https://www.republicanherald.com/wp-content/plugins/mng-digisubs/s…gisubs.articleShare.bundle.js?m=1790890291g

1/*! For license information please see mng-digisubs.articleShare.bundle.js.LICENSE.txt */
2(()=>{var e={7526(e,t){"use strict";t.toByteArray=function(e){var t,n,i=s(e),a=i[0],c=i[1],u=new o(function(e,t,n){return 3*(t+n)/4-n}(0,a,c)),l=0,d=c>0?a-4:a;for(n=0;n<d;n+=4)t=r[e.charCodeAt(n)]<<18|r[e.charCodeAt(n+1)]<<12|r[e.charCodeAt(n+2)]<<6|r[e.charCodeAt(n+3)],u[l++]=t>>16&255,u[l++]=t>>8&255,u[l++]=255&t;2===c&&(t=r[e.charCodeAt(n)]<<2|r[e.charCodeAt(n+1)]>>4,u[l++]=255&t);1===c&&(t=r[e.charCodeAt(n)]<<10|r[e.charCodeAt(n+1)]<<4|r[e.charCodeAt(n+2)]>>2,u[l++]=t>>8&255,u[l++]=255&t);return u},t.fromByteArray=function(e){for(var t,r=e.length,o=r%3,i=[],a=16383,s=0,c=r-o;s<c;s+=a)i.push(u(e,s,s+a>c?c:s+a));1===o?(t=e[r-1],i.push(n[t>>2]+n[t<<4&63]+"==")):2===o&&(t=(e[r-2]<<8)+e[r-1],i.push(n[t>>10]+n[t>>4&63]+n[t<<2&63]+"="));return i.join("")};for(var n=[],r=[],o="undefined"!=typeof Uint8Array?Uint8Array:Array,i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",a=0;a<64;++a)n[a]=i[a],r[i.charCodeAt(a)]=a;function s(e){var t=e.length;if(t%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var n=e.indexOf("=");return-1===n&&(n=t),[n,n===t?0:4-n%4]}function c(e){return n[e>>18&63]+n[e>>12&63]+n[e>>6&63]+n[63&e]}function u(e,t,n){for(var r,o=[],i=t;i<n;i+=3)r=(e[i]<<16&16711680)+(e[i+1]<<8&65280)+(255&e[i+2]),o.push(c(r));return o.join("")}r["-".charCodeAt(0)]=62,r["_".charCodeAt(0)]=63},8287(e,t,n){"use strict";const r=n(7526),o=n(251),i="function"==typeof Symbol&&"function"==typeof Symbol.for?Symbol.for("nodejs.util.inspect.custom"):null;t.hp=c,t.IS=50;const a=2147483647;function s(e){if(e>a)throw new RangeError('The value "'+e+'" is invalid for option "size"');const t=new Uint8Array(e);return Object.setPrototypeOf(t,c.prototype),t}function c(e,t,n){if("number"==typeof e){if("string"==typeof t)throw new TypeError('The "string" argument must be of type string. Received type number');return d(e)}return u(e,t,n)}function u(e,t,n){if("string"==typeof e)return function(e,t){"string"==typeof t&&""!==t||(t="utf8");if(!c.isEncoding(t))throw new TypeError("Unknown encoding: "+t);const n=0|y(e,t);let r=s(n);const o=r.write(e,t);o!==n&&(r=r.slice(0,o));return r}(e,t);if(ArrayBuffer.isView(e))return function(e){if(z(e,Uint8Array)){const t=new Uint8Array(e);return f(t.buffer,t.byteOffset,t.byteLength)}return h(e)}(e);if(null==e)throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e);if(z(e,ArrayBuffer)||e&&z(e.buffer,ArrayBuffer))return f(e,t,n);if("undefined"!=typeof SharedArrayBuffer&&(z(e,SharedArrayBuffer)||e&&z(e.buffer,SharedArrayBuffer)))return f(e,t,n);if("number"==typeof e)throw new TypeError('The "value" argument must not be of type number. Received type number');const r=e.valueOf&&e.valueOf();if(null!=r&&r!==e)return c.from(r,t,n);const o=function(e){if(c.isBuffer(e)){const t=0|p(e.length),n=s(t);return 0===n.length||e.copy(n,0,0,t),n}if(void 0!==e.length)return"number"!=typeof e.length||q(e.length)?s(0):h(e);if("Buffer"===e.type&&Array.isArray(e.data))return h(e.data)}(e);if(o)return o;if("undefined"!=typeof Symbol&&null!=Symbol.toPrimitive&&"function"==typeof e[Symbol.toPrimitive])return c.from(e[Symbol.toPrimitive]("string"),t,n);throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e)}function l(e){if("number"!=typeof e)throw new TypeError('"size" argument must be of type number');if(e<0)throw new RangeError('The value "'+e+'" is invalid for option "size"')}function d(e){return l(e),s(e<0?0:0|p(e))}function h(e){const t=e.length<0?0:0|p(e.length),n=s(t);for(let r=0;r<t;r+=1)n[r]=255&e[r];return n}function f(e,t,n){if(t<0||e.byteLength<t)throw new RangeError('"offset" is outside of buffer bounds');if(e.byteLength<t+(n||0))throw new RangeError('"length" is outside of buffer bounds');let r;return r=void 0===t&&void 0===n?new Uint8Array(e):void 0===n?new Uint8Array(e,t):new Uint8Array(e,t,n),Object.setPrototypeOf(r,c.prototype),r}function p(e){if(e>=a)throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a.toString(16)+" bytes");return 0|e}function y(e,t){if(c.isBuffer(e))return e.length;if(ArrayBuffer.isView(e)||z(e,ArrayBuffer))return e.byteLength;if("string"!=typeof e)throw new TypeError('The "string" argument must be one of type string, Buffer, or ArrayBuffer. Received type '+typeof e);const n=e.length,r=arguments.length>2&&!0===arguments[2];if(!r&&0===n)return 0;let o=!1;for(;;)switch(t){case"ascii":case"latin1":case"binary":return n;case"utf8":case"utf-8":return J(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return 2*n;case"hex":return n>>>1;case"base64":return V(e).length;default:if(o)return r?-1:J(e).length;t=(""+t).toLowerCase(),o=!0}}function g(e,t,n){let r=!1;if((void 0===t||t<0)&&(t=0),t>this.length)return"";if((void 0===n||n>this.length)&&(n=this.length),n<=0)return"";if((n>>>=0)<=(t>>>=0))return"";for(e||(e="utf8");;)switch(e){case"hex":return C(this,t,n);case"utf8":case"utf-8":return R(this,t,n);case"ascii":return I(this,t,n);case"latin1":case"binary":return N(this,t,n);case"base64":return _(this,t,n);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return k(this,t,n);default:if(r)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),r=!0}}function w(e,t,n){const r=e[t];e[t]=e[n],e[n]=r}function m(e,t,n,r,o){if(0===e.length)return-1;if("string"==typeof n?(r=n,n=0):n>2147483647?n=2147483647:n<-2147483648&&(n=-2147483648),q(n=+n)&&(n=o?0:e.length-1),n<0&&(n=e.length+n),n>=e.length){if(o)return-1;n=e.length-1}else if(n<0){if(!o)return-1;n=0}if("string"==typeof t&&(t=c.from(t,r)),c.isBuffer(t))return 0===t.length?-1:v(e,t,n,r,o);if("number"==typeof t)return t&=255,"function"==typeof Uint8Array.prototype.indexOf?o?Uint8Array.prototype.indexOf.call(e,t,n):Uint8Array.prototype.lastIndexOf.call(e,t,n):v(e,[t],n,r,o);throw new TypeError("val must be string, number or Buffer")}function v(e,t,n,r,o){let i,a=1,s=e.length,c=t.length;if(void 0!==r&&("ucs2"===(r=String(r).toLowerCase())||"ucs-2"===r||"utf16le"===r||"utf-16le"===r)){if(e.length<2||t.length<2)return-1;a=2,s/=2,c/=2,n/=2}function u(e,t){return 1===a?e[t]:e.readUInt16BE(t*a)}if(o){let r=-1;for(i=n;i<s;i++)if(u(e,i)===u(t,-1===r?0:i-r)){if(-1===r&&(r=i),i-r+1===c)return r*a}else-1!==r&&(i-=i-r),r=-1}else for(n+c>s&&(n=s-c),i=n;i>=0;i--){let n=!0;for(let r=0;r<c;r++)if(u(e,i+r)!==u(t,r)){n=!1;break}if(n)return i}return-1}function A(e,t,n,r){n=Number(n)||0;const o=e.length-n;r?