(),new Promise((t,n)=>{if(!this.db)return n(G(Ur));let s=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).get(e);s.addEventListener("success",a=>{let c=a;this.closeConnection(),t(c.target.result)}),s.addEventListener("error",a=>{this.closeConnection(),n(a)})})})}setItem(e,t){return x(this,null,function*(){return yield this.validateDbIsOpen(),new Promise((n,i)=>{if(!this.db)return i(G(Ur));let a=this.db.transaction([this.tableName],"readwrite").objectStore(this.tableName).put(t,e);a.addEventListener("success",()=>{this.closeConnection(),n()}),a.addEventListener("error",c=>{this.closeConnection(),i(c)})})})}removeItem(e){return x(this,null,function*(){return yield this.validateDbIsOpen(),new Promise((t,n)=>{if(!this.db)return n(G(Ur));let s=this.db.transaction([this.tableName],"readwrite").objectStore(this.tableName).delete(e);s.addEventListener("success",()=>{this.closeConnection(),t()}),s.addEventListener("error",a=>{this.closeConnection(),n(a)})})})}getKeys(){return x(this,null,function*(){return yield this.validateDbIsOpen(),new Promise((e,t)=>{if(!this.db)return t(G(Ur));let o=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).getAllKeys();o.addEventListener("success",s=>{let a=s;this.closeConnection(),e(a.target.result)}),o.addEventListener("error",s=>{this.closeConnection(),t(s)})})})}containsKey(e){return x(this,null,function*(){return yield this.validateDbIsOpen(),new Promise((t,n)=>{if(!this.db)return n(G(Ur));let s=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).count(e);s.addEventListener("success",a=>{let c=a;this.closeConnection(),t(c.target.result===1)}),s.addEventListener("error",a=>{this.closeConnection(),n(a)})})})}deleteDatabase(){return x(this,null,function*(){return this.db&&this.dbOpen&&this.closeConnection(),new Promise((e,t)=>

91{let n=window.indexedDB.deleteDatabase(al),i=setTimeout(()=>t(!1),200);n.addEventListener("success",()=>(clearTimeout(i),e(!0))),n.addEventListener("blocked",()=>(clearTimeout(i),e(!0))),n.addEventListener("error",()=>(clearTimeout(i),t(!1)))})})}};var gn=class{constructor(){this.cache=new Map}initialize(){return x(this,null,function*(){})}getItem(e){return this.cache.get(e)||null}getUserData(e){return this.getItem(e)}setItem(e,t){this.cache.set(e,t)}setUserData(e,t){return x(this,null,function*(){this.setItem(e,t)})}removeItem(e){this.cache.delete(e)}getKeys(){let e=[];return this.cache.forEach((t,n)=>{e.push(n)}),e}containsKey(e){return this.cache.has(e)}clear(){this.cache.clear()}decryptData(){return Promise.resolve(null)}};var El=class{constructor(e){this.inMemoryCache=new gn,this.indexedDBCache=new Sl,this.logger=e}handleDatabaseAccessError(e){if(e instanceof Ji&&e.errorCode===Gn)this.logger.error("Could not access persistent storage. This may be caused by browser privacy features which block persistent storage in third-party contexts.");else throw e}getItem(e){return x(this,null,function*(){let t=this.inMemoryCache.getItem(e);if(!t)try{return this.logger.verbose("Queried item not found in in-memory cache, now querying persistent storage."),yield this.indexedDBCache.getItem(e)}catch(n){this.handleDatabaseAccessError(n)}return t})}setItem(e,t){return x(this,null,function*(){this.inMemoryCache.setItem(e,t);try{yield this.indexedDBCache.setItem(e,t)}catch(n){this.handleDatabaseAccessError(n)}})}removeItem(e){return x(this,null,function*(){this.inMemoryCache.removeItem(e);try{yield this.indexedDBCache.removeItem(e)}catch(t){this.handleDatabaseAccessError(t)}})}getKeys(){return x(this,null,function*(){let e=this.inMemoryCache.getKeys();if(e.length===0)try{return this.logger.verbose("In-memory cache is empty, now querying persistent storage."),yield this.indexedDBCache.getKeys()}catch(t){this.handleDatabaseAccessError(t)}return e})}containsKey(e){return x(this,null,function*(){let t=this.inMemoryCache.containsKey(e);if(!t)try{return this.logger.verbose("Key not found in in-memory cache, now querying persistent storage."),yield this.indexedDBCache.containsKey(e)}catch(n){this.handleDatabaseAccessError(n)}return t})}clearInMemory(){this.logger.verbose("Deleting in-memory keystore"),this.inMemoryCache.clear(),this.logger.verbose("In-memory keystore deleted")}clearPersistent(){return x(this,null,function*(){try{this.logger.verbose("Deleting persistent keystore");let e=yield this.indexedDBCache.deleteDatabase();return e&&this.logger.verbose("Persistent keystore deleted"),e}catch(e){return this.handleDatabaseAccessError(e),!1}})}};var as=(()=>{class r{constructor(t,n,i){this.logger=t,Jp(i??!1),this.cache=new El(this.logger),this.performanceClient=n}createNewGuid(){return vt()}base64Encode(t){return $n(t)}base64Decode(t){return at(t)}base64UrlEncode(t){return Ga(t)}encodeKid(t){return this.base64UrlEncode(JSON.stringify({kid:t}))}getPublicKeyThumbprint(t){return x(this,null,function*(){let n=this.performanceClient?.startMeasurement(w.CryptoOptsGetPublicKeyThumbprint,t.correlationId),i=yield Zp(r.EXTRACTABLE,r.POP_KEY_USAGES),o=yield cl(i.publicKey),s={e:o.e,kty:o.kty,n:o.n},a=vg(s),c=yield this.hashString(a),l=yield cl(i.privateKey),p=yield eg(l,!1,["sign"]);return yield this.cache.setItem(c,{privateKey:p,publicKey:i.publicKey,requestMethod:t.resourceRequestMethod,requestUri:t.resourceRequestUri}),n&&n.end({success:!0}),c})}removeTokenBindingKey(t){return x(this,null,function*(){if(yield this.cache.removeItem(t),yield this.cache.containsKey(t))throw K(ht.bindingKeyNotRemoved)})}clearKeystore(){return x(this,null,function*(){this.cache.clearInMemory();try{return yield this.cache.clearPersistent(),!0}catch(t){return t instanceof Error?this.logger.error(`Clearing keystore failed with error: ${t.message}`):this.logger.error("Clearing keystore failed with unknown error"),!1}})}signJwt(t,n,i,o){return x(this,null,function*(){let s=this.performanceClient?.startMeasurement(w.CryptoOptsSignJwt,o),a=yield this.cache.getItem(n);if(!a)throw G(Vn);let c=yield cl(a.publicKey),l=vg(c),p=Ga(JSON.stringify({kid:n}

91)),g=qa.getShrHeaderString(re(q({},i?.header),{alg:c.alg,kid:p})),h=Ga(g);t.cnf={jwk:JSON.parse(l)};let d=Ga(JSON.stringify(t)),m=`${h}.${d}`,y=new TextEncoder().encode(m),v=yield tg(a.privateKey,y),S=nr(new Uint8Array(v)),A=`${m}.${S}`;return s&&s.end({success:!0}),A})}hashString(t){return x(this,null,function*(){return ll(t)})}}return r.POP_KEY_USAGES=["sign","verify"],r.EXTRACTABLE=!0,r})();function vg(r){return JSON.stringify(r,Object.keys(r).sort())}var Uy=1440*60*1e3,Al={Lax:"Lax",None:"None"},cs=class{initialize(){return Promise.resolve()}getItem(e){let t=`${encodeURIComponent(e)}`,n=document.cookie.split(";");for(let i=0;i<n.length;i++){let o=n[i],[s,...a]=decodeURIComponent(o).trim().split("="),c=a.join("=");if(s===t)return c}return""}getUserData(){throw K(ht.methodNotImplemented)}setItem(e,t,n,i=!0,o=Al.Lax){let s=`${encodeURIComponent(e)}=${encodeURIComponent(t)};path=/;SameSite=${o};`;if(n){let a=Ky(n);s+=`expires=${a};`}(i||o===Al.None)&&(s+="Secure;"),document.cookie=s}setUserData(){return x(this,null,function*(){return Promise.reject(K(ht.methodNotImplemented))})}removeItem(e){this.setItem(e,"",-1)}getKeys(){let e=document.cookie.split(";"),t=[];return e.forEach(n=>{let i=decodeURIComponent(n).trim().split("=");t.push(i[0])}),t}containsKey(e){return this.getKeys().includes(e)}decryptData(){return Promise.resolve(null)}};function Ky(r){let e=new Date;return new Date(e.getTime()+r*Uy).toUTCString()}function jr(r,e){let t=r.getItem(fn(e));return t?JSON.parse(t):[]}function Jt(r,e,t){let n=e.getItem(pn(r,t));if(n){let i=JSON.parse(n);if(i&&i.hasOwnProperty("idToken")&&i.hasOwnProperty("accessToken")&&i.hasOwnProperty("refreshToken"))return i}return{idToken:[],accessToken:[],refreshToken:[]}}function ls(r){return r.hasOwnProperty("id")&&r.hasOwnProperty("nonce")&&r.hasOwnProperty("data")}var yg="msal.cache.encryption",qy="msal.broadcast.cache",wl=class{constructor(e,t,n){if(!window.localStorage)throw ss(Wn);this.memoryStorage=new gn,this.initialized=!1,this.clientId=e,this.logger=t,this.performanceClient=n,this.broadcast=new BroadcastChannel(qy)}initialize(e){return x(this,null,function*(){let t=new cs,n=t.getItem(yg),i={key:"",id:""};if(n)try{i=JSON.parse(n)}catch{}if(i.key&&i.id){let o=$e(qr,w.Base64Decode,this.logger,this.performanceClient,e)(i.key);this.encryptionCookie={id:i.id,key:yield H(ld,w.GenerateHKDF,this.logger,this.performanceClient,e)(o)}}else{let o=vt(),s=yield H(cd,w.GenerateBaseKey,this.logger,this.performanceClient,e)(),a=$e(nr,w.UrlEncodeArr,this.logger,this.performanceClient,e)(new Uint8Array(s));this.encryptionCookie={id:o,key:yield H(ld,w.GenerateHKDF,this.logger,this.performanceClient,e)(s)};let c={id:o,key:a};t.setItem(yg,JSON.stringify(c),0,!0,Al.None)}yield H(this.importExistingCache.bind(this),w.ImportExistingCache,this.logger,this.performanceClient,e)(e),this.broadcast.addEventListener("message",this.updateCache.bind(this)),this.initialized=!0})}getItem(e){return window.localStorage.getItem(e)}getUserData(e){if(!this.initialized)throw G(Kr);return this.memoryStorage.getItem(e)}decryptData(e,t,n){return x(this,null,function*(){if(!this.initialized||!this.encryptionCookie)throw G(Kr);if(t.id!==this.encryptionCookie.id)return this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},n),null;let i=yield H(ud,w.Decrypt,this.logger,this.performanceClient,n)(this.encryptionCookie.key,t.nonce,this.getContext(e),t.data);if(!i)return null;try{return re(q({},JSON.parse(i)),{lastUpdatedAt:t.lastUpdatedAt})}catch{return this.performanceClient.incrementFields({encryptedCacheCorruptionCount:1},n),null}})}setItem(e,t){window.localStorage.setItem(e,t)}setUserData(e,t,n,i,o){return x(this,null,function*(){if(!this.initialized||!this.encryptionCookie)throw G(Kr);if(o)this.setItem(e,t);else{let{data:s,nonce:a}=yield H(ig,w.Encrypt,this.logger,this.performanceClient,n)(this.encryptionCookie.key,t,this.getContext(e)),c={id:this.encryptionCookie.id,nonce:a,data:s,lastUpdatedAt:i};this.setItem(e,JSON.stringify(c))}this.memoryStorage.setItem(e,t),this.broadcast.postMessage({key:e,value:t,context:this.getContext(e)}

91)})}removeItem(e){this.memoryStorage.containsKey(e)&&(this.memoryStorage.removeItem(e),this.broadcast.postMessage({key:e,value:null,context:this.getContext(e)})),window.localStorage.removeItem(e)}getKeys(){return Object.keys(window.localStorage)}containsKey(e){return window.localStorage.hasOwnProperty(e)}clear(){this.memoryStorage.clear(),jr(this).forEach(n=>this.removeItem(n));let t=Jt(this.clientId,this);t.idToken.forEach(n=>this.removeItem(n)),t.accessToken.forEach(n=>this.removeItem(n)),t.refreshToken.forEach(n=>this.removeItem(n)),this.getKeys().forEach(n=>{(n.startsWith(dt)||n.indexOf(this.clientId)!==-1)&&this.removeItem(n)})}importExistingCache(e){return x(this,null,function*(){if(!this.encryptionCookie)return;let t=jr(this);t=yield this.importArray(t,e),t.length?this.setItem(fn(),JSON.stringify(t)):this.removeItem(fn());let n=Jt(this.clientId,this);n.idToken=yield this.importArray(n.idToken,e),n.accessToken=yield this.importArray(n.accessToken,e),n.refreshToken=yield this.importArray(n.refreshToken,e),n.idToken.length||n.accessToken.length||n.refreshToken.length?this.setItem(pn(this.clientId),JSON.stringify(n)):this.removeItem(pn(this.clientId))})}getItemFromEncryptedCache(e,t){return x(this,null,function*(){if(!this.encryptionCookie)return null;let n=this.getItem(e);if(!n)return null;let i;try{i=JSON.parse(n)}catch{return null}return ls(i)?i.id!==this.encryptionCookie.id?(this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},t),null):(this.performanceClient.incrementFields({encryptedCacheCount:1},t),H(ud,w.Decrypt,this.logger,this.performanceClient,t)(this.encryptionCookie.key,i.nonce,this.getContext(e),i.data)):(this.performanceClient.incrementFields({unencryptedCacheCount:1},t),n)})}importArray(e,t){return x(this,null,function*(){let n=[],i=[];return e.forEach(o=>{let s=this.getItemFromEncryptedCache(o,t).then(a=>{a?(this.memoryStorage.setItem(o,a),n.push(o)):this.removeItem(o)});i.push(s)}),yield Promise.all(i),n})}getContext(e){let t="";return e.includes(this.clientId)&&(t=this.clientId),t}updateCache(e){this.logger.trace("Updating internal cache from broadcast event");let t=this.performanceClient.startMeasurement(w.LocalStorageUpdated);t.add({isBackground:!0});let{key:n,value:i,context:o}=e.data;if(!n){this.logger.error("Broadcast event missing key"),t.end({success:!1,errorCode:"noKey"});return}if(o&&o!==this.clientId){this.logger.trace(`Ignoring broadcast event from clientId: ${o}`),t.end({success:!1,errorCode:"contextMismatch"});return}i?(this.memoryStorage.setItem(n,i),this.logger.verbose("Updated 

91item in internal cache")):(this.memoryStorage.removeItem(n),this.logger.verbose("Removed item from internal cache")),t.end({success:!0})}};var Tl=class{constructor(){if(!window.sessionStorage)throw ss(Wn)}initialize(){return x(this,null,function*(){})}getItem(e){return window.sessionStorage.getItem(e)}getUserData(e){return this.getItem(e)}setItem(e,t){window.sessionStorage.setItem(e,t)}setUserData(e,t){return x(this,null,function*(){this.setItem(e,t)})}removeItem(e){window.sessionStorage.removeItem(e)}getKeys(){return Object.keys(window.sessionStorage)}containsKey(e){return window.sessionStorage.hasOwnProperty(e)}decryptData(){return Promise.resolve(null)}};var Y={INITIALIZE_START:"msal:initializeStart",INITIALIZE_END:"msal:initializeEnd",ACCOUNT_ADDED:"msal:accountAdded",ACCOUNT_REMOVED:"msal:accountRemoved",ACTIVE_ACCOUNT_CHANGED:"msal:activeAccountChanged",LOGIN_START:"msal:loginStart",LOGIN_SUCCESS:"msal:loginSuccess",LOGIN_FAILURE:"msal:loginFailure",ACQUIRE_TOKEN_START:"msal:acquireTokenStart",ACQUIRE_TOKEN_SUCCESS:"msal:acquireTokenSuccess",ACQUIRE_TOKEN_FAILURE:"msal:acquireTokenFailure",ACQUIRE_TOKEN_NETWORK_START:"msal:acquireTokenFromNetworkStart",SSO_SILENT_START:"msal:ssoSilentStart",SSO_SILENT_SUCCESS:"msal:ssoSilentSuccess",SSO_SILENT_FAILURE:"msal:ssoSilentFailure",ACQUIRE_TOKEN_BY_CODE_START:"msal:acquireTokenByCodeStart",ACQUIRE_TOKEN_BY_CODE_SUCCESS:"msal:acquireTokenByCodeSuccess",ACQUIRE_TOKEN_BY_CODE_FAILURE:"msal:acquireTokenByCodeFailure",HANDLE_REDIRECT_START:"msal:handleRedirectStart",HANDLE_REDIRECT_END:"msal:handleRedirectEnd",POPUP_OPENED:"msal:popupOpened",LOGOUT_START:"msal:logoutStart",LOGOUT_SUCCESS:"msal:logoutSuccess",LOGOUT_FAILURE:"msal:logoutFailure",LOGOUT_END:"msal:logoutEnd",RESTORE_FROM_BFCACHE:"msal:restoreFromBFCache",BROKER_CONNECTION_ESTABLISHED:"msal:brokerConnectionEstablished"};function mn(r,e){let t=r.indexOf(e);t>-1&&r.splice(t,1)}var us=class r extends Di{constructor(e,t,n,i,o,s,a){super(e,n,i,o,a),this.cacheConfig=t,this.logger=i,this.internalStorage=new gn,this.browserStorage=Sg(e,t.cacheLocation,i,o),this.temporaryCacheStorage=Sg(e,t.temporaryCacheLocation,i,o),this.cookieStorage=new cs,this.eventHandler=s}initialize(e){return x(this,null,function*(){this.performanceClient.addFields({cacheLocation:this.cacheConfig.cacheLocation,cacheRetentionDays:this.cacheConfig.cacheRetentionDays},e),yield this.browserStorage.initialize(e),yield this.migrateExistingCache(e),this.trackVersionChanges(e)})}migrateExistingCache(e){return x(this,null,function*(){let t=jr(this.browserStorage),n=Jt(this.clientId,this.browserStorage);this.performanceClient.addFields({preMigrateAcntCount:t.length,preMigrateATCount:n.accessToken.length,preMigrateITCount:n.idToken.length,preMigrateRTCount:n.refreshToken.length},e);for(let o=0;o<2;o++){let s=o;yield this.removeStaleAccounts(o,s,e)}for(let o=0;o<2;o++){let s=o;yield this.migrateIdTokens(o,s,e)}let i=this.getKMSIValues();for(let o=0;o<2;o++)yield this.migrateAccessTokens(o,i,e),yield this.migrateRefreshTokens(o,i,e);t=jr(this.browserStorage),n=Jt(this.clientId,this.browserStorage),this.performanceClient.addFields({postMigrateAcntCount:t.length,postMigrateATCount:n.accessToken.length,postMigrateITCount:n.idToken.length,postMigrateRTCount:n.refreshToken.length},e)})}updateOldEntry(e,t){return x(this,null,function*(){let n=this.browserStorage.getItem(e),i=this.validateAndParseJson(n||"");if(!i)return this.browserStorage.removeItem(e),null;if(!i.lastUpdatedAt)i.lastUpdatedAt=Date.now().toString(),this.setItem(e,JSON.stringify(i),t);else if(st.isCacheExpired(i.lastUpdatedAt,this.cacheConfig.cacheRetentionDays))return this.browserStorage.removeItem(e),this.performanceClient.incrementFields({expiredCacheRemovedCount:1},t),null;let o=ls(i)?yield this.browserStorage.decryptData(e,i,t):i;return!o||!Ye.isCredentialEntity(o)?(this.performanceClient.incrementFields({invalidCacheCount:1},t),null):(Ye.isAccessTokenEntity(o)||Ye.isRefreshTokenEntity(o))&&o.expiresOn&&st.isTokenExpired(o.expiresOn,Us)?(this.browserStorage.removeItem(e),this.performanceClient.incrementFields({expiredCacheRemovedCount:1},t),null):o})}

91removeStaleAccounts(e,t,n){return x(this,null,function*(){let i=jr(this.browserStorage,e);if(i.length!==0){for(let o of[...i]){this.performanceClient.incrementFields({oldAcntCount:1},n);let s=this.browserStorage.getItem(o),a=this.validateAndParseJson(s||"");if(!a){mn(i,o);continue}if(a.lastUpdatedAt)st.isCacheExpired(a.lastUpdatedAt,this.cacheConfig.cacheRetentionDays)&&(yield this.removeAccountOldSchema(o,a,t,n),mn(i,o));else{a.lastUpdatedAt=Date.now().toString(),this.setItem(o,JSON.stringify(a),n);continue}}this.setAccountKeys(i,n,e)}})}removeAccountOldSchema(e,t,n,i){return x(this,null,function*(){let s=(ls(t)?yield this.browserStorage.decryptData(e,t,i):t)?.homeAccountId;if(s){let a=this.getTokenKeys(n);[...a.idToken].filter(c=>c.includes(s)).forEach(c=>{this.browserStorage.removeItem(c),mn(a.idToken,c)}),[...a.accessToken].filter(c=>c.includes(s)).forEach(c=>{this.browserStorage.removeItem(c),mn(a.accessToken,c)}),[...a.refreshToken].filter(c=>c.includes(s)).forEach(c=>{this.browserStorage.removeItem(c),mn(a.refreshToken,c)}),this.setTokenKeys(a,i,n)}this.performanceClient.incrementFields({expiredAcntRemovedCount:1},i),this.browserStorage.removeItem(e)})}getKMSIValues(){let e={},t=this.getTokenKeys().idToken;for(let n of t){let i=this.browserStorage.getUserData(n);if(i){let o=JSON.parse(i),s=ot.extractTokenClaims(o.secret,at);s&&(e[o.homeAccountId]=ot.isKmsi(s))}}return e}migrateIdTokens(e,t,n){return x(this,null,function*(){let i=Jt(this.clientId,this.browserStorage,e);if(i.idToken.length===0)return;let o=Jt(this.clientId,this.browserStorage,2),s=jr(this.browserStorage),a=jr(this.browserStorage,t);for(let c of[...i.idToken]){this.performanceClient.incrementFields({oldITCount:1},n);let l=yield this.updateOldEntry(c,n);if(!l){mn(i.idToken,c);continue}let p=s.find(S=>S.includes(l.homeAccountId)),g=a.find(S=>S.includes(l.homeAccountId)),h=null;if(p)h=this.getAccount(p,n);else if(g){let S=this.browserStorage.getItem(g),A=this.validateAndParseJson(S||"");h=A&&ls(A)?yield this.browserStorage.decryptData(g,A,n):A}if(!h){this.performanceClient.incrementFields({skipITMigrateCount:1},n);continue}let d=ot.extractTokenClaims(l.secret,at),m=this.generateCredentialKey(l),f=this.getIdTokenCredential(m,n),y=Object.keys(d).includes("signin_state"),v=f&&Object.keys(ot.extractTokenClaims(f.secret,at)||{}).includes("signin_state");if(!f||l.lastUpdatedAt>f.lastUpdatedAt&&(y||!v)){let S=h.tenantProfiles||[],A=Oi(d)||h.realm;if(A&&!S.find(D=>D.tenantId===A)){let D=Nr(h.homeAccountId,h.localAccountId,A,d);S.push(D)}h.tenantProfiles=S;let T=this.generateAccountKey(_e.getAccountInfo(h)),b=ot.isKmsi(d);yield this.setUserData(T,JSON.stringify(h),n,h.lastUpdatedAt,b),s.includes(T)||s.push(T),yield this.setUserData(m,JSON.stringify(l),n,l.lastUpdatedAt,b),this.performanceClient.incrementFields({migratedITCount:1},n),o.idToken.push(m)}}this.setTokenKeys(i,n,e),this.setTokenKeys(o,n),this.setAccountKeys(s,n)})}migrateAccessTokens(e,t,n){return x(this,null,function*(){let i=Jt(this.clientId,this.browserStorage,e);if(i.accessToken.length===0)return;let o=Jt(this.clientId,this.browserStorage,2);for(let s of[...i.accessToken]){this.performanceClient.incrementFields({oldATCount:1},n);let a=yield this.updateOldEntry(s,n);if(!a){mn(i.accessToken,s);continue}if(!Object.keys(t).includes(a.homeAccountId)){this.performanceClient.incrementFields({skipATMigrateCount:1},n);continue}let c=this.generateCredentialKey(a),l=t[a.homeAccountId];if(!o.accessToken.includes(c))yield this.setUserData(c,JSON.stringify(a),n,a.lastUpdatedAt,l),this.performanceClient.incrementFields({migratedATCount:1},n),o.accessToken.push(c);else{let p=this.getAccessTokenCredential(c,n);(!p||a.lastUpdatedAt>p.lastUpdatedAt)&&(yield this.setUserData(c,JSON.stringify(a),n,a.lastUpdatedAt,l),this.performanceClient.incrementFields({migratedATCount:1},n))}}this.setTokenKeys(i,n,e),this.setTokenKeys(o,n)})}migrateRefreshTokens(e,t,n){return x(this,null,function*(){let i=Jt(this.clientId,this.browserStorage,e);if(i.refreshToken.length===0)return;let o=Jt(this.clientId,this.browserStorage,2);for(let s of[...i.refreshToken]){this.performanceClient.incrementFields({oldRTCount:1},n);let a=yield this.updateOldEntry(s,n);if(!a){mn(i.refreshToken,s);continue}if(!Object.keys(t).includes(a.homeAccountId)){this.performanceClient.incrementFields({skipRTMigrateCount:1},n);continue}let c=this.generateCredentialKey(a),l=t[a.homeAccountId];if(!o.refreshToken.includes(c))yield this.setUserData(c,JSON.stringify(a),n,a.lastUpdatedAt,l),this.performanceClient.incrementFields({migratedRTCount:1},n),o.refreshToken.push(c);else{let p=this.getRefreshTokenCredential(c,n);(!p||a.lastUpdatedAt>p.lastUpdatedAt)&&(yield this.setUserData(c,JSON.stringify(a),n,a.lastUpdatedAt,l),this.performanceClient.incrementFields({migratedRTCount:1},n))}}this.setTokenKeys(i,n,e),this.setTokenKeys(o,n)})}trackVersionChanges(e){let t=this.browserStorage.getItem(md);t&&(this.logger.info(`MSAL.js was last initialized by version: ${t}`),this.performanceClient.addFields({previousLibraryVersion:t},e)),t!==Yt&&this.setItem(md,Yt,e)}validateAndParseJson(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}setItem(e,t,n){let i=new Array(3).fill(0),o=[],s=20;for(let a=0;a<=s;a++)try{if(this.browserStorage.setItem(e,t),a>0)for(let c=0;c<=2;c++){let l=i.slice(0,c).reduce((g,h)=>g+h,0);if(l>=a)break;let p=a>l+i[c]?l+i[c]:a;a>l&&i[c]>0&&this.removeAccessTokenKeys(o.slice(l,p),n,c)}break}catch(c){let l=Co(c);if(l.errorCode===Ea.cacheQuotaExceeded&&a<s){if(!o.length)for(let p=0;p<=2;p++)if(e===pn(this.clientId,p)){let g=JSON.parse(t).accessToken;o.push(...g),i[p]=g.length}else{let g=this.getTokenKeys(p).accessToken;o.push(...g),i[p]=g.length}if(o.length<=a)throw l;this.removeAccessToken(o[a],n,!1)}else throw l}}setUserData(e,t,n,i,o){return x(this,null,function*(){let s=new Array(3).fill(0),a=[],c=20;for(let l=0;l<=c;l++)try{if(yield H(this.browserStorage.setUserData.bind(this.browserStorage),w.SetUserData,this.logger,this.performanceClient)(e,t,n,i,o),l>0)for(let p=0;p<=2;p++){let g=s.slice(0,p).reduce((d,m)=>d+m,0);if(g>=l)break;let h=l>g+s[p]?g+s[p]:l;l>g&&s[p]>0&&this.removeAccessTokenKeys(a.slice(g,h),n,p)}break}catch(p){let g=Co(p);if(g.errorCode===Ea.cacheQuotaExceeded&&l<c){if(!a.length)for(let h=0;h<=2;h++){let d=this.getTokenKeys(h).accessToken;a.push(...d),s[h]=d.length}if(a.length<=l)throw g;this.removeAccessToken(a[l],n,!1)}else throw g}})}getAccount(e,t){this.logger.trace("BrowserCacheManager.getAccount called");let n=this.browserStorage.getUserData(e);if(!n)return this.removeAccountKeyFromMap(e,t),null;let i=this.validateAndParseJson(n);return!i||!_e.isAccountEntity(i)?null:(this.performanceClient.addFields({accountCachedBy:qp(i.cachedByApiId)},t),Di.toObject(new _e,i))}setAccount(e,t,n,i){return x(this,null,function*(){this.logger.trace("BrowserCacheManager.setAccount called");let o=this.generateAccountKey(_e.getAccountInfo(e)),s=Date.now().toString();e.lastUpdatedAt=s,e.cachedByApiId=i,yield this.setUserData(o,JSON.stringify(e),t,s,n);let a=this.addAccountKeyToMap(o,t);this.performanceClient.addFields({kmsi:n},t),this.cacheConfig.cacheLocation===qe.LocalStorage&&a&&this.eventHandler.emitEvent(Y.ACCOUNT_ADDED,void 0,_e.getAccountInfo(e))})}getAccountKeys(){return jr(this.browserStorage)}setAccountKeys(e,t,n=2){e.length===0?this.removeItem(fn(n)):this.setItem(fn(n),JSON.stringify(e),t)}addAccountKeyToMap(e,t){this.logger.trace("BrowserCacheManager.addAccountKeyToMap called"),this.logger.tracePii(`BrowserCacheManager.addAccountKeyToMap called with key: ${e}`);let n=this.getAccountKeys();return n.indexOf(e)===-1?(n.push(e),this.setItem(fn(),JSON.stringify(n),t),this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key added"),!0):(this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key already exists in map"),!1)}removeAccountKeyFromMap(e,t){this.logger.trace("BrowserCacheManager.removeAccountKeyFromMap called"),this.logger.tracePii(`BrowserCacheManager.removeAccountKeyFromMap called with key: ${e}`);let n=this.getAccountKeys(),i=n.indexOf(e);i>-1?(n.splice(i,1),this.setAccountKeys(n,t),this.logger.trace("BrowserCacheManager.removeAccountKeyFromMap account key removed")):this.logger.trace("BrowserCacheManager.removeAccountKeyFromMap ke

91y not found in existing map")}removeAccount(e,t){let n=this.getActiveAccount(t);n?.homeAccountId===e.homeAccountId&&n?.environment===e.environment&&this.setActiveAccount(null,t),super.removeAccount(e,t),this.removeAccountKeyFromMap(this.generateAccountKey(e),t),this.browserStorage.getKeys().forEach(i=>{i.includes(e.homeAccountId)&&i.includes(e.environment)&&this.browserStorage.removeItem(i)}),this.cacheConfig.cacheLocation===qe.LocalStorage&&this.eventHandler.emitEvent(Y.ACCOUNT_REMOVED,void 0,e)}removeIdToken(e,t){super.removeIdToken(e,t);let n=this.getTokenKeys(),i=n.idToken.indexOf(e);i>-1&&(this.logger.info("idToken removed from tokenKeys map"),n.idToken.splice(i,1),this.setTokenKeys(n,t))}removeAccessToken(e,t,n=!0){super.removeAccessToken(e,t),n&&this.removeAccessTokenKeys([e],t)}removeAccessTokenKeys(e,t,n=2){this.logger.trace("removeAccessTokenKey called");let i=this.getTokenKeys(n),o=0;if(e.forEach(s=>{let a=i.accessToken.indexOf(s);a>-1&&(i.accessToken.splice(a,1),o++)}),o>0){this.logger.info(`removed ${o} accessToken keys from tokenKeys map`),this.setTokenKeys(i,t,n);return}}removeRefreshToken(e,t){super.removeRefreshToken(e,t);let n=this.getTokenKeys(),i=n.refreshToken.indexOf(e);i>-1&&(this.logger.info("refreshToken removed from tokenKeys map"),n.refreshToken.splice(i,1),this.setTokenKeys(n,t))}getTokenKeys(e=2){return Jt(this.clientId,this.browserStorage,e)}setTokenKeys(e,t,n=2){if(e.idToken.length===0&&e.accessToken.length===0&&e.refreshToken.length===0){this.removeItem(pn(this.clientId,n));return}else this.setItem(pn(this.clientId,n),JSON.stringify(e),t)}getIdTokenCredential(e,t){let n=this.browserStorage.getUserData(e);if(!n)return this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit"),this.removeIdToken(e,t),null;let i=this.validateAndParseJson(n);return!i||!Ye.isIdTokenEntity(i)?(this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit"),null):(this.logger.trace("BrowserCacheManager.getIdTokenCredential: cache hit"),i)}setIdTokenCredential(e,t,n){return x(this,null,function*(){this.logger.trace("BrowserCacheManager.setIdTokenCredential called");let i=this.generateCredentialKey(e),o=Date.now().toString();e.lastUpdatedAt=o,yield this.setUserData(i,JSON.stringify(e),t,o,n);let s=this.getTokenKeys();s.idToken.indexOf(i)===-1&&(this.logger.info("BrowserCacheManager: addTokenKey - idToken added to map"),s.idToken.push(i),this.setTokenKeys(s,t))})}getAccessTokenCredential(e,t){let n=this.browserStorage.getUserData(e);if(!n)return this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit"),this.removeAccessTokenKeys([e],t),null;let i=this.validateAndParseJson(n);return!i||!Ye.isAccessTokenEntity(i)?(this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit"),null):(this.logger.trace("BrowserCacheManager.getAccessTokenCredential: cache hit"),i)}setAccessTokenCredential(e,t,n){return x(this,null,function*(){this.logger.trace("BrowserCacheManager.setAccessTokenCredential called");let i=this.generateCredentialKey(e),o=Date.now().toString();e.lastUpdatedAt=o,yield this.setUserData(i,JSON.stringify(e),t,o,n);let s=this.getTokenKeys(),a=s.accessToken.indexOf(i);a!==-1&&s.accessToken.splice(a,1),this.logger.trace(`access token ${a===-1?"added to":"updated in"} map`),s.accessToken.push(i),this.setTokenKeys(s,t)})}getRefreshTokenCredential(e,t){let n=this.browserStorage.getUserData(e);if(!n)return this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit"),this.removeRefreshToken(e,t),null;let i=this.validateAndParseJson(n);return!i||!Ye.isRefreshTokenEntity(i)?(this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit"),null):(this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: cache hit"),i)}setRefreshTokenCredential(e,t,n){return x(this,null,function*(){this.logger.trace("BrowserCacheManager.setRefreshTokenCredential called");let i=this.generateCredentialKey(e),o=Date.now().toString();e.lastUpdatedAt=o,yield this.setUserData(i,JSON.stringify(e),t,o,n);let s=this.getTokenKeys();s.refreshToken.indexOf(i)===-1&&(this.logger.info("BrowserCacheManager: addTokenKey - refreshToken added to map"),s.refreshToken.push(i),this.setTokenKeys(s,t))})}getAppMetadata(e){let t=this.browserStorage.getItem(e);if(!t)return this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit"),null;let n=this.validateAndParseJson(t);

91return!n||!Ye.isAppMetadataEntity(e,n)?(this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit"),null):(this.logger.trace("BrowserCacheManager.getAppMetadata: cache hit"),n)}setAppMetadata(e,t){this.logger.trace("BrowserCacheManager.setAppMetadata called");let n=Ye.generateAppMetadataKey(e);this.setItem(n,JSON.stringify(e),t)}getServerTelemetry(e){let t=this.browserStorage.getItem(e);if(!t)return this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit"),null;let n=this.validateAndParseJson(t);return!n||!Ye.isServerTelemetryEntity(e,n)?(this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit"),null):(this.logger.trace("BrowserCacheManager.getServerTelemetry: cache hit"),n)}setServerTelemetry(e,t,n){this.logger.trace("BrowserCacheManager.setServerTelemetry called"),this.setItem(e,JSON.stringify(t),n)}getAuthorityMetadata(e){let t=this.internalStorage.getItem(e);if(!t)return this.logger.trace("BrowserCacheManager.getAuthorityMetadata: called, no cache hit"),null;let n=this.validateAndParseJson(t);return n&&Ye.isAuthorityMetadataEntity(e,n)?(this.logger.trace("BrowserCacheManager.getAuthorityMetadata: cache hit"),n):null}getAuthorityMetadataKeys(){return this.internalStorage.getKeys().filter(t=>this.isAuthorityMetadata(t))}setWrapperMetadata(e,t){this.internalStorage.setItem(Va.WRAPPER_SKU,e),this.internalStorage.setItem(Va.WRAPPER_VER,t)}getWrapperMetadata(){let e=this.internalStorage.getItem(Va.WRAPPER_SKU)||L.EMPTY_STRING,t=this.internalStorage.getItem(Va.WRAPPER_VER)||L.EMPTY_STRING;return[e,t]}setAuthorityMetadata(e,t){this.logger.trace("BrowserCacheManager.setAuthorityMetadata called"),this.internalStorage.setItem(e,JSON.stringify(t))}getActiveAccount(e){let t=this.generateCacheKey(Ic.ACTIVE_ACCOUNT_FILTERS),n=this.browserStorage.getItem(t);if(!n)return this.logger.trace("BrowserCacheManager.getActiveAccount: No active account filters found"),null;let i=this.validateAndParseJson(n);return i?(this.logger.trace("BrowserCacheManager.getActiveAccount: Active account filters schema found"),this.getAccountInfoFilteredBy({homeAccountId:i.homeAccountId,localAccountId:i.localAccountId,tenantId:i.tenantId},e)):(this.logger.trace("BrowserCacheManager.getActiveAccount: No active account found"),null)}setActiveAccount(e,t){let n=this.generateCacheKey(Ic.ACTIVE_ACCOUNT_FILTERS);if(e){this.logger.verbose("setActiveAccount: Active account set");let i={homeAccountId:e.homeAccountId,localAccountId:e.localAccountId,tenantId:e.tenantId,lastUpdatedAt:st.nowSeconds().toString()};this.setItem(n,JSON.stringify(i),t)}else this.logger.verbose("setActiveAccount: No account passed, active account not set"),this.browserStorage.removeItem(n);this.eventHandler.emitEvent(Y.ACTIVE_ACCOUNT_CHANGED)}getThrottlingCache(e){let t=this.browserStorage.getItem(e);if(!t)return this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit"),null;let n=this.validateAndParseJson(t);return!n||!Ye.isThrottlingEntity(e,n)?(this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit"),null):(this.logger.trace("BrowserCacheManager.getThrottlingCache: cache hit"),n)}setThrottlingCache(e,t,n){this.logger.trace("BrowserCacheManager.setThrottlingCache called"),this.setItem(e,JSON.stringify(t),n)}getTemporaryCache(e,t){let n=t?this.generateCacheKey(e):e;if(this.cacheConfig.storeAuthStateInCookie){let o=this.cookieStorage.getItem(n);if(o)return this.logger.trace("BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies"),o}let i=this.temporaryCacheStorage.getItem(n);if(!i){if(this.cacheConfig.cacheLocation===qe.LocalStorage){let o=this.browserStorage.getItem(n);if(o)return this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item found in local storage"),o}return this.logger.trace("BrowserCacheManager.getTemporaryCache: No cache item found in local storage"),null}return this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item returned"),i}setTemporaryCache(e,t,n){let i=n?this.generateCacheKey(e):e;this.temporaryCacheStorage.setItem(i,t),this.cacheConfig.storeAuthStateInCookie&&(this.logger.trace("BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie"),this.cookieStorage.setItem(i,t,void 0,this.cacheConfig.secureCookies))}removeItem(e){this.browserStorage.removeItem(e)}removeTemporaryItem(e){this.temporaryCacheStorage.removeItem(e),this.cacheConfig.storeAuthStateInCookie&&(this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie"),this.cookieStorage.removeItem(e))}getKeys(){return this.browserStorage.getKeys()}clear(e){this.removeAllAccounts(e),this.removeAppMetadata(e),this.temporaryCacheStorage.getKeys().forEac