(r=Number(r))>o&&(r=o):r=o;const i=t.length;let a;for(r>i/2&&(r=i/2),a=0;a<r;++a){const r=parseInt(t.substr(2*a,2),16);if(q(r))return a;e[n+a]=r}return a}function E(e,t,n,r){return Y(J(t,e.length-n),e,n,r)}function b(e,t,n,r){return Y(function(e){const t=[];for(let n=0;n<e.length;++n)t.push(255&e.charCodeAt(n));return t}(t),e,n,r)}function S(e,t,n,r){return Y(V(t),e,n,r)}function T(e,t,n,r){return Y(function(e,t){let n,r,o;const i=[];for(let a=0;a<e.length&&!((t-=2)<0);++a)n=e.charCodeAt(a),r=n>>8,o=n%256,i.push(o),i.push(r);return i}(t,e.length-n),e,n,r)}function _(e,t,n){return 0===t&&n===e.length?r.fromByteArray(e):r.fromByteArray(e.slice(t,n))}function R(e,t,n){n=Math.min(e.length,n);const r=[];let o=t;for(;o<n;){const t=e[o];let i=null,a=t>239?4:t>223?3:t>191?2:1;if(o+a<=n){let n,r,s,c;switch(a){case 1:t<128&&(i=t);break;case 2:n=e[o+1],128==(192&n)&&(c=(31&t)<<6|63&n,c>127&&(i=c));break;case 3:n=e[o+1],r=e[o+2],128==(192&n)&&128==(192&r)&&(c=(15&t)<<12|(63&n)<<6|63&r,c>2047&&(c<55296||c>57343)&&(i=c));break;case 4:n=e[o+1],r=e[o+2],s=e[o+3],128==(192&n)&&128==(192&r)&&128==(192&s)&&(c=(15&t)<<18|(63&n)<<12|(63&r)<<6|63&s,c>65535&&c<1114112&&(i=c))}}null===i?(i=65533,a=1):i>65535&&(i-=65536,r.push(i>>>10&1023|55296),i=56320|1023&i),r.push(i),o+=a}return function(e){const t=e.length;if(t<=O)return String.fromCharCode.apply(String,e);let n="",r=0;for(;r<t;)n+=String.fromCharCode.apply(String,e.slice(r,r+=O));return n}(r)}c.TYPED_ARRAY_SUPPORT=function(){try{const e=new Uint8Array(1),t={foo:function(){return 42}};return Object.setPrototypeOf(t,Uint8Array.prototype),Object.setPrototypeOf(e,t),42===e.foo()}catch(e){return!1}}(),c.TYPED_ARRAY_SUPPORT||"undefined"==typeof console||"function"!=typeof console.error||console.error("This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support."),Object.defineProperty(c.prototype,"parent",{enumerable:!0,get:function(){if(c.isBuffer(this))return this.buffer}}),Object.defineProperty(c.prototype,"offset",{enumerable:!0,get:function(){if(c.isBuffer(this))return this.byteOffset}}),c.poolSize=8192,c.from=function(e,t,n){return u(e,t,n)},Object.setPrototypeOf(c.prototype,Uint8Array.prototype),Object.setPrototypeOf(c,Uint8Array),c.alloc=function(e,t,n){return function(e,t,n){return l(e),e<=0?s(e):void 0!==t?"string"==typeof n?s(e).fill(t,n):s(e).fill(t):s(e)}(e,t,n)},c.allocUnsafe=function(e){return d(e)},c.allocUnsafeSlow=function(e){return d(e)},c.isBuffer=function(e){return null!=e&&!0===e._isBuffer&&e!==c.prototype},c.compare=function(e,t){if(z(e,Uint8Array)&&(e=c.from(e,e.offset,e.byteLength)),z(t,Uint8Array)&&(t=c.from(t,t.offset,t.byteLength)),!c.isBuffer(e)||!c.isBuffer(t))throw new TypeError('The "buf1", "buf2" arguments must be one of type Buffer or Uint8Array');if(e===t)return 0;let n=e.length,r=t.length;for(let o=0,i=Math.min(n,r);o<i;++o)if(e[o]!==t[o]){n=e[o],r=t[o];break}return n<r?-1:r<n?1:0},c.isEncoding=function(e){switch(String(e).toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"latin1":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}},c.concat=function(e,t){if(!Array.isArray(e))throw new TypeError('"list" argument must be an Array of Buffers');if(0===e.length)return c.alloc(0);let n;if(void 0===t)for(t=0,n=0;n<e.length;++n)t+=e[n].length;const r=c.allocUnsafe(t);let o=0;for(n=0;n<e.length;++n){let t=e[n];if(z(t,Uint8Array))o+t.length>r.length?(c.isBuffer(t)||(t=c.from(t)),t.copy(r,o)):Uint8Array.prototype.set.call(r,t,o);else{if(!c.isBuffer(t))throw new TypeError('"list" argument must be an Array of Buffers');t.copy(r,o)}o+=t.length}return r},c.byteLength=y,c.prototype._isBuffer=!0,c.prototype.swap16=function(){const e=this.length;if(e%2!=0)throw new RangeError("Buffer size must be a multiple of 16-bits");for(let t=0;t<e;t+=2)w(this,t,t+1);return this},c.prototype.swap32=function(){const e=this.length;if(e%4!=0)throw new RangeError("Buffer size must be a multiple of 32-bits");for(let t=0;t<e;t+=4)w(this,t,t+3),w(this,t+1,t+2);return this},c.prototype.swap64=function(){const e=this.length;if(e%8!=0)throw new RangeError("Buffer size must be a multiple of 64-bits");for(let t=0;t<e;t+=8)w(this,t,t+7),w(this,t+1,t+6),w(this,t+2,t+5),w(this,t+3,t+4);return this},c.prototype.toString=function(){const e=this.length;return 0===e?"":0===arguments.length?R(this,0,e):g.apply(this,arguments)}

2,c.prototype.toLocaleString=c.prototype.toString,c.prototype.equals=function(e){if(!c.isBuffer(e))throw new TypeError("Argument must be a Buffer");return this===e||0===c.compare(this,e)},c.prototype.inspect=function(){let e="";const n=t.IS;return e=this.toString("hex",0,n).replace(/(.{2})/g,"$1 ").trim(),this.length>n&&(e+=" ... "),"<Buffer "+e+">"},i&&(c.prototype[i]=c.prototype.inspect),c.prototype.compare=function(e,t,n,r,o){if(z(e,Uint8Array)&&(e=c.from(e,e.offset,e.byteLength)),!c.isBuffer(e))throw new TypeError('The "target" argument must be one of type Buffer or Uint8Array. Received type '+typeof e);if(void 0===t&&(t=0),void 0===n&&(n=e?e.length:0),void 0===r&&(r=0),void 0===o&&(o=this.length),t<0||n>e.length||r<0||o>this.length)throw new RangeError("out of range index");if(r>=o&&t>=n)return 0;if(r>=o)return-1;if(t>=n)return 1;if(this===e)return 0;let i=(o>>>=0)-(r>>>=0),a=(n>>>=0)-(t>>>=0);const s=Math.min(i,a),u=this.slice(r,o),l=e.slice(t,n);for(let e=0;e<s;++e)if(u[e]!==l[e]){i=u[e],a=l[e];break}return i<a?-1:a<i?1:0},c.prototype.includes=function(e,t,n){return-1!==this.indexOf(e,t,n)},c.prototype.indexOf=function(e,t,n){return m(this,e,t,n,!0)},c.prototype.lastIndexOf=function(e,t,n){return m(this,e,t,n,!1)},c.prototype.write=function(e,t,n,r){if(void 0===t)r="utf8",n=this.length,t=0;else if(void 0===n&&"string"==typeof t)r=t,n=this.length,t=0;else{if(!isFinite(t))throw new Error("Buffer.write(string, encoding, offset[, length]) is no longer supported");t>>>=0,isFinite(n)?(n>>>=0,void 0===r&&(r="utf8")):(r=n,n=void 0)}const o=this.length-t;if((void 0===n||n>o)&&(n=o),e.length>0&&(n<0||t<0)||t>this.length)throw new RangeError("Attempt to write outside buffer bounds");r||(r="utf8");let i=!1;for(;;)switch(r){case"hex":return A(this,e,t,n);case"utf8":case"utf-8":return E(this,e,t,n);case"ascii":case"latin1":case"binary":return b(this,e,t,n);case"base64":return S(this,e,t,n);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return T(this,e,t,n);default:if(i)throw new TypeError("Unknown encoding: "+r);r=(""+r).toLowerCase(),i=!0}},c.prototype.toJSON=function(){return{type:"Buffer",data:Array.prototype.slice.call(this._arr||this,0)}};const O=4096;function I(e,t,n){let r="";n=Math.min(e.length,n);for(let o=t;o<n;++o)r+=String.fromCharCode(127&e[o]);return r}function N(e,t,n){let r="";n=Math.min(e.length,n);for(let o=t;o<n;++o)r+=String.fromCharCode(e[o]);return r}function C(e,t,n){const r=e.length;(!t||t<0)&&(t=0),(!n||n<0||n>r)&&(n=r);let o="";for(let r=t;r<n;++r)o+=Z[e[r]];return o}function k(e,t,n){const r=e.slice(t,n);let o="";for(let e=0;e<r.length-1;e+=2)o+=String.fromCharCode(r[e]+256*r[e+1]);return o}function L(e,t,n){if(e%1!=0||e<0)throw new RangeError("offset is not uint");if(e+t>n)throw new RangeError("Trying to access beyond buffer length")}function P(e,t,n,r,o,i){if(!c.isBuffer(e))throw new TypeError('"buffer" argument must be a Buffer instance');if(t>o||t<i)throw new RangeError('"value" argument is out of bounds');if(n+r>e.length)throw new RangeError("Index out of range")}function M(e,t,n,r,o){K(t,r,o,e,n,7);let i=Number(t&BigInt(4294967295));e[n++]=i,i>>=8,e[n++]=i,i>>=8,e[n++]=i,i>>=8,e[n++]=i;let a=Number(t>>BigInt(32)&BigInt(4294967295));return e[n++]=a,a>>=8,e[n++]=a,a>>=8,e[n++]=a,a>>=8,e[n++]=a,n}function x(e,t,n,r,o){K(t,r,o,e,n,7);let i=Number(t&BigInt(4294967295));e[n+7]=i,i>>=8,e[n+6]=i,i>>=8,e[n+5]=i,i>>=8,e[n+4]=i;let a=Number(t>>BigInt(32)&BigInt(4294967295));return e[n+3]=a,a>>=8,e[n+2]=a,a>>=8,e[n+1]=a,a>>=8,e[n]=a,n+8}function U(e,t,n,r,o,i){if(n+r>e.length)throw new RangeError("Index out of range");if(n<0)throw new RangeError("Index out of range")}function B(e,t,n,r,i){return t=+t,n>>>=0,i||U(e,0,n,4),o.write(e,t,n,r,23,4),n+4}function D(e,t,n,r,i){return t=+t,n>>>=0,i||U(e,0,n,8),o.write(e,t,n,r,52,8),n+8}c.prototype.slice=function(e,t){const n=this.length;(e=~~e)<0?(e+=n)<0&&(e=0):e>n&&(e=n),(t=void 0===t?n:~~t)<0?(t+=n)<0&&(t=0):t>n&&(t=n),t<e&&(t=e);const r=this.subarray(e,t);return Object.setPrototypeOf(r,c.prototype),r},c.prototype.readUintLE=c.prototype.readUIntLE=function(e,t,n){e>>>=0,t>>>=0,n||L(e,t,this.length);let r=this[e],o=1,i=0;for(;++i<t&&(o*=256);)r+=this[e+i]*o;return r},c.prototype.readUintBE=c.prototype.readUIntBE=function(e,t,n){e>>>=0,t>>>=0,n||L(e,t,this.length);let r=this[e+--t],o=1;for(;t>0&&(o*=256);)r+=this[e+--t]*o;return r},c.prototype.readUint8=c.prototype.readUInt8=function(e,t){return e>>>=0,t||L(e,1,this.length),this[e]},c.prototype.readUint16LE=c.prototype.readUInt16LE=function(e,t){return e>>>=0,t||L(e,2,this.length),this[e]|this[e+1]<<8},c.prototype.readUint16BE=c.prototype.readUInt16BE=function(e,t){return e>>>=0,t||L(e,2,this.length),this[e]<<8|this[e+1]},c.prototype.readUint32LE=c.prototype.readUInt32LE=function(e,t){return e>>>=0,t||L(e,4,this.length),(this[e]|this[e+1]<<8|this[e+2]<<16)+16777216*this[e+3]},c.prototype.readUint32BE=c.prototype.readUInt32BE=function(e,t){return e>>>=0,t||L(e,4,this.length),16777216*this[e]+(this[e+1]<<16|this[e+2]<<8|this[e+3])},c.prototype.readBigUInt64LE=Q(function(e){F(e>>>=0,"offset");const t=this[e],n=this[e+7];void 0!==t&&void 0!==n||j(e,this.length-8);const r=t+256*this[++e]+65536*this[++e]+this[++e]*2**24,o=this[++e]+256*this[++e]+65536*this[++e]+n*2**24;return BigInt(r)+(BigInt(o)<<BigInt(32))}),c.prototype.readBigUInt64BE=Q(function(e){F(e>>>=0,"offset");const t=this[e],n=this[e+7];void 0!==t&&void 0!==n||j(e,this.length-8);const r=t*2**24+65536*this[++e]+256*this[++e]+this[++e],o=this[++e]*2**24+65536*this[++e]+256*this[++e]+n;return(BigInt(r)<<BigInt(32))+BigInt(o)}),c.prototype.readIntLE=function(e,t,n){e>>>=0,t>>>=0,n||L(e,t,this.length);let r=this[e],o=1,i=0;for(;++i<t&&(o*=256);)r+=this[e+i]*o;return o*=128,r>=o&&(r-=Math.pow(2,8*t)),r},c.prototype.readIntBE=function(e,t,n){e>>>=0,t>>>=0,n||L(e,t,this.length);let r=t,o=1,i=this[e+--r];for(;r>0&&(o*=256);)i+=this[e+--r]*o;return o*=128,i>=o&&(i-=Math.pow(2,8*t)),i},c.prototype.readInt8=function(e,t){return e>>>=0,t||L(e,1,this.length),128&this[e]?-1*(255-this[e]+1):this[e]},c.prototype.readInt16LE=function(e,t){e>>>=0,t||L(e,2,this.length);const n=this[e]|this[e+1]<<8;return 32768&n?4294901760|n:n},c.prototype.readInt16BE=function(e,t){e>>>=0,t||L(e,2,this.length);const n=this[e+1]|this[e]<<8;return 32768&n?4294901760|n:n},c.prototype.readInt32LE=function(e,t){return e>>>=0,t||L(e,4,this.length),this[e]|this[e+1]<<8|this[e+2]<<16|this[e+3]<<24},c.prototype.readInt32BE=function(e,t){return e>>>=0,t||L(e,4,this.length),this[e]<<24|this[e+1]<<16|this[e+2]<<8|this[e+3]},c.prototype.readBigInt64LE=Q(function(e){F(e>>>=0,"offset");const t=this[e],n=this[e+7];void 0!==t&&void 0!==n||j(e,this.length-8);const r=this[e+4]+256*this[e+5]+65536*this[e+6]+(n<<24);return(BigInt(r)<<BigInt(32))+BigInt(t+256*this[++e]+65536*this[++e]+this[++e]*2**24)}),c.prototype.readBigInt64BE=Q(function(e){F(e>>>=0,"offset");const t=this[e],n=this[e+7];void 0!==t&&void 0!==n||j(e,this.length-8);const r=(t<<24)+65536*this[++e]+256*this[++e]+this[++e];return(BigInt(r)<<BigInt(32))+BigInt(this[++e]*2**24+65536*this[++e]+256*this[++e]+n)}),c.prototype.readFloatLE=function(e,t){return e>>>=0,t||L(e,4,this.length),o.read(this,e,!0,23,4)},c.prototype.readFloatBE=function(e,t){return e>>>=0,t||L(e,4,this.length),o.read(this,e,!1,23,4)},c.prototype.readDoubleLE=function(e,t){return e>>>=0,t||L(e,8,this.length),o.read(this,e,!0,52,8)},c.prototype.readDoubleBE=function(e,t){return e>>>=0,t||L(e,8,this.length),o.read(this,e,!1,52,8)},c.prototype.writeUintLE=c.prototype.writeUIntLE=function(e,t,n,r){if(e=+e,t>>>=0,n>>>=0,!r){P(this,e,t,n,Math.pow(2,8*n)-1,0)}let o=1,i=0;for(this[t]=255&e;++i<n&&(o*=256);)this[t+i]=e/o&255;return t+n},c.prototype.writeUintBE=c.prototype.writeUIntBE=function(e,t,n,r){if(e=+e,t>>>=0,n>>>=0,!r){P(this,e,t,n,Math.pow(2,8*n)-1,0)}let o=n-1,i=1;for(this[t+o]=255&e;--o>=0&&(i*=256);)this[t+o]=e/i&255;return t+n},c.prototype.writeUint8=c.prototype.writeUInt8=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,1,255,0),this[t]=255&e,t+1},c.prototype.writeUint16LE=c.prototype.writeUInt16LE=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,2,65535,0),this[t]=255&e,this[t+1]=e>>>8,t+2},c.prototype.writeUint16BE=c.prototype.writeUInt16BE=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,2,65535,0),this[t]=e>>>8,this[t+1]=255&e,t+2},c.prototype.writeUint32LE=c.prototype.writeUInt32LE=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,4,4294967295,0),this[t+3]=e>>>24,this[t+2]=e>>>16,this[t+1]=e>>>8,this[t]=255&e,t+4},c.prototype.writeUint32BE=c.prototype.writeUInt32BE=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,4,4294967295,0),this[t]=e>>>24,this[t+1]=e>>>16,this[t+2]=e>>>8,this[t+3]=255&e,t+4},c.prototype.writeBigUInt64LE=Q(function(e,t=0){return M(this,e,t,BigInt(0),BigInt("0xffffffffffffffff"))}),c.prototype.writeBigUInt64BE=Q(function(e,t=0){return x(this,e,t,BigInt(0),BigInt("0xffffffffffffffff"))}),c.prototype.writeIntLE=function(e,t,n,r){if(e=+e,t>>>=0,!r){const r=Math.pow(2,8*n-1);P(this,e,t,n,r-1,-r)}let o=0,i=1,a=0;for(this[t]=255&e;++o<n&&(i*=256);)e<0&&0===a&&0!