91h(t=>{(t.indexOf(dt)!==-1||t.indexOf(this.clientId)!==-1)&&this.removeTemporaryItem(t)}),this.browserStorage.getKeys().forEach(t=>{(t.indexOf(dt)!==-1||t.indexOf(this.clientId)!==-1)&&this.browserStorage.removeItem(t)}),this.internalStorage.clear()}clearTokensAndKeysWithClaims(e){this.performanceClient.addQueueMeasurement(w.ClearTokensAndKeysWithClaims,e);let t=this.getTokenKeys(),n=0;t.accessToken.forEach(i=>{let o=this.getAccessTokenCredential(i,e);o?.requestedClaimsHash&&i.includes(o.requestedClaimsHash.toLowerCase())&&(this.removeAccessToken(i,e),n++)}),n>0&&this.logger.warning(`${n} access tokens with claims in the cache keys have been removed from the cache.`)}generateCacheKey(e){return Be.startsWith(e,dt)?e:`${dt}.${this.clientId}.${e}`}generateCredentialKey(e){let t=e.credentialType===it.REFRESH_TOKEN&&e.familyId||e.clientId,n=e.tokenType&&e.tokenType.toLowerCase()!==de.BEARER.toLowerCase()?e.tokenType.toLowerCase():"";return[`${dt}.${2}`,e.homeAccountId,e.environment,e.credentialType,t,e.realm||"",e.target||"",e.requestedClaimsHash||"",n].join("|").toLowerCase()}generateAccountKey(e){let t=e.homeAccountId.split(".")[1];return[`${dt}.${2}`,e.homeAccountId,e.environment,t||e.tenantId||""].join("|").toLowerCase()}resetRequestCache(){this.logger.trace("BrowserCacheManager.resetRequestCache called"),this.removeTemporaryItem(this.generateCacheKey(Xe.REQUEST_PARAMS)),this.removeTemporaryItem(this.generateCacheKey(Xe.VERIFIER)),this.removeTemporaryItem(this.generateCacheKey(Xe.ORIGIN_URI)),this.removeTemporaryItem(this.generateCacheKey(Xe.URL_HASH)),this.removeTemporaryItem(this.generateCacheKey(Xe.NATIVE_REQUEST)),this.setInteractionInProgress(!1)}cacheAuthorizeRequest(e,t){this.logger.trace("BrowserCacheManager.cacheAuthorizeRequest called");let n=$n(JSON.stringify(e));if(this.setTemporaryCache(Xe.REQUEST_PARAMS,n,!0),t){let i=$n(t);this.setTemporaryCache(Xe.VERIFIER,i,!0)}}getCachedRequest(){this.logger.trace("BrowserCacheManager.getCachedRequest called");let e=this.getTemporaryCache(Xe.REQUEST_PARAMS,!0);if(!e)throw G(Uo);let t=this.getTemporaryCache(Xe.VERIFIER,!0),n,i="";try{n=JSON.parse(at(e)),t&&(i=at(t))}catch(o){throw this.logger.errorPii(`Attempted to parse: ${e}`),this.logger.error(`Parsing cached token request threw with error: ${o}`),G(Ko)}return[n,i]}getCachedNativeRequest(){this.logger.trace("BrowserCacheManager.getCachedNativeRequest called");let e=this.getTemporaryCache(Xe.NATIVE_REQUEST,!0);if(!e)return this.logger.trace("BrowserCacheManager.getCachedNativeRequest: No cached native request found"),null;let t=this.validateAndParseJson(e);return t||(this.logger.error("BrowserCacheManager.getCachedNativeRequest: Unable to parse native request"),null)}isInteractionInProgress(e){let t=this.getInteractionInProgress()?.clientId;return e?t===this.clientId:!!t}getInteractionInProgress(){let e=`${dt}.${Xe.INTERACTION_STATUS_KEY}`,t=this.getTemporaryCache(e,!1);try{return t?JSON.parse(t):null}catch{return this.logger.error("Cannot parse interaction status. Removing temporary cache items and clearing url hash. Retrying interaction should fix the error"),this.removeTemporaryItem(e),this.resetRequestCache(),za(window),null}}setInteractionInProgress(e,t=Cr.SIGNIN){let n=`${dt}.${Xe.INTERACTION_STATUS_KEY}`;if(e){if(this.getInteractionInProgress())throw G(No);this.setTemporaryCache(n,JSON.stringify({clientId:this.clientId,type:t}),!1)}else!e&&this.getInteractionInProgress()?.clientId===this.clientId&&this.removeTemporaryItem(n)}hydrateCache(e,t){return x(this,null,function*(){let n=Ye.createIdTokenEntity(e.account.homeAccountId,e.account.environment,e.idToken,this.clientId,e.tenantId),i;t.claims&&(i=yield this.cryptoImpl.hashString(t.claims));let o=Ye.createAccessTokenEntity(e.account.homeAccountId,e.account.environment,e.accessToken,this.clientId,e.tenantId,e.scopes.join(" "),e.expiresOn?st.toSecondsFromDate(e.expiresOn):0,e.extExpiresOn?st.toSecondsFromDate(e.extExpiresOn):0,at,void 0,e.tokenType,void 0,t.sshKid,t.claims,i),s={idToken:n,accessToken:o};return this.saveCacheRecord(s,e.correlationId,ot.isKmsi(ot.extractTokenClaims(e.idToken,at)),he.hydrateCache)})}saveCacheRecord(e,t,n,i,o){return x(this,null,function*(){try{yield Tu(r.prototype,this,"saveCacheRecord").call(this,e,t,n,i,o)}catch(s){if(s instanceof Hn&&this.performanceClient&&t)try{let a=this.getTokenKeys();this.performanceClient.addFields({cacheRtCount:a.refreshToken.length,cacheIdCount:a.idToken.length,cacheAtCount:a.accessToken.length},t)}catch{}throw s}})}};function Sg(r,e,t,n){try{switch(e){case qe.LocalStorage:return new wl(r,t,n);case qe.SessionStorage:return new Tl;case qe.MemoryStorage:default:break}}catch(i){t.error(i)}return new gn}var Eg=(r,e,t,n)=>{let i={cacheLocation:qe.MemoryStorage,cacheRetentionDays:5,temporaryCacheLocation:qe.MemoryStorage,storeAuthStateInCookie:!1,secureCookies:!1,cacheMigrationEnabled:!1,claimsBasedCachingEnabled:!1};return new us(r,i,On,e,t,n)};function Ag(r,e,t,n,i){return r.verbose("getAllAccounts called"),t?e.getAllAccounts(i||{},n):[]}function wg(r,e,t,n){let i=t.getAccountInfoFilteredBy(r,n);return i?(e.verbose("getAccount: Account matching provided filter found, returning"),i):(e.verbose("getAccount: No matching account found, returning null"),null)}function Tg(r,e,t,n){if(e.trace("getAccountByUsername called"),!r)return e.warning("getAccountByUsername: No username provided"),null;let i=t.getAccountInfoFilteredBy({username:r},n);return i?(e.verbose("getAccountByUsername: Account matching username found, returning"),e.verbosePii(`getAccountByUsername: Returning signed-in accounts matching username: ${r}`),i):(e.verbose("getAccountByUsername: No matching account found, returning null"),null)}function bg(r,e,t,n){if(e.trace("getAccountByHomeId called"),!r)return e.warning("getAccountByHomeId: No homeAccountId provided"),null;let i=t.getAccountInfoFilteredBy({homeAccountId:r},n);return i?(e.verbose("getAccountByHomeId: Account matching homeAccountId found, returning"),e.verbosePii(`getAccountByHomeId: Returning signed-in accounts matching homeAccountId: ${r}`),i):(e.verbose("getAccountByHomeId: No matching account found, returning null"),null)}function Ig(r,e,t,n){if(e.trace("getAccountByLocalId called"),!r)return e.warning("getAccountByLocalId: No localAccountId provided"),null;let i=t.getAccountInfoFilteredBy({localAccountId:r},n);return i?(e.verbose("getAccountByLocalId: Account matching localAccountId found, returning"),e.verbosePii(`getAccountByLocalId: Returning signed-in accounts matching localAccountId: ${r}`),i):(e.verbose("getAccountByLocalId: No matching account found, returning null"),null)}function Rg(r,e,t){e.setActiveAccount(r,t)}function Pg(r,e){return r.getActiveAccount(e)}var jy="msal.broadcast.event",bl=class{constructor(e){this.eventCallbacks=new Map,this.logger=e||new kt({}),typeof BroadcastChannel<"u"&&(this.broadcastChannel=new BroadcastChannel(jy)),this.invokeCrossTabCallbacks=this.invokeCrossTabCallbacks.bind(this)}addEventCallback(e,t,n){if(typeof window<"u"){let i=n||fd();return this.eventCallbacks.has(i)?(this.logger.error(`Event callback with id: ${i} is already registered. Please provide a unique id or remove the existing callback and try again.`),null):(this.eventCallbacks.set(i,[e,t||[]]),this.logger.verbose(`Event callback registered with id: ${i}`),i)}return null}removeEventCallback(e){this.eventCallbacks.delete(e),this.logger.verbose(`Event callback ${e} removed.`)}emitEvent(e,t,n,i){let o={eventType:e,interactionType:t||null,payload:n||null,error:i||null,timestamp:Date.now()};switch(e){case Y.ACCOUNT_ADDED:case Y.ACCOUNT_REMOVED:case Y.ACTIVE_ACCOUNT_CHANGED:this.broadcastChannel?.postMessage(o);break;default:this.invokeCallbacks(o);break}}invokeCallbacks(e){this.eventCallbacks.forEach(([t,n],i)=>{(n.length===0||n.includes(e.eventType))&&(this.logger.verbose(`Emitting event to callback ${i}: ${e.eventType}`),t.apply(null,[e]))})}invokeCrossTabCallbacks(e){let t=e.data;this.invokeCallbacks(t)}subscribeCrossTab(){this.broadcastChannel?.addEventListener("message",this.invokeCrossTabCallbacks)}unsubscribeCrossTab(){this.broadcastChannel?.removeEventListener("message",this.invokeCrossTabCallbacks)}};var hs=class{constructor(e,t,n,i,o,s,a,c,l){this.config=e,this.browserStorage=t,this.browserCrypto=n,this.networkClient=this.config.system.networkClient,this.eventHandler=o,this.navigationClient=s,this.platformAuthProvider=c,this.correlationId=l||vt(),this.logger=i.clone(Je.MSAL_SKU,Yt,this.correlationId),this.performanceClient=a}clearCacheOnLogout(e,t){return x(this,null,function*(){if(t)try{this.browserStorage.removeAccount(t,e),this.logger.verbose("Cleared cache items belonging to the account provided in the logout request.")}catch{this.logger.error("Account provided in logout request was not found. Local cache unchanged.")}else try{this.logger.verbose("No account provided in logout request, clearing all cache items.",this.correlationId),this.browserStorage.clear(e),yield this.browserCrypto.clearKeystore()}catch{this.logger.error("Attempted to clear all MSAL cache items and failed. Local cache unchanged.")}})}getRedirectUri(e){this.logger.verbose("getRedirectUri called");let t=e||this.config.auth.redirectUri;return ue.getAbsoluteUrl(t,Nt())}initializeServerTelemetryManager(e,t){this.logger.verbose("initializeServerTelemetryManager called");let n={clientId:this.config.auth.clientId,correlationId:this.correlationId,apiId:e,forceRefresh:t||!1,wrapperSKU:this.browserStorage.getWrapperMetadata()[0],wrapperVer:this.browserStorage.getWrapperMetadata()[1]};return new zi(n,this.browserStorage)}getDiscoveredAuthority(e){return x(this,null,function*(){let{account:t}=e,n=e.requestExtraQueryParameters&&e.requestExtraQueryParameters.hasOwnProperty("instance_aware")?e.requestExtraQueryParameters.instance_aware:void 0;this.performanceClient.addQueueMeasurement(w.StandardInteractionClientGetDiscoveredAuthority,this.correlationId);let i={protocolMode:this.config.auth.protocolMode,OIDCOptions:this.config.auth.OIDCOptions,knownAuthorities:this.config.auth.knownAuthorities,cloudDiscoveryMetadata:this.config.auth.cloudDiscoveryMetadata,authorityMetadata:this.config.auth.authorityMetadata,skipAuthorityMetadataCache:this.config.auth.skipAuthorityMetadataCache},o=e.requestAuthority||this.config.auth.authority,s=n?.length?n==="true":this.config.auth.instanceAware,a=t&&s?this.config.auth.authority.replace(ue.getDomainFromUrl(o),t.environment):o,c=gr.generateAuthority(a,e.requestAzureCloudOptions||this.config.auth.azureCloudOptions),l=yield H(To.createDiscoveredInstance,w.AuthorityFactoryCreateDiscoveredInstance,this.logger,this.performanceClient,this.correlationId)(c,this.config.system.networkClient,this.browserStorage,i,this.logger,this.correlationId,this.performanceClient);if(t&&!l.isAlias(t.environment))throw fe(St.authorityMismatch);return l})}};function Ja(r,e,t,n){return x(this,null,function*(){t.addQueueMeasurement(w.InitializeBaseRequest,r.correlationId);let i=r.authority||e.auth.authority,o=[...r&&r.scopes||[]],s=re(q({},r),{correlationId:r.correlationId,authority:i,scopes:o});if(!s.authenticationScheme)s.authenticationScheme=de.BEARER,n.verbose(`Authentication Scheme wasn't explicitly set in request, defaulting to "Bearer" request`);else{if(s.authenticationScheme===de.SSH){if(!r.sshJwk)throw fe(St.missingSshJwk);if(!r.sshKid)throw fe(St.missingSshKid)}n.verbose(`Authentication Scheme set to "${s.authenticationScheme}" as configured in Auth request`)}return e.cache.claimsBasedCachingEnabled&&r.claims&&!Be.isEmptyObj(r.claims)&&(s.requestedClaimsHash=yield ll(r.claims)),s})}function kg(r,e,t,n,i){return x(this,null,function*(){n.addQueueMeasurement(w.InitializeSilentRequest,r.correlationId);let o=yield H(Ja,w.InitializeBaseRequest,i,n,r.correlationId)(r,t,n,i);return re(q(q({},r),o),{account:e,forceRefresh:r.forceRefresh||!1})})}function Il(r,e){let t,n=r.httpMethod;

91if(e===Ue.EAR){if(t=n||tr.POST,t!==tr.POST)throw fe(St.invalidRequestMethodForEAR)}else t=n||tr.GET;if(r.authorizePostBodyParameters&&t!==tr.POST)throw fe(St.invalidAuthorizePostBodyParameters);return t}var Kt=class extends hs{initializeLogoutRequest(e){this.logger.verbose("initializeLogoutRequest called",e?.correlationId);let t=q({correlationId:this.correlationId||vt()},e);if(e)if(e.logoutHint)this.logger.verbose("logoutHint has already been set in logoutRequest");else if(e.account){let n=this.getLogoutHintFromIdTokenClaims(e.account);n&&(this.logger.verbose("Setting logoutHint to login_hint ID Token Claim value for the account provided"),t.logoutHint=n)}else this.logger.verbose("logoutHint was not set and account was not passed into logout request, logoutHint will not be set");else this.logger.verbose("logoutHint will not be set since no logout request was configured");return!e||e.postLogoutRedirectUri!==null?e&&e.postLogoutRedirectUri?(this.logger.verbose("Setting postLogoutRedirectUri to uri set on logout request",t.correlationId),t.postLogoutRedirectUri=ue.getAbsoluteUrl(e.postLogoutRedirectUri,Nt())):this.config.auth.postLogoutRedirectUri===null?this.logger.verbose("postLogoutRedirectUri configured as null and no uri set on request, not passing post logout redirect",t.correlationId):this.config.auth.postLogoutRedirectUri?(this.logger.verbose("Setting postLogoutRedirectUri to configured uri",t.correlationId),t.postLogoutRedirectUri=ue.getAbsoluteUrl(this.config.auth.postLogoutRedirectUri,Nt())):(this.logger.verbose("Setting postLogoutRedirectUri to current page",t.correlationId),t.postLogoutRedirectUri=ue.getAbsoluteUrl(Nt(),Nt())):this.logger.verbose("postLogoutRedirectUri passed as null, not setting post logout redirect uri",t.correlationId),t}getLogoutHintFromIdTokenClaims(e){let t=e.idTokenClaims;if(t){if(t.login_hint)return t.login_hint;this.logger.verbose("The ID Token Claims tied to the provided account do not contain a login_hint claim, logoutHint will not be added to logout request")}else this.logger.verbose("The provided account does not contain ID Token Claims, logoutHint will not be added to logout request");return null}createAuthCodeClient(e){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.StandardInteractionClientCreateAuthCodeClient,this.correlationId);let t=yield H(this.getClientConfiguration.bind(this),w.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)(e);return new Gi(t,this.performanceClient)})}getClientConfiguration(e){return x(this,null,function*(){let{serverTelemetryManager:t,requestAuthority:n,requestAzureCloudOptions:i,requestExtraQueryParameters:o,account:s}=e;this.performanceClient.addQueueMeasurement(w.StandardInteractionClientGetClientConfiguration,this.correlationId);let a=e.authority||(yield H(this.getDiscoveredAuthority.bind(this),w.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,this.correlationId)({requestAuthority:n,requestAzureCloudOptions:i,requestExtraQueryParameters:o,account:s})),c=this.config.system.loggerOptions;return{authOptions:{clientId:this.config.auth.clientId,authority:a,clientCapabilities:this.config.auth.clientCapabilities,redirectUri:this.config.auth.redirectUri},systemOptions:{tokenRenewalOffsetSeconds:this.config.system.tokenRenewalOffsetSeconds,preventCorsPreflight:!0},loggerOptions:{loggerCallback:c.loggerCallback,piiLoggingEnabled:c.piiLoggingEnabled,logLevel:c.logLevel,correlationId:this.correlationId},cacheOptions:{claimsBasedCachingEnabled:this.config.cache.claimsBasedCachingEnabled},cryptoInterface:this.browserCrypto,networkInterface:this.networkClient,storageInterface:this.browserStorage,serverTelemetryManager:t,libraryInfo:{sku:Je.MSAL_SKU,version:Yt,cpu:L.EMPTY_STRING,os:L.EMPTY_STRING},telemetry:this.config.telemetry}})}initializeAuthorizationRequest(e,t){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.StandardInteractionClientInitializeAuthorizationRequest,this.correlationId);let n=this.getRedirectUri(e.redirectUri);new URL(n).origin!==new URL(window.location.href).origin&&(this.logger.warning("The origin of the redirect URI does not match the origin of the current page. This is likely to cause issues with authentication.",this.correlationId),this.performanceClient.addFields({isRedirectUriCrossOrigin:!0},this.correlationId));let i={interactionType:t},o=mr.setRequestState(this.browserCrypto,e&&e.state||L.EMPTY_STRING,i),s=yield H(Ja,w.InitializeBaseRequest,this.logger,this.performanceClient,this.correlationId)(re(q({},e),{correlationId:this.correlationId}),this.config,this.performanceClient,this.logger),a=re(q({},s),{redirectUri:n,state:o,nonce:e.nonce||vt(),responseMode:this.config.auth.OIDCOptions.serverResponseType}),c=re(q({},a),{httpMethod:Il(a,this.config.auth.protocolMode)});if(e.loginHint||e.sid)return c;let l=e.account||this.browserStorage.getActiveAccount(this.correlationId);return l&&(this.logger.verbose("Setting validated request account",this.correlationId),this.logger.verbosePii(`Setting validated request account: ${l.homeAccountId}`,this.correlationId),c.account=l),c})}};function xg(r,e){if(!e)return null;try{return mr.parseRequestState(r,e).libraryState.meta}

91catch{throw K(ht.invalidState)}}function Qn(r,e,t){let n=Or.getDeserializedResponse(r);if(!n)throw Or.stripLeadingHashOrQuery(r)?(t.error(`A ${e} is present in the iframe but it does not contain known properties. It's likely that the ${e} has been replaced by code running on the redirectUri page.`),t.errorPii(`The ${e} detected is: ${r}`),G(ko)):(t.error(`The request has returned to the redirectUri but a ${e} is not present. It's likely that the ${e} has been removed or the page has been redirected by code running on the redirectUri page.`),G(Po));return n}function _g(r,e,t){if(!r.state)throw G(jn);let n=xg(e,r.state);if(!n)throw G(xo);if(n.interactionType!==t)throw G(_o)}var ds=class{constructor(e,t,n,i,o){this.authModule=e,this.browserStorage=t,this.authCodeRequest=n,this.logger=i,this.performanceClient=o}handleCodeResponse(e,t,n){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.HandleCodeResponse,t.correlationId);let i;try{i=rr.getAuthorizationCodePayload(e,t.state)}catch(o){throw o instanceof Lt&&o.subError===yr?G(yr):o}return H(this.handleCodeResponseFromServer.bind(this),w.HandleCodeResponseFromServer,this.logger,this.performanceClient,t.correlationId)(i,t,n)})}handleCodeResponseFromServer(e,t,n,i=!0){return x(this,null,function*(){if(this.performanceClient.addQueueMeasurement(w.HandleCodeResponseFromServer,t.correlationId),this.logger.trace("InteractionHandler.handleCodeResponseFromServer called"),this.authCodeRequest.code=e.code,e.cloud_instance_host_name&&(yield H(this.authModule.updateAuthority.bind(this.authModule),w.UpdateTokenEndpointAuthority,this.logger,this.performanceClient,t.correlationId)(e.cloud_instance_host_name,t.correlationId)),i&&(e.nonce=t.nonce||void 0),e.state=t.state,e.client_info)this.authCodeRequest.clientInfo=e.client_info;else{let s=this.createCcsCredentials(t);s&&(this.authCodeRequest.ccsCredential=s)}return yield H(this.authModule.acquireToken.bind(this.authModule),w.AuthClientAcquireToken,this.logger,this.performanceClient,t.correlationId)(this.authCodeRequest,n,e)})}createCcsCredentials(e){return e.account?{credential:e.account.homeAccountId,type:wt.HOME_ACCOUNT_ID}:e.loginHint?{credential:e.loginHint,type:wt.UPN}:null}};var Ng="ContentError",Fg="PageException",Rl="user_switch";var Og="USER_INTERACTION_REQUIRED",Dg="USER_CANCEL",Mg="NO_NETWORK",Bg="DISABLED",Hg="ACCOUNT_UNAVAILABLE",Lg="UX_NOT_ALLOWED";var Vy=-2147186943,Gy={[Rl]:"User attempted to switch accounts in the native broker, which is not allowed. All new accounts must sign-in through the standard web flow first, please try again."},ir=class r extends ie{constructor(e,t,n){super(e,t),Object.setPrototypeOf(this,r.prototype),this.name="NativeAuthError",this.ext=n}};function Yn(r){if(r.ext&&r.ext.status&&r.ext.status===Bg||r.ext&&r.ext.error&&r.ext.error===Vy)return!0;switch(r.errorCode){case Ng:case Fg:return!0;default:return!1}}function Xi(r,e,t){if(t&&t.status)switch(t.status){case Hg:return Vi(Mr.nativeAccountUnavailable);case Og:return new gt(r,e);case Dg:return G(yr);case Mg:return G(hn);case Lg:return Vi(Mr.uxNotAllowed)}return new ir(r,Gy[r]||e,t)}var fs=class extends Kt{acquireToken(e){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.SilentCacheClientAcquireToken,e.correlationId);let t=this.initializeServerTelemetryManager(he.acquireTokenSilent_silentFlow),n=yield H(this.getClientConfiguration.bind(this),w.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:t,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,account:e.account}),i=new Ka(n,this.performanceClient);this.logger.verbose("Silent auth client created");try{let s=(yield H(i.acquireCachedToken.bind(i),w.SilentFlowClientAcquireCachedToken,this.logger,this.performanceClient,e.correlationId)(e))[0];return this.performanceClient.addFields({fromCache:!0},e.correlationId),s}catch(o){throw o instanceof Ji&&o.errorCode===Vn&&this.logger.verbose("Signing keypair for bound access token not found. Refreshing bound access token and generating a new crypto keypair."),o}})}logout(e){this.logger.verbose("logoutRedirect called");

91let t=this.initializeLogoutRequest(e);return this.clearCacheOnLogout(t.correlationId,t?.account)}};var Jn=class extends hs{constructor(e,t,n,i,o,s,a,c,l,p,g,h){super(e,t,n,i,o,s,c,l,h),this.apiId=a,this.accountId=p,this.platformAuthProvider=l,this.nativeStorageManager=g,this.silentCacheClient=new fs(e,this.nativeStorageManager,n,i,o,s,c,l,h);let d=this.platformAuthProvider.getExtensionName();this.skus=zi.makeExtraSkuString({libraryName:Je.MSAL_SKU,libraryVersion:Yt,extensionName:d,extensionVersion:this.platformAuthProvider.getExtensionVersion()})}addRequestSKUs(e){e.extraParameters=re(q({},e.extraParameters),{[on.X_CLIENT_EXTRA_SKU]:this.skus})}acquireToken(e,t){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.NativeInteractionClientAcquireToken,this.correlationId),this.logger.trace("NativeInteractionClient - acquireToken called.");let n=this.performanceClient.startMeasurement(w.NativeInteractionClientAcquireToken,this.correlationId),i=st.nowSeconds(),o=this.initializeServerTelemetryManager(this.apiId);try{let s=yield this.initializeNativeRequest(e);try{let c=yield this.acquireTokensFromCache(this.accountId,s);return n.end({success:!0,isNativeBroker:!1,fromCache:!0}),c}catch(c){if(t===mt.AccessToken)throw this.logger.info("MSAL internal Cache does not contain tokens, return error as per cache policy"),n.end({success:!1,brokerErrorCode:"cache_request_failed"}),c;this.logger.info("MSAL internal Cache does not contain tokens, proceed to make a native call")}let a=yield this.platformAuthProvider.sendMessage(s);return yield this.handleNativeResponse(a,s,i).then(c=>(n.end({success:!0,isNativeBroker:!0,requestId:c.requestId}),o.clearNativeBrokerErrorCode(),c)).catch(c=>{throw n.end({success:!1,errorCode:c.errorCode,subErrorCode:c.subError}),c})}catch(s){throw s instanceof ir&&o.setNativeBrokerErrorCode(s.errorCode),n.end({success:!1}),s}})}createSilentCacheRequest(e,t){return{authority:e.authority,correlationId:this.correlationId,scopes:Qe.fromString(e.scope).asArray(),account:t,forceRefresh:!1}}acquireTokensFromCache(e,t){return x(this,null,function*(){if(!e)throw this.logger.warning("NativeInteractionClient:acquireTokensFromCache - No nativeAccountId provided"),K(ht.noAccountFound);let n=this.browserStorage.getBaseAccountInfo({nativeAccountId:e},this.correlationId);if(!n)throw K(ht.noAccountFound);try{let i=this.createSilentCacheRequest(t,n),o=yield this.silentCacheClient.acquireToken(i),s=re(q({},n),{idTokenClaims:o?.idTokenClaims,idToken:o?.idToken});return re(q({},o),{account:s})}catch(i){throw i}})}acquireTokenRedirect(e,t){return x(this,null,function*(){this.logger.trace("NativeInteractionClient - acquireTokenRedirect called.");let n=lr(e,[]);delete n.onRedirectNavigate;let i=yield this.initializeNativeRequest(n);try{yield this.platformAuthProvider.sendMessage(i)}catch(a){if(a instanceof ir&&(this.initializeServerTelemetryManager(this.apiId).setNativeBrokerErrorCode(a.errorCode),Yn(a)))throw a}this.browserStorage.setTemporaryCache(Xe.NATIVE_REQUEST,JSON.stringify(i),!0);let o={apiId:he.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},s=this.config.auth.navigateToLoginRequestUrl?window.location.href:this.getRedirectUri(e.redirectUri);t.end({success:!0}),yield this.navigationClient.navigateExternal(s,o)})}handleRedirectPromise(e,t){return x(this,null,function*(){if(this.logger.trace("NativeInteractionClient - handleRedirectPromise called."),!this.browserStorage.isInteractionInProgress(!0))return this.logger.info("handleRedirectPromise called but there is no interaction in progress, returning null."),null;let n=this.browserStorage.getCachedNativeRequest();if(!n)return this.logger.verbose("NativeInteractionClient - handleRedirectPromise called but there is no cached request, returning null."),e&&t&&e?.addFields({errorCode:"no_cached_request"},t),null;let a=n,{prompt:i}=a,o=lr(a,["prompt"]);i&&this.logger.verbose("NativeInteractionClient - handleRedirectPromise called and prompt was included in the original request, removing prompt from cached request to prevent second interaction with native broker window."),this.browserStorage.removeItem(this.browserStorage.generateCacheKey(Xe.NATIVE_REQUEST));let s=st.nowSeconds();try{this.logger.verbose("NativeInteractionClient - handleRedirectPromise sending message to native broker.");let c=yield this.platformAuthProvider.sendMessage(o),l=yield this.handleNativeResponse(c,o,s);return this.initializeServerTelemetryManager(this.apiId).clearNativeBrokerErrorCode(),e&&this.correlationId&&this.performanceClient.addFields({isNativeBroker:!0},this.correlationId),l}catch(c){throw c}})}logout(){return this.logger.trace("NativeInteractionClient - logout called."),Promise.reject("Logout not implemented yet")}handleNativeResponse(e,t,n){return x(this,null,function*(){this.logger.trace("NativeInteractionClient - handleNativeResponse called.");let i=ot.extractTokenClaims(e.id_token,at),o=this.createHomeAccountIdentifier(e,i),s=this.browserStorage.getAccountInfoFilteredBy({nativeAccountId:t.accountId},this.correlationId)?.homeAccountId;if(t.extraParameters?.child_client_id&&e.account.id!==t.accountId)this.logger.info("handleNativeServerResponse: Double broker flow detected, ignoring accountId mismatch");else if(o!==s&&e.account.id!==t.accountId)throw Xi(Rl);let a=yield this.getDiscoveredAuthority({requestAuthority:t.authority}),c=Ro(this.browserStorage,a,o,at,this.correlationId,i,e.client_info,void 0,i.tid,void 0,e.account.id,this.logger);e.expires_in=Number(e.expires_in);let l=yield this.generateAuthenticationResult(e,t,i,c,a.canonicalAuthority,n);return yield this.cacheAccount(c,this.correlationId,ot.isKmsi(i)),yield this.cacheNativeTokens(e,t,o,i,e.access_token,l.tenantId,n),l})}createHomeAccountIdentifier(e,t){return _e.generateHomeAccountId(e.client_info||L.EMPTY_STRING,xt.Default,this.logger,this.browserCrypto,t)}generateScopes(e,t){return t?Qe.fromString(t):Qe.fromString(e)}generatePopAccessToken(e,t){return x(this,null,function*(){if(t.tokenType===de.POP&&t.signPopToken){if(e.shr)return this.logger.trace("handleNativeServerResponse: SHR is enabled in native layer"),e.shr;let n=new Ut(this.browserCrypto),i={resourceRequestMethod:t.resourceRequestMethod,resourceRequestUri:t.resourceRequestUri,shrClaims:t.shrClaims,shrNonce:t.shrNonce};if(!t.keyId)throw K(ht.keyIdMissing);return n.signPopToken(e.access_token,t.keyId,i)}else return e.access_token})}generateAuthenticationResult(e,t,n,i,o,s){return x(this,null,function*(){let a=this.addTelemetryFromNativeResponse(e.properties.MATS),c=this.generateScopes(t.scope,e.scope),l=e.account.properties||{},p=l.UID||n.oid||n.sub||L.EMPTY_STRING,g=l.TenantId||n.tid||L.EMPTY_STRING,h=Fi(_e.getAccountInfo(i),void 0,n,e.id_token);h.nativeAccountId!==e.account.id&&(h.nativeAccountId=e.account.id);let d=yield this.generatePopAccessToken(e,t),m=t.tokenType===de.POP?de.POP:de.BEARER;return{authority:o,uniqueId:p,tenantId:g,scopes:c.asArray(),account:h,idToken:e.id_token,idTokenClaims:n,accessToken:d,fromCache:a?this.isResponseFromCache(a):!1,expiresOn:st.toDateFromSeconds(s+e.expires_in),tokenType:m,correlationId:this.correlationId,state:e.state,fromNativeBroker:!0}})}cacheAccount(e,t,n){return x(this,null,function*(){yield this.browserStorage.setAccount(e,this.correlationId,n,this.apiId),this.browserStorage.removeAccountContext(_e.getAccountInfo(e),t)})}cacheNativeTokens(e,t,n,i,o,s,a){let c=Ye.createIdTokenEntity(n,t.authority,e.id_token||"",t.clientId,i.tid||""),l=t.tokenType===de.POP?L.SHR_NONCE_VALIDITY:(typeof e.expires_in=="str