==this[t+o-1]&&(a=1),this[t+o]=(e/i|0)-a&255;return t+n},c.prototype.writeIntBE=function(e,t,n,r){if(e=+e,t>>>=0,!r){const r=Math.pow(2,8*n-1);P(this,e,t,n,r-1,-r)}let o=n-1,i=1,a=0;for(this[t+o]=255&e;--o>=0&&(i*=256);)e<0&&0===a&&0!==this[t+o+1]&&(a=1),this[t+o]=(e/i|0)-a&255;return t+n},c.prototype.writeInt8=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,1,127,-128),e<0&&(e=255+e+1),this[t]=255&e,t+1},c.prototype.writeInt16LE=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,2,32767,-32768),this[t]=255&e,this[t+1]=e>>>8,t+2},c.prototype.writeInt16BE=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,2,32767,-32768),this[t]=e>>>8,this[t+1]=255&e,t+2},c.prototype.writeInt32LE=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,4,2147483647,-2147483648),this[t]=255&e,this[t+1]=e>>>8,this[t+2]=e>>>16,this[t+3]=e>>>24,t+4},c.prototype.writeInt32BE=function(e,t,n){return e=+e,t>>>=0,n||P(this,e,t,4,2147483647,-2147483648),e<0&&(e=4294967295+e+1),this[t]=e>>>24,this[t+1]=e>>>16,this[t+2]=e>>>8,this[t+3]=255&e,t+4},c.prototype.writeBigInt64LE=Q(function(e,t=0){return M(this,e,t,-BigInt("0x8000000000000000"),BigInt("0x7fffffffffffffff"))}),c.prototype.writeBigInt64BE=Q(function(e,t=0){return x(this,e,t,-BigInt("0x8000000000000000"),BigInt("0x7fffffffffffffff"))}),c.prototype.writeFloatLE=function(e,t,n){return B(this,e,t,!0,n)},c.prototype.writeFloatBE=function(e,t,n){return B(this,e,t,!1,n)},c.prototype.writeDoubleLE=function(e,t,n){return D(this,e,t,!0,n)},c.prototype.writeDoubleBE=function(e,t,n){return D(this,e,t,!1,n)},c.prototype.copy=function(e,t,n,r){if(!c.isBuffer(e))throw new TypeError("argument should be a Buffer");if(n||(n=0),r||0===r||(r=this.length),t>=e.length&&(t=e.length),t||(t=0),r>0&&r<n&&(r=n),r===n)return 0;if(0===e.length||0===this.length)return 0;if(t<0)throw new RangeError("targetStart out of bounds");if(n<0||n>=this.length)throw new RangeError("Index out of range");if(r<0)throw new RangeError("sourceEnd out of bounds");r>this.length&&(r=this.length),e.length-t<r-n&&(r=e.length-t+n);const o=r-n;return this===e&&"function"==typeof Uint8Array.prototype.copyWithin?this.copyWithin(t,n,r):Uint8Array.prototype.set.call(e,this.subarray(n,r),t),o},c.prototype.fill=function(e,t,n,r){if("string"==typeof e){if("string"==typeof t?(r=t,t=0,n=this.length):"string"==typeof n&&(r=n,n=this.length),void 0!==r&&"string"!=typeof r)throw new TypeError("encoding must be a string");if("string"==typeof r&&!c.isEncoding(r))throw new TypeError("Unknown encoding: "+r);if(1===e.length){const t=e.charCodeAt(0);("utf8"===r&&t<128||"latin1"===r)&&(e=t)}}else"number"==typeof e?e&=255:"boolean"==typeof e&&(e=Number(e));if(t<0||this.length<t||this.length<n)throw new RangeError("Out of range index");if(n<=t)return this;let o;if(t>>>=0,n=void 0===n?this.length:n>>>0,e||(e=0),"number"==typeof e)for(o=t;o<n;++o)this[o]=e;else{const i=c.isBuffer(e)?e:c.from(e,r),a=i.length;

2if(0===a)throw new TypeError('The value "'+e+'" is invalid for argument "value"');for(o=0;o<n-t;++o)this[o+t]=i[o%a]}return this};const H={};function G(e,t,n){H[e]=class extends n{constructor(){super(),Object.defineProperty(this,"message",{value:t.apply(this,arguments),writable:!0,configurable:!0}),this.name=`${this.name} [${e}]`,this.stack,delete this.name}get code(){return e}set code(e){Object.defineProperty(this,"code",{configurable:!0,enumerable:!0,value:e,writable:!0})}toString(){return`${this.name} [${e}]: ${this.message}`}}}function W(e){let t="",n=e.length;const r="-"===e[0]?1:0;for(;n>=r+4;n-=3)t=`_${e.slice(n-3,n)}${t}`;return`${e.slice(0,n)}${t}`}function K(e,t,n,r,o,i){if(e>n||e<t){const r="bigint"==typeof t?"n":"";let o;throw o=i>3?0===t||t===BigInt(0)?`>= 0${r} and < 2${r} ** ${8*(i+1)}${r}`:`>= -(2${r} ** ${8*(i+1)-1}${r}) and < 2 ** ${8*(i+1)-1}${r}`:`>= ${t}${r} and <= ${n}${r}`,new H.ERR_OUT_OF_RANGE("value",o,e)}!function(e,t,n){F(t,"offset"),void 0!==e[t]&&void 0!==e[t+n]||j(t,e.length-(n+1))}(r,o,i)}function F(e,t){if("number"!=typeof e)throw new H.ERR_INVALID_ARG_TYPE(t,"number",e)}function j(e,t,n){if(Math.floor(e)!==e)throw F(e,n),new H.ERR_OUT_OF_RANGE(n||"offset","an integer",e);if(t<0)throw new H.ERR_BUFFER_OUT_OF_BOUNDS;throw new H.ERR_OUT_OF_RANGE(n||"offset",`>= ${n?1:0} and <= ${t}`,e)}G("ERR_BUFFER_OUT_OF_BOUNDS",function(e){return e?`${e} is outside of buffer bounds`:"Attempt to access memory outside buffer bounds"},RangeError),G("ERR_INVALID_ARG_TYPE",function(e,t){return`The "${e}" argument must be of type number. Received type ${typeof t}`},TypeError),G("ERR_OUT_OF_RANGE",function(e,t,n){let r=`The value of "${e}" is out of range.`,o=n;return Number.isInteger(n)&&Math.abs(n)>2**32?o=W(String(n)):"bigint"==typeof n&&(o=String(n),(n>BigInt(2)**BigInt(32)||n<-(BigInt(2)**BigInt(32)))&&(o=W(o)),o+="n"),r+=` It must be ${t}. Received ${o}`,r},RangeError);const X=/[^+/0-9A-Za-z-_]/g;function J(e,t){let n;t=t||1/0;const r=e.length;let o=null;const i=[];for(let a=0;a<r;++a){if(n=e.charCodeAt(a),n>55295&&n<57344){if(!o){if(n>56319){(t-=3)>-1&&i.push(239,191,189);continue}if(a+1===r){(t-=3)>-1&&i.push(239,191,189);continue}o=n;continue}if(n<56320){(t-=3)>-1&&i.push(239,191,189),o=n;continue}n=65536+(o-55296<<10|n-56320)}else o&&(t-=3)>-1&&i.push(239,191,189);if(o=null,n<128){if((t-=1)<0)break;i.push(n)}else if(n<2048){if((t-=2)<0)break;i.push(n>>6|192,63&n|128)}else if(n<65536){if((t-=3)<0)break;i.push(n>>12|224,n>>6&63|128,63&n|128)}else{if(!(n<1114112))throw new Error("Invalid code point");if((t-=4)<0)break;i.push(n>>18|240,n>>12&63|128,n>>6&63|128,63&n|128)}}return i}function V(e){return r.toByteArray(function(e){if((e=(e=e.split("=")[0]).trim().replace(X,"")).length<2)return"";for(;e.length%4!=0;)e+="=";return e}(e))}function Y(e,t,n,r){let o;for(o=0;o<r&&!(o+n>=t.length||o>=e.length);++o)t[o+n]=e[o];return o}function z(e,t){return e instanceof t||null!=e&&null!=e.constructor&&null!=e.constructor.name&&e.constructor.name===t.name}function q(e){return e!=e}const Z=function(){const e="0123456789abcdef",t=new Array(256);for(let n=0;n<16;++n){const r=16*n;for(let o=0;o<16;++o)t[r+o]=e[n]+e[o]}return t}();function Q(e){return"undefined"==typeof BigInt?$:e}function $(){throw new Error("BigInt not supported")}},251(e,t){t.read=function(e,t,n,r,o){var i,a,s=8*o-r-1,c=(1<<s)-1,u=c>>1,l=-7,d=n?o-1:0,h=n?-1:1,f=e[t+d];for(d+=h,i=f&(1<<-l)-1,f>>=-l,l+=s;l>0;i=256*i+e[t+d],d+=h,l-=8);for(a=i&(1<<-l)-1,i>>=-l,l+=r;l>0;a=256*a+e[t+d],d+=h,l-=8);if(0===i)i=1-u;else{if(i===c)return a?NaN:1/0*(f?-1:1);a+=Math.pow(2,r),i-=u}return(f?-1:1)*a*Math.pow(2,i-r)},t.write=function(e,t,n,r,o,i){var a,s,c,u=8*i-o-1,l=(1<<u)-1,d=l>>1,h=23===o?Math.pow(2,-24)-Math.pow(2,-77):0,f=r?0:i-1,p=r?1:-1,y=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(s=isNaN(t)?1:0,a=l):(a=Math.floor(Math.log(t)/Math.LN2),t*(c=Math.pow(2,-a))<1&&(a--,c*=2),(t+=a+d>=1?h/c:h*Math.pow(2,1-d))*c>=2&&(a++,c/=2),a+d>=l?(s=0,a=l):a+d>=1?(s=(t*c-1)*Math.pow(2,o),a+=d):(s=t*Math.pow(2,d-1)*Math.pow(2,o),a=0));o>=8;e[n+f]=255&s,f+=p,s/=256,o-=8);for(a=a<<o|s,u+=o;u>0;e[n+f]=255&a,f+=p,a/=256,u-=8);e[n+f-p]|=128*y}},5172(e){e.exports=function(e,t){this.v=e,this.k=t},e.exports.__esModule=!0,e.exports.default=e.exports},6993(e,t,n){var r=n(5546);function o(){var t,n,i="function"==typeof Symbol?Symbol:{},a=i.iterator||"@@iterator",s=i.toStringTag||"@@toStringTag";function c(e,o,i,a){var s=o&&o.prototype instanceof l?o:l,c=Object.create(s.prototype);return r(c,"_invoke",function(e,r,o){var i,a,s,c=0,l=o||[],d=!1,h={p:0,n:0,v:t,a:f,f

2:f.bind(t,4),d:function(e,n){return i=e,a=0,s=t,h.n=n,u}};function f(e,r){for(a=e,s=r,n=0;!d&&c&&!o&&n<l.length;n++){var o,i=l[n],f=h.p,p=i[2];e>3?(o=p===r)&&(s=i[(a=i[4])?5:(a=3,3)],i[4]=i[5]=t):i[0]<=f&&((o=e<2&&f<i[1])?(a=0,h.v=r,h.n=i[1]):f<p&&(o=e<3||i[0]>r||r>p)&&(i[4]=e,i[5]=r,h.n=p,a=0))}if(o||e>1)return u;throw d=!0,r}return function(o,l,p){if(c>1)throw TypeError("Generator is already running");for(d&&1===l&&f(l,p),a=l,s=p;(n=a<2?t:s)||!d;){i||(a?a<3?(a>1&&(h.n=-1),f(a,s)):h.n=s:h.v=s);try{if(c=2,i){if(a||(o="next"),n=i[o]){if(!(n=n.call(i,s)))throw TypeError("iterator result is not an object");if(!n.done)return n;s=n.value,a<2&&(a=0)}else 1===a&&(n=i.return)&&n.call(i),a<2&&(s=TypeError("The iterator does not provide a '"+o+"' method"),a=1);i=t}else if((n=(d=h.n<0)?s:e.call(r,h))!==u)break}catch(e){i=t,a=1,s=e}finally{c=1}}return{value:n,done:d}}}(e,i,a),!0),c}var u={};function l(){}function d(){}function h(){}n=Object.getPrototypeOf;var f=[][a]?n(n([][a]())):(r(n={},a,function(){return this}),n),p=h.prototype=l.prototype=Object.create(f);function y(e){return Object.setPrototypeOf?Object.setPrototypeOf(e,h):(e.__proto__=h,r(e,s,"GeneratorFunction")),e.prototype=Object.create(p),e}return d.prototype=h,r(p,"constructor",h),r(h,"constructor",d),d.displayName="GeneratorFunction",r(h,s,"GeneratorFunction"),r(p),r(p,s,"Generator"),r(p,a,function(){return this}),r(p,"toString",function(){return"[object Generator]"}),(e.exports=o=function(){return{w:c,m:y}},e.exports.__esModule=!0,e.exports.default=e.exports)()}e.exports=o,e.exports.__esModule=!0,e.exports.default=e.exports},5869(e,t,n){var r=n(887);e.exports=function(e,t,n,o,i){var a=r(e,t,n,o,i);return a.next().then(function(e){return e.done?e.value:a.next()})},e.exports.__esModule=!0,e.exports.default=e.exports},887(e,t,n){var r=n(6993),o=n(1791);e.exports=function(e,t,n,i,a){return new o(r().w(e,t,n,i),a||Promise)},e.exports.__esModule=!0,e.exports.default=e.exports},1791(e,t,n){var r=n(5172),o=n(5546);e.exports=function e(t,n){function i(e,o,a,s){try{var c=t[e](o),u=c.value;return u instanceof r?n.resolve(u.v).then(function(e){i("next",e,a,s)},function(e){i("throw",e,a,s)}):n.resolve(u).then(function(e){c.value=e,a(c)},function(e){return i("throw",e,a,s)})}catch(e){s(e)}}var a;this.next||(o(e.prototype),o(e.prototype,"function"==typeof Symbol&&Symbol.asyncIterator||"@asyncIterator",function(){return this})),o(this,"_invoke",function(e,t,r){function o(){return new n(function(t,n){i(e,r,t,n)})}return a=a?a.then(o,o):o()},!0)},e.exports.__esModule=!0,e.exports.default=e.exports},5546(e){function t(n,r,o,i){var a=Object.defineProperty;try{a({},"",{})}catch(n){a=0}e.exports=t=function(e,n,r,o){function i(n,r){t(e,n,function(e){return this._invoke(n,r,e)})}n?a?a(e,n,{value:r,enumerable:!o,configurable:!o,writable:!o}):e[n]=r:(i("next",0),i("throw",1),i("return",2))},e.exports.__esModule=!0,e.exports.default=e.exports,t(n,r,o,i)}e.exports=t,e.exports.__esModule=!0,e.exports.default=e.exports},4373(e){e.exports=function(e){var t=Object(e),n=[];for(var r in t)n.unshift(r);return function e(){for(;n.length;)if((r=n.pop())in t)return e.value=r,e.done=!1,e;return e.done=!0,e}},e.exports.__esModule=!0,e.exports.default=e.exports},4633(e,t,n){var r=n(5172),o=n(6993),i=n(5869),a=n(887),s=n(1791),c=n(4373),u=n(579);function l(){"use strict";var t=o(),n=t.m(l),d=(Object.getPrototypeOf?Object.getPrototypeOf(n):n.__proto__).constructor;function h(e){var t="function"==typeof e&&e.constructor;return!!t&&(t===d||"GeneratorFunction"===(t.displayName||t.name))}var f={throw:1,return:2,break:3,continue:3};function p(e){var t,n;return function(r){t||(t={stop:function(){return n(r.a,2)},catch:function(){return r.v},abrupt:function(e,t){return n(r.a,f[e],t)},delegateYield:function(e,o,i){return t.resultName=o,n(r.d,u(e),i)},finish:function(e){return n(r.f,e)}},n=function(e,n,o){r.p=t.prev,r.n=t.next;try{return e(n,o)}finally{t.next=r.n}}),t.resultName&&(t[t.resultName]=r.v,t.resultName=void 0),t.sent=r.v,t.next=r.n;try{return e.call(this,t)}finally{r.p=t.prev,r.n=t.next}}}return(e.exports=l=function(){return{wrap:function(e,n,r,o){return t.w(p(e),n,r,o&&o.reverse())},isGeneratorFunction:h,mark:t.m,awrap:function(e,t){return new r(e,t)},AsyncIterator:s,async:function(e,t,n,r,o){return(h(t)?a:i)(p(e),t,n,r,o)},keys:c,values:u}},e.exports.__esModule=!0,e.exports.default=e.exports)()}e.exports=l,e.exports.__esModule=!0,e.exports.default=e.exports},579(e,t,n){var r=n(3738).default;e.exports=function(e){if(null!=e){var t=e["function"==typeof Symbol&&Symbol.iterator||"@@iterator"],n=0;if(t)return t.call(e);if("function"==typeof e.next)return e;if(!isNaN(e.length))return{next:function(){return e&&n>=e.length&&(e=void 0),{value:e&&e[n++],done:!e}}}}throw new TypeError(r(e)+" is not iterable")},e.exports.__esModule=!0,e.exports.default=e.exports},3738(e){function t(n){return e.exports=t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e.exports.__esModule=!0,e.exports.default=e.exports,t(n)}e.exports=t,e.exports.