91ing"?parseInt(e.expires_in,10):e.expires_in)||0,p=a+l,g=this.generateScopes(e.scope,t.scope),h=Ye.createAccessTokenEntity(n,t.authority,o,t.clientId,i.tid||s,g.printScopes(),p,0,at,void 0,t.tokenType,void 0,t.keyId),d={idToken:c,accessToken:h};return this.nativeStorageManager.saveCacheRecord(d,this.correlationId,ot.isKmsi(i),this.apiId,t.storeInCache)}getExpiresInValue(e,t){return e===de.POP?L.SHR_NONCE_VALIDITY:(typeof t=="string"?parseInt(t,10):t)||0}addTelemetryFromNativeResponse(e){let t=this.getMATSFromResponse(e);return t?(this.performanceClient.addFields({extensionId:this.platformAuthProvider.getExtensionId(),extensionVersion:this.platformAuthProvider.getExtensionVersion(),matsBrokerVersion:t.broker_version,matsAccountJoinOnStart:t.account_join_on_start,matsAccountJoinOnEnd:t.account_join_on_end,matsDeviceJoin:t.device_join,matsPromptBehavior:t.prompt_behavior,matsApiErrorCode:t.api_error_code,matsUiVisible:t.ui_visible,matsSilentCode:t.silent_code,matsSilentBiSubCode:t.silent_bi_sub_code,matsSilentMessage:t.silent_message,matsSilentStatus:t.silent_status,matsHttpStatus:t.http_status,matsHttpEventCount:t.http_event_count},this.correlationId),t):null}getMATSFromResponse(e){if(e)try{return JSON.parse(e)}catch{this.logger.error("NativeInteractionClient - Error parsing MATS telemetry, returning null instead")}return null}isResponseFromCache(e){return typeof e.is_cached>"u"?(this.logger.verbose("NativeInteractionClient - MATS telemetry does not contain field indicating if response was served from cache. Returning false."),!1):!!e.is_cached}initializeNativeRequest(e){return x(this,null,function*(){this.logger.trace("NativeInteractionClient - initializeNativeRequest called");let t=yield this.getCanonicalAuthority(e),p=e,{scopes:n,claims:i}=p,o=lr(p,["scopes","claims"]),s=new Qe(n||[]);s.appendScopes(Wt);let a=e.skipBrokerClaims&&e.embeddedClientId?void 0:this.config.auth.clientCapabilities,c=a&&a.length?Ke.addClientCapabilitiesToClaims(i,a):i,l=re(q({},o),{claims:c,accountId:this.accountId,clientId:this.config.auth.clientId,authority:t.urlString,scope:s.printScopes(),redirectUri:this.getRedirectUri(e.redirectUri),prompt:this.getPrompt(e.prompt),correlationId:this.correlationId,tokenType:e.authenticationScheme,windowTitleSubstring:document.title,extraParameters:q(q({},e.extraQueryParameters),e.tokenQueryParameters),extendedExpiryToken:!1,keyId:e.popKid});if(l.signPopToken&&e.popKid)throw G(Zo);if(this.handleExtraBrokerParams(l),l.extraParameters=l.extraParameters||{},l.extraParameters.telemetry=_t.MATS_TELEMETRY,e.authenticationScheme===de.POP){let g={resourceRequestUri:e.resourceRequestUri,resourceRequestMethod:e.resourceRequestMethod,shrClaims:e.shrClaims,shrNonce:e.shrNonce},h=new Ut(this.browserCrypto),d;if(l.keyId)d=this.browserCrypto.base64UrlEncode(JSON.stringify({kid:l.keyId})),l.signPopToken=!1;else{let m=yield H(h.generateCnf.bind(h),w.PopTokenGenerateCnf,this.logger,this.performanceClient,this.correlationId)(g,this.logger);d=m.reqCnfString,l.keyId=m.kid,l.signPopToken=!0}l.reqCnf=d}return this.addRequestSKUs(l),l})}getCanonicalAuthority(e){return x(this,null,function*(){let t=e.authority||this.config.auth.authority;e.account&&(yield this.getDiscoveredAuthority({requestAuthority:t,requestAzureCloudOptions:e.azureCloudOptions,account:e.account}));let n=new ue(t);return n.validateAsUri(),n})}getPrompt(e){switch(this.apiId){case he.ssoSilent:case he.acquireTokenSilent_silentFlow:return this.logger.trace("initializeNativeRequest: silent request sets prompt to none"),ze.NONE}if(!e){this.logger.trace("initializeNativeRequest: prompt was not provided");return}switch(e){case ze.NONE:case ze.CONSENT:case ze.LOGIN:case ze.SELECT_ACCOUNT:return this.logger.trace("initializeNativeRequest: prompt is compatible with native flow"),e;default:throw this.logger.trace(`initializeNativeRequest: prompt = ${e} is not compatible with native flow`),G(Jo)}}handleExtraBrokerParams(e){let t=e.extraParameters&&e.extraParameters.hasOwnProperty(on.BROKER_CLIENT_ID)&&e.extraParameters.hasOwnProperty(on.BROKER_REDIRECT_URI)&&e.extraParameters.hasOwnProperty(on.CLIENT_ID);if(!e.embeddedClientId&&!t)return;let n="",i=e.redirectUri;e.embeddedClientId?(e.redirectUri=this.config.auth.redirectUri,n=e.embeddedClientId):e.extraParameters&&(e.redirectUri=e.extraParameters[on.BROKER_REDIRECT_URI],n=e.extraParameters[on.CLIENT_ID]),e.extraParameters={child_client_id:n,child_redirect_uri:i},this.performanceClient?.addFields({embeddedClientId:n,embeddedRedirectUri:i},this.correlationId)}};var zy=new Map([["e","AAD"],["m","MSA"]]);function $y(r){if(!r)return null;try{let t=decodeURIComponent(r).split("|");return t.length<5?null:{accountType:zy.get(t[0]?.trim()||"")||"",error:t[1]?.trim()||"",subError:t[2]?.trim()||"",cloudInstance:t[3]?.trim()||"",callerDataBoundary:t[4]?.trim()||""}}catch{return null}}function Ug(r,e,t){let n=$y(r.clientdata);n?.accountType&&t.addFields({accountType:n.accountType},e),n?.error&&t.addFields({serverErrorNo:n.error},e),n?.subError&&t.addFields({serverSubErrorNo:n.subError},e)}function yd(r,e,t,n,i){return x(this,null,function*(){let o=rr.getStandardAuthorizeRequestParameters(re(q({},r.auth),{authority:e}),t,n,i);if(Ke.addLibraryInfo(o,{sku:Je.MSAL_SKU,version:Yt,os:"",cpu:""}),r.auth.protocolMode!==Ue.OIDC&&Ke.addApplicationTelemetry(o,r.telemetry.application),t.platformBroker&&(Ke.addNativeBroker(o),i.addFields({isPlatformAuthorizeRequest:!0},t.correlationId),t.authenticationScheme===de.POP)){let s=new as(n,i),a=new Ut(s),c;t.popKid?c=s.encodeKid(t.popKid):c=(yield H(a.generateCnf.bind(a),w.PopTokenGenerateCnf,n,i,t.correlationId)(t,n)).reqCnfString,Ke.addPopToken(o,c)}return Ke.instrumentBrokerParams(o,t.correlationId,i),o})}function Zi(r,e,t,n,i){return x(this,null,function*(){if(!t.codeChallenge)throw fe(St.pkceParamsMissing);let o=yield H(yd,w.GetStandardParams,n,i,t.correlationId)(r,e,t,n,i);return Ke.addResponseType(o,Bs.CODE),Ke.addCodeChallengeParams(o,t.codeChallenge,L.S256_CODE_CHALLENGE_METHOD),Ke.addExtraQueryParameters(o,t.extraQueryParameters||{}),rr.getAuthorizeUrl(e,o,r.auth.encodeExtraQueryParams,t.extraQueryParameters)})}function ps(r,e,t,n,i,o){return x(this,null,function*(){if(!n.earJwk)throw G(ja);let s=yield yd(e,t,n,i,o);Ke.addResponseType(s,Bs.IDTOKEN_TOKEN_REFRESHTOKEN),Ke.addEARParameters(s,n.earJwk),Ke.addCodeChallengeParams(s,n.codeChallenge,L.S256_CODE_CHALLENGE_METHOD);let a=new Map;Ke.addExtraQueryParameters(a,n.extraQueryParameters||{}),Ke.addCorrelationId(a,n.correlationId);let c=rr.getAuthorizeUrl(t,a,e.auth.encodeExtraQueryParams,n.extraQueryParameters);return Kg(r,c,s)})}function gs(r,e,t,n,i,o){return x(this,null,function*(){let s=yield yd(e,t,n,i,o);Ke.addResponseType(s,Bs.CODE),Ke.addCodeChallengeParams(s,n.codeChallenge,n.codeChallengeMethod||L.S256_CODE_CHALLENGE_METHOD),Ke.addPostBodyParameters(s,n.authorizePostBodyParameters||{});let a=new Map;Ke.addExtraQueryParameters(a,n.extraQueryParameters||{}),Ke.addCorrelationId(a,n.correlationId);let c=rr.getAuthorizeUrl(t,a,e.auth.encodeExtraQueryParams,n.extraQueryParameters);return Kg(r,c,s)})}function Kg(r,e,t){let n=r.createElement("form");return n.method="post",n.action=e,t.forEach((i,o)=>{let s=r.createElement("input");s.hidden=!0,s.name=o,s.value=i,n.appendChild(s)}),r.body.appendChild(n),n}function qg(r,e,t,n,i,o,s,a,c,l){return x(this,null,function*(){if(a.verbose("Account id found, calling WAM for token"),!l)throw G(zn);let p=new as(a,c),g=new Jn(n,i,p,a,s,n.system.navigationClient,t,c,l,e,o,r.correlationId),{userRequestState:h}=mr.parseRequestState(p,r.state);return H(g.acquireToken.bind(g),w.NativeInteractionClientAcquireToken,a,c,r.correlationId)(re(q({},r),{state:h,prompt:void 0}))})}function vn(r,e,t,n,i,o,s,a,c,l,p,g){return x(this,null,function*(){if(un.removeThrottle(s,i.auth.clientId,r),Ug(e,r.correlationId,p),e.accountId)return H(qg,w.HandleResponsePlatformBroker,l,p,r.correlationId)(r,e.accountId,n,i,s,a,c,l,p,g);let h=re(q({},r),{code:e.code||"",codeVerifier:t}),d=new ds(o,s,h,l,p);return yield H(d.handleCodeResponse.bind(d),w.HandleCodeResponse,l,p,r.correlationId)(e,r,n)})}function ms(r,e,t,n,i,o,s,a,c,l,p){return x(this,null,function*(){if(un.removeThrottle(o,n.auth.clientId,r),Ug(e,r.correlationId,l),rr.validateAuthorizationResponse(e,r.state),!e.ear_jwe)throw G(Zc);if(!r.earJwk)throw G(ja);let g=JSON.parse(yield H(rg,w.DecryptEarResponse,c,l,r.correlationId)(r.earJwk,e.ear_jwe));if(g.accountId)return H(qg,w.HandleResponsePlatformBroker,c,l,r.correlationId)(r,g.accountId,t,n,o,s,a,c,l,p);let h=new vr(n.auth.clientId,o,new as(c,l),c,null,null,l);h.validateTokenResponse(g);let d={code:"",state:r.state,nonce:r.nonce,client_info:g.client_info,cloud_graph_host_name:g.cloud_graph_host_name,cloud_instance_host_name:g.cloud_instance_host_name,cloud_instance_name:g.cloud_instance_name,msgra

91ph_host:g.msgraph_host};return yield H(h.handleServerTokenResponse.bind(h),w.HandleServerTokenResponse,c,l,r.correlationId)(g,i,st.nowSeconds(),r,t,d,void 0,void 0,void 0,void 0)})}var Wy=32;function or(r,e,t){return x(this,null,function*(){r.addQueueMeasurement(w.GeneratePkceCodes,t);let n=$e(Qy,w.GenerateCodeVerifier,e,r,t)(r,e,t),i=yield H(Yy,w.GenerateCodeChallengeFromVerifier,e,r,t)(n,r,e,t);return{verifier:n,challenge:i}})}function Qy(r,e,t){try{let n=new Uint8Array(Wy);return $e(Xp,w.GetRandomValues,e,r,t)(n),nr(n)}catch{throw G($i)}}function Yy(r,e,t,n){return x(this,null,function*(){e.addQueueMeasurement(w.GenerateCodeChallengeFromVerifier,n);try{let i=yield H(ad,w.Sha256Digest,t,e,n)(r,e,n);return nr(new Uint8Array(i))}catch{throw G($i)}})}var Pl=class r{constructor(e,t,n,i){this.logger=e,this.handshakeTimeoutMs=t,this.extensionId=i,this.resolvers=new Map,this.handshakeResolvers=new Map,this.messageChannel=new MessageChannel,this.windowListener=this.onWindowMessage.bind(this),this.performanceClient=n,this.handshakeEvent=n.startMeasurement(w.NativeMessageHandlerHandshake),this.platformAuthType=_t.PLATFORM_EXTENSION_PROVIDER}sendMessage(e){return x(this,null,function*(){this.logger.trace(this.platformAuthType+" - sendMessage called.");let t={method:ts.GetToken,request:e},n={channel:_t.CHANNEL_ID,extensionId:this.extensionId,responseId:vt(),body:t};this.logger.trace(this.platformAuthType+" - Sending request to browser extension"),this.logger.tracePii(this.platformAuthType+` - Sending request to browser extension: ${JSON.stringify(n)}`),this.messageChannel.port1.postMessage(n);let i=yield new Promise((s,a)=>{this.resolvers.set(n.responseId,{resolve:s,reject:a})});return this.validatePlatformBrokerResponse(i)})}static createProvider(e,t,n){return x(this,null,function*(){e.trace("PlatformAuthExtensionHandler - createProvider called.");try{let i=new r(e,t,n,_t.PREFERRED_EXTENSION_ID);return yield i.sendHandshakeRequest(),i}catch{let o=new r(e,t,n);return yield o.sendHandshakeRequest(),o}})}sendHandshakeRequest(){return x(this,null,function*(){this.logger.trace(this.platformAuthType+" - sendHandshakeRequest called."),window.addEventListener("message",this.windowListener,!1);let e={channel:_t.CHANNEL_ID,extensionId:this.extensionId,responseId:vt(),body:{method:ts.HandshakeRequest}};return this.handshakeEvent.add({extensionId:this.extensionId,extensionHandshakeTimeoutMs:this.handshakeTimeoutMs}),this.messageChannel.port1.onmessage=t=>{this.onChannelMessage(t)},window.postMessage(e,window.origin,[this.messageChannel.port2]),new Promise((t,n)=>{this.handshakeResolvers.set(e.responseId,{resolve:t,reject:n}),this.timeoutId=window.setTimeout(()=>{window.removeEventListener("message",this.windowListener,!1),this.messageChannel.port1.close(),this.messageChannel.port2.close(),this.handshakeEvent.end({extensionHandshakeTimedOut:!0,success:!1}),n(G(Qo)),this.handshakeResolvers.delete(e.responseId)},this.handshakeTimeoutMs)})})}onWindowMessage(e){if(this.logger.trace(this.platformAuthType+" - onWindowMessage called"),e.source!==window)return;let t=e.data;if(!(!t.channel||t.channel!==_t.CHANNEL_ID)&&!(t.extensionId&&t.extensionId!==this.extensionId)&&t.body.method===ts.HandshakeRequest){let n=this.handshakeResolvers.get(t.responseId);if(!n){this.logger.trace(this.platformAuthType+`.onWindowMessage - resolver can't be found for request ${t.responseId}`);return}this.logger.verbose(t.extensionId?`Extension with id: ${t.extensionId} not installed`:"No extension installed"),clearTimeout(this.timeoutId),this.messageChannel.port1.close(),this.messageChannel.port2.close(),window.removeEventListener("message",this.windowListener,!1),this.handshakeEvent.end({success:!1,extensionInstalled:!1}),n.reject(G(Yo))}}onChannelMessage(e){this.logger.trace(this.platformAuthType+" - onChannelMessage called.");let t=e.data,n=this.resolvers.get(t.responseId),i=this.handshakeResolvers.get(t.responseId);try{let o=t.body.method;if(o===ts.Response){if(!n)return;let s=t.body.response;if(this.logger.trace(this.platformAuthType+" - Received response from browser extension"),this.logger.tracePii(this.platformAuthType+` - Received response from browser extension: ${JSON.stringify(s)}`),s.status!=="Success")n.reject(Xi(s.code,s.description,s.ext));else if(s.result)s.result.code&&s.result.description?n.reject(Xi(s.result.code,s.result.description,s.result.ext)):n.resolve(s.result);

91else throw mo(Pn.unexpectedError,"Event does not contain result.");this.resolvers.delete(t.responseId)}else if(o===ts.HandshakeResponse){if(!i){this.logger.trace(this.platformAuthType+`.onChannelMessage - resolver can't be found for request ${t.responseId}`);return}clearTimeout(this.timeoutId),window.removeEventListener("message",this.windowListener,!1),this.extensionId=t.extensionId,this.extensionVersion=t.body.version,this.logger.verbose(this.platformAuthType+` - Received HandshakeResponse from extension: ${this.extensionId}`),this.handshakeEvent.end({extensionInstalled:!0,success:!0}),i.resolve(),this.handshakeResolvers.delete(t.responseId)}}catch(o){this.logger.error("Error parsing response from WAM Extension"),this.logger.errorPii(`Error parsing response from WAM Extension: ${o}`),this.logger.errorPii(`Unable to parse ${e}`),n?n.reject(o):i&&i.reject(o)}}validatePlatformBrokerResponse(e){if(e.hasOwnProperty("access_token")&&e.hasOwnProperty("id_token")&&e.hasOwnProperty("client_info")&&e.hasOwnProperty("account")&&e.hasOwnProperty("scope")&&e.hasOwnProperty("expires_in"))return e;throw mo(Pn.unexpectedError,"Response missing expected properties.")}getExtensionId(){return this.extensionId}getExtensionVersion(){return this.extensionVersion}getExtensionName(){return this.getExtensionId()===_t.PREFERRED_EXTENSION_ID?"chrome":this.getExtensionId()?.length?"unknown":void 0}};var kl=class r{constructor(e,t,n){this.logger=e,this.performanceClient=t,this.correlationId=n,this.platformAuthType=_t.PLATFORM_DOM_PROVIDER}static createProvider(e,t,n){return x(this,null,function*(){if(e.trace("PlatformAuthDOMHandler: createProvider called"),window.navigator?.platformAuthentication&&(yield window.navigator.platformAuthentication.getSupportedContracts(_t.MICROSOFT_ENTRA_BROKERID))?.includes(_t.PLATFORM_DOM_APIS))return e.trace("Platform auth api available in DOM"),new r(e,t,n)})}getExtensionId(){return _t.MICROSOFT_ENTRA_BROKERID}getExtensionVersion(){return""}getExtensionName(){return _t.DOM_API_NAME}sendMessage(e){return x(this,null,function*(){this.logger.trace(this.platformAuthType+" - Sending request to browser DOM API");try{let t=this.initializePlatformDOMRequest(e),n=yield window.navigator.platformAuthentication.executeGetToken(t);return this.validatePlatformBrokerResponse(n)}catch(t){throw this.logger.error(this.platformAuthType+" - executeGetToken DOM API error"),t}})}initializePlatformDOMRequest(e){this.logger.trace(this.platformAuthType+" - initializeNativeDOMRequest called");let f=e,{accountId:t,clientId:n,authority:i,scope:o,redirectUri:s,correlationId:a,state:c,storeInCache:l,embeddedClientId:p,extraParameters:g}=f,h=lr(f,["accountId","clientId","authority","scope","redirectUri","correlationId","state","storeInCache","embeddedClientId","extraParameters"]),d=this.getDOMExtraParams(h);return{accountId:t,brokerId:this.getExtensionId(),authority:i,clientId:n,correlationId:a||this.correlationId,extraParameters:q(q({},g),d),isSecurityTokenService:!1,redirectUri:s,scope:o,state:c,storeInCache:l,embeddedClientId:p}}validatePlatformBrokerResponse(e){if(e.hasOwnProperty("isSuccess")){if(e.hasOwnProperty("accessToken")&&e.hasOwnProperty("idToken")&&e.hasOwnProperty("clientInfo")&&e.hasOwnProperty("account")&&e.hasOwnProperty("scopes")&&e.hasOwnProperty("expiresIn"))return this.logger.trace(this.platformAuthType+" - platform broker returned successful and valid response"),this.convertToPlatformBrokerResponse(e);if(e.hasOwnProperty("error")){let t=e;if(t.isSuccess===!1&&t.error&&t.error.code)throw this.logger.trace(this.platformAuthType+" - platform broker returned error response"),Xi(t.error.code,t.error.description,{error:parseInt(t.error.errorCode),protocol_error:t.error.protocolError,status:t.error.status,properties:t.error.properties})}}throw mo(Pn.unexpectedError,"Response missing expected properties.")}convertToPlatformBrokerResponse(e){return this.logger.trace(this.platformAuthType+" - convertToNativeResponse called"),{access_token:e.accessToken,id_token:e.idToken,client_info:e.clientInfo,account:e.account,expires_in:e.expires

91In,scope:e.scopes,state:e.state||"",properties:e.properties||{},extendedLifetimeToken:e.extendedLifetimeToken??!1,shr:e.proofOfPossessionPayload}}getDOMExtraParams(e){try{let t={};for(let[n,i]of Object.entries(e))i&&(typeof i=="object"?t[n]=JSON.stringify(i):t[n]=String(i));return t}catch(t){return this.logger.error(this.platformAuthType+" - Error stringifying extra parameters"),this.logger.errorPii(this.platformAuthType+" - Error stringifying extra parameters: "+t),{}}}};function jg(r,e,t,n,i){return x(this,null,function*(){r.trace("getPlatformAuthProvider called",t),r.trace("Has client allowed platform auth via DOM API: "+i);let o;try{i&&(o=yield kl.createProvider(r,e,t)),o||(r.trace("Platform auth via DOM API not available, checking for extension"),o=yield Pl.createProvider(r,n||pd,e))}catch(s){r.trace("Platform auth not available",s)}return o})}function yn(r,e,t,n){if(e.trace("isPlatformAuthAllowed called"),!r.system.allowPlatformBroker&&r.system.allowPlatformBrokerWithDOM)throw fe(St.invalidPlatformBrokerConfiguration);if(!r.system.allowPlatformBroker)return e.trace("isPlatformAuthAllowed: allowPlatformBroker is not enabled, returning false"),!1;if(!t)return e.trace("isPlatformAuthAllowed: Platform auth provider is not initialized, returning false"),!1;if(n)switch(n){case de.BEARER:case de.POP:return e.trace("isPlatformAuthAllowed: authenticationScheme is supported, returning true"),!0;default:return e.trace("isPlatformAuthAllowed: authenticationScheme is not supported, returning false"),!1}return!0}var xl=class extends Kt{constructor(e,t,n,i,o,s,a,c,l,p){super(e,t,n,i,o,s,a,l,p),this.unloadWindow=this.unloadWindow.bind(this),this.nativeStorage=c,this.eventHandler=o}acquireToken(e,t){let n;try{if(n={popupName:this.generatePopupName(e.scopes||Wt,e.authority||this.config.auth.authority),popupWindowAttributes:e.popupWindowAttributes||{},popupWindowParent:e.popupWindowParent??window},this.performanceClient.addFields({isAsyncPopup:this.config.system.asyncPopups},this.correlationId),this.config.system.asyncPopups)return this.logger.verbose("asyncPopups set to true, acquiring token"),this.acquireTokenPopupAsync(e,n,t);{let o=re(q({},e),{httpMethod:Il(e,this.config.auth.protocolMode)});return this.logger.verbose("asyncPopup set to false, opening popup before acquiring token"),n.popup=this.openSizedPopup("about:blank",n),this.acquireTokenPopupAsync(o,n,t)}}catch(i){return Promise.reject(i)}}logout(e){try{this.logger.verbose("logoutPopup called");let t=this.initializeLogoutRequest(e),n={popupName:this.generateLogoutPopupName(t),popupWindowAttributes:e?.popupWindowAttributes||{},popupWindowParent:e?.popupWindowParent??window},i=e&&e.authority,o=e&&e.mainWindowRedirectUri;return this.config.system.asyncPopups?(this.logger.verbose("asyncPopups set to true"),this.logoutPopupAsync(t,n,i,o)):(this.logger.verbose("asyncPopup set to false, opening popup"),n.popup=this.openSizedPopup("about:blank",n),this.logoutPopupAsync(t,n,i,o))}catch(t){return Promise.reject(t)}}acquireTokenPopupAsync(e,t,n){return x(this,null,function*(){this.logger.verbose("acquireTokenPopupAsync called");let i=yield H(this.initializeAuthorizationRequest.bind(this),w.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(e,J.Popup);t.popup&&Qa(i.authority);let o=yn(this.config,this.logger,this.platformAuthProvider,e.authenticationScheme);return i.platformBroker=o,this.config.auth.protocolMode===Ue.EAR?this.executeEarFlow(i,t,n):this.executeCodeFlow(i,t,n)})}executeCodeFlow(e,t,n){return x(this,null,function*(){let i=e.correlationId,o=this.initializeServerTelemetryManager(he.acquireTokenPopup),s=n||(yield H(or,w.GeneratePkceCodes,this.logger,this.performanceClient,i)(this.performanceClient,this.logger,i)),a=re(q({},e),{codeChallenge:s.challenge});try{let c=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,i)({serverTelemetryManager:o,requestAuthority:a.authority,requestAzureCloudOptions:a.azureCloudOptions,requestExtraQueryParameters:a.extraQueryParameters,account:a.account});if(a.httpMethod===tr.POST)return yield this.executeCodeFlowWithPost(a,t,c,s.verifier);{let l=yield H(Zi,w.GetAuthCodeUrl,this.logger,this.performanceClient,i)(this.config,c.authority,a,this.logger,this.performanceClient),p=this.initiateAuthRequest(l,t);this.eventHandler.emitEvent(Y.POPUP_OPENED,J.Popup,{popupWindow:p},null);let g=yield this.monitorPopupForHash(p,t.popupWindowParent),h=$e(Qn,w.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(g,this.config.auth.OIDCOptions.serverResponseType,this.logger);return yield H(vn,w.HandleResponseCode,this.logger,this.performanceClient,i)(e,h,s.verifier,he.acquireTokenPopup,this.config,c,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}catch(c){throw t.popup?.close(),c instanceof ie&&(c.setCorrelationId(this.correlationId),o.cacheFailedRequest(c)),c}})}executeEarFlow(e,t,n){return x(this,null,function*(){let i=e.correlationId,o=yield H(this.getDiscoveredAuthority.bind(this),w.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,i)({requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),s=yield H(ns,w.GenerateEarKey,this.logger,this.performanceClient,i)(),a=n||(yield H(or,w.GeneratePkceCodes,this.logger,this.performanceClient,i)(this.performanceClient,this.logger,i)),c=re(q({},e),{earJwk:s,codeChallenge:a.challenge}),l=t.popup||this.openPopup("about:blank",t);(yield ps(l.document,this.config,o,c,this.logger,this.performanceClient)).submit();let g=yield H(this.monitorPopupForHash.bind(this),w.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,i)(l,t.popupWindowParent),h=$e(Qn,w.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(g,this.config.auth.OIDCOptions.serverResponseType,this.logger);if(!h.ear_jwe&&h.code){let d=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,i)({serverTelemetryManager:this.initializeServerTelemetryManager(he.acquireTokenPopup),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:o});return H(vn,w.HandleResponseCode,this.logger,this.performanceClient,i)(c,h,a.verifier,he.acquireTokenPopup,this.config,d,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}else return H(ms,w.HandleResponseEar,this.logger,this.performanceClient,i)(c,h,he.acquireTokenPopup,this.config,o,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)})}executeCodeFlowWithPost(e,t,n,i){return x(this,null,function*(){let o=e.correlationId,s=yield H(this.getDiscoveredAuthority.bind(this),w.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,o)({requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),a=t.popup||this.openPopup("about:blank",t);(yield gs(a.document,this.config,s,e,this.logger,this.performanceClient)).submit();let l=yield H(this.monitorPopupForHash.bind(this),w.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,o)(a,t.popupWindowParent),p=$e(Qn,w.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(l,this.config.auth.OIDCOptions.serverResponseType,this.logger);return H(vn,w.HandleResponseCode,this.logger,this.performanceClient,o)(e,p,i,he.acquireTokenPopup,this.config,n,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)})}logoutPopupAsync(e,t,n,i){return x(this,null,function*(){this.logger.verbose("logoutPopupAsync called"),this.eventHandler.emitEvent(Y.LOGOUT_START,J.Popup,e);let o=this.initializeServerTelemetryManager(he.logoutPopup);try{yield this.clearCacheOnLogout(this.correlationId,e.account);let s=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:o,requestAuthority:n,account:e.account||void 0});try{s.authority.endSessionEndpoint}catch{if(e.account?.homeAccountId&&e.postLogoutRedirectUri&&s.authority.protocolMode===Ue.OIDC){

91if(this.eventHandler.emitEvent(Y.LOGOUT_SUCCESS,J.Popup,e),i){let l={apiId:he.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},p=ue.getAbsoluteUrl(i,Nt());yield this.navigationClient.navigateInternal(p,l)}t.popup?.close();return}}let a=s.getLogoutUri(e);this.eventHandler.emitEvent(Y.LOGOUT_SUCCESS,J.Popup,e);let c=this.openPopup(a,t);if(this.eventHandler.emitEvent(Y.POPUP_OPENED,J.Popup,{popupWindow:c},null),yield this.monitorPopupForHash(c,t.popupWindowParent).catch(()=>{}),i){let l={apiId:he.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},p=ue.getAbsoluteUrl(i,Nt());this.logger.verbose("Redirecting main window to url specified in the request"),this.logger.verbosePii(`Redirecting main window to: ${p}`),yield this.navigationClient.navigateInternal(p,l)}else this.logger.verbose("No main window navigation requested")}catch(s){throw t.popup?.close(),s instanceof ie&&(s.setCorrelationId(this.correlationId),o.cacheFailedRequest(s)),this.eventHandler.emitEvent(Y.LOGOUT_FAILURE,J.Popup,null,s),this.eventHandler.emitEvent(Y.LOGOUT_END,J.Popup),s}this.eventHandler.emitEvent(Y.LOGOUT_END,J.Popup)})}initiateAuthRequest(e,t){if(e)return this.logger.infoPii(`Navigate to: ${e}`),this.openPopup(e,t);throw this.logger.error("Navigate url is empty"),G(Br)}monitorPopupForHash(e,t){return new Promise((n,i)=>{this.logger.verbose("PopupHandler.monitorPopupForHash - polling started");let o=setInterval(()=>{if(e.closed){this.logger.error("PopupHandler.monitorPopupForHash - window closed"),clearInterval(o),i(G(yr));return}let s="";try{s=e.location.href}catch{}if(!s||s==="about:blank")return;clearInterval(o);let a="",c=this.config.auth.OIDCOptions.serverResponseType;e&&(c===Pr.QUERY?a=e.location.search:a=e.location.hash),this.logger.verbose("PopupHandler.monitorPopupForHash - popup window is on same origin as caller"),n(a)},this.config.system.pollIntervalMilliseconds)}).finally(()=>{this.cleanPopup(e,t)})}openPopup(e,t){try{let n;if(t.popup?(n=t.popup,this.logger.verbosePii(`Navigating popup window to: ${e}`),n.location.assign(e)):typeof t.popup>"u"&&(this.logger.verbosePii(`Opening popup window to: ${e}`),n=this.openSizedPopup(e,t)),!n)throw G(Oo);return n.focus&&n.focus(),this.currentWindow=n,t.popupWindowParent.addEventListener("beforeunload",this.unloadWindow),n}catch(n){throw this.logger.error("error opening popup "+n.message),G(Fo)}}openSizedPopup(e,{popupName:t,popupWindowAttributes:n,popupWindowParent:i}){let o=i.screenLeft?i.screenLeft:i.screenX,s=i.screenTop?i.screenTop:i.screenY,a=i.innerWidth||document.documentElement.clientWidth||document.body.clientWidth,c=i.innerHeight||document.documentElement.clientHeight||document.body.clientHeight,l=n.popupSize?.width,p=n.popupSize?.height,g=n.popupPosition?.top,h=n.popupPosition?.left;return(!l||l<0||l>a)&&(this.logger.verbose("Default popup window width used. Window width not configured or invalid."),l=Je.POPUP_WIDTH),(!p||p<0||p>c)&&(this.logger.verbose("Default popup window height used. Window height not configured or invalid."),p=Je.POPUP_HEIGHT),(!g||g<0||g>c)&&(this.logger.verbose("Default popup window top position used. Window top not configured or invalid."),g=Math.max(0,c/2-Je.POPUP_HEIGHT/2+s)),(!h||h<0||h>a)&&(this.logger.verbose("Default popup window left position used. Window left not configured or invalid."),h=Math.max(0,a/2-Je.POPUP_WIDTH/2+o)),i.open(e,t,`width=${l}, height=${p}, top=${g}, left=${h}, scrollbars=yes`)}unloadWindow(e){this.currentWindow&&this.currentWindow.close(),e.preventDefault()}cleanPopup(e,t){e.close(),t.removeEventListener("beforeunload",this.unloadWindow)}generatePopupName(e,t){return`${Je.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${e.join("-")}.${t}.${this.correlationId}`}generateLogoutPopupName(e){let t=e.account&&e.account.homeAccountId;return`${Je.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${t}.${this.correlationId}`}};function Jy(){if(typeof window>"u"||typeof window.performance>"u"||typeof window.performance.getEntriesByType!="function")return;let r=window.performance.getEntriesByType("navigation");return(r.length?r[0]:void 0)?.type}var _l=class extends Kt{constructor(e,t,n,i,o,s,a,c,l,p){super(e,t,n,i,o,s,a,l,p),this.nativeStorage=c}acquireToken(e){return x(this,null,function*(){let t=yield H(this.initializeAuthorizationRequest.bind(this),w.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(e,J.Redirect);t.platformBroker=yn(this.config,this.logger,this.platformAuthProvider,e.authenticationScheme);let n=o=>{o.persisted&&(this.logger.verbose("Page was restored from back/forward cache. Clearing temporary cache."),this.browserStorage.resetRequestCache(),this.eventHandler.emitEvent(Y.RESTORE_FROM_BFCACHE,J.Redirect))},i=this.getRedirectStartPage(e.redirectStartPage);this.logger.verbosePii(`Redirect start page: ${i}`),this.browserStorage.setTemporaryCache(Xe.ORIGIN_URI,i,!0),window.addEventListener("pageshow",n);try{this.config.auth.protocolMode===Ue.EAR?yield this.executeEarFlow(t):yield this.executeCodeFlow(t,e.onRedirectNavigate)}catch(o){throw o instanceof ie&&o.setCorrelationId(this.correlationId),window.removeEventListener("pageshow",n),o}})}executeCodeFlow(e,t){return x(this,null,function*(){let n=e.correlationId,i=this.initializeServerTelemetryManager(he.acquireTokenRedirect),o=yield H(or,w.GeneratePkceCodes,this.logger,this.performanceClient,n)(this.performanceClient,this.logger,n),s=re(q({},e),{codeChallenge:o.challenge});this.browserStorage.cacheAuthorizeRequest(s,o.verifier);try{if(s.httpMethod===tr.POST)return yield this.executeCodeFlowWithPost(s);{let a=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:i,requestAuthority:s.authority,requestAzureCloudOptions:s.azureCloudOptions,requestExtraQueryParameters:s.extraQueryParameters,account:s.account}),c=yield H(Zi,w.GetAuthCodeUrl,this.logger,this.performanceClient,e.correlationId)(this.config,a.authority,s,this.logger,this.performanceClient);return yield this.initiateAuthRequest(c,t)}}catch(a){throw a instanceof ie&&(a.setCorrelationId(this.correlationId),i.cacheFailedRequest(a)),a}})}executeEarFlow(e){return x(this,null,function*(){let t=e.correlationId,n=yield H(this.getDiscoveredAuthority.bind(this),w.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t)({requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),i=yield H(ns,w.GenerateEarKey,this.logger,this.performanceClient,t)(),o=yield H(or,w.GeneratePkceCodes,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),s=re(q({},e),{earJwk:i,codeChallenge:o.challenge});return this.browserStorage.cacheAuthorizeRequest(s,o.verifier),(yield ps(document,this.config,n,s,this.logger,this.performanceClient)).submit(),new Promise((c,l)=>{setTimeout(()=>{l(G(Yi,"failed_to_redirect"))},this.config.system.redirectNavigationTimeout)})})}executeCodeFlowWithPost(e){return x(this,null,function*(){let t=e.correlationId,n=yield H(this.getDiscoveredAuthority.bind(this),w.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t)({requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account});return this.browserStorage.cacheAuthorizeRequest(e),(yield gs(document,this.config,n,e,this.logger,this.performanceClient)).submit(),new Promise((o,s)=>{setTimeout(()=>{s(G(Yi,"failed_to_redirect"))},this.config.system.redirectNavigationTimeout)})})}handleRedirectPromise(e="",t,n,i){return x(this,null,function*(){let o=this.initializeServerTelemetryManager(he.handleRedirectPromise);try{let[s,a]=this.getRedirectResponse(e||"");if(!s)return this.logger.info("handleRedirectPromise did not detect a response as a result of a redirect. Cleaning temporary cache."),this.browserStorage.resetRequestCache(),Jy()!=="back_forward"?i.event.errorCode="no_server_response":this.logger.verbose("Back navigation event detected. Muting no_server_response error"),null;

91let c=this.browserStorage.getTemporaryCache(Xe.ORIGIN_URI,!0)||L.EMPTY_STRING,l=Or.normalizeUrlForComparison(c),p=Or.normalizeUrlForComparison(window.location.href);if(l===p&&this.config.auth.navigateToLoginRequestUrl)return this.logger.verbose("Current page is loginRequestUrl, handling response"),c.indexOf("#")>-1&&hd(c),yield this.handleResponse(s,t,n,o);if(this.config.auth.navigateToLoginRequestUrl){if(!$a()||this.config.system.allowRedirectInIframe){this.browserStorage.setTemporaryCache(Xe.URL_HASH,a,!0);let g={apiId:he.handleRedirectPromise,timeout:this.config.system.redirectNavigationTimeout,noHistory:!0},h=!0;if(!c||c==="null"){let d=dd();this.browserStorage.setTemporaryCache(Xe.ORIGIN_URI,d,!0),this.logger.warning("Unable to get valid login request url from cache, redirecting to home page"),h=yield this.navigationClient.navigateInternal(d,g)}else this.logger.verbose(`Navigating to loginRequestUrl: ${c}`),h=yield this.navigationClient.navigateInternal(c,g);if(!h)return yield this.handleResponse(s,t,n,o)}}else return this.logger.verbose("NavigateToLoginRequestUrl set to false, handling response"),yield this.handleResponse(s,t,n,o);return null}catch(s){throw s instanceof ie&&(s.setCorrelationId(this.correlationId),o.cacheFailedRequest(s)),s}})}getRedirectResponse(e){this.logger.verbose("getRedirectResponseHash called");let t=e;t||(this.config.auth.OIDCOptions.serverResponseType===Pr.QUERY?t=window.location.search:t=window.location.hash);let n=Or.getDeserializedResponse(t);if(n){try{_g(n,this.browserCrypto,J.Redirect)}catch(o){return o instanceof ie&&this.logger.error(`Interaction type validation failed due to ${o.errorCode}: ${o.errorMessage}`),[null,""]}return za(window),this.logger.verbose("Hash contains known properties, returning response hash"),[n,t]}let i=this.browserStorage.getTemporaryCache(Xe.URL_HASH,!0);return this.browserStorage.removeItem(this.browserStorage.generateCacheKey(Xe.URL_HASH)),i&&(n=Or.getDeserializedResponse(i),n)?(this.logger.verbose("Hash does not contain known properties, returning cached hash"),[n,i]):[null,""]}handleResponse(e,t,n,i){return x(this,null,function*(){if(!e.state)throw G(jn);if(e.ear_jwe){let a=yield H(this.getDiscoveredAuthority.bind(this),w.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t.correlationId)({requestAuthority:t.authority,requestAzureCloudOptions:t.azureCloudOptions,requestExtraQueryParameters:t.extraQueryParameters,account:t.account});return H(ms,w.HandleResponseEar,this.logger,this.performanceClient,t.correlationId)(t,e,he.acquireTokenRedirect,this.config,a,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}let s=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:i,requestAuthority:t.authority});return H(vn,w.HandleResponseCode,this.logger,this.performanceClient,t.correlationId)(t,e,n,he.acquireTokenRedirect,this.config,s,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)})}initiateAuthRequest(e,t){return x(this,null,function*(){if(this.logger.verbose("RedirectHandler.initiateAuthRequest called"),e){this.logger.infoPii(`RedirectHandler.initiateAuthRequest: Navigate to: ${e}`);let n={apiId:he.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},i=t||this.config.auth.onRedirectNavigate;if(typeof i=="function")if(this.logger.verbose("RedirectHandler.initiateAuthRequest: Invoking onRedirectNavigate callback"),i(e)!==!1){this.logger.verbose("RedirectHandler.initiateAuthRequest: onRedirectNavigate did not return false, navigating"),yield this.navigationClient.navigateExternal(e,n);return}else{this.logger.verbose("RedirectHandler.initiateAuthRequest: onRedirectNavigate returned false, stopping navigation");return}else{this.logger.verbose("RedirectHandler.initiateAuthRequest: Navigating window to navigate url"),yield this.navigationClient.navigateExternal(e,n);return}}else throw this.logger.info("RedirectHandler.initiateAuthRequest: Navigate url is empty"),G(Br)})}logout(e){return x(this,null,function*(){this.logger.verbose("logoutRedirect called");