__esModule=!0,e.exports.default=e.exports},4756(e,t,n){var r=n(4633)();e.exports=r;try{regeneratorRuntime=r}catch(e){"object"==typeof globalThis?globalThis.regeneratorRuntime=r:Function("r","regeneratorRuntime = r")(r)}},3612(e,t,n){"use strict";var r,o,i,a,s;window.authentication_config.sessionManagementEnabled="1"===window.authentication_config.sessionManagement;const c={debug:!!window.authentication_config.debug,sessionServer:window.authentication_config?window.authentication_config.sessionServer:"",entitlementsEnabled:!!window.authentication_config&&"1"===window.authentication_config.entitlementsEnabled,dropdownEnabled:!!window.authentication_config&&"1"===window.authentication_config.dropdownEnabled,enableReaderDashboardLink:!!window.authentication_config&&"1"===window.authentication_config.enableReaderDashboardLink,enableReaderDashboardv2:!!window.authentication_config&&"1"===window.authentication_config.enableReaderDashboardv2,enableDashboardCancel:!!window.authentication_config&&"1"===window.authentication_config.enableDashboardCancel,enableDashboardBenefitHub:!!window.authentication_config&&"1"===window.authentication_config.enableDashboardBenefitHub,enableEngageArticleGifting:"1"===(null===(r=window.authentication_config)||void 0===r?void 0:r.articleSharingEnabled)&&"1"===(null===(o=window.authentication_config)||void 0===o?void 0:o.isEngageArticleSharing),enableGiftedArticlesLink:"1"===(null===(i=window.authentication_config)||void 0===i?void 0:i.articleSharingEnabled)&&"1"!==(null===(a=window.authentication_config)||void 0===a?void 0:a.isEngageArticleSharing),enableSavedArticlesLink:"1"===(null===(s=window.authentication_config)||void 0===s?void 0:s.articleSavingEnabled),prosperstackClientid:window.authentication_config?window.authentication_config.prosperstackClientid:"",enableUpgradeSubscription:!!window.authentication_config&&"1"===window.authentication_config.enableUpgradeSubscription,oneTapEnabled:!!window.authentication_config&&"1"===window.authentication_config.oneTapEnabled,forceLogoutOnExpiredIdToken:!!window.authentication_config&&"1"===window.authentication_config.forceLogoutOnExpiredIdToken,useTribMainGoogle:!!window.authentication_config&&"1"===window.authentication_config.useTribMainGoogle,isAdfreeArticle:!!window.authentication_config&&"1"===window.authentication_config.isAdfreeArticle,auth0Domain:window.authentication_config?window.authentication_config.auth0Domain:"",auth0ClientId:window.authentication_config?window.authentication_config.auth0ClientId:"",entitlementsEndpoint:window.authentication_config?window.authentication_config.entitlementsEndpoint:"",entitlementsApiKey:window.authentication_config?window.authentication_config.entitlementsAPIKey:"",linaCheckOnArticles:!!window.authentication_config&&window.authentication_config.linaC

2(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function M(e){return function(){return new x(e.apply(this,arguments))}}function x(e){var t,n;function r(t,n){try{var i=e[t](n),a=i.value,s=a instanceof A;Promise.resolve(s?a.v:a).then(function(n){if(s){var c="return"===t&&a.k?t:"next";if(!a.k||n.done)return r(c,n);n=e[c](n).value}o(!!i.done,n)},function(e){r("throw",e)})}catch(e){o(2,e)}}function o(e,o){2===e?t.reject(o):t.resolve({value:o,done:e}),(t=t.next)?r(t.key,t.arg):n=null}this._invoke=function(e,o){return new Promise(function(i,a){var s={key:e,arg:o,resolve:i,reject:a,next:null};n?n=n.next=s:(t=n=s,r(e,o))})},"function"!=typeof e.return&&(this.return=void 0)}m.prototype.name="InvalidTokenError","function"==typeof SuppressedError&&SuppressedError,x.prototype["function"==typeof Symbol&&Symbol.asyncIterator||"@@asyncIterator"]=function(){return this},x.prototype.next=function(e){return this._invoke("next",e)},x.prototype.throw=function(e){return this._invoke("throw",e)},x.prototype.return=function(e){return this._invoke("return",e)};Error;var U="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:"undefined"!=typeof self?self:{},B={},D={};Object.defineProperty(D,"__esModule",{value:!0});var H=function(){function e(){var e=this;this.locked=new Map,this.addToLocked=function(t,n){var r=e.locked.get(t);void 0===r?void 0===n?e.locked.set(t,[]):e.locked.set(t,[n]):void 0!==n&&(r.unshift(n),e.locked.set(t,r))},this.isLocked=function(t){return e.locked.has(t)},this.lock=function(t){return new Promise(function(n,r){e.isLocked(t)?e.addToLocked(t,n):(e.addToLocked(t),n())})},this.unlock=function(t){var n=e.locked.get(t);if(void 0!==n&&0!==n.length){var r=n.pop();e.locked.set(t,n),void 0!==r&&setTimeout(r,0)}else e.locked.delete(t)}}return e.getInstance=function(){return void 0===e.instance&&(e.instance=new e),e.instance},e}();D.default=function(){return H.getInstance()};var G=U&&U.__awaiter||function(e,t,n,r){return new(n||(n=Promise))(function(o,i){function a(e){try{c(r.next(e))}catch(e){i(e)}}function s(e){try{c(r.throw(e))}catch(e){i(e)}}function c(e){e.done?o(e.value):new n(function(t){t(e.value)}).then(a,s)}c((r=r.apply(e,t||[])).next())})},W=U&&U.__generator||function(e,t){var n,r,o,i,a={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:s(0),throw:s(1),return:s(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function s(i){return function(s){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;a;)try{if(n=1,r&&(o=2&i[0]?r.return:i[0]?r.throw||((o=r.return)&&o.call(r),0):r.next)&&!(o=o.call(r,i[1])).done)return o;switch(r=0,o&&(i=[2&i[0],o.value]),i[0]){case 0:case 1:o=i;break;case 4:return a.label++,{value:i[1],done:!1};case 5:a.label++,r=i[1],i=[0];continue;case 7:i=a.ops.pop(),a.trys.pop();continue;default:if(!((o=(o=a.trys).length>0&&o[o.length-1])||6!==i[0]&&2!==i[0])){a=0;continue}if(3===i[0]&&(!o||i[1]>o[0]&&i[1]<o[3])){a.label=i[1];break}if(6===i[0]&&a.label<o[1]){a.label=o[1],o=i;break}if(o&&a.label<o[2]){a.label=o[2],a.ops.push(i);break}o[2]&&a.ops.pop(),a.trys.pop();continue}i=t.call(e,a)}catch(e){i=[6,e],r=0}finally{n=o=0}if(5&i[0])throw i[1];return{value:i[0]?i[1]:void 0,done:!0}}([i,s])}}},K=U;Object.defineProperty(B,"__esModule",{value:!0});var F=D,j="browser-tabs-lock-key",X={key:function(e){return G(K,void 0,void 0,function(){return W(this,function(e){throw new Error("Unsupported")})})},getItem:function(e){return G(K,void 0,void 0,function(){return W(this,function(e){throw new Error("Unsupported")})})},clear:function(){return G(K,void 0,void 0,function(){return W(this,function(e){return[2,window.localStorage.clear()]})})},removeItem:function(e){return G(K,void 0,void 0,function(){return W(this,function(e){throw new Error("Unsupported")})})},setItem:function(e,t){return G(K,void 0,void 0,function(){return W(this,function(e){throw new Error("Unsupported")})})},keySync:function(e){return window.localStorage.key(e)},getItemSync:function(e){return window.localStorage.getItem(e)},clearSync:function(){return window.localStorage.clear()},removeItemSync:function(e){return window.localStorage.removeItem(e)},setItemSync:function(e,t){return window.localStorage.setItem(e,t)}};function J(e){return new Promise(function(t){return setTimeout(t,e)})}function V(e){for(var t="",n=0;n<e;n++)t+="0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz"[Math.floor(61*Math.random())];return t}var Y=function(){function e(t){this.acquiredIatSet=new Set,this.storageHandler=void 0,this.id=Date.now().toString()+V(15),this.acquireLock=this.acquireLock.bind(this),this.releaseLock=this.releaseLock.bind(this),this.releaseLock__private__=this.releaseLock__private__.bind(this),this.waitForSomethingToChange=this.waitForSomethingToChange.bind(this),this.refreshLockWhileAcquired=this.refreshLockWhileAcquired.bind(this),this.storageHandler=t,void 0===e.waiters&&(e.waiters=[])}return e.prototype.acquireLock=function(t,n){return void 0===n&&(n=5e3),G(this,void 0,void 0,function(){var r,o,i,a,s,c,u;return W(this,function(l){switch(l.label){case 0:r=Date.now()+V(4),o=Date.now()+n,i=j+"-"+t,a=void 0===this.storageHandler?X:this.storageHandler,l.label=1;case 1:return Date.now()<o?[4,J(30)]:[3,8];case 2:return l.sent(),null!==a.getItemSync(i)?[3,5]:(s=this.id+"-"+t+"-"+r,[4,J(Math.floor(25*Math.random()))]);case 3:return l.sent(),a.setItemSync(i,JSON.stringify({id:this.id,iat:r,timeoutKey:s,timeAcquired:Date.now(),timeRefreshed:Date.now()})),[4,J(30)];case 4:return l.sent(),null!==(c=a.getItemSync(i))&&(u=JSON.parse(c)).id===this.id&&u.iat===r?(this.acquiredIatSet.add(r),this.refreshLockWhileAcquired(i,r),[2,!0]):[3,7];case 5:return e.lockCorrector(void 0===this.storageHandler?X:this.storageHandler),[4,this.waitForSomethingToChange(o)];case 6:l.sent(),l.label=7;case 7:return r=Date.now()+V(4),[3,1];case 8:return[2,!1]}})})},e.prototype.refreshLockWhileAcquired=function(e,t){return G(this,void 0,void 0,function(){var n=this;return W(this,function(r){return setTimeout(function(){return G(n,void 0,void 0,function(){var n,r,o;return W(this,function(i){switch(i.label){case 0:return[4,F.default().lock(t)];case 1:return i.sent(),this.acquiredIatSet.has(t)?(n=void 0===this.storageHandler?X:this.storageHandler,null===(r=n.getItemSync(e))?(F.default().unlock(t),[2]):((o=JSON.parse(r)).timeRefreshed=Date.now(),n.setItemSync(e,JSON.stringify(o)),F.default().unlock(t),this.refreshLockWhileAcquired(e,t),[2])):(F.default().unlock(t),[2])}})})},1e3),[2]})})},e.prototype.waitForSomethingToChange=function(t){return G(this,void 0,void 0,function(){return W(this,function(n){switch(n.label){case 0:return[4,new Promise(function(n){var r=!1,o=Date.now(),i=!1;function a(){if(i||(window.removeEventListener("storage",a),e.removeFromWaiting(a),clearTimeout(s),i=!0),!r){r=!0;var t=50-(Date.now()-o);t>0?setTimeout(n,t):n(null)}}window.addEventListener("storage",a),e.addToWaiting(a);var s=setTimeout(a,Math.max(0,t-Date.now()))})];case 1:return n.sent(),[2]}})})},e.addToWaiting=function(t){this.removeFromWaiting(t),void 0!==e.waiters&&e.waiters.push(t)},e.removeFromWaiting=function(t){void 0!==e.waiters&&(e.waiters=e.waiters.filter(function(e){return e!==t}))},e.notifyWaiters=function(){void 0!==e.waiters&&e.waiters.slice().forEach(function(e){return e()})},e.prototype.releaseLock=function(e){return G(this,void 0,void 0,function(){return W(this,function(t){switch(t.label){case 0:return[4,this.releaseLock__private__(e)];case 1:return[2,t.sent()]}})})},e.prototype.releaseLock__private__=function(t){return G(this,void 0,void 0,function(){var n,r,o,i;return W(this,function(a){switch(a.label){case 0:return n=void 0===this.storageHandler?X:this.storageHandler,r=j+"-"+t,null===(o=n.getItemSync(r))?[2]:(i=JSON.parse(o)).id!==this.id?[3,2]:[4,F.default().lock(i.iat)];case 1:a.sent(),this.acquiredIatSet.delete(i.iat),n.removeItemSync(r),F.default().unlock(i.iat),e.notifyWaiters(),a.label=2;case 2:return[2]}})})},e.lockCorrector=function(t){for(var n=Date.now()-5e3,r=t,o=[],i=0;;){var a=r.keySync(i);if(null===a)break;o.push(a),i++}for(var s=!1,c=0;c<o.length;c++){var u=o[c];if(u.includes(j)){var l=r.getItemSync(u);if(null!==l){var d=JSON.parse(l);(void 0===d.timeRefreshed&&d.timeAcquired<n||void 0!==d.timeRefreshed&&d.timeRefreshed<n)&&(r.removeItemSync(u),s=!0)}}}s&&e.notifyWaiters()},e.waiters=void 0,e}();B.default=Y;new TextEncoder,new TextDecoder;let z;if(Uint8Array.prototype.toBase64)z=e=>(e instanceof ArrayBuffer&&(e=new Uint8Array(e)),e.toBase64({alphabet:"base64url",omitPadding:!0}));else{const e=32768;z=t=>{t instanceof ArrayBuffer&&(t=new Uint8Array(t));const n=[];for(let r=0;r<t.byteLength;r+=e)n.push(String.fromCharCode.apply(null,t.subarray(r,r+e)));return btoa(n.join("")).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}}Error;Error;var q=U&&U.__assign||function(){return q=Object.assign||function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},q.apply(this,arguments)};var Z;!function(e){e.Code="code",e.ConnectCode="connect_code"}(Z||(Z={}));var Q;var ee;!function(e){e.Bearer="Bearer",e.DPoP="DPoP"}(ee||(ee={}));Error;var te,ne;let re;if("undefined"==typeof navigator||null===(te=navigator.userAgent)||void 0===te||null===(ne=te.startsWith)||void 0===ne||!ne.call(te,"Mozilla/5.0 ")){const e="v3.8.6";re="".concat("oauth4webapi","/").concat(e)}function oe(e,t){if(null==e)return!1;try{return e instanceof t||Object.getPrototypeOf(e)[Symbol.toStringTag]===t.prototype[Symbol.toStringTag]}catch(e){return!1}}const ie="ERR_INVALID_ARG_VALUE",ae="ERR_INVALID_ARG_TYPE";function se(e,t,n){const r=new TypeError(e,{cause:n});return Object.assign(r,{code:t}),r}const ce=Symbol(),ue=Symbol(),le=Symbol(),de=Symbol(),he=Symbol(),fe=Symbol(),pe=new TextEncoder,ye=new TextDecoder;function ge(e){return"string"==typeof e?pe.encode(e):ye.decode(e)}let we,me;if(Uint8Array.prototype.toBase64)we=e=>(e instanceof ArrayBuffer&&(e=new Uint8Array(e)),e.toBase64({alphabet:"base64url",omitPadding:!0}));else{const e=32768;we=t=>{t instanceof ArrayBuffer&&(t=new Uint8Array(t));const n=[];for(let r=0;r<t.byteLength;r+=e)n.push(String.fromCharCode.apply(null,t.subarray(r,r+e)));return btoa(n.join("")).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}}function ve(e){return"string"==typeof e?me(e):we(e)}me=Uint8Array.fromBase64?e=>{try{return Uint8Array.fromBase64(e,{alphabet:"base64url"})}catch(e){throw se("The input to be decoded is not correctly encoded.",ie,e)}}:e=>{try{const t=atob(e.replace(/-/g,"+").replace(/_/g,"/").replace(/\s/g,"")),n=new Uint8Array(t.length);for(let e=0;e<t.length;e++)n[e]=t.charCodeAt(e);return n}catch(e){throw se("The input to be decoded is not correctly encoded.",ie,e)}};class Ae extends Error{constructor(e,t){var n;super(e,t),N(this,"code",void 0),this.name=this.constructor.name,this.code=St,null===(n=Error.captureStackTrace)||void 0===n||n.call(Error,this,this.constructor)}}class Ee extends Error{constructor(e,t){var n;super(e,t),N(this,"code",void 0),this.name=this.constructor.name,null!