91let t=this.initializeLogoutRequest(e),n=this.initializeServerTelemetryManager(he.logout);try{this.eventHandler.emitEvent(Y.LOGOUT_START,J.Redirect,e),yield this.clearCacheOnLogout(this.correlationId,t.account);let i={apiId:he.logout,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},o=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:n,requestAuthority:e&&e.authority,requestExtraQueryParameters:e?.extraQueryParameters,account:e&&e.account||void 0});if(o.authority.protocolMode===Ue.OIDC)try{o.authority.endSessionEndpoint}catch{if(t.account?.homeAccountId){this.eventHandler.emitEvent(Y.LOGOUT_SUCCESS,J.Redirect,t);return}}let s=o.getLogoutUri(t);if(this.eventHandler.emitEvent(Y.LOGOUT_SUCCESS,J.Redirect,t),e&&typeof e.onRedirectNavigate=="function")if(e.onRedirectNavigate(s)!==!1){this.logger.verbose("Logout onRedirectNavigate did not return false, navigating"),this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,Cr.SIGNOUT),yield this.navigationClient.navigateExternal(s,i);return}else this.browserStorage.setInteractionInProgress(!1),this.logger.verbose("Logout onRedirectNavigate returned false, stopping navigation");else{this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,Cr.SIGNOUT),yield this.navigationClient.navigateExternal(s,i);return}}catch(i){throw i instanceof ie&&(i.setCorrelationId(this.correlationId),n.cacheFailedRequest(i)),this.eventHandler.emitEvent(Y.LOGOUT_FAILURE,J.Redirect,null,i),this.eventHandler.emitEvent(Y.LOGOUT_END,J.Redirect),i}this.eventHandler.emitEvent(Y.LOGOUT_END,J.Redirect)})}getRedirectStartPage(e){let t=e||window.location.href;return ue.getAbsoluteUrl(t,Nt())}};function Cd(r,e,t,n,i){return x(this,null,function*(){if(e.addQueueMeasurement(w.SilentHandlerInitiateAuthRequest,n),!r)throw t.info("Navigate url is empty"),G(Br);return i?H(Xy,w.SilentHandlerLoadFrame,t,e,n)(r,i,e,n):$e(Zy,w.SilentHandlerLoadFrameSync,t,e,n)(r)})}function Vg(r,e,t,n,i){return x(this,null,function*(){let o=Fl();if(!o.contentDocument)throw"No document associated with iframe!";return(yield gs(o.contentDocument,r,e,t,n,i)).submit(),o})}function Gg(r,e,t,n,i){return x(this,null,function*(){let o=Fl();if(!o.contentDocument)throw"No document associated with iframe!";return(yield ps(o.contentDocument,r,e,t,n,i)).submit(),o})}function Nl(r,e,t,n,i,o,s){return x(this,null,function*(){n.addQueueMeasurement(w.SilentHandlerMonitorIframeForHash,o),n.addFields({iframePollIntervalMs:t,iframeTimeoutMs:e},o);let a=0,c=0;return new Promise((l,p)=>{e<vl&&i.warning(`system.loadFrameTimeout or system.iframeHashTimeout set to lower (${e}ms) than the default (${vl}ms). This may result in timeouts.`);let g=window.setTimeout(()=>{window.clearInterval(h),p(G(Do))},e),h=window.setInterval(()=>{a++;let d="",m=r.contentWindow;try{d=m?m.location.href:""}catch{c++}if(!d||d==="about:blank")return;let f="";m&&(s===Pr.QUERY?f=m.location.search:f=m.location.hash),window.clearTimeout(g),window.clearInterval(h),l(f)},t)}).finally(()=>{n.addFields({iframeTickCount:a,crossOriginTickCount:c},o),$e(e0,w.RemoveHiddenIframe,i,n,o)(r)})})}function Xy(r,e,t,n){return t.addQueueMeasurement(w.SilentHandlerLoadFrame,n),new Promise((i,o)=>{let s=Fl();window.setTimeout(()=>{if(!s){o("Unable to load iframe");return}s.src=r,i(s)},e)})}function Zy(r){let e=Fl();return e.src=r,e}function Fl(){let r=document.createElement("iframe");return r.className="msalSilentIframe",r.style.visibility="hidden",r.style.position="absolute",r.style.width=r.style.height="0",r.style.border="0",r.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms"),r.setAttribute("allow","local-network-access *"),document.body.appendChild(r),r}function e0(r){document.body===r.parentNode&&document.body.removeChild(r)}var Ol=class extends Kt{constructor(e,t,n,i,o,s,a,c,l,p,g){super(e,t,n,i,o,s,c,p,g),this.apiId=a,this.nativeStorage=l}acquireToken(e){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.SilentIframeClientAcquireToken,e.correlationId),!e.loginHint&&!e.sid&&(!e.account||!e.account.username)&&this.logger.warning("No user hint provided. The authorization server may need more information to complete this request.");let t=q({},e);t.prompt?t.prompt!==ze.NONE&&t.prompt!==ze.NO_SESSION&&(this.logger.warning(`SilentIframeClient. Replacing invalid prompt ${t.prompt} with ${ze.NONE}`),t.prompt=ze.NONE):t.prompt=ze.NONE;let n=yield H(this.initializeAuthorizationRequest.bind(this),w.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,e.correlationId)(t,J.Silent);return n.platformBroker=yn(this.config,this.logger,this.platformAuthProvider,n.authenticationScheme),Qa(n.authority),this.config.auth.protocolMode===Ue.EAR?this.executeEarFlow(n):this.executeCodeFlow(n)})}executeCodeFlow(e){return x(this,null,function*(){let t,n=this.initializeServerTelemetryManager(this.apiId);try{return t=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,e.correlationId)({serverTelemetryManager:n,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),yield H(this.silentTokenHelper.bind(this),w.SilentIframeClientTokenHelper,this.logger,this.performanceClient,e.correlationId)(t,e)}catch(i){if(i instanceof ie&&(i.setCorrelationId(this.correlationId),n.cacheFailedRequest(i)),!t||!(i instanceof ie)||i.errorCode!==Je.INVALID_GRANT_ERROR)throw i;return this.performanceClient.addFields({retryError:i.errorCode},this.correlationId),yield H(this.silentTokenHelper.bind(this),w.SilentIframeClientTokenHelper,this.logger,this.performanceClient,this.correlationId)(t,e)}})}executeEarFlow(e){return x(this,null,function*(){let t=e.correlationId,n=yield H(this.getDiscoveredAuthority.bind(this),w.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t)({requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),i=yield H(ns,w.GenerateEarKey,this.logger,this.performanceClient,t)(),o=yield H(or,w.GeneratePkceCodes,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),s=re(q({},e),{earJwk:i,codeChallenge:o.challenge}),a=yield H(Gg,w.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,t)(this.config,n,s,this.logger,this.performanceClient),c=this.config.auth.OIDCOptions.serverResponseType,l=yield H(Nl,w.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,t)(a,this.config.system.iframeHashTimeout,this.config.system.pollIntervalMilliseconds,this.performanceClient,this.logger,t,c),p=$e(Qn,w.DeserializeResponse,this.logger,this.performanceClient,t)(l,c,this.logger);if(!p.ear_jwe&&p.code){let g=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,t)({serverTelemetryManager:this.initializeServerTelemetryManager(this.apiId),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:n});return H(vn,w.HandleResponseCode,this.logger,this.performanceClient,t)(s,p,o.verifier,this.apiId,this.config,g,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}else return H(ms,w.HandleResponseEar,this.logger,this.performanceClient,t)(s,p,this.apiId,this.config,n,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)})}verifySso(e){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.SilentIframeClientAcquireToken,e.correlationId);let t=q({},e);t.prompt||(t.prompt=ze.NONE);let n=yield H(this.initializeAuthorizationRequest.bind(this),w.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,e.correlationId)(t,J.Silent),i=yield H(this.createAuthCodeClient.bind(this),w.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,e.correlationId)({serverTelemetryManager:this.initializeServerTelemetryManager(this.apiId),requestAuthority:n.authority,requestAzureCloudOptions:n.azureCloudOptions,requestExtraQueryParameters:n.extraQueryParameters,account:n.account}),o=n.correlationId,s=yield H(or,w.GeneratePkceCodes,this.logger,this.performanceClient,o)(this.performanceClient,this.logger,o),a=re(q({},n),{codeChallenge:s.challenge}),c=yield H(Zi,w.GetAuthCodeUrl,this.logger,this.performanceClient,o)(this.config,i.authority,a,this.logger,this.performanceClient),l=yield H(Cd,w.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,o)(c,this.performanceClient,this.logger,o,this.config.system.navigateFrameWait),p=this.config.auth.OIDCOptions.serverResponseType,g=yield H(Nl,w.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,o)(l,this.config.system.iframeHashTimeout,this.config.system.pollIntervalMilliseconds,this.performanceClient,this.logger,o,p),h=$e(Qn,w.DeserializeResponse,this.logger,this.performanceClient,o)(g,p,this.logger);return rr.validateAuthorizationResponse(h,n.state),h.code?(this.logger.verbose("SSO verification completed successfully with valid authorization code - skipped token exchange",o),!0):(this.logger.warning("SSO verification response did not contain an authorization code",o),!1)})}logout(){return Promise.reject(G(Hr))}silentTokenHelper(e,t){return x(this,null,function*(){let n=t.correlationId;this.performanceClient.addQueueMeasurement(w.SilentIframeClientTokenHelper,n);let i=yield H(or,w.GeneratePkceCodes,this.logger,this.performanceClient,n)(this.performanceClient,this.logger,n),o=re(q({},t),{codeChallenge:i.challenge}),s;if(t.httpMethod===tr.POST)s=yield H(Vg,w.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,n)(this.config,e.authority,o,this.logger,this.performanceClient);else{let p=yield H(Zi,w.GetAuthCodeUrl,this.logger,this.performanceClient,n)(this.config,e.authority,o,this.logger,this.performanceClient);s=yield H(Cd,w.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,n)(p,this.performanceClient,this.logger,n,this.config.system.navigateFrameWait)}let a=this.config.auth.OIDCOptions.serverResponseType,c=yield H(Nl,w.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,n)(s,this.config.system.iframeHashTimeout,this.config.system.pollIntervalMilliseconds,this.performanceClient,this.logger,n,a),l=$e(Qn,w.DeserializeResponse,this.logger,this.performanceClient,n)(c,a,this.logger);return H(vn,w.HandleResponseCode,this.logger,this.performanceClient,n)(t,l,

91i.verifier,this.apiId,this.config,e,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)})}};var Dl=class extends Kt{acquireToken(e){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.SilentRefreshClientAcquireToken,e.correlationId);let t=yield H(Ja,w.InitializeBaseRequest,this.logger,this.performanceClient,e.correlationId)(e,this.config,this.performanceClient,this.logger),n=q(q({},e),t);e.redirectUri&&(n.redirectUri=this.getRedirectUri(e.redirectUri));let i=this.initializeServerTelemetryManager(he.acquireTokenSilent_silentFlow),o=yield this.createRefreshTokenClient({serverTelemetryManager:i,authorityUrl:n.authority,azureCloudOptions:n.azureCloudOptions,account:n.account});return H(o.acquireTokenByRefreshToken.bind(o),w.RefreshTokenClientAcquireTokenByRefreshToken,this.logger,this.performanceClient,e.correlationId)(n,he.acquireTokenSilent_silentFlow).catch(s=>{throw s.setCorrelationId(this.correlationId),i.cacheFailedRequest(s),s})})}logout(){return Promise.reject(G(Hr))}createRefreshTokenClient(e){return x(this,null,function*(){let t=yield H(this.getClientConfiguration.bind(this),w.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:e.serverTelemetryManager,requestAuthority:e.authorityUrl,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account});return new Ua(t,this.performanceClient)})}};var Ml=class{constructor(e,t,n,i,o){this.isBrowserEnvironment=typeof window<"u",this.config=e,this.storage=t,this.logger=n,this.cryptoObj=i,this.performanceClient=o}loadExternalTokens(e,t,n){return x(this,null,function*(){if(!this.isBrowserEnvironment)throw G(Lr);let i=e.correlationId||vt(),o=this.performanceClient.startMeasurement(w.LoadExternalTokens,i);try{let s=t.id_token?ot.extractTokenClaims(t.id_token,at):void 0,a=ot.isKmsi(s||{}),c={protocolMode:this.config.auth.protocolMode,knownAuthorities:this.config.auth.knownAuthorities,cloudDiscoveryMetadata:this.config.auth.cloudDiscoveryMetadata,authorityMetadata:this.config.auth.authorityMetadata,skipAuthorityMetadataCache:this.config.auth.skipAuthorityMetadataCache},l=e.authority||this.config.auth.authority,p=yield To.createDiscoveredInstance(gr.generateAuthority(l,e.azureCloudOptions),this.config.system.networkClient,this.storage,c,this.logger,i,this.performanceClient),g=yield H(this.loadAccount.bind(this),w.LoadAccount,this.logger,this.performanceClient,i)(e,n.clientInfo||t.client_info||"",i,p,s),h=yield H(this.loadIdToken.bind(this),w.LoadIdToken,this.logger,this.performanceClient,i)(t,g.homeAccountId,g.environment,g.realm,i,a),d=yield H(this.loadAccessToken.bind(this),w.LoadAccessToken,this.logger,this.performanceClient,i)(e,t,g.homeAccountId,g.environment,g.realm,n,i,a),m=yield H(this.loadRefreshToken.bind(this),w.LoadRefreshToken,this.logger,this.performanceClient,i)(t,g.homeAccountId,g.environment,i,a);return o.end({success:!0},void 0,_e.getAccountInfo(g)),this.generateAuthenticationResult(e,{account:g,idToken:h,accessToken:d,refreshToken:m},p,s)}catch(s){throw o.end({success:!1},s),s}})}loadAccount(e,t,n,i,o){return x(this,null,function*(){if(this.logger.verbose("TokenCache - loading account"),e.account){let l=_e.createFromAccountInfo(e.account);return yield this.storage.setAccount(l,n,ot.isKmsi(o||{}),he.loadExternalTokens),l}else if(!t&&!o)throw this.logger.error("TokenCache - if an account is not provided on the request, clientInfo or idToken must be provided instead."),G(Vo);let s=_e.generateHomeAccountId(t,i.authorityType,this.logger,this.cryptoObj,o),a=o?.tid,c=Ro(this.storage,i,s,at,n,o,t,i.getPreferredCache(),a,void 0,void 0,this.logger);return yield this.storage.setAccount(c,n,ot.isKmsi(o||{}),he.loadExternalTokens),c})}loadIdToken(e,t,n,i,o,s){return x(this,null,function*(){if(!e.id_token)return this.logger.verbose("TokenCache - no id token found in response"),null;this.logger.verbose("TokenCache - loading id token");let a=Ye.createIdTokenEntity(t,n,e.id_token,this.config.auth.clientId,i);return yield this.storage.setIdTokenCredential(a,o,s),a})}loadAccessToken(e,t,n,i,o,s,a,c){return x(this,null,function*(){if(t.access_token)if(t.expires_in){if(!t.scope&&(!e.scopes||!e.scopes.length))return this.logger.error("TokenCache - scopes not specified in the request or response. Cannot add token to the cache."),null}else return this.logger.error("TokenCache - no expiration set on the access token. Cannot add it to the cache."),null;else return this.logger.verbose("TokenCache - no access token found in response"),null;this.logger.verbose("TokenCache - loading access token");let l=t.scope?Qe.fromString(t.scope):new Qe(e.scopes),p=s.expiresOn||t.expires_in+st.nowSeconds(),g=s.extendedExpiresOn||(t.ext_expires_in||t.expires_in)+st.nowSeconds(),h=Ye.createAccessTokenEntity(n,i,t.access_token,this.config.auth.clientId,o,l.printScopes(),p,g,at);return yield this.storage.setAccessTokenCredential(h,a,c),h})}loadRefreshToken(e,t,n,i,o){return x(this,null,function*(){if(!e.refresh_token)return this.logger.verbose("TokenCache - no refresh token found in response"),null;let s=e.refresh_token_expires_in?e.refresh_token_expires_in+st.nowSeconds():void 0;this.performanceClient.addFields({extRtExpiresOnSeconds:s},i),this.logger.verbose("TokenCache - loading refresh token");let a=Ye.createRefreshTokenEntity(t,n,e.refresh_token,this.config.auth.clientId,e.foci,void 0,s);return yield this.storage.setRefreshTokenCredential(a,i,o),a})}generateAuthenticationResult(e,t,n,i){let o="",s=[],a=null,c;t?.accessToken&&(o=t.accessToken.secret,s=Qe.fromString(t.accessToken.target).asArray(),a=st.toDateFromSeconds(t.accessToken.expiresOn),c=st.toDateFromSeconds(t.accessToken.extendedExpiresOn));let l=t.account;return{authority:n?n.canonicalAuthority:"",uniqueId:t.account.localAccountId,tenantId:t.account.realm,scopes:s,account:_e.getAccountInfo(l),idToken:t.idToken?.secret||"",idTokenClaims:i||{},accessToken:o,fromCache:!0,expiresOn:a,correlationId:e.correlationId||"",requestId:"",extExpiresOn:c,familyId:t.refreshToken?.familyId||"",tokenType:t?.accessToken?.tokenType||"",state:e.state||"",cloudGraphHostName:l.cloudGraphHostName||"",msGraphHost:l.msGraphHost||"",fromNativeBroker:!1}}};var Bl=class extends Gi{constructor(e){super(e),this.includeRedirectUri=!1}};var Hl=class extends Kt{constructor(e,t,n,i,o,s,a,c,l,p){super(e,t,n,i,o,s,c,l,p),this.apiId=a}acquireToken(e){return x(this,null,function*(){if(!e.code)throw G(Go);let t=yield H(this.initializeAuthorizationRequest.bind(this),w.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,e.correlationId)(e,J.Silent),n=this.initializeServerTelemetryManager(this.apiId);try{let i=re(q({},t),{code:e.code}),o=yield H(this.getClientConfiguration.bind(this),w.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,e.correlationId)({serverTelemetryManager:n,requestAuthority:t.authority,requestAzureCloudOptions:t.azureCloudOptions,requestExtraQueryParameters:t.extraQueryParameters,account:t.account}),s=new Bl(o);this.logger.verbose("Auth code client created");let a=new ds(s,this.browserStorage,i,this.logger,this.performanceClient);return yield H(a.handleCodeResponseFromServer.bind(a),w.HandleCodeResponseFromServer,this.logger,this.performanceClient,e.correlationId)({code:e.code,msgraph_host:e.msGraphHost,cloud_graph_host_name:e.cloudGraphHostName,cloud_instance_host_name:e.cloudInstanceHostName},t,this.apiId,!1)}catch(i){throw i instanceof ie&&(i.setCorrelationId(this.correlationId),n.cacheFailedRequest(i)),i}})}logout(){return Promise.reject(G(Hr))}};function zg(r,e,t){let n=window.msal?.clientIds||[],i=n.length,o=n.filter(s=>s===r).length;o>1&&t.warning("There is already an instance of MSAL.js in the window with the same client id."),e.add({msalInstanceCount:i,sameClientIdInstanceCount:o})}function Ll(r,e,t){try{Wa(r)}catch(n){throw e.end({success:!1},n,t),n}}

91var vs=class r{constructor(e){this.operatingContext=e,this.isBrowserEnvironment=this.operatingContext.isBrowserEnvironment(),this.config=e.getConfig(),this.initialized=!1,this.logger=this.operatingContext.getLogger(),this.networkClient=this.config.system.networkClient,this.navigationClient=this.config.system.navigationClient,this.redirectResponse=new Map,this.hybridAuthCodeResponses=new Map,this.performanceClient=this.config.telemetry.client,this.browserCrypto=this.isBrowserEnvironment?new as(this.logger,this.performanceClient):On,this.eventHandler=new bl(this.logger),this.browserStorage=this.isBrowserEnvironment?new us(this.config.auth.clientId,this.config.cache,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler,Vh(this.config.auth)):Eg(this.config.auth.clientId,this.logger,this.performanceClient,this.eventHandler);let t={cacheLocation:qe.MemoryStorage,cacheRetentionDays:5,temporaryCacheLocation:qe.MemoryStorage,storeAuthStateInCookie:!1,secureCookies:!1,cacheMigrationEnabled:!1,claimsBasedCachingEnabled:!1};this.nativeInternalStorage=new us(this.config.auth.clientId,t,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler),this.tokenCache=new Ml(this.config,this.browserStorage,this.logger,this.browserCrypto,this.performanceClient),this.activeSilentTokenRequests=new Map,this.trackStateChangeWithMeasurement=this.trackStateChangeWithMeasurement.bind(this)}static createController(e,t){return x(this,null,function*(){let n=new r(e);return yield n.initialize(t),n})}trackStateChange(e,t){e&&(t.type==="visibilitychange"?(this.logger.info("Perf: Visibility change detected"),this.performanceClient.incrementFields({visibilityChangeCount:1},e)):t.type==="online"?(this.logger.info("Perf: Online status change detected"),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)):t.type==="offline"&&(this.logger.info("Perf: Offline status change detected"),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)))}initialize(e,t){return x(this,null,function*(){if(this.logger.trace("initialize called"),this.initialized){this.logger.info("initialize has already been called, exiting early.");return}if(!this.isBrowserEnvironment){this.logger.info("in non-browser environment, exiting early."),this.initialized=!0,this.eventHandler.emitEvent(Y.INITIALIZE_END);return}let n=e?.correlationId||this.getRequestCorrelationId(),i=this.config.system.allowPlatformBroker,o=this.performanceClient.startMeasurement(w.InitializeClientApplication,n);if(this.eventHandler.emitEvent(Y.INITIALIZE_START),!t)try{this.logMultipleInstances(o)}catch{}if(yield H(this.browserStorage.initialize.bind(this.browserStorage),w.InitializeCache,this.logger,this.performanceClient,n)(n),i)try{this.platformAuthProvider=yield jg(this.logger,this.performanceClient,n,this.config.system.nativeBrokerHandshakeTimeout,this.config.system.allowPlatformBrokerWithDOM)}catch(s){this.logger.verbose(s)}this.config.cache.claimsBasedCachingEnabled||(this.logger.verbose("Claims-based caching is disabled. Clearing the previous cache with claims"),$e(this.browserStorage.clearTokensAndKeysWithClaims.bind(this.browserStorage),w.ClearTokensAndKeysWithClaims,this.logger,this.performanceClient,n)(n)),this.config.system.asyncPopups&&(yield this.preGeneratePkceCodes(n)),this.initialized=!0,this.eventHandler.emitEvent(Y.INITIALIZE_END),o.end({allowPlatformBroker:i,success:!0})})}handleRedirectPromise(e){return x(this,null,function*(){if(this.logger.verbose("handleRedirectPromise called"),fl(this.initialized),this.isBrowserEnvironment){let t=e||"",n=this.redirectResponse.get(t);return typeof n>"u"?(n=this.handleRedirectPromiseInternal(e),this.redirectResponse.set(t,n),this.logger.verbose("handleRedirectPromise has been called for the first time, storing the promise")):this.logger.verbose("handleRedirectPromise has been called previously, returning the result from the first call"),n}return this.logger.verbose("handleRedirectPromise returns null, not browser environment"),null})}handleRedirectPromiseInternal(e){return x(this,null,function*(){if(!this.browserStorage.isInteractionInProgress(!0))return this.logger.info("handleRedirectPromise called but there is no interaction in progress, returning null."),null;if(this.browserStorage.getInteractionInProgress()?.type===Cr.SIGNOUT)return this.logger.verbose("handleRedirectPromise remov

91ing interaction_in_progress flag and returning null after sign-out"),this.browserStorage.setInteractionInProgress(!1),Promise.resolve(null);let n=this.getAllAccounts(),i=this.browserStorage.getCachedNativeRequest(),o=i&&this.platformAuthProvider&&!e,s;this.eventHandler.emitEvent(Y.HANDLE_REDIRECT_START,J.Redirect);let a;try{if(o&&this.platformAuthProvider){s=this.performanceClient.startMeasurement(w.AcquireTokenRedirect,i?.correlationId||""),this.logger.trace("handleRedirectPromise - acquiring token from native platform"),s.add({isPlatformBrokerRequest:!0});let c=new Jn(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,he.handleRedirectPromise,this.performanceClient,this.platformAuthProvider,i.accountId,this.nativeInternalStorage,i.correlationId);a=H(c.handleRedirectPromise.bind(c),w.HandleNativeRedirectPromiseMeasurement,this.logger,this.performanceClient,s.event.correlationId)(this.performanceClient,s.event.correlationId)}else{let[c,l]=this.browserStorage.getCachedRequest(),p=c.correlationId;s=this.performanceClient.startMeasurement(w.AcquireTokenRedirect,p),this.logger.trace("handleRedirectPromise - acquiring token from web flow");let g=this.createRedirectClient(p);a=H(g.handleRedirectPromise.bind(g),w.HandleRedirectPromiseMeasurement,this.logger,this.performanceClient,s.event.correlationId)(e,c,l,s)}}catch(c){throw this.browserStorage.resetRequestCache(),c}return a.then(c=>(c?(this.browserStorage.resetRequestCache(),n.length<this.getAllAccounts().length?(this.eventHandler.emitEvent(Y.LOGIN_SUCCESS,J.Redirect,c),this.logger.verbose("handleRedirectResponse returned result, login success")):(this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_SUCCESS,J.Redirect,c),this.logger.verbose("handleRedirectResponse returned result, acquire token success")),s.end({success:!0},void 0,c.account),this.verifySsoCapability(c.account,J.Redirect)):s.event.errorCode?s.end({success:!1},void 0):s.discard(),this.eventHandler.emitEvent(Y.HANDLE_REDIRECT_END,J.Redirect),c)).c

91atch(c=>{this.browserStorage.resetRequestCache();let l=c;throw n.length>0?this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_FAILURE,J.Redirect,null,l):this.eventHandler.emitEvent(Y.LOGIN_FAILURE,J.Redirect,null,l),this.eventHandler.emitEvent(Y.HANDLE_REDIRECT_END,J.Redirect),s.end({success:!1},l),c})})}acquireTokenRedirect(e){return x(this,null,function*(){let t=this.getRequestCorrelationId(e);this.logger.verbose("acquireTokenRedirect called",t);let n=this.performanceClient.startMeasurement(w.AcquireTokenPreRedirect,t);n.add({scenarioId:e.scenarioId});let i=e.onRedirectNavigate;if(i)e.onRedirectNavigate=s=>{let a=typeof i=="function"?i(s):void 0;return n.add({navigateCallbackResult:a!==!1}),n.event=n.end({success:!0},void 0,e.account)||n.event,a};else{let s=this.config.auth.onRedirectNavigate;this.config.auth.onRedirectNavigate=a=>{let c=typeof s=="function"?s(a):void 0;return n.add({navigateCallbackResult:c!==!1}),n.event=n.end({success:!0},void 0,e.account)||n.event,c}}let o=this.getAllAccounts().length>0;try{pl(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,Cr.SIGNIN),o?this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_START,J.Redirect,e):this.eventHandler.emitEvent(Y.LOGIN_START,J.Redirect,e);let s;return this.platformAuthProvider&&this.canUsePlatformBroker(e)?s=new Jn(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,he.acquireTokenRedirect,this.performanceClient,this.platformAuthProvider,this.getNativeAccountId(e),this.nativeInternalStorage,t).acquireTokenRedirect(e,n).catch(c=>{if(n.add({brokerErrorName:c.name,brokerErrorCode:c.errorCode}),c instanceof ir&&Yn(c))return this.platformAuthProvider=void 0,this.createRedirectClient(t).acquireToken(e);if(c instanceof gt)return this.logger.verbose("acquireTokenRedirect - Resolving interaction required error thrown by native broker by falling back to web flow"),this.createRedirectClient(t).acquireToken(e);throw c}):s=this.createRedirectClient(t).acquireToken(e),yield s}catch(s){throw this.browserStorage.resetRequestCache(),n.event.status===2?this.performanceClient.startMeasurement(w.AcquireTokenRedirect,t).end({success:!1},s,e.account):n.end({success:!1},s,e.account),o?this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_FAILURE,J.Redirect,null,s):this.eventHandler.emitEvent(Y.LOGIN_FAILURE,J.Redirect,null,s),s}})}acquireTokenPopup(e){let t=this.getRequestCorrelationId(e),n=this.performanceClient.startMeasurement(w.AcquireTokenPopup,t);n.add({scenarioId:e.scenarioId});try{this.logger.verbose("acquireTokenPopup called",t),Ll(this.initialized,n,e.account),this.browserStorage.setInteractionInProgress(!0,Cr.SIGNIN)}catch(a){return Promise.reject(a)}let i=this.getAllAccounts();i.length>0?this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_START,J.Popup,e):this.eventHandler.emitEvent(Y.LOGIN_START,J.Popup,e);let o,s=this.getPreGeneratedPkceCodes(t);return this.canUsePlatformBroker(e)?(n.add({isPlatformBrokerRequest:!0}),o=this.acquireTokenNative(re(q({},e),{correlationId:t}),he.acquireTokenPopup).then(a=>(n.end({success:!0},void 0,a.account),a)).catch(a=>{if(n.add({brokerErrorName:a.name,brokerErrorCode:a.errorCode}),a instanceof ir&&Yn(a))return this.platformAuthProvider=void 0,this.createPopupClient(t).acquireToken(e,s);if(a instanceof gt)return this.logger.verbose("acquireTokenPopup - Resolving interaction required error thrown by native broker by falling back to web flow"),this.createPopupClient(t).acquireToken(e,s);throw a})):o=this.createPopupClient(t).acquireToken(e,s),o.then(a=>(i.length<this.getAllAccounts().length?this.eventHandler.emitEvent(Y.LOGIN_SUCCESS,J.Popup,a):this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_SUCCESS,J.Popup,a),n.end({success:!0,accessTokenSize:a.accessToken.length,idTokenSize:a.idToken.length},void 0,a.account),this.verifySsoCapability(a.account,J.Popup),a)).catch(a=>(i.length>0?this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_FAILURE,J.Popup,null,a):this.eventHandler.emitEvent(Y.LOGIN_FAILURE,J.Popup,null,a),n.end({success:!1},a,e.account),Promise.reject(a))).finally(()=>x(this,null,function*(){this.browserStorage.setInteractionInProgress(!1),this.config.system.asyncPopups&&(yield this.preGeneratePkceCodes(t))}))}trackStateChangeWithMeasurement(e){let t=this.ssoSilentMeasurement||this.acquireTokenByCodeAsyncMeasurement;t&&(e.type==="visibilitychange"?(this.logger.info("Perf: Visibility change detected in ",t.event.name),t.increment({visibilityChangeCount:1})):e.type==="online"?(this.logger.info("Perf: Online status change detected in ",t.event.name),t.increment({onlineStatusChangeCount:1})):e.type==="offline"&&(this.logger.info("Perf: Offline status change detected in ",t.event.name),t.increment({onlineStatusChangeCount:1})))}addStateChangeListeners(e){document.addEventListener("visibilitychange",e),window.addEventListener("online",e),window.addEventListener("offline",e)}removeStateChangeListeners(e){document.removeEventListener("visibilitychange",e),window.removeEventListener("online",e),window.removeEventListener("offline",e)}verifySsoCapability(e,t){if(!this.config.auth.verifySSO)return;let n=this.browserCrypto.createNewGuid(),i=this.performanceClient.startMeasurement(w.SsoCapable,n);i.add({parentApi:t}),this.logger.verbose(`SSO capability verification initiated after ${t}`,n),setTimeout(()=>{let o={account:e,correlationId:n};this.createSilentIframeClient(n).verifySso(o).then(a=>{this.logger.verbose(`SSO capability verification completed after ${t}, success: ${a}`,n),i.end({fromCache:!1,success:a},void 0,e)}).catch(a=>{this.logger.warning(`SSO capability verification failed after ${t}: ${a.message}`,n),i.end({fromCache:!1,success:!1},a,e)})},0)}ssoSilent(e){return x(this,null,function*(){let t=this.getRequestCorrelationId(e),n=re(q({},e),{prompt:e.prompt,correlationId:t});this.ssoSilentMeasurement=this.performanceClient.startMeasurement(w.SsoSilent,t),this.ssoSilentMeasurement?.add({scenarioId:e.scenarioId}),Ll(this.initialized,this.ssoSilentMeasurement,e.account),this.ssoSilentMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement),this.logger.verbose("ssoSilent called",t),this.eventHandler.emitEvent(Y.SSO_SILENT_START,J.Silent,n);let i;return this.canUsePlatformBroker(n)?(this.ssoSilentMeasurement?.add({isPlatformBrokerRequest:!0}),i=this.acquireTokenNative(n,he.ssoSilent).catch(o=>{if(this.ssoSilentMeasurement?.add({brokerErrorName:o.name,brokerErrorCode:o.errorCode}),o instanceof ir&&Yn(o))return this.platformAuthProvider=void 0,this.createSilentIframeClient(n.correlationId).acquireToken(n);throw o})):i=this.createSilentIframeClient(n.correlationId).acquireToken(n),i.then(o=>(this.eventHandler.emitEvent(Y.SSO_SILENT_SUCCESS,J.Silent,o),this.ssoSilentMeasurement?.end({success:!0,accessTokenSize:o.accessToken.length,idTokenSize:o.idToken.length},void 0,o.account),o)).catch(o=>{throw this.eventHandler.emitEvent(Y.SSO_SILENT_FAILURE,J.Silent,null,o),this.ssoSilentMeasurement?.end({success:!1},o,e.account),o}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})})}acquireTokenByCode(e){return x(this,null,function*(){let t=this.getRequestCorrelationId(e);this.logger.trace("acquireTokenByCode called",t);let n=this.performanceClient.startMeasurement(w.AcquireTokenByCode,t);Ll(this.initialized,n),this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_BY_CODE_START,J.Silent,e),n.add({scenarioId:e.scenarioId});try{if(e.code&&e.nativeAccountId)throw G($o);if(e.code){let i=e.code,o=this.hybridAuthCodeResponses.get(i);return o?(this.logger.verbose("Existing acquireTokenByCode request found",t),n.discard()):(this.logger.verbose("Initiating new acquireTokenByCode request",t),o=this.acquireTokenByCodeAsync(re(q({},e),{correlationId:t})).then(s=>(this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_BY_CODE_SUCCESS,J.Silent,s),this.hybridAuthCodeResponses.delete(i),n.end({success:!0,accessTokenSize:s.accessToken.length,idTokenSize:s.idToken.length},void 0,s.account),s)).catch(s=>{throw this.hybridAuthCodeResponses.delete(i),this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_BY_CODE_FAILURE,J.Silent,null,s),n.end({success:!1},s),s}),this.hybridAuthCodeResponses.set(i,o)),yield o}else if(e.nativeAccountId)if(this.canUsePlatformBroker(e,e.nativeAccountId)){n.add({isPlatformBrokerRequest:!0});let i=yield this.acquireTokenNative(re(q({},e),{correlationId:t}),he.acquireTokenByCode,e.nativeAccountId).catch(o=>{throw o instanceof ir&&Yn(o)&&(this.platformAuthProvider=void 0),n.add({brokerErrorName:o.name,brokerErrorCode:o.errorCode}),o});return n.end({success:!0},void 0,i.account),i}else throw G(Wo);else throw G(zo)}catch(i){throw this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_BY_CODE_FAILURE,J.Silent,null,i),n.end({success:!1},i),i}})}acquireTokenByCodeAsync(e){return x(this,null,function*(){return this.logger.trace("acquireTokenByCodeAsync called",e.correlationId),this.acquireTokenByCodeAsyncMeasurement=this.performanceClient.startMeasurement(w.AcquireTokenByCodeAsync,e.correlationId),this.acquireTokenByCodeAsyncMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement),yield this.createSilentAuthCodeClient(e.correlationId).acquireToken(e).then(i=>(this.acquireTokenByCodeAsyncMeasurement?.end({success:!0,fromCache:i.fromCache}),i)).catch(i=>{throw this.acquireTokenByCodeAsyncMeasurement?.end({success:!1},i),i}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})})}acquireTokenFromCache(e,t){return x(this,null,function*(){switch(this.performanceClient.addQueueMeasurement(w.AcquireTokenFromCache,e.correlationId),t){case mt.Default:case mt.AccessToken:case mt.AccessTokenAndRefreshToken:let n=this.createSilentCacheClient(e.correlationId);return H(n.acquireToken.bind(n),w.SilentCacheClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e);default:throw K(ht.tokenRefreshRequired)}})}acquireTokenByRefreshToken(e,t){return x(this,null,function*(){switch(this.performanceClient.addQueueMeasurement(w.AcquireTokenByRefreshToken,e.correlationId),t){case mt.Default:case mt.AccessTokenAndRefreshToken:case mt.RefreshToken:case mt.RefreshTokenAndNetwork:let n=this.createSilentRefreshClient(e.correlationId);return H(n.acquireToken.bind(n),w.SilentRefreshClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e);default:throw K(ht.tokenRefreshRequired)}})}acquireTokenBySilentIframe(e){return x(this,null,function*(){this.performanceClient.addQueueMeasurement(w.AcquireTokenBySilentIframe,e.correlationId);let t=this.createSilentIframeClient(e.correlationId);return H(t.acquireToken.bind(t),w.SilentIframeClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e)})}logout(e){return x(this,null,function*(){let t=this.getRequestCorrelationId(e);return this.logger.warning("logout API is deprecated and will be removed in msal-browser v3.0.0. Use logoutRedirect instead.",t),this.logoutRedirect(q({correlationId:t},e))})}logoutRedirect(e){return x(this,null,function*(){let t=this.getRequestCorrelationId(e);return pl(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,Cr.SIGNOUT),this.createRedirectClient(t).logout(e)})}logoutPopup(e){try{let t=this.getRequestCorrelationId(e);return Wa(this.initialized),this.browserStorage.setInteractionInProgress(!0,Cr.SIGNOUT),this.createPopupClient(t).logout(e).finally(()=>{this.browserStorage.setInteractionInProgress(!1)})}catch(t){return Promise.reject(t)}}clearCache(e){return x(this,null,function*(){if(!this.isBrowserEnvironment){this.logger.info("in non-browser environment, returning early.");return}let t=this.getRequestCorrelationId(e);return this.createSilentCacheClient(t).logout(e)})}getAllAccounts(e){let t=this.getRequestCorrelationId();return Ag(this.logger,this.browserStorage,this.isBrowserEnvironment,t,e)}getAccount(e){let t=this.getRequestCorrelationId();return wg(e,this.logger,this.browserStorage,t)}getAccountByUsername(e){let t=this.getRequestCorrelationId();return Tg(e,this.logger,this.browserStorage,t)}getAccountByHomeId(e){let t=this.getRequestCorrelationId();return bg(e,this.logger,this.browserStorage,t)}getAccountByLocalId(e){let t=this.getRequestCorrelationId();return Ig(e,this.logger,this.browserStorage,t)}setActiveAccount(e){let t=this.getRequestCorrelationId();Rg(e,this.browserStorage,t)}getActiveAccount(){let e=this.getRequestCorrelationId();return Pg(this.browserStorage,e)}hydrateCache(e,t){return x(this,null,function*(){this.logger.verbose("hydrateCache called");let n=_e.createFromAccountInfo(e.account,e.cloudGraphHostName,e.msGraphHost);return yield this.browserStorage.setAccount(n,e.correlationId,ot.isKmsi(e.idTokenClaims),he.hydrateCache),e.fromNativeBroker?(this.logger.verbose("Response was from native broker, storing in-memory"),this.nativeInternalStorage.hydrateCache(e,t)):this.browserStorage.hydrateCache(e,t)})}acquireTokenNative(e,t,n,i){return x(this,null,function*(){if(this.logger.trace("acquireTokenNative called"),!this.platformAuthProvider)throw G(zn);return new Jn(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,t,this.performanceClient,this.platformAuthProvider,n||this.getNativeAccountId(e),this.nativeInternalStorage,e.correlationId).acquireToken(e,i)})}canUsePlatformBroker(e,t){if(this.logger.trace("canUsePlatformBroker called"),!this.platformAuthProvider)return this.logger.trace("canUsePlatformBroker: platform broker unavilable, returning false"),!1;if(!yn(this.config,this.logger,this.platformAuthProvider,e.authenticationScheme))return this.logger.trace("canUsePlatformBroker: isBrokerAvailable returned false, returning false"),!1;if(e.prompt)switch(e.prompt){case ze.NONE:case ze.CONSENT:case ze.LOGIN:case ze.SELECT_ACCOUNT:this.logger.trace("canUsePlatformBroker: prompt is compatible with platform broker flow");break;default:return this.logger.trace(`canUsePlatformBroker: prompt = ${e.prompt} is not compatible with platform broker flow, returning false`),!1}return!t&&!this.getNativeAccountId(e)?(this.logger.trace("canUsePlatformBroker: nativeAccountId is not available, returning false"),!1):!0}

91getNativeAccountId(e){let t=e.account||this.getAccount({loginHint:e.loginHint,sid:e.sid})||this.getActiveAccount();return t&&t.nativeAccountId||""}createPopupClient(e){return new xl(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,this.platformAuthProvider,e)}createRedirectClient(e){return new _l(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,this.platformAuthProvider,e)}createSilentIframeClient(e){return new Ol(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,he.ssoSilent,this.performanceClient,this.nativeInternalStorage,this.platformAuthProvider,e)}createSilentCacheClient(e){return new fs(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.platformAuthProvider,e)}createSilentRefreshClient(e){return new Dl(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.platformAuthProvider,e)}createSilentAuthCodeClient(e){return new Hl(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,he.acquireTokenByCode,this.performanceClient,this.platformAuthProvider,e)}addEventCallback(e,t){return this.eventHandler.addEventCallback(e,t)}removeEventCallback(e){this.eventHandler.removeEventCallback(e)}addPerformanceCallback(e){return dl(),this.performanceClient.addPerformanceCallback(e)}removePerformanceCallback(e){return this.performanceClient.removePerformanceCallback(e)}enableAccountStorageEvents(){if(this.config.cache.cacheLocation!==qe.LocalStorage){this.logger.info("Account storage events are only available when cacheLocation is set to localStorage");return}this.eventHandler.subscribeCrossTab()}disableAccountStorageEvents(){if(this.config.cache.cacheLocation!==qe.LocalStorage){this.logger.info("Account storage events are only available when cacheLocation is set to localStorage");return}this.eventHandler.unsubscribeCrossTab()}getTokenCache(){return this.tokenCache}getLogger(){return this.logger}setLogger(e){this.logger=e}initializeWrapperLibrary(e,t){this.browserStorage.setWrapperMetadata(e,t)}setNavigationClient(e){this.navigationClient=e}getConfiguration(){return this.config}getPerformanceClient(){return this.performanceClient}isBrowserEnv(){return this.isBrowserEnvironment}getRequestCorrelationId(e){return e?.correlationId?e.correlationId:this.isBrowserEnvironment?vt():L.EMPTY_STRING}loginRedirect(e){return x(this,null,function*(){let t=this.getRequestCorrelationId(e);return this.logger.verbose("loginRedirect called",t),this.acquireTokenRedirect(q({correlationId:t},e||Zh))})}loginPopup(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose("loginPopup called",t),this.acquireTokenPopup(q({correlationId:t},e||Zh))}acquireTokenSilent(e){return x(this,null,function*(){let t=this.getRequestCorrelationId(e),n=this.performanceClient.startMeasurement(w.AcquireTokenSilent,t);n.add({cacheLookupPolicy:e.cacheLookupPolicy,scenarioId:e.scenarioId}),Ll(this.initialized,n,e.account),this.logger.verbose("acquireTokenSilent called",t);let i=e.account||this.getActiveAccount();if(!i)throw G(Lo);return this.acquireTokenSilentDeduped(e,i,t).then(o=>(n.end({success:!0,fromCache:o.fromCache,accessTokenSize:o.accessToken.length,idTokenSize:o.idToken.length},void 0,o.account),re(q({},o),{state:e.state,correlationId:t}))).catch(o=>{throw o instanceof ie&&o.setCorrelationId(t),n.end({success:!1},o,i),o})})}acquireTokenSilentDeduped(e,t,n){return x(this,null,function*(){let i=ln(this.config.auth.clientId,re(q({},e),{authority:e.authority||this.config.auth.authority,correlationId:n}),t.homeAccountId),o=JSON.stringify(i),s=this.activeSilentTokenRequests.get(o);if(typeof s>"u"){this.logger.verbose("acquireTokenSilent called for the first time, storing active request",n),this.performanceClient.addFields({deduped:!1},n);let a=H(this.acquireTokenSilentAsync.bind(this),w.AcquireTokenSilentAsync,this.logger,this.performanceClient,n)(re(q({},e),{correlationId:n}),t);return this.activeSilentTokenRequests.set(o,a),a.finally(()=>{this.activeSilentTokenRequests.delete(o)})}else return this.logger.verbose("acquireTokenSilent has been called previously, returning the result from the first call",n),this.performanceClient.addFields({deduped:!0},n),s})}acquireTokenSilentAsync(e,t){return x(this,null,function*(){let n=a=>this.trackStateChange(e.correlationId,a);this.performanceClient.addQueueMeasurement(w.AcquireTokenSilentAsync,e.correlationId),this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_START,J.Silent,e),e.correlationId&&this.performanceClient.incrementFields({visibilityChangeCount:0,onlineStatusChangeCount:0},e.correlationId),this.addStateChangeListeners(n);let i=yield H(kg,w.InitializeSilentRequest,this.logger,this.performanceClient,e.correlationId)(e,t,this.config,this.performanceClient,this.logger),o=e.cacheLookupPolicy||mt.Default;return this.acquireTokenSilentNoIframe(i,o).catch(a=>x(this,null,function*(){if(t0(a,o)){let l=`${a.errorCode}${a.subError?`|${a.subError}`:""}`;if(this.performanceClient.addFields({silentRefreshReason:l},i.correlationId),this.activeIframeRequest)if(o!==mt.Skip){let[p,g]=this.activeIframeRequest;this.logger.verbose(`Iframe request is already in progress, awaiting resolution for request with correlationId: ${g}`,i.correlationId);let h=this.performanceClient.startMeasurement(w.AwaitConcurrentIframe,i.correlationId);h.add({awaitIframeCorrelationId:g});let d=yield p;if(h.end({success:d}),d)return this.logger.verbose(`Parallel iframe request with correlationId: ${g}

91 succeeded. Retrying cache and/or RT redemption`,i.correlationId),this.acquireTokenSilentNoIframe(i,o);throw this.logger.info(`Iframe request with correlationId: ${g} failed. Interaction is required.`),a}else return this.logger.warning("Another iframe request is currently in progress and CacheLookupPolicy is set to Skip. This may result in degraded performance and/or reliability for both calls. Please consider changing the CacheLookupPolicy to take advantage of request queuing and token cache.",i.correlationId),H(this.acquireTokenBySilentIframe.bind(this),w.AcquireTokenBySilentIframe,this.logger,this.performanceClient,i.correlationId)(i);else{let p;return this.activeIframeRequest=[new Promise(g=>{p=g}),i.correlationId],this.logger.verbose("Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.",i.correlationId),H(this.acquireTokenBySilentIframe.bind(this),w.AcquireTokenBySilentIframe,this.logger,this.performanceClient,i.correlationId)(i).then(g=>(p(!0),g)).catch(g=>{throw p(!1),g}).finally(()=>{this.activeIframeRequest=void 0})}}else throw a})).then(a=>(this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_SUCCESS,J.Silent,a),this.performanceClient.addFields({fromCache:a.fromCache},e.correlationId),a)).catch(a=>{throw this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_FAILURE,J.Silent,null,a),a}).finally(()=>{this.removeStateChangeListeners(n)})})}acquireTokenSilentNoIframe(e,t){return x(this,null,function*(){return yn(this.config,this.logger,this.platformAuthProvider,e.authenticationScheme)&&e.account.nativeAccountId?(this.logger.verbose("acquireTokenSilent - attempting to acquire token from native platform"),this.performanceClient.addFields({isPlatformBrokerRequest:!0},e.correlationId),this.acquireTokenNative(e,he.acquireTokenSilent_silentFlow,e.account.nativeAccountId,t).catch(n=>x(this,null,function*(){throw this.performanceClient.addFields({brokerErrorName:n.name,brokerErrorCode:n.errorCode},e.correlationId),n instanceof ir&&Yn(n)?(this.logger.verbose("acquireTokenSilent - native platform unavailable, falling back to web flow"),this.platformAuthProvider=void 0,K(ht.tokenRefreshRequired)):n}))):(this.logger.verbose("acquireTokenSilent - attempting to acquire token from web flow"),t===mt.AccessToken&&this.logger.verbose("acquireTokenSilent - cache lookup policy set to AccessToken, attempting to acquire token from local cache"),H(this.acquireTokenFromCache.bind(this),w.AcquireTokenFromCache,this.logger,this.performanceClient,e.correlationId)(e,t).catch(n=>{if(t===mt.AccessToken)throw n;return this.eventHandler.emitEvent(Y.ACQUIRE_TOKEN_NETWORK_START,J.Silent,e),H(this.acquireTokenByRefreshToken.bind(this),w.AcquireTokenByRefreshToken,this.logger,this.performanceClient,e.correlationId)(e,t)}))})}preGeneratePkceCodes(e){return x(this,null,function*(){return this.logger.verbose("Generating new PKCE codes"),this.pkceCode=yield H(or,w.GeneratePkceCodes,this.logger,this.performanceClient,e)(this.performanceClient,this.logger,e),Promise.resolve()})}getPreGeneratedPkceCodes(e){this.logger.verbose("Attempting to pick up pre-generated PKCE codes");let t=this.pkceCode?q({},this.pkceCode):void 0;return this.pkceCode=void 0,this.logger.verbose(`${t?"Found":"Did not find"} pre-generated PKCE codes`),this.performanceClient.addFields({usePreGeneratedPkce:!!t},e),t}logMultipleInstances(e){let t=this.config.auth.clientId;if(!window)return;window.msal=window.msal||{},window.msal.clientIds=window.msal.clientIds||[],window.msal.clientIds.length>0&&this.logger.verbose("There is already an instance of MSAL.js in the window."),window.msal.clientIds.push(t),zg(t,e,this.logger)}};function t0(r,e){let t=!(r instanceof gt&&r.subError!==Mr.badToken),n=r.errorCode===Je.INVALID_GRANT_ERROR||r.errorCode===ht.tokenRefreshRequired,i=t&&n||r.errorCode===Mr.noTokensFound||r.errorCode===Mr.refreshTokenExpired,o=Gp.includes(e);return i&&o}function $g(r,e){return x(this,null,function*(){let t=new Cl(r);return yield t.initialize(),vs.createController(t,e)})}var Xa=class r{static createPublicClientApplication(e){return x(this,null,function*(){let t=yield $g(e);return new r(e,t)})}constructor(e,t){this.isBroker=!1,this.controller=t||new vs(new Cl(e))}initialize(e){return x(this,null,function*(){return this.controller.initialize(e,this.isBroker)})}acquireTokenPopup(e){return x(this,null,function*(){return this.controller.acquireTokenPopup(e)})}acquireTokenRedirect(e){return this.controller.acquireTokenRedirect(e)}acquireTokenSilent(e){return this.controller.acquireTokenSilent(e)}

91acquireTokenByCode(e){return this.controller.acquireTokenByCode(e)}addEventCallback(e,t){return this.controller.addEventCallback(e,t)}removeEventCallback(e){return this.controller.removeEventCallback(e)}addPerformanceCallback(e){return this.controller.addPerformanceCallback(e)}removePerformanceCallback(e){return this.controller.removePerformanceCallback(e)}enableAccountStorageEvents(){this.controller.enableAccountStorageEvents()}disableAccountStorageEvents(){this.controller.disableAccountStorageEvents()}getAccount(e){return this.controller.getAccount(e)}getAccountByHomeId(e){return this.controller.getAccountByHomeId(e)}getAccountByLocalId(e){return this.controller.getAccountByLocalId(e)}getAccountByUsername(e){return this.controller.getAccountByUsername(e)}getAllAccounts(e){return this.controller.getAllAccounts(e)}handleRedirectPromise(e){return this.controller.handleRedirectPromise(e)}loginPopup(e){return this.controller.loginPopup(e)}loginRedirect(e){return this.controller.loginRedirect(e)}logout(e){return this.controller.logout(e)}logoutRedirect(e){return this.controller.logoutRedirect(e)}logoutPopup(e){return this.controller.logoutPopup(e)}ssoSilent(e){return this.controller.ssoSilent(e)}getTokenCache(){return this.controller.getTokenCache()}getLogger(){return this.controller.getLogger()}setLogger(e){this.controller.setLogger(e)}setActiveAccount(e){this.controller.setActiveAccount(e)}getActiveAccount(){return this.controller.getActiveAccount()}initializeWrapperLibrary(e,t){return this.controller.initializeWrapperLibrary(e,t)}setNavigationClient(e){this.controller.setNavigationClient(e)}getConfiguration(){return this.controller.getConfiguration()}hydrateCache(e,t){return x(this,null,function*(){return this.controller.hydrateCache(e,t)})}clearCache(e){return this.controller.clearCache(e)}};var Za=class{static getInteractionStatusFromEvent(e,t){switch(e.eventType){case Y.LOGIN_START:return tt.Login;case Y.SSO_SILENT_START:return tt.SsoSilent;case Y.ACQUIRE_TOKEN_START:if(e.interactionType===J.Redirect||e.interactionType===J.Popup)return tt.AcquireToken;break;case Y.HANDLE_REDIRECT_START:return tt.HandleRedirect;case Y.LOGOUT_START:return tt.Logout;case Y.SSO_SILENT_SUCCESS:case Y.SSO_SILENT_FAILURE:if(t&&t!==tt.SsoSilent)break;return tt.None;case Y.LOGOUT_END:if(t&&t!==tt.Logout)break;return tt.None;case Y.HANDLE_REDIRECT_END:if(t&&t!==tt.HandleRedirect)break;return tt.None;case Y.LOGIN_SUCCESS:case Y.LOGIN_FAILURE:case Y.ACQUIRE_TOKEN_SUCCESS:case Y.ACQUIRE_TOKEN_FAILURE:case Y.RESTORE_FROM_BFCACHE:if(e.interactionType===J.Redirect||e.interactionType===J.Popup){if(t&&t!==tt.Login&&t!==tt.AcquireToken)break;return tt.None}break}return null}};var Ul="@azure/msal-angular",ec="4.1.1",Kl=new Os("MSAL_INSTANCE"),to=new Os("MSAL_GUARD_CONFIG"),Wg=new Os("MSAL_INTERCEPTOR_CONFIG"),i0=new Os("MSAL_BROADCAST_CONFIG"),ys=(()=>{class r{constructor(t,n){this.msalInstance=t,this.msalBroadcastConfig=n,this.msalBroadcastConfig&&this.msalBroadcastConfig.eventsToReplay>0?(this.msalInstance.getLogger().clone(Ul,ec).verbose(`BroadcastService - eventsToReplay set on BroadcastConfig, replaying the last ${this.msalBroadcastConfig.eventsToReplay} events`),this._msalSubject=new Fs(this.msalBroadcastConfig.eventsToReplay)):this._msalSubject=new lo,this.msalSubject$=this._msalSubject.asObservable(),this._inProgress=new vf(tt.Startup),this.inProgress$=this._inProgress.asObservable(),this.msalInstance.addEventCallback(i=>{this._msalSubject.next(i);let o=Za.getInteractionStatusFromEvent(i,this._inProgress.value);o!==null&&(this.msalInstance.getLogger().clone(Ul,ec).verbose(`BroadcastService - ${i.eventType} results in setting inProgress from ${this._inProgress.value} to ${o}`),this._inProgress.next(o))})}resetInProgressEvent(){this._inProgress.value===tt.Startup&&this._inProgress.next(tt.None)}}return r.\u0275fac=function(t){return new(t||r)(ct(Kl),ct(i0,8))},r.\u0275prov=$t({token:r,factory:r.\u0275fac}),r})(),ro=(()=>{class r{constructor(t,n,i){this.instance=t,this.location=n,this.injector=i;let o=this.location.path(!0).split("#").pop();o&&(this.redirectHash=`#${o}`),this.instance.initializeWrapperLibrary(td.Angular,ec)}initialize(){return Et(this.instance.initialize())}acquireTokenPopup(t){return Et(this.instance.acquireTokenPopup(t))}acquireTokenRedirect(t){return Et(this.instance.acquireTokenRedirect(t))}acquireTokenSilent(t){return Et(this.instance.acquireTokenSilent(t))}handleRedirectObservable(t){return Et(this.instance.initialize().then(()=>this.instance.handleRedirectPromise(t||this.redirectHash)).finally(()=>{this.injector.get(ys).resetInProgressEvent()}))}loginPopup(t){return Et(this.instance.loginPopup(t))}loginRedirect(t){return Et(this.instance.loginRedirect(t))}logout(t){return Et(this.instance.logout(t))}logoutRedirect(t){return Et(this.instance.logoutRedirect(t))}logoutPopup(t){return Et(this.instance.logoutPopup(t))}ssoSilent(t){return Et(this.instance.ssoSilent(t))}getLogger(){return this.logger||(this.logger=this.instance.getLogger().clone(Ul,ec)),this.logger}setLogger(t){this.logger=t.clone(Ul,ec),this.instance.setLogger(t)}}return r.\u0275fac=function(t){return new(t||r)(ct(Kl),ct(Ds),ct(bf))},r.\u0275prov=$t({token:r,factory:r.\u0275fac}),r})(),Ce=(()=>

91{class r{constructor(t,n,i,o,s){this.msalGuardConfig=t,this.msalBroadcastService=n,this.authService=i,this.location=o,this.router=s,this.msalBroadcastService.inProgress$.subscribe()}parseUrl(t){return this.router.parseUrl(t)}getDestinationUrl(t){this.authService.getLogger().verbose("Guard - getting destination url");let n=document.getElementsByTagName("base"),i=this.location.normalize(n.length?n[0].href:window.location.origin),o=this.location.prepareExternalUrl(t);return o.startsWith("#")?(this.authService.getLogger().verbose("Guard - destination by hash routing"),`${i}/${o}`):`${i}${t}`}loginInteractively(t){let n=typeof this.msalGuardConfig.authRequest=="function"?this.msalGuardConfig.authRequest(this.authService,t):q({},this.msalGuardConfig.authRequest);if(this.msalGuardConfig.interactionType===J.Popup)return this.authService.getLogger().verbose("Guard - logging in by popup"),this.authService.loginPopup(n).pipe(At(o=>(this.authService.getLogger().verbose("Guard - login by popup successful, can activate, setting active account"),this.authService.instance.setActiveAccount(o.account),!0)));this.authService.getLogger().verbose("Guard - logging in by redirect");let i=this.getDestinationUrl(t.url);return this.authService.loginRedirect(q({redirectStartPage:i},n)).pipe(At(()=>!1))}activateHelper(t){if(this.msalGuardConfig.interactionType!==J.Popup&&this.msalGuardConfig.interactionType!==J.Redirect)throw new os("invalid_interaction_type","Invalid interaction type provided to MSAL Guard. InteractionType.Popup or InteractionType.Redirect must be provided in the MsalGuardConfiguration");if(this.authService.getLogger().verbose("MSAL Guard activated"),typeof window<"u"){if(ue.hashContainsKnownProperties(window.location.hash)&&gl.isInIframe()&&!this.authService.instance.getConfiguration().system.allowRedirectInIframe)return this.authService.getLogger().warning("Guard - redirectUri set to page with MSAL Guard. It is recommended to not set redirectUri to a page that requires authentication."),Me(!1)}else return this.authService.getLogger().info("Guard - window is undefined, MSAL does not support server-side token acquisition"),Me(!0);this.msalGuardConfig.loginFailedRoute&&(this.loginFailedRoute=this.parseUrl(this.msalGuardConfig.loginFailedRoute));let n=this.location.path(!0);return this.authService.initialize().pipe(Pu(()=>this.authService.handleRedirectObservable()),Pu(()=>{if(!this.authService.instance.getAllAccounts().length)return t?(this.authService.getLogger().verbose("Guard - no accounts retrieved, log in required to activate"),this.loginInteractively(t)):(this.authService.getLogger().verbose("Guard - no accounts retrieved, no state, cannot load"),Me(!1));if(this.authService.getLogger().verbose("Guard - at least 1 account exists, can activate or load"),t){let i=this.includesCode(t.url),o=!!t.root&&!!t.root.fragment&&this.includesCode(`#${t.root.fragment}`),s=this.location.prepareExternalUrl(t.url).indexOf("#")===0;if(i&&(o||s))return this.authService.getLogger().info("Guard - Hash contains known code response, stopping navigation."),n.indexOf("#")>-1?Me(this.parseUrl(this.location.path())):Me(this.parseUrl(""))}return Me(!0)}),Bt(i=>(this.authService.getLogger().error("Guard - error while logging in, unable to activate"),this.authService.getLogger().errorPii(`Guard - error: ${i.message}`),this.loginFailedRoute&&t?(this.authService.getLogger().verbose("Guard - loginFailedRoute set, redirecting"),Me(this.loginFailedRoute)):Me(!1))))}includesCode(t){return t.lastIndexOf("/code")>-1&&t.lastIndexOf("/code")===t.length-5||t.indexOf("#code=")>-1||t.indexOf("&code=")>-1}canActivate(t,n){return this.authService.getLogger().verbose("Guard - canActivate"),this.activateHelper(n)}canActivateChild(t,n){return this.authService.getLogger().verbose("Guard - canActivateChild"),this.activateHelper(n)}canMatch(){return this.authService.getLogger().verbose("Guard - canLoad"),this.activateHelper()}}return r.\u0275fac=function(t){return new(t||r)(ct(to),ct(ys),ct(ro),ct(Ds),ct(In))},r.\u0275prov=$t({token:r,factory:r.\u0275fac}),r})();var X=(r,e)=>{let t=Ee(ip),n=r.data.contentType;t.setContentType(n);let i=r.paramMap.get("slug")??r.data.slug??null;t.setSlug(i);let o=r.data.preview?r.data.preview:!1;return t.setPreview(o),!0};var Xn={issuer:De.authConfig.issuer,clientId:De.authConfig.clientId,responseType:De.authConfig.responseType,tokenEndpoint:De.authConfig.tokenEndpoint,loginUrl:De.authConfig.loginUrl,redirectUri:De.authConfig.redirectUri,scope:De.authConfig.scope,jwks:De.authConfig.jwks,preserveRequestedRoute:!0};var sc=kv(ym(),1);var tu=class extends sp{constructor(){super(...arguments),this.allowedAlgorithms=["HS256","HS384","HS512","RS256","RS384","RS512","ES256","ES384","PS256","PS384","PS512"],this.gracePeriodInSec=600}

91validateSignature(e,t=!1){if(!e.idToken)throw new Error("Parameter idToken expected!");if(!e.idTokenHeader)throw new Error("Parameter idTokenHandler expected.");if(!e.jwks)throw new Error("Parameter jwks expected!");if(!e.jwks.keys||!Array.isArray(e.jwks.keys)||e.jwks.keys.length===0)throw new Error("Array keys in jwks missing!");let n=e.idTokenHeader.kid,i=e.jwks.keys,o,s=e.idTokenHeader.alg;if(n)o=i.find(p=>p.kid===n);else{let p=this.alg2kty(s),g=i.filter(h=>h.kty===p&&h.use==="sig");if(g.length>1){let h="More than one matching key found. Please specify a kid in the id_token header.";return console.error(h),Promise.reject(h)}else g.length===1&&(o=g[0])}if(!o&&!t&&e.loadKeys)return e.loadKeys().then(p=>e.jwks=p).then(p=>this.validateSignature(e,!0));if(!o&&t&&!n){let p="No matching key found.";return console.error(p),Promise.reject(p)}if(!o&&t&&n){let p="expected key not found in property jwks. This property is most likely loaded with the discovery document. Expected key id (kid): "+n;return console.error(p),Promise.reject(p)}let a=sc.KEYUTIL.getKey(o),c={alg:this.allowedAlgorithms,gracePeriod:this.gracePeriodInSec};return sc.KJUR.jws.JWS.verifyJWT(e.idToken,a,c)?Promise.resolve():Promise.reject("Signature not valid")}alg2kty(e){switch(e.charAt(0)){case"R":return"RSA";case"E":return"EC";default:throw new Error("Cannot infer kty from alg: "+e)}}calcHash(e,t){let i=new sc.KJUR.crypto.MessageDigest({alg:t}).digestString(e),o=this.toByteArrayAsString(i);return Promise.resolve(o)}toByteArrayAsString(e){let t="";for(let n=0;n<e.length;n+=2){let i=e.charAt(n)+e.charAt(n+1),o=parseInt(i,16);t+=String.fromCharCode(o)}return t}};var Gr=(r,e)=>{let t=Ee(uo),n=Ee(In),i=Ee(Rn),o=Ee(ho),s=Ee(Ec),a=Ee(Ds);if(i.checkPlatform()){if(!t.checkForExpiry()){t.authenticatedSubject$.next(!1),t.refreshTokenSubject$.next(""),o.userDetailsSubject$.next({}),s.logOut();let c=r.queryParams.route!=null?r.queryParams.route:"";return n.navigate([r.routeConfig?.path],{queryParams:{route:c}}),!1}return r.routeConfig?.path==="public"?(r.queryParams.route!=null&&localStorage.setItem("public_route",r.queryParams.route),Xn.redirectUri=De.publicCallbackUrl):(Xn.redirectUri=De.authConfig.redirectUri,t.setRequestedRoute(e.url)),s.configure(Xn),s.tokenValidationHandler=new tu,Et(t.isAuthenticated(Xn.redirectUri)).pipe(At(c=>c===!0?(t.authenticatedSubject$.next(s.hasValidAccessToken()),Me(!0)):Me(!1)),er(()=>o.fetchUserDetails()),At(c=>{if(JSON.stringify(c)!="{}"){let l=c.data.currentUserDistributorAndFirmInfo;return l.role&&o.getFpRoles().some(p=>l.role.toLowerCase()===p),o.userDetailsSubject$.next(l),!0}return!1}),Bt((c,l)=>(t.authenticatedSubject$.next(!1),o.userDetailsSubject$.next({}),n.navigate(["/"]),Me(!1))))}return Me(!1)};var ne=(r,e)=>{let t=Ee(uo),n=Ee(Rn),i=Ee(ho),o=Ee(Ec);return n.checkPlatform()&&(Xn.redirectUri=De.publicCallbackUrl,t.checkForExpiry()||(t.authenticatedSubject$.next(!1),t.refreshTokenSubject$.next(""),i.userDetailsSubject$.next({}),o.logOut()),o.hasValidAccessToken())?(o.configure(Xn),o.setupAutomaticSilentRefresh(),Et(t.isAuthenticated(De.publicCallbackUrl)).pipe(At(s=>s===!0?(t.authenticatedSubject$.next(o.hasValidAccessToken()),!0):!1),er(()=>i.fetchUserDetails()),At(s=>{if(s){let a=s.data.currentUserDistributorAndFirmInfo;return i.userDetailsSubject$.next(a),!0}return!1}),Bt((s,a)=>(t.authenticatedSubject$.next(!1),i.userDetailsSubject$.next({}),Me(!1))))):Me(!0)};var Bd=(r,e)=>{let t=Ee(uo),n=Ee(fp),i=Ee(ho);return Ee(Rn).checkPlatform()?n.getMorningStarFirmToken().pipe(At(s=>s.token?(n.morningStarFirmTokenSubject$.next(s),!0):!1),Bt((s,a)=>(t.authenticatedSubject$.next(!1),t.refreshTokenSubject$.next(""),i.userDetailsSubject$.next({}),Me(!1)))):Me(!1)};var Cm=(()=>{let e=class e{constructor(n,i){this.msalGuardConfig=n,this.msalService=i}ngOnInit(){this.msalService.handleRedirectObservable().subscribe()}};e.\u0275fac=function(i){return new(i||e)(Ht(to),Ht(ro))},e.\u0275cmp=Ct({type:e,selectors:[["app-msal-redirect"]],decls:0,vars:0,template:function(i,o){},encapsulation:2});let r=e;return r})();var be=(r,e)=>{let t=Ee(Sc),n=Ee(wc);return n.getPublishedTokenFromApi().pipe(pc(i=>{n.setPublishedContentfulToken(i),n.setPreviewContentfulToken(i)}),Bt(i=>(console.log("Error while trying to fetch access token in contentful token resolver ",i),Me(i))))};var Re=(r,e)=>{let t=Ee(wc),n=Ee(ro),i=Ee(ys),o=Ee(vc),s=new lo,a={scopes:[De.contentful.scope]};return Cc(o)?(n.handleRedirectObservable().subscribe(),i.inProgress$.pipe(Ru(c=>c===tt.None),wf(s),At(c=>{if(!n.instance.getActiveAccount()&&n.instance.getAllAccounts().length>0){let p=n.instance.getAllAccounts();n.instance.setActiveAccount(p[0])}}),er(()=>n.acquireTokenSilent(a)),At(c=>c.accessToken),er(c=>t.getPreviewTokenFromApi(c).pipe(At(l=>{t.setPreviewContentfulToken(l)}),Bt(l=>Me(`Error trying to fetch preview access token in preview resolver : ${l}`)))),er(()=>t.getPublishedTokenFromApi().pipe(At(c=>{t.setPublishedContentfulToken(c)}),Bt(c=>Me(`Error trying to fetch published access token in preview resolver : ${c}`)))),Bt(c=>Me(`Error trying to set MSAL Account or fetch access token : ${c}`)))):bu};var Sm=(r,e)=>{let t=Ee(In),n=r.paramMap.get("slug");return n&&["target-income-10"].includes(n)?t.createUrlTree(["/"]):!0};var Em=r=>()=>Ee(Tc).isEnabled(r);var Am=[{path:"auth",component:Cm},{path:"",pathMatch:"full",loadComponent:()=>import("./chunk-JJZDU24G.js").then(r=>r.PublicHomePageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"publicHomePage"},canActivate:[X]},{path:"preview",loadComponent:()=>import("./chunk-JJZDU24G.js").then(r=>r.PublicHomePageComponent),resolve:{contentfulToken:Re},data:{contentType:"publicHomePage",preview:!0},canActivate:[Ce,X]},{path:"home",pathMatch:"full",redirectTo:""},{path:"preview/home",loadComponent:()=>import("./chunk-JJZDU24G.js").then(r=>r.PublicHomePageComponent),resolve:{contentfulToken:Re},data:{contentType:"publicHomePage",preview:!0},canActivate:[Ce,X]},{path:"product/:slug",loadComponent:()=>import("./chunk-2VTVQIAB.js").then(r=>r.AnnuityProductPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"productPage"},canActivate:[Sm,X]},{path:"preview/product/:slug",loadComponent:()=>import("./chunk-2VTVQIAB.js").then(r=>r.AnnuityProductPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"productPage",preview:!0},canActivate:[Ce,X]},{path:"our-products/:slug",loadComponent:()=>import("./chunk-NEVP3L2L.js").then(r=>r.AnnuityListingPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"productListingPage"},canActivate:[X]},{path:"preview/our-products/:slug",loadComponent:()=>import("./chunk-NEVP3L2L.js").then(r=>r.AnnuityListingPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"productListingPage",preview:!0},canActivate:[Ce,X]},{path:"content",children:[{path:"product-rates",redirectTo:"/",pathMatch:"full"},{path:"product-rates-truist",redirectTo:"/",pathMatch:"full"},{path:":slug",loadComponent:()=>import("./chunk-POISTRLY.js").then(r=>r.ContentPageComponent),canActivate:[X]}],resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"contentPage"}},{path:"preview/content",children:[{path:":slug",loadComponent:()=>import("./chunk-POISTRLY.js").then(r=>r.ContentPageComponent),canActivate:[Ce,X]}],resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"contentPage",preview:!0}},{path:"live",children:[{path:"",loadComponent:()=>import("./chunk-GRGSOHIF.js").then(r=>r.LivePage),canActivate:[X]},{path:"home",redirectTo:"/live",pathMatch:"full"},{path:":slug",loadComponent:()=>import("./chunk-GRGSOHIF.js").then(r=>r.LivePage),canActivate:[X]}],resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"livePage"}},{path:"preview/live",children:[{path:"",loadComponent:()=>import("./chunk-GRGSOHIF.js").then(r=>r.LivePage),canActivate:[Ce,X]},{path:":slug",loadComponent:()=>import("./chunk-GRGSOHIF.js").then(r=>r.LivePage),canActivate:[Ce,X]}],resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"livePage",preview:!0}},{path:"article/:slug",loadComponent:()=>import("./chunk-P6JCXEOI.js").then(r=>r.ArticlePage),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"articlePage"},canActivate:[X]},{path:"preview/article/:slug",loadComponent:()=>import("./chunk-P6JCXEOI.js").then(r=>r.ArticlePage),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"articlePage",preview:!0},canActivate:[Ce,X]},{path:"index-prices/:slug",loadComponent:()=>import("./chunk-KUQTUEF5.js").then(r=>r.PricesAndIndexesPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"indexPricesPage"},canActivate:[X]},{path:"preview/index-prices/:slug",loadComponent:()=>import("./chunk-KUQTUEF5.js").then(r=>r.PricesAndIndexesPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"indexPricesPage",preview:!0},canActivate:[Ce,X]},{path:"faq/:slug",loadComponent:()=>import("./chunk-KYIPITQC.js").then(r=>r.FaqPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"faqPage"},canActivate:[X]},{path:"preview/faq/:slug",loadComponent:()=>import("./chunk-KYIPITQC.js").then(r=>r.FaqPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"faqPage",preview:!0},canActivate:[Ce,X]},{path:"contact-us/:slug",loadComponent:()=>import("./chunk-6UXFI6WA.js").then(r=>r.ContactUsPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"contactPage"},canActivate:[X]},{path:"preview/contact-us/:slug",loadComponent:()=>import("./chunk-6UXFI6WA.js").then(r=>r.ContactUsPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"contactPage",preview:!0},canActivate:[Ce,X]},{path:"news-landing-page",loadComponent:()=>import("./chunk-H5JM4XWA.js").then(r=>r.NewsLandingPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"newsLandingPage"},canActivate:[X]},{path:"preview/news-landing-page",loadComponent:()=>import("./chunk-H5JM4XWA.js").then(r=>r.NewsLandingPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"newsLandingPage",preview:!0},canActivate:[Ce,X]},{path:"all-insights",loadComponent:()=>import("./chunk-GGN5OSDG.js").then(r=>r.InsightsLandingPageComponent),data:{contentType:"insightsLandingPage"},resolve:{contentfulToken:be},canActivate:[Gr,X]},{path:"preview/all-insights",loadComponent:()=>import("./chunk-GGN5OSDG.js").then(r=>r.InsightsLandingPageComponent),data:{contentType:"insightsLandingPage",preview:!0},resolve:{contentfulToken:Re},canActivate:[Ce,X]},{path:"national-sales-consulting-home",loadComponent:()=>import("./chunk-OTEYNPON.js").then(r=>r.NscLandingPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"nscLandingPage"},canActivate:[X]},{path:"preview/national-sales-consulting-home",loadComponent:()=>import("./chunk-OTEYNPON.js").then(r=>r.NscLandingPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"nscLandingPage",preview:!0},canActivate:[Ce,X]},{path:"calculators",loadComponent:()=>import("./chunk-NUPRVFOH.js").then(r=>r.CalculatorsPageComponent),data:{contentType:"calculatorsPage"},resolve:{contentfulToken:be},canActivate:[Gr,X]},{path:"preview/calculators",loadComponent:()=>import("./chunk-NUPRVFOH.js").then(r=>r.CalculatorsPageComponent),data:{contentType:"calculatorsPage",preview:!0},resolve:{contentfulToken:Re},canActivate:[Ce,X]},{path:"calculators/:slug",loadComponent:()=>import("./chunk-FH24ESXB.js").then(r=>r.CalculatorPage),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"calculatorPage"},canActivate:[X]},{path:"preview/calculators/:slug",loadComponent:()=>import("./chunk-FH24ESXB.js").then(r=>r.CalculatorPage),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"calculatorPage",preview:!0},canActivate:[Ce,X]},{path:"calcs/xyz123",canMatch:[Em("targetIncomeChoiceV2")],loadComponent:()=>import("./chunk-3JV2NIIM.js").then(r=>r.CalcPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"calcPage",slug:"xyz123"},canActivate:[X]},{path:"calcs/:slug",loadComponent:()=>import("./chunk-3JV2NIIM.js").then(r=>r.CalcPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"calcPage"},canActivate:[X]},{path:"preview/calcs/:slug",loadComponent:()=>import("./chunk-3JV2NIIM.js").then(r=>r.CalcPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"calcPage",preview:!0},canActivate:[Ce,X]},{path:"calcs-secured/:slug",loadComponent:()=>import("./chunk-3JV2NIIM.js").then(r=>r.CalcPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"calcPage"},canActivate:[Gr,X]},{path:"preview/calcs-secured/:slug",loadComponent:()=>import("./chunk-3JV2NIIM.js").then(r=>r.CalcPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"calcPage",preview:!0},canActivate:[Ce,X]},{path:"podcasts",loadComponent:()=>import("./chunk-HWNZZ6I4.js").then(r=>r.PodcastsPageComponent),data:{contentType:"podcastsPage"},resolve:{contentfulToken:be},canActivate:[Gr,X]},{path:"preview/podcasts",loadComponent:()=>import("./chunk-HWNZZ6I4.js").then(r=>r.PodcastsPageComponent),data:{contentType:"podcastsPage",preview:!0},resolve:{contentfulToken:Re},canActivate:[Ce,X]},{path:"service-forms",loadComponent:()=>import("./chunk-CTW3LQ6F.js").then(r=>r.FormsPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"formsPage"},canActivate:[X]},{path:"preview/service-forms",loadComponent:()=>import("./chunk-CTW3LQ6F.js").then(r=>r.FormsPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"formsPage",preview:!0},canActivate:[Ce,X]},{path:"news-article/:slug",loadComponent:()=>import("./chunk-NXH2EYWU.js").then(r=>r.NewsArticlePageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"newsArticlePage"},canActivate:[X]},{path:"preview/news-article/:slug",loadComponent:()=>import("./chunk-NXH2EYWU.js").then(r=>r.NewsArticlePageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"newsArticlePage",preview:!0},canActivate:[Ce,X]},{path:"our-leadership/:slug",loadComponent:()=>import("./chunk-B5WBKXDP.js").then(r=>r.OurLeadershipPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"teamPage"},canActivate:[X]},{path:"preview/our-leadership/:slug",loadComponent:()=>import("./chunk-B5WBKXDP.js").then(r=>r.OurLeadershipPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"teamPage",preview:!0},canActivate:[Ce,X]},{path:"person/:slug",loadComponent:()=>import("./chunk-OFW5BKTO.js").then(r=>r.PersonPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"personPage"},canActivate:[X]},{path:"preview/person/:slug",loadComponent:()=>import("./chunk-OFW5BKTO.js").then(r=>r.PersonPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"personPage",preview:!0},canActivate:[Ce,X]},{path:"planning-education-landing/:slug",loadComponent:()=>import("./chunk-4BGQUZXW.js").then(r=>r.PeLandingPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"planEduLandingPage"},canActivate:[X]},{path:"preview/planning-education-landing/:slug",loadComponent:()=>import("./chunk-4BGQUZXW.js").then(r=>r.PeLandingPageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"planEduLandingPage",preview:!0},canActivate:[Ce,X]},{path:"planning-education-article/:slug",loadComponent:()=>import("./chunk-5WN3A6MM.js").then(r=>r.PeArticlePageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"planEduArticlePage"},canActivate:[X]},{path:"preview/planning-education-article/:slug",loadComponent:()=>import("./chunk-5WN3A6MM.js").then(r=>r.PeArticlePageComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"planEduArticlePage",preview:!0},canActivate:[Ce,X],runGuardsAndResolvers:"always"},{path:"delawarelife-financial-professionals",loadComponent:()=>import("./chunk-F4EX7OG4.js").

91then(r=>r.FpHomeSignedOutComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"fpHomeSignedOut"},canActivate:[X]},{path:"preview/delawarelife-financial-professionals",loadComponent:()=>import("./chunk-F4EX7OG4.js").then(r=>r.FpHomeSignedOutComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"fpHomeSignedOut",preview:!0},canActivate:[Ce,X]},{path:"how-we-partner",loadComponent:()=>import("./chunk-XXROL5DO.js").then(r=>r.FpHowWePartnerComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"howWePartnerPage"},canActivate:[X]},{path:"preview/how-we-partner",loadComponent:()=>import("./chunk-XXROL5DO.js").then(r=>r.FpHowWePartnerComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"howWePartnerPage",preview:!0},canActivate:[Ce,X]},{path:"fp-continuing-education/:slug",loadComponent:()=>import("./chunk-U4ACSXJD.js").then(r=>r.FpContinuingEducationComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"continuingEducationPage"},canActivate:[X]},{path:"preview/fp-continuing-education/:slug",loadComponent:()=>import("./chunk-U4ACSXJD.js").then(r=>r.FpContinuingEducationComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"continuingEducationPage",preview:!0},canActivate:[Ce,X]},{path:"webinars",loadComponent:()=>import("./chunk-VWVTCK5P.js").then(r=>r.FpWebcastsEventsComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},data:{contentType:"webcastsAndEventsLandingPage"},canActivate:[X]},{path:"preview/webinars",loadComponent:()=>import("./chunk-VWVTCK5P.js").then(r=>r.FpWebcastsEventsComponent),resolve:{contentfulToken:Re,userDetailsResolver:ne},data:{contentType:"webcastsAndEventsLandingPage",preview:!0},canActivate:[Ce,X]},{path:"partner-resources",loadComponent:()=>import("./chunk-P5W4XJ2P.js").then(r=>r.PartnerResourcesPageComponent),data:{contentType:"partnerResources"},resolve:{contentfulToken:be},canActivate:[Gr,X]},{path:"preview/partner-resources",loadComponent:()=>import("./chunk-P5W4XJ2P.js").then(r=>r.PartnerResourcesPageComponent),data:{contentType:"partnerResources",preview:!0},resolve:{contentfulToken:Re},canActivate:[Ce,X]},{path:"index-resources",loadComponent:()=>import("./chunk-GIZZIBKH.js").then(r=>r.IndexResourcesPageComponent),data:{contentType:"indexResourcesPage"},resolve:{contentfulToken:be},canActivate:[Gr,X]},{path:"preview/index-resources",loadComponent:()=>import("./chunk-GIZZIBKH.js").then(r=>r.IndexResourcesPageComponent),data:{contentType:"indexResourcesPage",preview:!0},resolve:{contentfulToken:Re},canActivate:[Ce,X]},{path:"callback",loadComponent:()=>import("./chunk-REY325GT.js").then(r=>r.CallbackComponent),canActivate:[Gr]},{path:"public",loadComponent:()=>import("./chunk-B4U7WZK4.js").then(r=>r.PublicComponent),canActivate:[Gr]},{path:"illustrations-redirect",loadComponent:()=>import("./chunk-DH7GU6BQ.js").then(r=>r.IllustrationsRedirectComponent),pathMatch:"full",canActivate:[Gr]},{path:"rvp-map",loadComponent:()=>import("./chunk-7LV2RYAX.js").then(r=>r.RvpMapPageComponent),data:{contentType:"rvpMapPage"},resolve:{contentfulToken:be,userDetailsResolver:ne},canActivate:[X]},{path:"preview/rvp-map",loadComponent:()=>import("./chunk-7LV2RYAX.js").then(r=>r.RvpMapPageComponent),data:{contentType:"rvpMapPage",preview:!0},resolve:{contentfulToken:Re},canActivate:[Ce,X]},{path:"pension",loadComponent:()=>import("./chunk-6LKNHRZ4.js").then(r=>r.RedirectComponent),data:{redirectURL:"https://worklife.alight.com/delawarelife"},pathMatch:"full"},{path:"pension-annuities",loadComponent:()=>import("./chunk-6LKNHRZ4.js").then(r=>r.RedirectComponent),data:{redirectURL:"https://worklife.alight.com/delawarelife"},pathMatch:"full"},{path:"pension-group-annuities",loadComponent:()=>import("./chunk-6LKNHRZ4.js").then(r=>r.RedirectComponent),data:{redirectURL:"https://worklife.alight.com/delawarelife"},pathMatch:"full"},{path:"tp-calculator",loadComponent:()=>import("./chunk-6LKNHRZ4.js").then(r=>r.RedirectComponent),data:{redirectURL:De.staticBaseUrl+"tp-calculator.html"},pathMatch:"full"},{path:"tic-calculator",loadComponent:()=>

91import("./chunk-6LKNHRZ4.js").then(r=>r.RedirectComponent),data:{redirectURL:De.staticBaseUrl+"tic-calculator.html"},pathMatch:"full"},{path:"california-privacy-act",loadComponent:()=>import("./chunk-6LKNHRZ4.js").then(r=>r.RedirectComponent),data:{redirectURL:De.staticBaseUrl+"california-privacy-act.html"},pathMatch:"full"},{path:"investment-screener",canActivate:[Bd],loadComponent:()=>import("./chunk-PTFNGZRE.js").then(r=>r.InvestmentScreenerComponent)},{path:"sal-report/:languageId/:securityId",children:[{path:"",canActivate:[Bd],loadComponent:()=>import("./chunk-TFC4YOAA.js").then(r=>r.SalReportComponent)}]},{path:"**",loadComponent:()=>import("./chunk-WHQECVFR.js").then(r=>r.NotFoundPageComponent),resolve:{contentfulToken:be,userDetailsResolver:ne},canActivate:[pp]}];var XC=r=>({"background-color":r});function ZC(r,e){r&1&&Of(0)}function eS(r,e){if(r&1&&lt(0,"sk-cube-grid",4),r&2){let t=Rr(2);et("backgroundColor",t.backgroundColor)}}function tS(r,e){if(r&1&&lt(0,"sk-chasing-dots",4),r&2){let t=Rr(2);et("backgroundColor",t.backgroundColor)}}function rS(r,e){if(r&1&&lt(0,"sk-double-bounce",4),r&2){let t=Rr(2);et("backgroundColor",t.backgroundColor)}}function nS(r,e){if(r&1&&lt(0,"sk-rotating-plane",4),r&2){let t=Rr(2);et("backgroundColor",t.backgroundColor)}}function iS(r,e){if(r&1&&lt(0,"sk-spinner-pulse",4),r&2){let t=Rr(2);et("backgroundColor",t.backgroundColor)}}function oS(r,e){if(r&1&&lt(0,"sk-three-bounce",4),r&2){let t=Rr(2);et("backgroundColor",t.backgroundColor)}}function sS(r,e){if(r&1&&lt(0,"sk-wandering-cubes",4),r&2){let t=Rr(2);et("backgroundColor",t.backgroundColor)}}function aS(r,e){if(r&1&&lt(0,"sk-wave",4),r&2){let t=Rr(2);et("backgroundColor",t.backgroundColor)}}function cS(r,e){if(r&1&&(br(0,"div",1),_u(1,ZC,1,0,"ng-container",2)(2,eS,1,1,"sk-cube-grid",3)(3,tS,1,1,"sk-chasing-dots",3)(4,rS,1,1,"sk-double-bounce",3)(5,nS,1,1,"sk-rotating-plane",3)(6,iS,1,1,"sk-spinner-pulse",3)(7,oS,1,1,"sk-three-bounce",3)(8,sS,1,1,"sk-wandering-cubes",3)(9,aS,1,1,"sk-wave",3),Ir()),r&2){let t=Rr();Oe("opacity",t.opacity),bn("backdrop",t.backdrop),et("ngStyle",Df(14,XC,t.backdrop?t.backdropBackgroundColor:"transparent")),ye(),et("ngComponentOutlet",t.entryComponent),ye(),et("ngIf",t.spinner===t.spinkit.skCubeGrid),ye(),et("ngIf",t.spinner===t.spinkit.skChasingDots),ye(),et("ngIf",t.spinner===t.spinkit.skDoubleBounce),ye(),et("ngIf",t.spinner===t.spinkit.skRotatingPlane),ye(),et("ngIf",t.spinner===t.spinkit.skSpinnerPulse),ye(),et("ngIf",t.spinner===t.spinkit.skThreeBounce),ye(),et("ngIf",t.spinner===t.spinkit.skWanderingCubes),ye(),et("ngIf",t.spinner===t.spinkit.skWave)}}var ti=(()=>{let e=class e{};e.\u0275fac=function(i){return new(i||e)},e.\u0275dir=kf({type:e,inputs:{backgroundColor:"backgroundColor"},standalone:!1});let r=e;return r})(),lS=(()=>{let e=class e extends ti{};e.\u0275fac=(()=>{let n;return function(o){return(n||(n=$r(e)))(o||e)}})(),e.\u0275cmp=Ct({type:e,selectors:[["sk-chasing-dots"]],standalone:!1,features:[Wr],decls:3,vars:6,consts:[[1,"sk-chasing-dots"],[1,"sk-child","sk-dot1"],[1,"sk-child","sk-dot2"]],template:function(i,o){i&1&&(br(0,"div",0),lt(1,"div",1)(2,"div",2),Ir()),i&2&&(bn("colored",!o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor))},styles:[".sk-chasing-dots[_ngcontent-%COMP%]{top:50%;margin:auto;width:40px;height:40px;position:relative;text-align:center;animation:_ngcontent-%COMP%_sk-chasingDotsRotate 2s infinite linear}.sk-chasing-dots[_ngcontent-%COMP%]   .sk-child[_ngcontent-%COMP%]{width:60%;height:60%;display:inline-block;position:absolute;top:0;border-radius:100%;animation:_ngcontent-%COMP%_sk-chasingDotsBounce 2s infinite ease-in-out}.sk-chasing-dots[_ngcontent-%COMP%]   .sk-dot2[_ngcontent-%COMP%]{top:auto;bottom:0;animation-delay:-1s}@keyframes _ngcontent-%COMP%_sk-chasingDotsRotate{to{transform:rotate(360deg)}}@keyframes _ngcontent-%COMP%_sk-chasingDotsBounce{0%,to{transform:scale(0)}50%{transform:scale(1)}}"]});let r=e;return r})(),uS=(()=>{let e=class e extends ti{};e.\u0275fac=(()=>{let n;return function(o){return(n||(n=$r(e)))(o||e)}})(),e.\u0275cmp=Ct({type:e,selectors:[["sk-cube-grid"]],standalone:!1,features:[Wr],decls:10,vars:20,consts:[[1,"sk-cube-grid"],[1,"sk-cube","sk-cube1"],[1,"sk-cube","sk-cube2"],[1,"sk-cube","sk-cube3"],[1,"sk-cube","sk-cube4"],[1,"sk-cube","sk-cube5"],[1,"sk-cube","sk-cube6"],[1,"sk-cube","sk-cube7"],[1,"sk-cube","sk-cube8"],[1,"sk-cube","sk-cube9"]],template:function(i,o){i&1&&(br(0,"div",0),lt(1,"div",1)(2,"div",2)(3,"div",3)(4,"div",4)(5,"div",5)(6,"div",6)(7,"div",7)(8,"div",8)(9,"div",9),Ir()),i&2&&(bn("colored",!o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor))},styles:[".sk-cube-grid[_ngcontent-%COMP%]{position:relative;top:50%;width:40px;height:40px;margin:auto}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube[_ngcontent-%COMP%]{width:33.33%;height:33.33%;float:left;animation:_ngcontent-%COMP%_sk-cubeGridScaleDelay 1.3s infinite ease-in-out}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube1[_ngcontent-%COMP%]{animation-delay:.2s}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube2[_ngcontent-%COMP%]{animation-delay:.3s}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube3[_ngcontent-%COMP%]{animation-delay:.4s}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube4[_ngcontent-%COMP%]{animation-delay:.1s}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube5[_ngcontent-%COMP%]{animation-delay:.2s}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube6[_ngcontent-%COMP%]{animation-delay:.3s}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube7[_ngcontent-%COMP%]{animation-delay:0s}.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube8[_ngcontent-%COMP%]{animation-delay:.1s}

91.sk-cube-grid[_ngcontent-%COMP%]   .sk-cube9[_ngcontent-%COMP%]{animation-delay:.2s}@keyframes _ngcontent-%COMP%_sk-cubeGridScaleDelay{0%,70%,to{transform:scaleZ(1)}35%{transform:scale3D(0,0,1)}}"]});let r=e;return r})(),hS=(()=>{let e=class e extends ti{};e.\u0275fac=(()=>{let n;return function(o){return(n||(n=$r(e)))(o||e)}})(),e.\u0275cmp=Ct({type:e,selectors:[["sk-double-bounce"]],standalone:!1,features:[Wr],decls:3,vars:6,consts:[[1,"sk-double-bounce"],[1,"sk-child","sk-double-bounce1"],[1,"sk-child","sk-double-bounce2"]],template:function(i,o){i&1&&(br(0,"div",0),lt(1,"div",1)(2,"div",2),Ir()),i&2&&(bn("colored",!o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor))},styles:[".sk-double-bounce[_ngcontent-%COMP%]{top:50%;width:40px;height:40px;position:relative;margin:auto}.sk-double-bounce[_ngcontent-%COMP%]   .sk-child[_ngcontent-%COMP%]{width:100%;height:100%;border-radius:50%;background-color:#333;opacity:.6;position:absolute;top:0;left:0;animation:_ngcontent-%COMP%_sk-doubleBounce 2s infinite ease-in-out}.sk-double-bounce[_ngcontent-%COMP%]   .sk-double-bounce2[_ngcontent-%COMP%]{animation-delay:-1s}@keyframes _ngcontent-%COMP%_sk-doubleBounce{0%,to{transform:scale(0)}50%{transform:scale(1)}}"]});let r=e;return r})(),dS=(()=>{let e=class e extends ti{};e.\u0275fac=(()=>{let n;return function(o){return(n||(n=$r(e)))(o||e)}})(),e.\u0275cmp=Ct({type:e,selectors:[["sk-rotating-plane"]],standalone:!1,features:[Wr],decls:1,vars:2,consts:[[1,"sk-rotating-plane","colored-parent"]],template:function(i,o){i&1&&lt(0,"div",0),i&2&&Oe("background-color",o.backgroundColor)},styles:[".sk-rotating-plane[_ngcontent-%COMP%]{position:relative;top:50%;width:40px;height:40px;margin:auto;animation:_ngcontent-%COMP%_sk-rotatePlane 1.2s infinite ease-in-out}@keyframes _ngcontent-%COMP%_sk-rotatePlane{0%{transform:perspective(120px) rotateX(0) rotateY(0)}50%{transform:perspective(120px) rotateX(-180.1deg) rotateY(0)}to{transform:perspective(120px) rotateX(-180deg) rotateY(-179.9deg)}}"]});let r=e;return r})(),fS=(()=>{let e=class e extends ti{};e.\u0275fac=(()=>{let n;return function(o){return(n||(n=$r(e)))(o||e)}})(),e.\u0275cmp=Ct({type:e,selectors:[["sk-spinner-pulse"]],standalone:!1,features:[Wr],decls:1,vars:2,consts:[[1,"sk-spinner","sk-spinner-pulse","colored-parent"]],template:function(i,o){i&1&&lt(0,"div",0),i&2&&Oe("background-color",o.backgroundColor)},styles:[".sk-spinner-pulse[_ngcontent-%COMP%]{position:relative;top:50%;width:40px;height:40px;margin:auto;border-radius:100%;animation:_ngcontent-%COMP%_sk-pulseScaleOut 1s infinite ease-in-out}@keyframes _ngcontent-%COMP%_sk-pulseScaleOut{0%{transform:scale(0)}to{transform:scale(1);opacity:0}}"]});let r=e;return r})(),pS=(()=>{let e=class e extends ti{};e.\u0275fac=(()=>{let n;return function(o){return(n||(n=$r(e)))(o||e)}})(),e.\u0275cmp=Ct({type:e,selectors:[["sk-three-bounce"]],standalone:!1,features:[Wr],decls:4,vars:8,consts:[[1,"sk-three-bounce"],[1,"sk-child","sk-bounce1"],[1,"sk-child","sk-bounce2"],[1,"sk-child","sk-bounce3"]],template:function(i,o){i&1&&(br(0,"div",0),lt(1,"div",1)(2,"div",2)(3,"div",3),Ir()),i&2&&(bn("colored",!o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor))},styles:[".sk-three-bounce[_ngcontent-%COMP%]{top:50%;position:relative;margin:auto;width:80px;text-align:center}.sk-three-bounce[_ngcontent-%COMP%]   .sk-child[_ngcontent-%COMP%]{width:20px;height:20px;border-radius:100%;display:inline-block;animation:_ngcontent-%COMP%_sk-three-bounce 1.4s ease-in-out 0s infinite both}.sk-three-bounce[_ngcontent-%COMP%]   .sk-bounce1[_ngcontent-%COMP%]{animation-delay:-.32s}.sk-three-bounce[_ngcontent-%COMP%]   .sk-bounce2[_ngcontent-%COMP%]{animation-delay:-.16s}@keyframes _ngcontent-%COMP%_sk-three-bounce{0%,80%,to{transform:scale(0)}40%{transform:scale(1)}}"]});let r=e;return r})(),gS=(()=>{let e=class e extends ti{};e.\u0275fac=(()=>{let n;return function(o){return(n||(n=$r(e)))(o||e)}})(),e.\u0275cmp=Ct({type:e,selectors:[["sk-wandering-cubes"]],standalone:!1,features:[Wr],decls:3,vars:6,consts:[[1,"sk-wandering-cubes"],[1,"sk-cube","sk-cube1"],[1,"sk-cube","sk-cube2"]],template:function(i,o){i&1&&(br(0,"div",0),lt(1,"div",1)(2,"div",2),Ir()),i&2&&(bn("colored",!o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor))},styles:[".sk-wandering-cubes[_ngcontent-%COMP%]{top:50%;margin:auto;width:40px;height:40px;position:relative}.sk-wandering-cubes[_ngcontent-%COMP%]   .sk-cube[_ngcontent-%COMP%]{width:10px;height:10px;position:absolute;top:0;left:0;animation:_ngcontent-%COMP%_sk-wanderingCube 1.8s ease-in-out -1.8s infinite both}.sk-wandering-cubes[_ngcontent-%COMP%]   .sk-cube2[_ngcontent-%COMP%]{animation-delay:-.9s}@keyframes _ngcontent-%COMP%_sk-wanderingCube{0%{transform:rotate(0)}25%{transform:translate(30px) rotate(-90deg) scale(.5)}50%{transform:translate(30px) translateY(30px) rotate(-179deg)}50.1%{transform:translate(30px) translateY(30px) rotate(-180deg)}75%{transform:translate(0) translateY(30px) rotate(-270deg) scale(.5)}to{transform:rotate(-360deg)}}"]});let r=e;return r})(),mS=(()=>{let e=class e extends ti{};e.\u0275fac=(()=>{let n;return function(o){return(n||(n=$r(e)))(o||e)}})(),e.\u0275cmp=Ct({type:e,selectors:[["sk-wave"]],standalone:!1,features:[Wr],decls:6,vars:12,consts:[[1,"sk-wave"],[1,"sk-rect","sk-rect1"],[1,"sk-rect","sk-rect2"],[1,"sk-rect","sk-rect3"],[1,"sk-rect","sk-rect4"],[1,"sk-rect","sk-rect5"]],template:function(i,o){i&1&&(br(0,"div",0),lt(1,"div",1)(2,"div",2)(3,"div",3)(4,"div",4)(5,"div",5),Ir()),i&2&&(bn("colored",!o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor),ye(),Oe("background-color",o.backgroundColor))},styles:[".sk-wave[_ngcontent-%COMP%]{position:relative;top:50%;margin:auto;width:50px;height:40px;text-align:center;font-size:10px}.sk-wave[_ngcontent-%COMP%]   .sk-rect[_ngcontent-%COMP%]{float:left;margin-right:1px;height:100%;width:6px;display:inline-block;animation:_ngcontent-%COMP%_sk-waveStretchDelay 1.2s infinite ease-in-out}.sk-wave[_ngcontent-%COMP%]   .sk-rect1[_ngcontent-%COMP%]{animation-delay:-1.2s}.sk-wave[_ngcontent-%COMP%]   .sk-rect2[_ngcontent-%COMP%]{animation-delay:-1.1s}.sk-wave[_ngcontent-%COMP%]   .sk-rect3[_ngcontent-%COMP%]{animation-delay:-1s}.sk-wave[_ngcontent-%COMP%]   .sk-rect4[_ngcontent-%COMP%]{animation-delay:-.9s}.sk-wave[_ngcontent-%COMP%]   .sk-rect5[_ngcontent-%COMP%]{animation-delay:-.8s}@keyframes _ngcontent-%COMP%_sk-waveStretchDelay{0%,40%,to{transform:scaleY(.4)}20%{transform:scaleY(1)}}"]});let r=e;return r})(),wm={skChasingDots:"sk-chasing-dots",skCubeGrid:"sk-cube-grid",skDoubleBounce:"sk-double-bounce",skRotatingPlane:"sk-rotationg-plane",skSpinnerPulse:"sk-spinner-pulse",skThreeBounce:"sk-three-bounce",skWanderingCubes:"sk-wandering-cubes",skWave:"sk-wave"};var Hd=(()=>{let e=class e{constructor(){this._pendingRequests=0,this._pendingRequestsStatus$=new Fs(1),this._filteredUrlPatterns=[],this._filteredMethods=[],this._filteredHeaders=[],this._forceByPass=!1}get pendingRequestsStatus$(){return this._pendingRequestsStatus$.asObservable()}get pendingRequests(){return this._pendingRequests}get filteredUrlPatterns(){return this._filteredUrlPatterns}

91set filteredMethods(n){this._filteredMethods=n}set filteredHeaders(n){this._filteredHeaders=n}set forceByPass(n){this._forceByPass=n}shouldBypassUrl(n){return this._filteredUrlPatterns.some(i=>i.test(n))}shouldBypassMethod(n){return this._filteredMethods.some(i=>i.toUpperCase()===n.method.toUpperCase())}shouldBypassHeader(n){return this._filteredHeaders.some(i=>n.headers.has(i))}shouldBypass(n){return this._forceByPass||this.shouldBypassUrl(n.urlWithParams)||this.shouldBypassMethod(n)||this.shouldBypassHeader(n)}intercept(n,i){let o=this.shouldBypass(n);return o||(this._pendingRequests++,this._pendingRequests===1&&this._pendingRequestsStatus$.next(!0)),i.handle(n).pipe(Af(()=>{o||(this._pendingRequests--,this._pendingRequests===0&&this._pendingRequestsStatus$.next(!1))}))}};e.\u0275fac=function(i){return new(i||e)},e.\u0275prov=$t({token:e,factory:e.\u0275fac,providedIn:"root"});let r=e;return r})(),vS=[{provide:Gf,useExisting:Hd,multi:!0}],yS=(()=>{let e=class e{constructor(n){this.pendingRequestsInterceptor=n,this._visibility$=new Fs(1)}get visibility$(){return this._visibility$.asObservable()}show(){this.pendingRequestsInterceptor.forceByPass=!0,this._visibility$.next(!0)}hide(){this._visibility$.next(!1),this.pendingRequestsInterceptor.forceByPass=!1}};e.\u0275fac=function(i){return new(i||e)(ct(Hd))},e.\u0275prov=$t({token:e,factory:e.\u0275fac,providedIn:"root"});let r=e;return r})(),Tm=(()=>{let e=class e{constructor(n,i){this.pendingRequestsInterceptor=n,this.spinnerVisibility=i,this.spinkit=wm,this.visibleUntil=Date.now(),this.backdrop=!0,this.debounceDelay=0,this.entryComponent=null,this.extraDuration=0,this.filteredHeaders=[],this.filteredMethods=[],this.filteredUrlPatterns=[],this.minDuration=0,this.opacity=".7",this.backdropBackgroundColor="#f1f1f1",this.spinner=wm.skWave}ngOnInit(){this.initIsvisibleObservable(),this.nullifySpinnerIfEntryComponentIsDefined(),this.initFilters()}initIsvisibleObservable(){let[n,i]=Sf(this.pendingRequestsInterceptor.pendingRequestsStatus$,o=>o);this.isVisible$=Cf(this.pendingRequestsInterceptor.pendingRequestsStatus$.pipe(er(()=>n.pipe(ku(()=>Iu(this.debounceDelay))))),n.pipe(er(()=>i.pipe(ku(()=>this.getVisibilityTimer$())))),this.spinnerVisibility.visibility$).pipe(Ef(),pc(o=>this.updateExpirationDelay(o)))}nullifySpinnerIfEntryComponentIsDefined(){this.entryComponent&&(this.spinner=null)}initFilters(){this.initFilteredUrlPatterns(),this.initFilteredMethods(),this.initFilteredHeaders()}initFilteredUrlPatterns(){this.filteredUrlPatterns.length&&this.filteredUrlPatterns.forEach(n=>this.pendingRequestsInterceptor.filteredUrlPatterns.push(new RegExp(n)))}initFilteredMethods(){this.pendingRequestsInterceptor.filteredMethods=this.filteredMethods}initFilteredHeaders(){this.pendingRequestsInterceptor.filteredHeaders=this.filteredHeaders}updateExpirationDelay(n){n&&(this.visibleUntil=Date.now()+this.minDuration)}getVisibilityTimer$(){return Iu(Math.max(this.extraDuration,this.visibleUntil-Date.now()))}};e.\u0275fac=function(i){return new(i||e)(Ht(Hd),Ht(yS))},e.\u0275cmp=Ct({type:e,selectors:[["ng-http-loader"]],inputs:{backdrop:"backdrop",backgroundColor:"backgroundColor",debounceDelay:"debounceDelay",entryComponent:"entryComponent",extraDuration:"extraDuration",filteredHeaders:"filteredHeaders",filteredMethods:"filteredMethods",filteredUrlPatterns:"filteredUrlPatterns",minDuration:"minDuration",opacity:"opacity",backdropBackgroundColor:"backdropBackgroundColor",spinner:"spinner"},standalone:!1,decls:2,vars:3,consts:[["id","spinner",3,"backdrop","opacity","ngStyle",4,"ngIf"],["id","spinner",3,"ngStyle"],[4,"ngComponentOutlet"],[3,"backgroundColor",4,"ngIf"],[3,"backgroundColor"]],template:function(i,o){i&1&&(_u(0,cS,10,16,"div",0),Mf(1,"async")),i&2&&et("ngIf",Bf(1,1,o.isVisible$))},dependencies:[Hf,Lf,Uf,uS,lS,hS,dS,fS,pS,gS,mS,Kf],styles:["#spinner[_ngcontent-%COMP%]{top:50%;left:50%;transform:translate(-50%,-50%);position:fixed;z-index:9999}#spinner.backdrop[_ngcontent-%COMP%]{top:0;left:0;height:100%;width:100%;display:flex;align-items:center;justify-content:center;transform:none}  .colored-parent,   .colored>div{background-color:#333}"]});let r=e;return r})(),ru=(()=>{let e=class e{static forRoot(){return{ngModule:e,providers:[vS]}}};e.\u0275fac=function(i){return new(i||e)},e.\u0275mod=yc({type:e}),e.\u0275inj=gc({imports:[qf]});let r=e;return r})();var nu=class{shouldDetach(e){return!1}store(e,t){}shouldAttach(e){return!1}retrieve(e){return null}shouldReuseRoute(e,t){return t.data.contentType==="planEduLandingPage"&&e.data.contentType==="planEduLandingPage"?!1:e.routeConfig===t.routeConfig}};function bm(r){return new Te(3e3,!1)}function SS(){return new Te(3100,!1)}function ES(){return new Te(3101,!1)}function AS(r){return new Te(3001,!1)}function wS(r){return new Te(3003,!1)}function TS(r){return new Te(3004,!1)}function Rm(r,e){return new Te(3005,!1)}function Pm(){return new Te(3006,!1)}function km(){return new Te(3007,!1)}function xm(r,e){return new Te(3008,!1)}function _m(r){return new Te(3002,!1)}function Nm(r,e,t,n,i){return new Te(3010,!1)}function Fm(){return new Te(3011,!1)}

91function Om(){return new Te(3012,!1)}function Dm(){return new Te(3200,!1)}function Mm(){return new Te(3202,!1)}function Bm(){return new Te(3013,!1)}function Hm(r){return new Te(3014,!1)}function Lm(r){return new Te(3015,!1)}function Um(r){return new Te(3016,!1)}function Km(r,e){return new Te(3404,!1)}function bS(r){return new Te(3502,!1)}function qm(r){return new Te(3503,!1)}function jm(){return new Te(3300,!1)}function Vm(r){return new Te(3504,!1)}function Gm(r){return new Te(3301,!1)}function zm(r,e){return new Te(3302,!1)}function $m(r){return new Te(3303,!1)}function Wm(r,e){return new Te(3400,!1)}function Qm(r){return new Te(3401,!1)}function Ym(r){return new Te(3402,!1)}function Jm(r,e){return new Te(3505,!1)}function An(r){switch(r.length){case 0:return new ii;case 1:return r[0];default:return new bc(r)}}function qd(r,e,t=new Map,n=new Map){let i=[],o=[],s=-1,a=null;if(e.forEach(c=>{let l=c.get("offset"),p=l==s,g=p&&a||new Map;c.forEach((h,d)=>{let m=d,f=h;if(d!=="offset")switch(m=r.normalizePropertyName(m,i),f){case Ms:f=t.get(d);break;case ur:f=n.get(d);break;default:f=r.normalizeStyleValue(d,m,f,i);break}g.set(m,f)}),p||o.push(g),a=g,s=l}),i.length)throw bS(i);return o}function iu(r,e,t,n){switch(e){case"start":r.onStart(()=>n(t&&Ld(t,"start",r)));break;case"done":r.onDone(()=>n(t&&Ld(t,"done",r)));break;case"destroy":r.onDestroy(()=>n(t&&Ld(t,"destroy",r)));break}}function Ld(r,e,t){let n=t.totalTime,i=!!t.disabled,o=ou(r.element,r.triggerName,r.fromState,r.toState,e||r.phaseName,n??r.totalTime,i),s=r._data;return s!=null&&(o._data=s),o}function ou(r,e,t,n,i="",o=0,s){return{element:r,triggerName:e,fromState:t,toState:n,phaseName:i,totalTime:o,disabled:!!s}}function Gt(r,e,t){let n=r.get(e);return n||r.set(e,n=t),n}function jd(r){let e=r.indexOf(":"),t=r.substring(1,e),n=r.slice(e+1);return[t,n]}var IS=typeof document>"u"?null:document.documentElement;function su(r){let e=r.parentNode||r.host||null;return e===IS?null:e}function RS(r){return r.substring(1,6)=="ebkit"}var oo=null,Im=!1;function Xm(r){oo||(oo=PS()||{},Im=oo.style?"WebkitAppearance"in oo.style:!1);let e=!0;return oo.style&&!RS(r)&&(e=r in oo.style,!e&&Im&&(e="Webkit"+r.charAt(0).toUpperCase()+r.slice(1)in oo.style)),e}function PS(){return typeof document<"u"?document.body:null}function Vd(r,e){for(;e;){if(e===r)return!0;e=su(e)}return!1}function Gd(r,e,t){if(t)return Array.from(r.querySelectorAll(e));let n=r.querySelector(e);return n?[n]:[]}var kS=1e3,zd="{{",xS="}}",$d="ng-enter",au="ng-leave",ac="ng-trigger",cc=".ng-trigger",Wd="ng-animating",cu=".ng-animating";function zr(r){if(typeof r=="number")return r;let e=r.match(/^(-?[\.\d]+)(m?s)/);return!e||e.length<2?0:Ud(parseFloat(e[1]),e[2])}function Ud(r,e){switch(e){case"s":return r*kS;default:return r}}function lc(r,e,t){return r.hasOwnProperty("duration")?r:NS(r,e,t)}var _S=/^(-?[\.\d]+)(m?s)(?:\s+(-?[\.\d]+)(m?s))?(?:\s+([-a-z]+(?:\(.+?\))?))?$/i;function NS(r,e,t){let n,i=0,o="";if(typeof r=="string"){let s=r.match(_S);if(s===null)return e.push(bm(r)),{duration:0,delay:0,easing:""};n=Ud(parseFloat(s[1]),s[2]);let a=s[3];a!=null&&(i=Ud(parseFloat(a),s[4]));let c=s[5];c&&(o=c)}else n=r;if(!t){let s=!1,a=e.length;n<0&&(e.push(SS()),s=!0),i<0&&(e.push(ES()),s=!0),s&&e.splice(a,0,bm(r))}return{duration:n,delay:i,easing:o}}function Zm(r){return r.length?r[0]instanceof Map?r:r.map(e=>new Map(Object.entries(e))):[]}function Er(r,e,t){e.forEach((n,i)=>{let o=lu(i);t&&!t.has(i)&&t.set(i,r.style[o]),r.style[o]=n})}function ri(r,e){e.forEach((t,n)=>{let i=lu(n);r.style[i]=""})}function Is(r){return Array.isArray(r)?r.length==1?r[0]:gp(r):r}function ev(r,e,t){let n=e.params||{},i=Qd(r);i.length&&i.forEach(o=>{n.hasOwnProperty(o)||t.push(AS(o))})}var Kd=new RegExp(`${zd}\\s*(.+?)\\s*${xS}`,"g");function Qd(r){let e=[];if(typeof r=="string"){let t;for(;t=Kd.exec(r);)e.push(t[1]);Kd.lastIndex=0}return e}function Rs(r,e,t){let n=`${r}`,i=n.replace(Kd,(o,s)=>{let a=e[s];return a==null&&(t.push(wS(s)),a=""),a.toString()});return i==n?r:i}var FS=/-+([a-z0-9])/g;function lu(r){return r.replace(FS,(...e)=>e[1].toUpperCase())}function tv(r,e){return r===0||e===0}function rv(r,e,t){if(t.size&&e.length){let n=e[0],i=[];if(t.forEach((o,s)=>{n.has(s)||i.push(s),n.set(s,o)}),i.length)for(let o=1;o<e.length;o++){let s=e[o];i.forEach(a=>s.set(a,uu(r,a)))}}return e}function zt(r,e,t){switch(e.type){case ge.Trigger:return r.visitTrigger(e,t);case ge.State:return r.visitState(e,t);case ge.Transition:return r.visitTransition(e,t);case ge.Sequence:return r.visitSequence(e,t);case ge.Group:return r.visitGroup(e,t);case ge.Animate:return r.visitAnimate(e,t);case ge.Keyframes:return r.visitKeyframes(e,t);case ge.Style:return r.visitStyle(e,t);case ge.Reference:return r.visitReference(e,t);case ge.AnimateChild:return r.visitAnimateChild(e,t);case ge.AnimateRef:return r.visitAnimateRef(e,t);case ge.Query:return r.visitQuery(e,t);case ge.Stagger:return r.visitStagger(e,t);default:throw TS(e.type)}}function uu(r,e){return window.getComputedStyle(r)[e]}var ff=(()=>{class r{validateStyleProperty(t){return Xm(t)}containsElement(t,n){return Vd(t,n)}getParentElement(t){return su(t)}query(t,n,i){return Gd(t,n,i)}computeStyle(t,n,i){return i||""}animate(t,n,i,o,s,a=[],c){return new ii(i,o)}static \u0275fac=function(n){return new(n||r)};static \u0275prov=$t({token:r,factory:r.\u0275fac})}return r})(),ao=class{static NOOP=new ff},co=class{};var OS=new Set(["width","height","minWidth","minHeight","maxWidth","maxHeight","left","top","bottom","right","fontSize","outlineWidth","outlineOffset","paddingTop","paddingLeft","paddingBottom","paddingRight","marginTop","marginLeft","marginBottom","marginRight","borderRadius","borderWidth","borderTopWidth","borderLeftWidth","borderRightWidth","borderBottomWidth","textIndent","perspective"]),gu=class extends co{normalizePropertyName(e,t){return lu(e)}normalizeStyleValue(e,t,n,i){let o="",s=n.toString().trim();if(OS.has(t)&&n!==0&&n!=="0")if(typeof n=="number")o="px";else{let a=n.match(/^[+-]?[\d\.]+([a-z]*)$/);a&&a[1].length==0&&i.push(Rm(e,n))}return s+o}};var mu="*";function DS(r,e){let t=[];return typeof r=="string"?r.split(/\s*,\s*/).forEach(n=>MS(n,t,e)):t.push(r),t}function MS(r,e,t){if(r[0]==":"){let c=BS(r,t);if(typeof c=="function"){e.push(c);return}r=c}let n=r.match(/^(\*|[-\w]+)\s*(<?[=-]>)\s*(\*|[-\w]+)$/);if(n==null||n.length<4)return t.push(Lm(r)),e;let i=n[1],o=n[2],s=n[3];e.push(nv(i,s));let a=i==mu&&s==mu;o[0]=="<"&&!a&&e.push(nv(s,i))}function BS(r,e){switch(r){case":enter":return"void => *";case":leave":return"* => void";case":increment":return(t,n)=>parseFloat(n)>parseFloat(t);case":decrement":return(t,n)=>parseFloat(n)<parseFloat(t);default:return e.push(Um(r)),"* => *"}}var hu=new Set(["true","1"]),du=new Set(["false","0"]);function nv(r,e){let t=hu.has(r)||du.has(r),n=hu.has(e)||du.has(e);return(i,o)=>{let s=r==mu||r==i,a=e==mu||e==o;return!s&&t&&typeof i=="boolean"&&(s=i?hu.has(r):du.has(r)),!a&&n&&typeof o=="boolean"&&(a=o?hu.has(e):du.has(e)),s&&a}}var fv=":self",HS=new RegExp(`s*${fv}s*,?`,"g");function pv(r,e,t,n){return new tf(r).build(e,t,n)}var iv="",tf=class{_driver;constructor(e){this._driver=e}build(e,t,n){let i=new rf(t);return this._resetContextStyleTimingState(i),zt(this,Is(e),i)}_resetContextStyleTimingState(e){e.currentQuerySelector=iv,e.collectedStyles=new Map,e.collectedStyles.set(iv,new Map),e.currentTime=0}visitTrigger(e,t){let n=t.queryCount=0,i=t.depCount=0,o=[],s=[];return e.name.charAt(0)=="@"&&t.errors.push(Pm()),e.definitions.forEach(a=>{if(this._resetContextStyleTimingState(t),a.type==ge.State){let c=a,l=c.name;l.toString().split(/\s*,\s*/).forEach(p=>{c.name=p,o.push(this.visitState(c,t))}),c.name=l}else if(a.type==ge.Transition){let c=this.visitTransition(a,t);n+=c.queryCount,i+=c.depCount,s.push(c)}else t.errors.push(km())}),{type:ge.Trigger,name:e.name,states:o,transitions:s,queryCount:n,depCount:i,options:null}}visitState(e,t){let n=this.visitStyle(e.styles,t),i=e.options&&e.options.params||null;if(n.containsDynamicStyles){let o=new Set,s=i||{};n.styles.forEach(a=>{a instanceof Map&&a.forEach(c=>{Qd(c).forEach(l=>{s.hasOwnProperty(l)||o.add(l)})})}),o.size&&t.errors.push(xm(e.name,[...o.values()]))}return{type:ge.State,name:e.name,style:n,options:i?{params:i}:null}}visitTransition(e,t){t.queryCount=0,t.depCount=0;let n=zt(this,Is(e.animation),t),i=DS(e.expr,t.errors);return{type:ge.Transition,matchers:i,animation:n,queryCount:t.queryCount,depCount:t.depCount,options:so(e.options)}}visitSequence(e,t){return{type:ge.Sequence,steps:e.steps.map(n=>zt(this,n,t)),options:so(e.options)}}visitGroup(e,t){let n=t.currentTime,i=0,o=e.steps.map(s=>{t.currentTime=n;let a=zt(this,s,t);return i=Math.max(i,t.currentTime),a});return t.currentTime=i,{type:ge.Group,steps:o,options:so(e.options)}}visitAnimate(e,t){let n=qS(e.timings,t.errors);t.currentAnimateTimings=n;let i,o=e.styles?e.styles:Fu({});if(o.type==ge.Keyframes)i=this.visitKeyframes(o,t);else{let s=e.styles,a=!1;if(!s){a=!0;let l={};n.easing&&(l.easing=n.easing),s=Fu(l)}t.currentTime+=n.duration+n.delay;let c=this.visitStyle(s,t);c.isEmptyStep=a,i=c}return t.currentAnimateTimings=null,{type:ge.Animate,timings:n,style:i,options:null}}visitStyle(e,t){let n=this._makeStyleAst(e,t);return this._validateStyleAst(n,t),n}_makeStyleAst(e,t){let n=[],i=Array.isArray(e.styles)?e.styles:[e.styles];for(let a of i)typeof a=="string"?a===ur?n.push(a):t.errors.push(_m(a)):n.push(new Map(Object.entries(a)));let o=!1,s=null;return n.forEach(a=>{if(a instanceof Map&&(a.has("easing")&&(s=a.get("easing"),a.delete("easing")),!o)){for(let c of a.values())if(c.toString().indexOf(zd)>=0){o=!0;break}}}),{type:ge.Style,styles:n,easing:s,offset:e.offset,containsDynamicStyles:o,options:null}}_validateStyleAst(e,t){let n=t.currentAnimateTimings,i=t.currentTime,o=t.currentTime;n&&o>0&&(o-=n.duration+n.delay),e.styles.forEach(s=>{typeof s!="string"&&s.forEach((a,c)=>{let l=t.collectedStyles.get(t.currentQuerySelector),p=l.get(c),g=!0;p&&(o!=i&&o>=p.startTime&&i<=p.endTime&&(t.errors.push(Nm(c,p.startTime,p.endTime,o,i)),g=!1),o=p.startTime),g&&l.set(c,{startTime:o,endTime:i}),t.options&&ev(a,t.options,t.errors)})})}visitKeyframes(e,t){let n={type:ge.Keyframes,styles:[],options:null};if(!t.currentAnimateTimings)return t.errors.push(Fm()),n;let i=1,o=0,s=[],a=!1,c=!1,l=0,p=e.steps.map(v=>{let S=this._makeStyleAst(v,t),A=S.offset!=null?S.offset:KS(S.styles),T=0;return A!=null&&(o++,T=S.offset=A),c=c||T<0||T>1,a=a||T<l,l=T,s.push(T),S});c&&t.errors.push(Om()),a&&t.errors.push(Dm());let g=e.steps.length,h=0;o>0&&o<g?t.errors.push(Mm()):o==0&&(h=i/(g-1));let d=g-1,m=t.currentTime,f=t.currentAnimateTimings,y=f.duration;return p.forEach((v,S)=>{let A=h>0?S==d?1:h*S:s[S],T=A*y;t.currentTime=m+f.delay+T,f.duration=T,this._validateStyleAst(v,t),v.offset=A,n.styles.push(v)}),n}visitReference(e,t){return{type:ge.Reference,animation:zt(this,Is(e.animation),t),options:so(e.options)}}visitAnimateChild(e,t){return t.depCount++,{type:ge.AnimateChild,options:so(e.options)}}visitAnimateRef(e,t){return{type:ge.AnimateRef,animation:this.visitReference(e.animation,t),options:so(e.options)}}visitQuery(e,t){let n=t.currentQuerySelector,i=e.options||{};t.queryCount++,t.currentQuery=e;let[o,s]=LS(e.selector);t.currentQuerySelector=n.length?n+" "+o:o,Gt(t.collectedStyles,t.currentQuerySelector,new Map);let a=zt(this,Is(e.animation),t);return t.currentQuery=null,t.currentQuerySelector=n,{type:ge.Query,selector:o,limit:i.limit||0,optional:!!i.optional,includeSelf:s,animation:a,originalSelector:e.selector,options:so(e.options)}}visitStagger(e,t){t.currentQuery||t.errors.push(Bm());let n=e.timings==="full"?{duration:0,delay:0,easing:"full"}:lc(e.timings,t.errors,!0);return{type:ge.Stagger,animation:zt(this,Is(e.animation),t),timings:n,options:null}}};function LS(r){let e=!!r.split(/\s*,\s*/).find(t=>t==fv);return e&&(r=r.replace(HS,"")),r=r.replace(/@\*/g,cc).replace(/@\w+/g,t=>cc+"-"+t.slice(1)).replace(/:animating/g,cu),[r,e]}function US(r){return r?q({},r):null}var rf=class{errors;queryCount=0;depCount=0;currentTransition=null;currentQuery=null;currentQuerySelector=null;currentAnimateTimings=null;currentTime=0;collectedStyles=new Map;options=null;unsupportedCSSPropertiesFound=new Set;constructor(e){this.errors=e}};function KS(r){if(typeof r=="string")return null;let e=null;if(Array.isArray(r))r.forEach(t=>{if(t instanceof Map&&t.has("offset")){let n=t;e=parseFloat(n.get("offset")),n.delete("offset")}});else if(r instanceof Map&&r.has("offset")){let t=r;e=parseFloat(t.get("offset")),t.delete("offset")}return e}function qS(r,e){if(r.hasOwnProperty("duration"))return r;if(typeof r=="number"){let o=lc(r,e).duration;return Yd(o,0,"")}let t=r;if(t.split(/\s+/).some(o=>o.charAt(0)=="{"&&o.charAt(1)=="{")){let o=Yd(0,0,"");return o.dynamic=!0,o.strValue=t,o}let i=lc(t,e);return Yd(i.duration,i.delay,i.easing)}function so(r){return r?(r=q({},r),r.params&&(r.params=US(r.params))):r={},r}function Yd(r,e,t){return{duration:r,delay:e,easing:t}}function pf(r,e,t,n,i,o,s=null,a=!1){return{type:1,element:r,keyframes:e,preStyleProps:t,postStyleProps:n,duration:i,delay:o,totalTime:i+o,easing:s,subTimeline:a}}var hc=class{_map=new Map;get(e){return this._map.get(e)||[]}append(e,t){let n=this._map.get(e);n||this._map.set(e,n=[]),n.push(...t)}has(e){return this._map.has(e)}clear(){this._map.clear()}},jS=1,VS=":enter",GS=new RegExp(VS,"g"),zS=":leave",$S=new RegExp(zS,"g");function gv(r,e,t,n,i,o=new Map,s=new Map,a,c,l=[]){return new nf().buildKeyframes(r,e,t,n,i,o,s,a,c,l)}var nf=class{buildKeyframes(e,t,n,i,o,s,a,c,l,p=[]){l=l||new hc;let g=new of(e,t,l,i,o,p,[]);g.options=c;let h=c.delay?zr(c.delay):0;g.currentTimeline.delayNextStep(h),g.currentTimeline.setStyles([s],null,g.errors,c),zt(this,n,g);let d=g.timelines.filter(m=>m.containsAnimation());if(d.length&&a.size){let m;for(let f=d.length-1;f>=0;f--){let y=d[f];if(y.element===t){m=y;break}}m&&!m.allowOnlyTimelineStyles()&&m.setStyles([a],null,g.errors,c)}return d.length?d.map(m=>m.buildKeyframes()):[pf(t,[],[],[],0,h,"",!1)]}visitTrigger(e,t){}visitState(e,t){}visitTransition(e,t){}visitAnimateChild(e,t){let n=t.subInstructions.get(t.element);if(n){let i=t.createSubContext(e.options),o=t.currentTimeline.currentTime,s=this._visitSubInstructions(n,i,i.options);o!=s&&t.transformIntoNewTimeline(s)}t.previousNode=e}visitAnimateRef(e,t){let n=t.createSubContext(e.options);n.transformIntoNewTimeline(),this._applyAnimationRefDelays([e.options,e.animation.options],t,n),this.visitReference(e.animation,n),t.transformIntoNewTimeline(n.currentTimeline.currentTime),t.previousNode=e}_applyAnimationRefDelays(e,t,n){for(let i of e){let o=i?.delay;if(o){let s=typeof o=="number"?o:zr(Rs(o,i?.params??{},t.errors));n.delayNextStep(s)}}}_visitSubInstructions(e,t,n){let o=t.currentTimeline.currentTime,s=n.duration!=null?zr(n.duration):null,a=n.delay!=null?zr(n.delay):null;return s!==0&&e.forEach(c=>{let l=t.appendInstructionToTimeline(c,s,a);o=Math.max(o,l.duration+l.delay)}),o}visitReference(e,t){t.updateOptions(e.options,!0),zt(this,e.animation,t),t.previousNode=e}visitSequence(e,t){let n=t.subContextCount,i=t,o=e.options;if(o&&(o.params||o.delay)&&(i=t.createSubContext(o),i.transformIntoNewTimeline(),o.delay!=null)){i.previousNode.type==ge.Style&&(i.currentTimeline.snapshotCurrentStyles(),i.previousNode=vu);let s=zr(o.delay);i.delayNextStep(s)}e.steps.length&&(e.steps.forEach(s=>zt(this,s,i)),i.currentTimeline.applyStylesToKeyframe(),i.subContextCount>n&&i.transformIntoNewTimeline()),t.previousNode=e}visitGroup(e,t){let n=[],i=t.currentTimeline.currentTime,o=e.options&&e.options.delay?zr(e.options.delay):0;e.steps.forEach(s=>{let a=t.createSubContext(e.options);o&&a.delayNextStep(o),zt(this,s,a),i=Math.max(i,a.currentTimeline.currentTime),n.push(a.currentTimeline)}),n.forEach(s=>t.currentTimeline.mergeTimelineCollectedStyles(s)),t.transformIntoNewTimeline(i),t.previousNode=e}_visitTiming(e,t){if(e.dynamic){let n=e.strValue,i=t.params?Rs(n,t.params,t.errors):n;return lc(i,t.errors)}else return{duration:e.duration,delay:e.delay,easing:e.easing}}visitAnimate(e,t){let n=t.currentAnimateTimings=this._visitTiming(e.timings,t),i=t.currentTimeline;n.delay&&(t.incrementTime(n.delay),i.snapshotCurrentStyles());let o=e.style;o.type==ge.Keyframes?this.visitKeyframes(o,t):(t.incrementTime(n.duration),this.visitStyle(o,t),i.applyStylesToKeyframe()),t.currentAnimateTimings=null,t.previousNode=e}visitStyle(e,t){let n=t.currentTimeline,i=t.currentAnimateTimings;!i&&n.hasCurrentStyleProperties()&&n.forwardFrame();let o=i&&i.easing||e.easing;e.isEmptyStep?n.applyEmptyStep(o):n.setStyles(e.styles,o,t.errors,t.options),t.previousNode=e}visitKeyframes(e,t){let n=t.currentAnimateTimings,i=t.currentTimeline.duration,o=n.duration,a=t.createSubContext().currentTimeline;a.easing=n.easing,e.styles.forEach(c=>{let l=c.offset||0;a.forwardTime(l*o),a.setStyles(c.styles,c.easing,t.errors,t.options),a.applyStylesToKeyframe()}),t.currentTimeline.mergeTimelineCollectedStyles(a),t.transformIntoNewTimeline(i+o),t.previousNode=e}visitQuery(e,t){let n=t.currentTimeline.currentTime,i=e.options||{},o=i.delay?zr(i.delay):0;o&&(t.previousNode.type===ge.Style||n==0&&t.currentTimeline.hasCurrentStyleProperties())&&(t.currentTimeline.snapshotCurrentStyles(),t.previousNode=vu);let s=n,a=t.invokeQuery(e.selector,e.originalSelector,e.limit,e.includeSelf,!!i.optional,t.errors);t.currentQueryTotal=a.length;let c=null;a.forEach((l,p)=>{t.currentQueryIndex=p;let g=t.createSubContext(e.options,l);o&&g.delayNextStep(o),l===t.element&&(c=g.currentTimeline),zt(this,e.animation,g),g.currentTimeline.applyStylesToKeyframe();let h=g.currentTimeline.currentTime;s=Math.max(s,h)}),t.currentQueryIndex=0,t.currentQueryTotal=0,t.transformIntoNewTimeline(s),c&&(t.currentTimeline.mergeTimelineCollectedStyles(c),t.currentTimeline.snapshotCurrentStyles()),t.previousNode=e}visitStagger(e,t){let n=t.parentContext,i=t.currentTimeline,o=e.timings,s=Math.abs(o.duration),a=s*(t.currentQueryTotal-1),c=s*t.currentQueryIndex;switch(o.duration<0?"reverse":o.easing){case"reverse":c=a-c;break;case"full":c=n.currentStaggerTime;break}let p=t.currentTimeline;c&&p.delayNextStep(c);let g=p.currentTime;zt(this,e.animation,t),t.previousNode=e,n.currentStaggerTime=i.currentTime-g+(i.startTime-n.currentTimeline.startTime)}},vu={},of=class r{_driver;element;subInstructions;_enterClassName;_leaveClassName;errors;timelines;parentContext=null;currentTimeline;currentAnimateTimings=null;previousNode=vu;subContextCount=0;options={};currentQueryIndex=0;currentQueryTotal=0;currentStaggerTime=0;constructor(e,t,n,i,o,s,a,c){this._driver=e,this.element=t,this.subInstructions=n,this._enterClassName=i,this._leaveClassName=o,this.errors=s,this.timelines=a,this.currentTimeline=c||new yu(this._driver,t,0),a.push(this.currentTimeline)}get params(){return this.options.params}updateOptions(e,t){if(!e)return;let n=e,i=this.options;n.duration!=null&&(i.duration=zr(n.duration)),n.delay!=null&&(i.delay=zr(n.delay));let o=n.params;if(o){let s=i.params;s||(s=this.options.params={}),Object.keys(o).forEach(a=>{(!t||!s.hasOwnProperty(a))&&(s[a]=Rs(o[a],s,this.errors))})}}_copyOptions(){let e={};if(this.options){let t=this.options.params;if(t){let n=e.params={};Object.keys(t).forEach(i=>{n[i]=t[i]})}}return e}createSubContext(e=null,t,n){let i=t||this.element,o=new r(this._driver,i,this.subInstructions,this._enterClassName,this._leaveClassName,this.errors,this.timelines,this.currentTimeline.fork(i,n||0));return o.previousNode=this.previousNode,o.currentAnimateTimings=this.currentAnimateTimings,o.options=this._copyOptions(),o.updateOptions(e),o.currentQueryIndex=this.currentQueryIndex,o.currentQueryTotal=this.currentQueryTotal,o.parentContext=this,this.subContextCount++,o}transformIntoNewTimeline(e){return this.previousNode=vu,this.currentTimeline=this.currentTimeline.fork(this.element,e),this.timelines.push(this.currentTimeline),this.currentTimeline}appendInstructionToTimeline(e,t,n){let i={duration:t??e.duration,delay:this.currentTimeline.currentTime+(n??0)+e.delay,easing:""},o=new sf(this._driver,e.element,e.keyframes,e.preStyleProps,e.postStyleProps,i,e.stretchStartingKeyframe);return this.timelines.push(o),i}incrementTime(e){this.currentTimeline.forwardTime(this.currentTimeline.duration+e)}delayNextStep(e){e>0&&this.currentTimeline.delayNextStep(e)}invokeQuery(e,t,n,i,o,s){let a=[];if(i&&a.push(this.element),e.length>0){e=e.replace(GS,"."+this._enterClassName),e=e.replace($S,"."+this._leaveClassName);let c=n!=1,l=this._driver.query(this.element,e,c);n!==0&&(l=n<0?l.slice(l.length+n,l.length):l.slice(0,n)),a.push(...l)}return!o&&a.length==0&&s.push(Hm(t)),a}},yu=class r{_driver;element;startTime;_elementTimelineStylesLookup;duration=0;easing=null;_previousKeyframe=new Map;_currentKeyframe=new Map;_keyframes=new Map;_styleSummary=new Map;_localTimelineStyles=new Map;_globalTimelineStyles;_pendingStyles=new Map;_backFill=new Map;_currentEmptyStepKeyframe=null;constructor(e,t,n,i){this._driver=e,this.element=t,this.startTime=n,this._elementTimelineStylesLookup=i,this._elementTimelineStylesLookup||(this._elementTimelineStylesLookup=new Map),this._globalTimelineStyles=this._elementTimelineStylesLookup.get(t),this._globalTimelineStyles||(this._globalTimelineStyles=this._localTimelineStyles,this._elementTimelineStylesLookup.set(t,this._localTimelineStyles)),this._loadKeyframe()}containsAnimation(){switch(this._keyframes.size){case 0:return!1;case 1:return this.hasCurrentStyleProperties();default:return!0}}hasCurrentStyleProperties(){return this._currentKeyframe.size>0}get currentTime(){return this.startTime+this.duration}delayNextStep(e){let t=this._keyframes.size===1&&this._pendingStyles.size;this.duration||t?(this.forwardTime(this.currentTime+e),t&&this.snapshotCurrentStyles()):this.startTime+=e}fork(e,t){return this.applyStylesToKeyframe(),new r(this._driver,e,t||this.currentTime,this._elementTimelineStylesLookup)}_loadKeyframe(){this._currentKeyframe&&(this._previousKeyframe=this._currentKeyframe),this._currentKeyframe=this._keyframes.get(this.duration),this._currentKeyframe||(this._currentKeyframe=new Map,this._keyframes.set(this.duration,this._currentKeyframe))}forwardFrame(){this.duration+=jS,this._loadKeyframe()}forwardTime(e){this.applyStylesToKeyframe(),this.duration=e,this._loadKeyframe()}_updateStyle(e,t){this._localTimelineStyles.set(e,t),this._globalTimelineStyles.set(e,t),this._styleSummary.set(e,{time:this.currentTime,value:t})}allowOnlyTimelineStyles(){return this._currentEmptyStepKeyframe!==this._currentKeyframe}applyEmptyStep(e){e&&this._previousKeyframe.set("easing",e);for(let[t,n]of this._globalTimelineStyles)this._backFill.set(t,n||ur),this._currentKeyframe.set(t,ur);this._currentEmptyStepKeyframe=this._currentKeyframe}setStyles(e,t,n,i){t&&this._previousKeyframe.set("easing",t);let o=i&&i.params||{},s=WS(e,this._globalTimelineStyles);for(let[a,c]of s){let l=Rs(c,o,n);this._pendingStyles.set(a,l),this._localTimelineStyles.has(a)||this._backFill.set(a,this._globalTimelineStyles.get(a)??ur),this._updateStyle(a,l)}}applyStylesToKeyframe(){this._pendingStyles.size!=0&&(this._pendingStyles.forEach((e,t)=>{this._currentKeyframe.set(t,e)}),this._pendingStyles.clear(),this._localTimelineStyles.forEach((e,t)=>{this._currentKeyframe.has(t)||this._currentKeyframe.set(t,e)}))}snapshotCurrentStyles(){for(let[e,t]of this._localTimelineStyles)this._pendingStyles.set(e,t),this._updateStyle(e,t)}getFinalKeyframe(){return this._keyframes.get(this.duration)}get properties(){let e=[];for(let t in this._currentKeyframe)e.push(t);return e}mergeTimelineCollectedStyles(e){e._styleSummary.forEach((t,n)=>{let i=this._styleSummary.get(n);(!i||t.time>i.time)&&this._updateStyle(n,t.value)})}buildKeyframes(){this.applyStylesToKeyframe();let e=new Set,t=new Set,n=this._keyframes.size===1&&this.duration===0,i=[];this._keyframes.forEach((a,c)=>{let l=new Map([...this._backFill,...a]);l.forEach((p,g)=>{p===Ms?e.add(g):p===ur&&t.add(g)}),n||l.set("offset",c/this.duration),i.push(l)});let o=[...e.values()],s=[...t.values()];if(n){let a=i[0],c=new Map(a);a.set("offset",0),c.set("offset",1),i=[a,c]}return pf(this.element,i,o,s,this.duration,this.startTime,this.easing,!1)}},sf=class extends yu{keyframes;preStyleProps;postStyleProps;_stretchStartingKeyframe;timings;constructor(e,t,n,i,o,s,a=!1){super(e,t,s.delay),this.keyframes=n,this.preStyleProps=i,this.postStyleProps=o,this._stretchStartingKeyframe=a,this.timings={duration:s.duration,delay:s.delay,easing:s.easing}}containsAnimation(){return this.keyframes.length>1}buildKeyframes(){let e=this.keyframes,{delay:t,duration:n,easing:i}=this.timings;if(this._stretchStartingKeyframe&&t){let o=[],s=n+t,a=t/s,c=new Map(e[0]);c.set("offset",0),o.push(c);let l=new Map(e[0]);l.set("offset",ov(a)),o.push(l);let p=e.length-1;for(let g=1;g<=p;g++){let h=new Map(e[g]),d=h.get("offset"),m=t+d*n;h.set("offset",ov(m/s)),o.push(h)}n=s,t=0,i="",e=o}return pf(this.element,e,this.preStyleProps,this.postStyleProps,n,t,i,!0)}};function ov(r,e=3){let t=Math.pow(10,e-1);return Math.round(r*t)/t}function WS(r,e){let t=new Map,n;return r.forEach(i=>{if(i==="*"){n??=e.keys();for(let o of n)t.set(o,ur)}else for(let[o,s]of i)t.set(o,s)}),t}function sv(r,e,t,n,i,o,s,a,c,l,p,g,h){return{type:0,element:r,triggerName:e,isRemovalTransition:i,fromState:t,fromStyles:o,toState:n,toStyles:s,timelines:a,queriedElements:c,preStyleProps:l,postStyleProps:p,totalTime:g,errors:h}}var Jd={},Cu=class{_triggerName;ast;_stateStyles;constructor(e,t,n){this._triggerName=e,this.ast=t,this._stateStyles=n}match(e,t,n,i){return QS(this.ast.matchers,e,t,n,i)}buildStyles(e,t,n){let i=this._stateStyles.get("*");return e!==void 0&&(i=this._stateStyles.get(e?.toString())||i),i?i.buildStyles(t,n):new Map}build(e,t,n,i,o,s,a,c,l,p){let g=[],h=this.ast.options&&this.ast.options.params||Jd,d=a&&a.params||Jd,m=this.buildStyles(n,d,g),f=c&&c.params||Jd,y=this.buildStyles(i,f,g),v=new Set,S=new Map,A=new Map,T=i==="void",b={params:mv(f,h),delay:this.ast.options?.delay},D=p?[]:gv(e,t,this.ast.animation,o,s,m,y,b,l,g),B=0;return D.forEach(C=>{B=Math.max(C.duration+C.delay,B)}),g.length?sv(t,this._triggerName,n,i,T,m,y,[],[],S,A,B,g):(D.forEach(C=>{let E=C.element,I=Gt(S,E,new Set);C.preStyleProps.forEach(_=>I.add(_));let R=Gt(A,E,new Set);C.postStyleProps.forEach(_=>R.add(_)),E!==t&&v.add(E)}),sv(t,this._triggerName,n,i,T,m,y,D,[...v.values()],S,A,B))}};function QS(r,e,t,n,i){return r.some(o=>o(e,t,n,i))}function mv(r,e){let t=q({},e);return Object.entries(r).forEach(([n,i])=>{i!=null&&(t[n]=i)}),t}var af=class{styles;defaultParams;normalizer;constructor(e,t,n){this.styles=e,this.defaultParams=t,this.normalizer=n}buildStyles(e,t){let n=new Map,i=mv(e,this.defaultParams);return this.styles.styles.forEach(o=>{typeof o!="string"&&o.forEach((s,a)=>{s&&(s=Rs(s,i,t));let c=this.normalizer.normalizePropertyName(a,t);s=this.normalizer.normalizeStyleValue(a,c,s,t),n.set(a,s)})}),n}};function YS(r,e,t){return new cf(r,e,t)}var cf=class{name;ast;_normalizer;transitionFactories=[];fallbackTransition;states=new Map;constructor(e,t,n){this.name=e,this.ast=t,this._normalizer=n,t.states.forEach(i=>{let o=i.options&&i.options.params||{};this.states.set(i.name,new af(i.style,o,n))}),av(this.states,"true","1"),av(this.states,"false","0"),t.transitions.forEach(i=>{this.transitionFactories.push(new Cu(e,i,this.states))}),this.fallbackTransition=JS(e,this.states)}get containsQueries(){return this.ast.queryCount>0}matchTransition(e,t,n,i){return this.transitionFactories.find(s=>s.match(e,t,n,i))||null}matchStyles(e,t,n){return this.fallbackTransition.buildStyles(e,t,n)}};function JS(r,e,t){let n=[(s,a)=>!0],i={type:ge.Sequence,steps:[],options:null},o={type:ge.Transition,animation:i,matchers:n,options:null,queryCount:0,depCount:0};return new Cu(r,o,e)}function av(r,e,t){r.has(e)?r.has(t)||r.set(t,r.get(e)):r.has(t)&&r.set(e,r.get(t))}var XS=new hc,lf=class{bodyNode;_driver;_normalizer;_animations=new Map;_playersById=new Map;players=[];constructor(e,t,n){this.bodyNode=e,this._driver=t,this._normalizer=n}register(e,t){let n=[],i=[],o=pv(this._driver,t,n,i);if(n.length)throw qm(n);this._animations.set(e,o)}_buildPlayer(e,t,n){let i=e.element,o=qd(this._normalizer,e.keyframes,t,n);return this._driver.animate(i,o,e.duration,e.delay,e.easing,[],!0)}create(e,t,n={}){let i=[],o=this._animations.get(e),s,a=new Map;if(o?(s=gv(this._driver,t,o,$d,au,new Map,new Map,n,XS,i),s.forEach(p=>{let g=Gt(a,p.element,new Map);p.postStyleProps.forEach(h=>g.set(h,null))})):(i.push(jm()),s=[]),i.length)throw Vm(i);a.forEach((p,g)=>{p.forEach((h,d)=>{p.set(d,this._driver.computeStyle(g,d,ur))})});let c=s.map(p=>{let g=a.get(p.element);return this._buildPlayer(p,new Map,g)}),l=An(c);return this._playersById.set(e,l),l.onDestroy(()=>this.destroy(e)),this.players.push(l),l}destroy(e){let t=this._getPlayer(e);t.destroy(),this._playersById.delete(e);let n=this.players.indexOf(t);n>=0&&this.players.splice(n,1)}_getPlayer(e){let t=this._playersById.get(e);if(!t)throw Gm(e);return t}listen(e,t,n,i){let o=ou(t,"","","");return iu(this._getPlayer(e),n,o,i),()=>{}}command(e,t,n,i){if(n=="register"){this.register(e,i[0]);return}if(n=="create"){let s=i[0]||{};this.create(e,t,s);return}let o=this._getPlayer(e);switch(n){case"play":o.play();break;case"pause":o.pause();break;case"reset":o.reset();break;case"restart":o.restart();break;case"finish":o.finish();break;case"init":o.init();break;case"setPosition":o.setPosition(parseFloat(i[0]));break;case"destroy":this.destroy(e);break}}},cv="ng-animate-queued",ZS=".ng-animate-queued",Xd="ng-animate-disabled",eE=".ng-animate-disabled",tE="ng-star-inserted",rE=".ng-star-inserted",nE=[],vv={namespaceId:"",setForRemoval:!1,setForMove:!1,hasAnimation:!1,removedBeforeQueried:!1},iE={namespaceId:"",setForMove:!1,setForRemoval:!1,hasAnimation:!1,removedBeforeQueried:!0},Ar="__ng_removed",dc=class{namespaceId;value;options;get params(){return this.options.params}constructor(e,t=""){this.namespaceId=t;let n=e&&e.hasOwnProperty("value"),i=n?e.value:e;if(this.value=sE(i),n){let o=e,{value:s}=o,a=lr(o,["value"]);this.options=a}else this.options={};this.options.params||(this.options.params={})}absorbOptions(e){let t=e.params;if(t){let n=this.options.params;Object.keys(t).forEach(i=>{n[i]==null&&(n[i]=t[i])})}}},uc="void",Zd=new dc(uc),uf=class{id;hostElement;_engine;players=[];_triggers=new Map;_queue=[];_elementListeners=new Map;_hostClassName;constructor(e,t,n){this.id=e,this.hostElement=t,this._engine=n,this._hostClassName="ng-tns-"+e,cr(t,this._hostClassName)}listen(e,t,n,i){if(!this._triggers.has(t))throw zm(n,t);if(n==null||n.length==0)throw $m(t);if(!aE(n))throw Wm(n,t);let o=Gt(this._elementListeners,e,[]),s={name:t,phase:n,callback:i};o.push(s);let a=Gt(this._engine.statesByElement,e,new Map);return a.has(t)||(cr(e,ac),cr(e,ac+"-"+t),a.set(t,Zd)),()=>{this._engine.afterFlush(()=>{let c=o.indexOf(s);c>=0&&o.splice(c,1),this._triggers.has(t)||a.delete(t)})}}register(e,t){return this._triggers.has(e)?!1:(this._triggers.set(e,t),!0)}_getTrigger(e){let t=this._triggers.get(e);if(!t)throw Qm(e);return t}trigger(e,t,n,i=!0){let o=this._getTrigger(t),s=new fc(this.id,t,e),a=this._engine.statesByElement.get(e);a||(cr(e,ac),cr(e,ac+"-"+t),this._engine.statesByElement.set(e,a=new Map));let c=a.get(t),l=new dc(n,this.id);if(!(n&&n.hasOwnProperty("value"))&&c&&l.absorbOptions(c.options),a.set(t,l),c||(c=Zd),!(l.value===uc)&&c.value===l.value){if(!uE(c.params,l.params)){let f=[],y=o.matchStyles(c.value,c.params,f),v=o.matchStyles(l.value,l.params,f);f.length?this._engine.reportError(f):this._engine.afterFlush(()=>{ri(e,y),Er(e,v)})}return}let h=Gt(this._engine.playersByElement,e,[]);h.forEach(f=>{f.namespaceId==this.id&&f.triggerName==t&&f.queued&&f.destroy()});let d=o.matchTransition(c.value,l.value,e,l.params),m=!1;if(!d){if(!i)return;d=o.fallbackTransition,m=!0}return this._engine.totalQueuedPlayers++,this._queue.push({element:e,triggerName:t,transition:d,fromState:c,toState:l,player:s,isFallbackTransition:m}),m||(cr(e,cv),s.onStart(()=>{Ps(e,cv)})),s.onDone(()=>{let f=this.players.indexOf(s);f>=0&&this.players.splice(f,1);let y=this._engine.playersByElement.get(e);if(y){let v=y.indexOf(s);v>=0&&y.splice(v,1)}}),this.players.push(s),h.push(s),s}deregister(e){this._triggers.delete(e),this._engine.statesByElement.forEach(t=>t.delete(e)),this._elementListeners.forEach((t,n)=>{this._elementListeners.set(n,t.filter(i=>i.name!=e))})}clearElementCache(e){this._engine.statesByElement.delete(e),this._elementListeners.delete(e);let t=this._engine.playersByElement.get(e);t&&(t.forEach(n=>n.destroy()),this._engine.playersByElement.delete(e))}_signalRemovalForInnerTriggers(e,t){let n=this._engine.driver.query(e,cc,!0);n.forEach(i=>{if(i[Ar])return;let o=this._engine.fetchNamespacesByElement(i);o.size?o.forEach(s=>s.triggerLeaveAnimation(i,t,!1,!0)):this.clearElementCache(i)}),this._engine.afterFlushAnimationsDone(()=>n.forEach(i=>this.clearElementCache(i)))}triggerLeaveAnimation(e,t,n,i){let o=this._engine.statesByElement.get(e),s=new Map;if(o){let a=[];if(o.forEach((c,l)=>{if(s.set(l,c.value),this._triggers.has(l)){let p=this.trigger(e,l,uc,i);p&&a.push(p)}}),a.length)return this._engine.markElementAsRemoved(this.id,e,!0,t,s),n&&An(a).onDone(()=>this._engine.processLeaveNode(e)),!0}return!1}prepareLeaveAnimationListeners(e){let t=this._elementListeners.get(e),n=this._engine.statesByElement.get(e);if(t&&n){let i=new Set;t.forEach(o=>{let s=o.name;if(i.has(s))return;i.add(s);let c=this._triggers.get(s).fallbackTransition,l=n.get(s)||Zd,p=new dc(uc),g=new fc(this.id,s,e);this._engine.totalQueuedPlayers++,this._queue.push({element:e,triggerName:s,transition:c,fromState:l,toState:p,player:g,isFallbackTransition:!0})})}}removeNode(e,t){let n=this._engine;if(e.childElementCount&&this._signalRemovalForInnerTriggers(e,t),this.triggerLeaveAnimation(e,t,!0))return;let i=!1;if(n.totalAnimations){let o=n.players.length?n.playersByQueriedElement.get(e):[];if(o&&o.length)i=!0;else{let s=e;for(;s=s.parentNode;)if(n.statesByElement.get(s)){i=!0;break}}}if(this.prepareLeaveAnimationListeners(e),i)n.markElementAsRemoved(this.id,e,!1,t);else{let o=e[Ar];(!o||o===vv)&&(n.afterFlush(()=>this.clearElementCache(e)),n.destroyInnerAnimations(e),n._onRemovalComplete(e,t))}}insertNode(e,t){cr(e,this._hostClassName)}drainQueuedTransitions(e){let t=[];return this._queue.forEach(n=>{let i=n.player;if(i.destroyed)return;let o=n.element,s=this._elementListeners.get(o);s&&s.forEach(a=>{if(a.name==n.triggerName){let c=ou(o,n.triggerName,n.fromState.value,n.toState.value);c._data=e,iu(n.player,a.phase,c,a.callback)}}),i.markedForDestroy?this._engine.afterFlush(()=>{i.destroy()}):t.push(n)}),this._queue=[],t.sort((n,i)=>{let o=n.transition.ast.depCount,s=i.transition.ast.depCount;return o==0||s==0?o-s:this._engine.driver.containsElement(n.element,i.element)?1:-1})}destroy(e){this.players.forEach(t=>t.destroy()),this._signalRemovalForInnerTriggers(this.hostElement,e)}},hf=class{bodyNode;driver;_normalizer;players=[];newHostElements=new Map;playersByElement=new Map;playersByQueriedElement=new Map;statesByElement=new Map;disabledNodes=new Set;totalAnimations=0;totalQueuedPlayers=0;_namespaceLookup={};_namespaceList=[];_flushFns=[];_whenQuietFns=[];namespacesByHostElement=new Map;collectedEnterElements=[];collectedLeaveElements=[];onRemovalComplete=(e,t)=>{};_onRemovalComplete(e,t){this.onRemovalComplete(e,t)}constructor(e,t,n){this.bodyNode=e,this.driver=t,this._normalizer=n}get queuedPlayers(){let e=[];return this._namespaceList.forEach(t=>{t.players.forEach(n=>{n.queued&&e.push(n)})}),e}createNamespace(e,t){let n=new uf(e,t,this);return this.bodyNode&&this.driver.containsElement(this.bodyNode,t)?this._balanceNamespaceList(n,t):(this.newHostElements.set(t,n),this.collectEnterElement(t)),this._namespaceLookup[e]=n}_balanceNamespaceList(e,t){let n=this._namespaceList,i=this.namespacesByHostElement;if(n.length-1>=0){let s=!1,a=this.driver.getParentElement(t);for(;a;){let c=i.get(a);if(c){let l=n.indexOf(c);n.splice(l+1,0,e),s=!0;break}a=this.driver.getParentElement(a)}s||n.unshift(e)}else n.push(e);return i.set(t,e),e}register(e,t){let n=this._namespaceLookup[e];return n||(n=this.createNamespace(e,t)),n}registerTrigger(e,t,n){let i=this._namespaceLookup[e];i&&i.register(t,n)&&this.totalAnimations++}destroy(e,t){e&&(this.afterFlush(()=>{}),this.afterFlushAnimationsDone(()=>{let n=this._fetchNamespace(e);this.namespacesByHostElement.delete(n.hostElement);let i=this._namespaceList.indexOf(n);i>=0&&this._namespaceList.splice(i,1),n.destroy(t),delete this._namespaceLookup[e]}))}_fetchNamespace(e){return this._namespaceLookup[e]}fetchNamespacesByElement(e){let t=new Set,n=this.statesByElement.get(e);if(n){for(let i of n.values())if(i.namespaceId){let o=this._fetchNamespace(i.namespaceId);o&&t.add(o)}}return t}trigger(e,t,n,i){if(fu(t)){let o=this._fetchNamespace(e);if(o)return o.trigger(t,n,i),!0}return!1}insertNode(e,t,n,i){if(!fu(t))return;let o=t[Ar];if(o&&o.setForRemoval){o.setForRemoval=!1,o.setForMove=!0;let s=this.collectedLeaveElements.indexOf(t);s>=0&&this.collectedLeaveElements.splice(s,1)}if(e){let s=this._fetchNamespace(e);s&&s.insertNode(t,n)}i&&this.collectEnterElement(t)}collectEnterElement(e){this.collectedEnterElements.push(e)}markElementAsDisabled(e,t){t?this.disabledNodes.has(e)||(this.disabledNodes.add(e),cr(e,Xd)):this.disabledNodes.has(e)&&(this.disabledNodes.delete(e),Ps(e,Xd))}removeNode(e,t,n){if(fu(t)){let i=e?this._fetchNamespace(e):null;i?i.removeNode(t,n):this.markElementAsRemoved(e,t,!1,n);let o=this.namespacesByHostElement.get(t);o&&o.id!==e&&o.removeNode(t,n)}else this._onRemovalComplete(t,n)}markElementAsRemoved(e,t,n,i,o){this.collectedLeaveElements.push(t),t[Ar]={namespaceId:e,setForRemoval:i,hasAnimation:n,removedBeforeQueried:!1,previousTriggersValues:o}}listen(e,t,n,i,o){return fu(t)?this._fetchNamespace(e).listen(t,n,i,o):()=>{}}_buildInstruction(e,t,n,i,o){return e.transition.build(this.driver,e.element,e.fromState.value,e.toState.value,n,i,e.fromState.options,e.toState.options,t,o)}destroyInnerAnimations(e){let t=this.driver.query(e,cc,!0);t.forEach(n=>this.destroyActiveAnimationsForElement(n)),this.playersByQueriedElement.size!=0&&(t=this.driver.query(e,cu,!0),t.forEach(n=>this.finishActiveQueriedAnimationOnElement(n)))}destroyActiveAnimationsForElement(e){let t=this.playersByElement.get(e);t&&t.forEach(n=>{n.queued?n.markedForDestroy=!0:n.destroy()})}finishActiveQueriedAnimationOnElement(e){let t=this.playersByQueriedElement.get(e);t&&t.forEach(n=>n.finish())}whenRenderingDone(){return new Promise(e=>{if(this.players.length)return An(this.players).onDone(()=>e());e()})}processLeaveNode(e){let t=e[Ar];if(t&&t.setForRemoval){if(e[Ar]=vv,t.namespaceId){this.destroyInnerAnimations(e);let n=this._fetchNamespace(t.namespaceId);n&&n.clearElementCache(e)}this._onRemovalComplete(e,t.setForRemoval)}e.classList?.contains(Xd)&&this.markElementAsDisabled(e,!1),this.driver.query(e,eE,!0).forEach(n=>{this.markElementAsDisabled(n,!1)})}flush(e=-1){let t=[];if(this.newHostElements.size&&(this.newHostElements.forEach((n,i)=>this._balanceNamespaceList(n,i)),this.newHostElements.clear()),this.totalAnimations&&this.collectedEnterElements.length)for(let n=0;n<this.collectedEnterElements.length;n++){let i=this.collectedEnterElements[n];cr(i,tE)}if(this._namespaceList.length&&(this.totalQueuedPlayers||this.collectedLeaveElements.length)){let n=[];try{t=this._flushAnimations(n,e)}finally{for(let i=0;i<n.length;i++)n[i]()}}else for(let n=0;n<this.collectedLeaveElements.length;n++){let i=this.collectedLeaveElements[n];this.processLeaveNode(i)}if(this.totalQueuedPlayers=0,this.collectedEnterElements.length=0,this.collectedLeaveElements.length=0,this._flushFns.forEach(n=>n()),this._flushFns=[],this._whenQuietFns.length){let n=this._whenQuietFns;this._whenQuietFns=[],t.length?An(t).onDone(()=>{n.forEach(i=>i())}):n.forEach(i=>i())}}reportError(e){throw Ym(e)}_flushAnimations(e,t){let n=new hc,i=[],o=new Map,s=[],a=new Map,c=new Map,l=new Map,p=new Set;this.disabledNodes.forEach(P=>{p.add(P);let F=this.driver.query(P,ZS,!0);for(let j=0;j<F.length;j++)p.add(F[j])});let g=this.bodyNode,h=Array.from(this.statesByElement.keys()),d=hv(h,this.collectedEnterElements),m=new Map,f=0;d.forEach((P,F)=>{let j=$d+f++;m.set(F,j),P.forEach($=>cr($,j))});let y=[],v=new Set,S=new Set;for(let P=0;P<this.collectedLeaveElements.length;P++){let F=this.collectedLeaveElements[P],j=F[Ar];j&&j.setForRemoval&&(y.push(F),v.add(F),j.hasAnimation?this.driver.query(F,rE,!0).forEach($=>v.add($)):S.add(F))}let A=new Map,T=hv(h,Array.from(v));T.forEach((P,F)=>{let j=au+f++;A.set(F,j),P.forEach($=>cr($,j))}),e.push(()=>{d.forEach((P,F)=>{let j=m.get(F);P.forEach($=>Ps($,j))}),T.forEach((P,F)=>{let j=A.get(F);P.forEach($=>Ps($,j))}),y.forEach(P=>{this.processLeaveNode(P)})});let b=[],D=[];for(let P=this._namespaceList.length-1;P>=0;P--)this._namespaceList[P].drainQueuedTransitions(t).forEach(j=>{let $=j.player,Q=j.element;if(b.push($),this.collectedEnterElements.length){let we=Q[Ar];if(we&&we.setForMove){if(we.previousTriggersValues&&we.previousTriggersValues.has(j.triggerName)){let We=we.previousTriggersValues.get(j.triggerName),Fe=this.statesByElement.get(j.element);if(Fe&&Fe.has(j.triggerName)){let ve=Fe.get(j.triggerName);ve.value=We,Fe.set(j.triggerName,ve)}}$.destroy();return}}let oe=!g||!this.driver.containsElement(g,Q),ee=A.get(Q),me=m.get(Q),te=this._buildInstruction(j,n,me,ee,oe);if(te.errors&&te.errors.length){D.push(te);return}if(oe){$.onStart(()=>ri(Q,te.fromStyles)),$.onDestroy(()=>Er(Q,te.toStyles)),i.push($);return}if(j.isFallbackTransition){$.onStart(()=>ri(Q,te.fromStyles)),$.onDestroy(()=>Er(Q,te.toStyles)),i.push($);return}let Zt=[];te.timelines.forEach(we=>{we.stretchStartingKeyframe=!0,this.disabledNodes.has(we.element)||Zt.push(we)}),te.timelines=Zt,n.append(Q,te.timelines);let bt={instruction:te,player:$,element:Q};s.push(bt),te.queriedElements.forEach(we=>Gt(a,we,[]).push($)),te.preStyleProps.forEach((we,We)=>{if(we.size){let Fe=c.get(We);Fe||c.set(We,Fe=new Set),we.forEach((ve,Ve)=>Fe.add(Ve))}}),te.postStyleProps.forEach((we,We)=>{let Fe=l.get(We);Fe||l.set(We,Fe=new Set),we.forEach((ve,Ve)=>Fe.add(Ve))})});if(D.length){let P=[];D.forEach(F=>{P.push(Jm(F.triggerName,F.errors))}),b.forEach(F=>F.destroy()),this.reportError(P)}let B=new Map,C=new Map;s.forEach(P=>{let F=P.element;n.has(F)&&(C.set(F,F),this._beforeAnimationBuild(P.player.namespaceId,P.instruction,B))}),i.forEach(P=>{let F=P.element;this._getPreviousPlayers(F,!1,P.namespaceId,P.triggerName,null).forEach($=>{Gt(B,F,[]).push($),$.destroy()})});let E=y.filter(P=>dv(P,c,l)),I=new Map;uv(I,this.driver,S,l,ur).forEach(P=>{dv(P,c,l)&&E.push(P)});let _=new Map;d.forEach((P,F)=>{uv(_,this.driver,new Set(P),c,Ms)}),E.forEach(P=>{let F=I.get(P),j=_.get(P);I.set(P,new Map([...F?.entries()??[],...j?.entries()??[]]))});let M=[],k=[],N={};s.forEach(P=>{let{element:F,player:j,instruction:$}=P;if(n.has(F)){if(p.has(F)){j.onDestroy(()=>Er(F,$.toStyles)),j.disabled=!0,j.overrideTotalTime($.totalTime),i.push(j);return}let Q=N;if(C.size>1){let ee=F,me=[];for(;ee=ee.parentNode;){let te=C.get(ee);if(te){Q=te;break}me.push(ee)}me.forEach(te=>C.set(te,Q))}let oe=this._buildAnimation(j.namespaceId,$,B,o,_,I);if(j.setRealPlayer(oe),Q===N)M.push(j);else{let ee=this.playersByElement.get(Q);ee&&ee.length&&(j.parentPlayer=An(ee)),i.push(j)}}else ri(F,$.fromStyles),j.onDestroy(()=>Er(F,$.toStyles)),k.push(j),p.has(F)&&i.push(j)}),k.forEach(P=>{let F=o.get(P.element);if(F&&F.length){let j=An(F);P.setRealPlayer(j)}}),i.forEach(P=>{P.parentPlayer?P.syncPlayerEvents(P.parentPlayer):P.destroy()});for(let P=0;P<y.length;P++){let F=y[P],j=F[Ar];if(Ps(F,au),j&&j.hasAnimation)continue;let $=[];if(a.size){let oe=a.get(F);oe&&oe.length&&$.push(...oe);let ee=this.driver.query(F,cu,!0);for(let me=0;me<ee.length;me++){let te=a.get(ee[me]);te&&te.length&&$.push(...te)}}let Q=$.filter(oe=>!oe.destroyed);Q.length?cE(this,F,Q):this.processLeaveNode(F)}return y.length=0,M.forEach(P=>{this.players.push(P),P.onDone(()=>{P.destroy();let F=this.players.indexOf(P);this.players.splice(F,1)}),P.play()}),M}afterFlush(e){this._flushFns.push(e)}afterFlushAnimationsDone(e){this._whenQuietFns.push(e)}_getPreviousPlayers(e,t,n,i,o){let s=[];if(t){let a=this.playersByQueriedElement.get(e);a&&(s=a)}else{let a=this.playersByElement.get(e);if(a){let c=!o||o==uc;a.forEach(l=>{l.queued||!c&&l.triggerName!=i||s.push(l)})}}return(n||i)&&(s=s.filter(a=>!(n&&n!=a.namespaceId||i&&i!=a.triggerName))),s}_beforeAnimationBuild(e,t,n){let i=t.triggerName,o=t.element,s=t.isRemovalTransition?void 0:e,a=t.isRemovalTransition?void 0:i;for(let c of t.timelines){let l=c.element,p=l!==o,g=Gt(n,l,[]);this._getPreviousPlayers(l,p,s,a,t.toState).forEach(d=>{let m=d.getRealPlayer();m.beforeDestroy&&m.beforeDestroy(),d.destroy(),g.push(d)})}ri(o,t.fromStyles)}_buildAnimation(e,t,n,i,o,s){let a=t.triggerName,c=t.element,l=[],p=new Set,g=new Set,h=t.timelines.map(m=>{let f=m.element;p.add(f);let y=f[Ar];if(y&&y.removedBeforeQueried)return new ii(m.duration,m.delay);let v=f!==c,S=lE((n.get(f)||nE).map(B=>B.getRealPlayer())).filter(B=>{let C=B;return C.element?C.element===f:!1}),A=o.get(f),T=s.get(f),b=qd(this._normalizer,m.keyframes,A,T),D=this._buildPlayer(m,b,S);if(m.subTimeline&&i&&g.add(f),v){let B=new fc(e,a,f);B.setRealPlayer(D),l.push(B)}return D});l.forEach(m=>{Gt(this.playersByQueriedElement,m.element,[]).push(m),m.onDone(()=>oE(this.playersByQueriedElement,m.element,m))}),p.forEach(m=>cr(m,Wd));let d=An(h);return d.onDestroy(()=>{p.forEach(m=>Ps(m,Wd)),Er(c,t.toStyles)}),g.forEach(m=>{Gt(i,m,[]).push(d)}),d}_buildPlayer(e,t,n){return t.length>0?this.driver.animate(e.element,t,e.duration,e.delay,e.easing,n):new ii(e.duration,e.delay)}},fc=class{namespaceId;triggerName;element;_player=new ii;_containsRealPlayer=!1;_queuedCallbacks=new Map;destroyed=!1;parentPlayer=null;markedForDestroy=!1;disabled=!1;queued=!0;totalTime=0;constructor(e,t,n){this.namespaceId=e,this.triggerName=t,this.element=n}setRealPlayer(e){this._containsRealPlayer||(this._player=e,this._queuedCallbacks.forEach((t,n)=>{t.forEach(i=>iu(e,n,void 0,i))}),this._queuedCallbacks.clear(),this._containsRealPlayer=!0,this.overrideTotalTime(e.totalTime),this.queued=!1)}getRealPlayer(){return this._player}overrideTotalTime(e){this.totalTime=e}syncPlayerEvents(e){let t=this._player;t.triggerCallback&&e.onStart(()=>t.triggerCallback("start")),e.onDone(()=>this.finish()),e.onDestroy(()=>this.destroy())}_queueEvent(e,t){Gt(this._queuedCallbacks,e,[]).push(t)}onDone(e){this.queued&&this._queueEvent("done",e),this._player.onDone(e)}onStart(e){this.queued&&this._queueEvent("start",e),this._player.onStart(e)}onDestroy(e){this.queued&&this._queueEvent("destroy",e),this._player.onDestroy(e)}init(){this._player.init()}hasStarted(){return this.queued?!1:this._player.hasStarted()}play(){!this.queued&&this._player.play()}pause(){!this.queued&&this._player.pause()}restart(){!this.queued&&this._player.restart()}finish(){this._player.finish()}destroy(){this.destroyed=!0,this._player.destroy()}reset(){!this.queued&&this._player.reset()}setPosition(e){this.queued||this._player.setPosition(e)}getPosition(){return this.queued?0:this._player.getPosition()}triggerCallback(e){let t=this._player;t.triggerCallback&&t.triggerCallback(e)}};function oE(r,e,t){let n=r.get(e);if(n){if(n.length){let i=n.indexOf(t);n.splice(i,1)}n.length==0&&r.delete(e)}return n}function sE(r){return r??null}function fu(r){return r&&r.nodeType===1}function aE(r){return r=="start"||r=="done"}function lv(r,e){let t=r.style.display;return r.style.display=e??"none",t}function uv(r,e,t,n,i){let o=[];t.forEach(c=>o.push(lv(c)));let s=[];n.forEach((c,l)=>{let p=new Map;c.forEach(g=>{let h=e.computeStyle(l,g,i);p.set(g,h),(!h||h.length==0)&&(l[Ar]=iE,s.push(l))}),r.set(l,p)});let a=0;return t.forEach(c=>lv(c,o[a++])),s}function hv(r,e){let t=new Map;if(r.forEach(a=>t.set(a,[])),e.length==0)return t;let n=1,i=new Set(e),o=new Map;function s(a){if(!a)return n;let c=o.get(a);if(c)return c;let l=a.parentNode;return t.has(l)?c=l:i.has(l)?c=n:c=s(l),o.set(a,c),c}return e.forEach(a=>{let c=s(a);c!==n&&t.get(c).push(a)}),t}function cr(r,e){r.classList?.add(e)}function Ps(r,e){r.classList?.remove(e)}function cE(r,e,t){An(t).onDone(()=>r.processLeaveNode(e))}function lE(r){let e=[];return yv(r,e),e}function yv(r,e){for(let t=0;t<r.length;t++){let n=r[t];n instanceof bc?yv(n.players,e):e.push(n)}}function uE(r,e){let t=Object.keys(r),n=Object.keys(e);if(t.length!=n.length)return!1;for(let i=0;i<t.length;i++){let o=t[i];if(!e.hasOwnProperty(o)||r[o]!==e[o])return!1}return!0}function dv(r,e,t){let n=t.get(r);if(!n)return!1;let i=e.get(r);return i?n.forEach(o=>i.add(o)):e.set(r,n),t.delete(r),!0}var ks=class{_driver;_normalizer;_transitionEngine;_timelineEngine;_triggerCache={};onRemovalComplete=(e,t)=>{};constructor(e,t,n){this._driver=t,this._normalizer=n,this._transitionEngine=new hf(e.body,t,n),this._timelineEngine=new lf(e.body,t,n),this._transitionEngine.onRemovalComplete=(i,o)=>this.onRemovalComplete(i,o)}registerTrigger(e,t,n,i,o){let s=e+"-"+i,a=this._triggerCache[s];if(!a){let c=[],l=[],p=pv(this._driver,o,c,l);if(c.length)throw Km(i,c);a=YS(i,p,this._normalizer),this._triggerCache[s]=a}this._transitionEngine.registerTrigger(t,i,a)}register(e,t){this._transitionEngine.register(e,t)}destroy(e,t){this._transitionEngine.destroy(e,t)}onInsert(e,t,n,i){this._transitionEngine.insertNode(e,t,n,i)}onRemove(e,t,n){this._transitionEngine.removeNode(e,t,n)}disableAnimations(e,t){this._transitionEngine.markElementAsDisabled(e,t)}process(e,t,n,i){if(n.charAt(0)=="@"){let[o,s]=jd(n),a=i;this._timelineEngine.command(o,t,s,a)}else this._transitionEngine.trigger(e,t,n,i)}listen(e,t,n,i,o){if(n.charAt(0)=="@"){let[s,a]=jd(n);return this._timelineEngine.listen(s,t,a,o)}return this._transitionEngine.listen(e,t,n,i,o)}flush(e=-1){this._transitionEngine.flush(e)}get players(){return[...this._transitionEngine.players,...this._timelineEngine.players]}whenRenderingDone(){return this._transitionEngine.whenRenderingDone()}afterFlushAnimationsDone(e){this._transitionEngine.afterFlushAnimationsDone(e)}};function hE(r,e){let t=null,n=null;return Array.isArray(e)&&e.length?(t=ef(e[0]),e.length>1&&(n=ef(e[e.length-1]))):e instanceof Map&&(t=ef(e)),t||n?new dE(r,t,n):null}var dE=(()=>{class r{_element;_startStyles;_endStyles;static initialStylesByElement=new WeakMap;_state=0;_initialStyles;constructor(t,n,i){this._element=t,this._startStyles=n,this._endStyles=i;let o=r.initialStylesByElement.get(t);o||r.initialStylesByElement.set(t,o=new Map),this._initialStyles=o}start(){this._state<1&&(this._startStyles&&Er(this._element,this._startStyles,this._initialStyles),this._state=1)}finish(){this.start(),this._state<2&&(Er(this._element,this._initialStyles),this._endStyles&&(Er(this._element,this._endStyles),this._endStyles=null),this._state=1)}destroy(){this.finish(),this._state<3&&(r.initialStylesByElement.delete(this._element),this._startStyles&&(ri(this._element,this._startStyles),this._endStyles=null),this._endStyles&&(ri(this._element,this._endStyles),this._endStyles=null),Er(this._element,this._initialStyles),this._state=3)}}return r})();function ef(r){let e=null;return r.forEach((t,n)=>{fE(n)&&(e=e||new Map,e.set(n,t))}),e}function fE(r){return r==="display"||r==="position"}var Su=class{element;keyframes;options;_specialStyles;_onDoneFns=[];_onStartFns=[];_onDestroyFns=[];_duration;_delay;_initialized=!1;_finished=!1;_started=!1;_destroyed=!1;_finalKeyframe;_originalOnDoneFns=[];_originalOnStartFns=[];domPlayer=null;time=0;parentPlayer=null;currentSnapshot=new Map;constructor(e,t,n,i){this.element=e,this.keyframes=t,this.options=n,this._specialStyles=i,this._duration=n.duration,this._delay=n.delay||0,this.time=this._duration+this._delay}_onFinish(){this._finished||(this._finished=!0,this._onDoneFns.forEach(e=>e()),this._onDoneFns=[])}init(){this._buildPlayer()&&this._preparePlayerBeforeStart()}_buildPlayer(){if(this._initialized)return this.domPlayer;this._initialized=!0;let e=this.keyframes,t=this._triggerWebAnimation(this.element,e,this.options);if(!t)return this._onFinish(),null;this.domPlayer=t,this._finalKeyframe=e.length?e[e.length-1]:new Map;let n=()=>this._onFinish();return t.addEventListener("finish",n),this.onDestroy(()=>{t.removeEventListener("finish",n)}),t}_preparePlayerBeforeStart(){this._delay?this._resetDomPlayerState():this.domPlayer?.pause()}_convertKeyframesToObject(e){let t=[];return e.forEach(n=>{t.push(Object.fromEntries(n))}),t}_triggerWebAnimation(e,t,n){let i=this._convertKeyframesToObject(t);try{return e.animate(i,n)}catch{return null}}onStart(e){this._originalOnStartFns.push(e),this._onStartFns.push(e)}onDone(e){this._originalOnDoneFns.push(e),this._onDoneFns.push(e)}onDestroy(e){this._onDestroyFns.push(e)}play(){let e=this._buildPlayer();e&&(this.hasStarted()||(this._onStartFns.forEach(t=>t()),this._onStartFns=[],this._started=!0,this._specialStyles&&this._specialStyles.start()),e.play())}pause(){this.init(),this.domPlayer?.pause()}finish(){this.init(),this.domPlayer&&(this._specialStyles&&this._specialStyles.finish(),this._onFinish(),this.domPlayer.finish())}reset(){this._resetDomPlayerState(),this._destroyed=!1,this._finished=!1,this._started=!1,this._onStartFns=this._originalOnStartFns,this._onDoneFns=this._originalOnDoneFns}_resetDomPlayerState(){this.domPlayer?.cancel()}restart(){this.reset(),this.play()}hasStarted(){return this._started}destroy(){this._destroyed||(this._destroyed=!0,this._resetDomPlayerState(),this._onFinish(),this._specialStyles&&this._specialStyles.destroy(),this._onDestroyFns.forEach(e=>e()),this._onDestroyFns=[])}setPosition(e){this.domPlayer||this.init(),this.domPlayer&&(this.domPlayer.currentTime=e*this.time)}getPosition(){return this.domPlayer?+(this.domPlayer.currentTime??0)/this.time:this._initialized?1:0}get totalTime(){return this._delay+this._duration}beforeDestroy(){let e=new Map;this.hasStarted()&&this._finalKeyframe.forEach((n,i)=>{i!=="offset"&&e.set(i,this._finished?n:uu(this.element,i))}),this.currentSnapshot=e}triggerCallback(e){let t=e==="start"?this._onStartFns:this._onDoneFns;t.forEach(n=>n()),t.length=0}},Eu=class{validateStyleProperty(e){return!0}validateAnimatableStyleProperty(e){return!0}containsElement(e,t){return Vd(e,t)}getParentElement(e){return su(e)}query(e,t,n){return Gd(e,t,n)}computeStyle(e,t,n){return uu(e,t)}animate(e,t,n,i,o,s=[]){let a=i==0?"both":"forwards",c={duration:n,delay:i,fill:a};o&&(c.easing=o);let l=new Map,p=s.filter(d=>d instanceof Su);tv(n,i)&&p.forEach(d=>{d.currentSnapshot.forEach((m,f)=>l.set(f,m))});let g=Zm(t).map(d=>new Map(d));g=rv(e,g,l);let h=hE(e,g);return new Su(e,g,c,h)}};var pu="@",Cv="@.disabled",Au=class{namespaceId;delegate;engine;_onDestroy;\u0275type=0;constructor(e,t,n,i){this.namespaceId=e,this.delegate=t,this.engine=n,this._onDestroy=i}get data(){return this.delegate.data}destroyNode(e){this.delegate.destroyNode?.(e)}destroy(){this.engine.destroy(this.namespaceId,this.delegate),this.engine.afterFlushAnimationsDone(()=>{queueMicrotask(()=>{this.delegate.destroy()})}),this._onDestroy?.()}createElement(e,t){return this.delegate.createElement(e,t)}createComment(e){return this.delegate.createComment(e)}createText(e){return this.delegate.createText(e)}appendChild(e,t){this.delegate.appendChild(e,t),this.engine.onInsert(this.namespaceId,t,e,!1)}insertBefore(e,t,n,i=!0){this.delegate.insertBefore(e,t,n),this.engine.onInsert(this.namespaceId,t,e,i)}removeChild(e,t,n,i){if(i){this.delegate.removeChild(e,t,n,i);return}this.parentNode(t)&&this.engine.onRemove(this.namespaceId,t,this.delegate)}selectRootElement(e,t){return this.delegate.selectRootElement(e,t)}parentNode(e){return this.delegate.parentNode(e)}nextSibling(e){return this.delegate.nextSibling(e)}setAttribute(e,t,n,i){this.delegate.setAttribute(e,t,n,i)}removeAttribute(e,t,n){this.delegate.removeAttribute(e,t,n)}addClass(e,t){this.delegate.addClass(e,t)}removeClass(e,t){this.delegate.removeClass(e,t)}setStyle(e,t,n,i){this.delegate.setStyle(e,t,n,i)}removeStyle(e,t,n){this.delegate.removeStyle(e,t,n)}setProperty(e,t,n){t.charAt(0)==pu&&t==Cv?this.disableAnimations(e,!!n):this.delegate.setProperty(e,t,n)}setValue(e,t){this.delegate.setValue(e,t)}listen(e,t,n,i){return this.delegate.listen(e,t,n,i)}disableAnimations(e,t){this.engine.disableAnimations(e,t)}},df=class extends Au{factory;constructor(e,t,n,i,o){super(t,n,i,o),this.factory=e,this.namespaceId=t}setProperty(e,t,n){t.charAt(0)==pu?t.charAt(1)=="."&&t==Cv?(n=n===void 0?!0:!!n,this.disableAnimations(e,n)):this.engine.process(this.namespaceId,e,t.slice(1),n):this.delegate.setProperty(e,t,n)}listen(e,t,n,i){if(t.charAt(0)==pu){let o=pE(e),s=t.slice(1),a="";return s.charAt(0)!=pu&&([s,a]=gE(s)),this.engine.listen(this.namespaceId,o,s,a,c=>{let l=c._data||-1;this.factory.scheduleListenerCallback(l,n,c)})}return this.delegate.listen(e,t,n,i)}};function pE(r){switch(r){case"body":return document.body;case"document":return document;case"window":return window;default:return r}}function gE(r){let e=r.indexOf("."),t=r.substring(0,e),n=r.slice(e+1);return[t,n]}var wu=class{delegate;engine;_zone;_currentId=0;_microtaskId=1;_animationCallbacksBuffer=[];_rendererCache=new Map;_cdRecurDepth=0;constructor(e,t,n){this.delegate=e,this.engine=t,this._zone=n,t.onRemovalComplete=(i,o)=>{o?.removeChild(null,i)}}createRenderer(e,t){let i=this.delegate.createRenderer(e,t);if(!e||!t?.data?.animation){let l=this._rendererCache,p=l.get(i);if(!p){let g=()=>l.delete(i);p=new Au("",i,this.engine,g),l.set(i,p)}return p}let o=t.id,s=t.id+"-"+this._currentId;this._currentId++,this.engine.register(s,e);let a=l=>{Array.isArray(l)?l.forEach(a):this.engine.registerTrigger(o,s,e,l.name,l)};return t.data.animation.forEach(a),new df(this,s,i,this.engine)}begin(){this._cdRecurDepth++,this.delegate.begin&&this.delegate.begin()}_scheduleCountTask(){queueMicrotask(()=>{this._microtaskId++})}scheduleListenerCallback(e,t,n){if(e>=0&&e<this._microtaskId){this._zone.run(()=>t(n));return}let i=this._animationCallbacksBuffer;i.length==0&&queueMicrotask(()=>{this._zone.run(()=>

91{i.forEach(o=>{let[s,a]=o;s(a)}),this._animationCallbacksBuffer=[]})}),i.push([t,n])}end(){this._cdRecurDepth--,this._cdRecurDepth==0&&this._zone.runOutsideAngular(()=>{this._scheduleCountTask(),this.engine.flush(this._microtaskId)}),this.delegate.end&&this.delegate.end()}whenRenderingDone(){return this.engine.whenRenderingDone()}componentReplaced(e){this.engine.flush(),this.delegate.componentReplaced?.(e)}};var vE=(()=>{class r extends ks{constructor(t,n,i){super(t,n,i)}ngOnDestroy(){this.flush()}static \u0275fac=function(n){return new(n||r)(ct(mc),ct(ao),ct(co))};static \u0275prov=$t({token:r,factory:r.\u0275fac})}return r})();function yE(){return new gu}function CE(r,e,t){return new wu(r,e,t)}var Sv=[{provide:co,useFactory:yE},{provide:ks,useClass:vE},{provide:Pf,useFactory:CE,deps:[jf,ks,Rf]}],aD=[{provide:ao,useClass:ff},{provide:xu,useValue:"NoopAnimations"},...Sv],SE=[{provide:ao,useFactory:()=>new Eu},{provide:xu,useFactory:()=>"BrowserAnimations"},...Sv];function Ev(){return If("NgEagerAnimations"),[...SE]}var EE=(r,e,t)=>{let n=["POST","PUT","PATCH"].indexOf(r.method.toUpperCase())!==-1,i=l=>["variables","extensions"].indexOf(l.toLowerCase())!==-1,o=r.body.length,s=r.options&&r.options.useMultipart,a;if(s){if(o)return new Ns(l=>l.error(new Error("File upload is not available when combined with Batching")));if(!n)return new Ns(l=>l.error(new Error("File upload is not available when GET is used")));if(!t)return new Ns(l=>l.error(new Error(`To use File upload you need to pass "extractFiles" function from "extract-files" library to HttpLink's options`)));a=t(r.body),s=!!a.files.size}let c={};if(o){if(!n)return new Ns(l=>l.error(new Error("Batching is not available for GET requests")));c={body:r.body}}else{let l=s?a.clone:r.body;n?c={body:l}:c={params:Object.keys(r.body).reduce((g,h)=>{let d=r.body[h];return g[h]=i(h)?JSON.stringify(d):d,g},{})}}if(s&&n){let l=new FormData;l.append("operations",JSON.stringify(c.body));let p={},g=a.files,h=0;g.forEach(d=>{p[++h]=d}),l.append("map",JSON.stringify(p)),h=0,g.forEach((d,m)=>{l.append(++h+"",m,m.name)}),c.body=l}return e.request(r.method,r.url,q(q({observe:"response",responseType:"json",reportProgress:!1},c),r.options))},AE=(r,e)=>r&&e?e.keys().reduce((n,i)=>n.set(i,e.getAll(i)),r):e||r;function wE(...r){return r.find(e=>typeof e<"u")}function TE(r){let e=r.headers&&r.headers instanceof Nu?r.headers:new Nu(r.headers);if(r.clientAwareness){let{name:t,version:n}=r.clientAwareness;t&&!e.has("apollographql-client-name")&&(e=e.set("apollographql-client-name",t)),n&&!e.has("apollographql-client-version")&&(e=e.set("apollographql-client-version",n))}return e}var bE={batchInterval:10,batchMax:10,uri:"graphql",method:"POST",withCredentials:!1,includeQuery:!0,includeExtensions:!1,useMultipart:!1};function xs(r,e,t){return wE(r[t],e[t],bE[t])}var gf=class extends Ac{httpClient;options;requester;print=cp;constructor(e,t){super(),this.httpClient=e,this.options=t,this.options.operationPrinter&&(this.print=this.options.operationPrinter),this.requester=n=>new lp(i=>{let o=n.getContext(),s=xs(o,this.options,"method"),a=xs(o,this.options,"includeQuery"),c=xs(o,this.options,"includeExtensions"),l=xs(o,this.options,"uri"),p=xs(o,this.options,"withCredentials"),g=xs(o,this.options,"useMultipart"),h=this.options.useGETForQueries===!0,d=n.query.definitions.some(v=>v.kind==="OperationDefinition"&&v.operation==="query");h&&d&&(s="GET");let m={method:s,url:typeof l=="function"?l(n):l,body:{operationName:n.operationName,variables:n.variables},options:{withCredentials:p,useMultipart:g,headers:this.options.headers}};c&&(m.body.extensions=n.extensions),a&&(m.body.query=this.print(n.query));let f=TE(o);m.options.headers=AE(m.options.headers,f);let y=EE(m,this.httpClient,this.options.extractFiles).subscribe({next:v=>{n.setContext({response:v}),i.next(v.body)},error:v=>i.error(v),complete:()=>i.complete()});return()=>{y.closed||y.unsubscribe()}})}request(e){return this.requester(e)}},Av=(()=>{class r{httpClient;constructor(t){this.httpClient=t}create(t){return new gf(this.httpClient,t)}static \u0275fac=function(n){return new(n||r)(ct(Sc))};static \u0275prov=$t({token:r,factory:r.\u0275fac,providedIn:"root"})}return r})();function IE(){return new Xa({auth:{clientId:"79cc200c-6aa6-47ce-a470-d23ed8fb104e",authority:"https://login.microsoftonline.com/0ea7bba9-6311-47d8-be00-91b71da2d6f7",redirectUri:De.redirectUri,postLogoutRedirectUri:De.postLogoutRedirectUri},cache:{cacheLocation:qe.LocalStorage},system:{allowPlatformBroker:!1,loggerOptions:{loggerCallback:(r,e,t)=>{if(!t)switch(r){case Ae.Error:console.error(e);return;case Ae.Info:console.info(e);return;case Ae.Verbose:console.debug(e);return;case Ae.Warning:console.warn(e);return}},logLevel:Ae.Info,piiLoggingEnabled:!1}}})}function RE(){let r=new Map;return{interactionType:J.Redirect,protectedResourceMap:r}}function PE(){return{interactionType:J.Redirect}}function kE(){return Ee(Rn).checkPlatform()?localStorage:null}var xE=De.onyxApi+"/graphql",wv={providers:[tp(Am,rp({scrollPositionRestoration:"enabled",anchorScrolling:"enabled"}),np({onSameUrlNavigation:"reload"})),Yf(Qf({filter:r=>!r.url.startsWith(De.contentful.tokenApiUrl)})),{provide:hp,useFactory:r=>({link:Ac.from([r.create({uri:xE})]),cache:new up}),deps:[Av]},dp,zf($f()),{provide:Kl,useFactory:IE},{provide:to,useFactory:PE},{provide:Wg,useFactory:RE},ro,Ce,ys,ap(),vp(),Tf([],ru.forRoot()),{provide:"googleTagManagerId",useValue:De.googleTagManagerId},{provide:ep,useClass:nu},{provide:op,useFactory:kE},Ev(),xf(()=>yf(Ee(Tc).load()))]};var Tv=(()=>{let e=class e{};e.\u0275fac=function(i){return new(i||e)},e.\u0275cmp=Ct({type:e,selectors:[["app-loading-spinner"]],decls:3,vars:0,consts:[[1,"d-flex","justify-content-center"],["role","status",1,"spinner-border"],[1,"sr-only"]],template:function(i,o){i&1&&(_f(0,"div",0)(1,"div",1),Ff(2,"span",2),Nf()())},encapsulation:2});let r=e;return r})();var bv=(()=>{let e=class e{constructor(n,i,o,s,a,c){this.doc=n,this.router=i,this.gtmService=o,this.metaService=s,this.platformId=a,this.msalGuardConfig=c,this.loadingSpinner=Tv,this._destroying$=new lo,this.title="delawarelife.com"}ngOnInit(){this.removeLdScriptAndCanonicalTagIfExists(),Cc(this.platformId)&&(this.router.events.subscribe(n=>{n instanceof Jf&&this.removeLdScriptAndCanonicalTagIfExists()}

91),this.router.events.forEach(n=>{if(n instanceof Xf){let i={event:"page",pageName:n.url};this.gtmService.pushTag(i).catch(o=>{console.log("Error While Pushing Google Tag "+o)})}}))}removeLdScriptAndCanonicalTagIfExists(){let n=this.doc.getElementsByTagName("head")[0];n.querySelectorAll("script[type='application/ld+json']").forEach(s=>s.remove()),n.querySelectorAll("link[rel='canonical']").forEach(s=>s.remove())}};e.\u0275fac=function(i){return new(i||e)(Ht(mc),Ht(In),Ht(mp),Ht(Wf),Ht(vc),Ht(to))},e.\u0275cmp=Ct({type:e,selectors:[["app-root"]],decls:3,vars:2,consts:[[1,"site-wrapper"],[3,"entryComponent","debounceDelay"]],template:function(i,o){i&1&&(br(0,"div",0),lt(1,"ng-http-loader",1)(2,"router-outlet"),Ir()),i&2&&(ye(),et("entryComponent",o.loadingSpinner)("debounceDelay",100))},dependencies:[ru,Tm,Zf],encapsulation:2});let r=e;return r})();Vf(bv,wv).catch(r=>console.error(r));