=t&&t.code&&(this.code=null==t?void 0:t.code),null===(n=Error.captureStackTrace)||void 0===n||n.call(Error,this,this.constructor)}}function be(e,t,n){return new Ee(e,{code:t,cause:n})}function Se(e){return null!==e&&"object"==typeof e&&!Array.isArray(e)}function Te(e){oe(e,Headers)&&(e=Object.fromEntries(e.entries()));const t=new Headers(null!=e?e:{});if(re&&!t.has("user-agent")&&t.set("user-agent",re),t.has("authorization"))throw se('"options.headers" must not include the "authorization" header name',ie);return t}function _e(e,t){if(void 0!==t){if("function"==typeof t&&(t=t(e.href)),!(t instanceof AbortSignal))throw se('"options.signal" must return or be an instance of AbortSignal',ae);return t}}function Re(e){return e.includes("//")?e.replace("//","/"):e}function Oe(e,t,n,r,o){try{if("number"!=typeof e||!Number.isFinite(e))throw se("".concat(n," must be a number"),ae,o);if(e>0)return;if(t){if(0!==e)throw se("".concat(n," must be a non-negative number"),ie,o);return}throw se("".concat(n," must be a positive number"),ie,o)}catch(e){if(r)throw be(e.message,r,o);throw e}}function Ie(e,t,n,r){try{if("string"!=typeof e)throw se("".concat(t," must be a string"),ae,r);if(0===e.length)throw se("".concat(t," must not be empty"),ie,r)}catch(e){if(n)throw be(e.message,n,r);throw e}}function Ne(e){!function(e,t){if(nt(e)!==t)throw function(e){let t='"response" content-type must be ';for(var n=arguments.length,r=new Array(n>1?n-1:0),o=1;o<n;o++)r[o-1]=arguments[o];if(r.length>2){const e=r.pop();t+="".concat(r.join(", "),", or ").concat(e)}else 2===r.length?t+="".concat(r[0]," or ").concat(r[1]):t+=r[0];return be(t,It,e)}(e,t)}(e,"application/json")}function Ce(){return ve(crypto.getRandomValues(new Uint8Array(32)))}function ke(e){switch(e.algorithm.name){case"RSA-PSS":return function(e){switch(e.algorithm.hash.name){case"SHA-256":return"PS256";case"SHA-384":return"PS384";case"SHA-512":return"PS512";default:throw new Ae("unsupported RsaHashedKeyAlgorithm hash name",{cause:e})}}(e);case"RSASSA-PKCS1-v1_5":return function(e){switch(e.algorithm.hash.name){case"SHA-256":return"RS256";case"SHA-384":return"RS384";case"SHA-512":return"RS512";default:throw new Ae("unsupported RsaHashedKeyAlgorithm hash name",{cause:e})}}(e);case"ECDSA":return function(e){switch(e.algorithm.namedCurve){case"P-256":return"ES256";case"P-384":return"ES384";case"P-521":return"ES512";default:throw new Ae("unsupported EcKeyAlgorithm namedCurve",{cause:e})}}(e);case"Ed25519":case"ML-DSA-44":case"ML-DSA-65":case"ML-DSA-87":return e.algorithm.name;case"EdDSA":return"Ed25519";default:throw new Ae("unsupported CryptoKey algorithm name",{cause:e})}}function Le(e){const t=null==e?void 0:e[ue];return"number"==typeof t&&Number.isFinite(t)?t:0}function Pe(e){const t=null==e?void 0:e[le];return"number"==typeof t&&Number.isFinite(t)&&-1!==Math.sign(t)?t:30}function Me(){return Math.floor(Date.now()/1e3)}function xe(e){if("object"!=typeof e||null===e)throw se('"as" must be an object',ae);Ie(e.issuer,'"as.issuer"')}function Ue(e){if("object"!=typeof e||null===e)throw se('"client" must be an object',ae);Ie(e.client_id,'"client.client_id"')}function Be(e){return Ie(e,'"clientSecret"'),(t,n,r,o)=>{r.set("client_id",n.client_id),r.set("client_secret",e)}}function De(e,t){const n=e instanceof CryptoKey?{key:i}:(null==i?void 0:i.key)instanceof CryptoKey?(void 0!==i.kid&&Ie(i.kid,'"kid"'),{key:i.key,kid:i.kid}):{},r=n.key,o=n.kid;var i;return function(e,t){if(function(e,t){if(!(e instanceof CryptoKey))throw se("".concat(t," must be a CryptoKey"),ae)}(e,t),"private"!==e.type)throw se("".concat(t," must be a private CryptoKey"),ie)}(r,'"clientPrivateKey.key"'),async(e,n,i,a)=>{var s;const c={alg:ke(r),kid:o},u=function(e,t){const n=Me()+Le(t);return{jti:Ce(),aud:e.issuer,exp:n+60,iat:n,nbf:n,iss:t.client_id,sub:t.client_id}}(e,n);null==t||null===t[he]||void 0===s||s.call(t,c,u),i.set("client_id",n.client_id),i.set("client_assertion_type","urn:ietf:params:oauth:client-assertion-type:jwt-bearer"),i.set("client_assertion",await async function(e,t,n){if(!n.usages.includes("sign"))throw se('CryptoKey instances used for signing assertions must include "sign" in their "usages"',ie);const r="".concat(ve(ge(JSON.stringify(e))),".").concat(ve(ge(JSON.stringify(t)))),o=ve(await crypto.subtle.sign(function(e){switch(e.algorithm.name){case"ECDSA":return{name:e.algorithm.name,hash:Gt(e)};case"RSA-PSS":switch(Ht(e),e.algorithm.hash.name){case"SHA-256":case"SHA-384":case"SHA-512":return{name:e.algorithm.name,saltLength:parseInt(e.algorithm.hash.name.slice(-3),10)>>3};default:throw new Ae("unsupported RSA-PSS hash name",{cause:e})}case"RSASSA-PKCS1-v1_5":return Ht(e),e.algorithm.name;case"ML-DSA-44":case"ML-DSA-65":case"ML-DSA-87":case"Ed25519":return e.algorithm.name}throw new Ae("unsupported CryptoKey algorithm name",{cause:e})}(n),n,ge(r)));return"".concat(r,".").concat(o)}(c,u,r))}}const He=URL.parse?(e,t)=>URL.parse(e,t):(e,t)=>{try{return new URL(e,t)}catch(e){return null}};function Ge(e,t){if(t&&"https:"!==e.protocol)throw be("only requests to HTTPS are allowed",Ct,e);if("https:"!==e.protocol&&"http:"!==e.protocol)throw be("only HTTP and HTTPS requests are allowed",kt,e)}function We(e,t,n,r){let o;if("string"!=typeof e||!(o=He(e)))throw be("authorization server metadata does not contain a valid ".concat(n?'"as.mtls_endpoint_aliases.'.concat(t,'"'):'"as.'.concat(t,'"')),void 0===e?xt:Ut,{attribute:n?"mtls_endpoint_aliases.".concat(t):t});return Ge(o,r),o}function Ke(e,t,n,r){return n&&e.mtls_endpoint_aliases&&t in e.mtls_endpoint_aliases?We(e.mtls_endpoint_aliases[t],t,n,r):We(e[t],t,n,r)}class Fe extends Error{constructor(e,t){var n;super(e,t),N(this,"cause",void 0),N(this,"code",void 0),N(this,"error",void 0),N(this,"status",void 0),N(this,"error_description",void 0),N(this,"response",void 0),this.name=this.constructor.name,this.code=bt,this.cause=t.cause,this.error=t.cause.error,this.status=t.response.status,this.error_description=t.cause.error_description,Object.defineProperty(this,"response",{enumerable:!1,value:t.response}),null===(n=Error.captureStackTrace)||void 0===n||n.call(Error,this,this.constructor)}}class je extends Error{constructor(e,t){var n,r;super(e,t),N(this,"cause",void 0),N(this,"code",void 0),N(this,"error",void 0),N(this,"error_description",void 0),this.name=this.constructor.name,this.code=Tt,this.cause=t.cause,this.error=t.cause.get("error"),this.error_description=null!==(n=t.cause.get("error_description"))&&void 0!==n?n:void 0,null===(r=Error.captureStackTrace)||void 0===r||r.call(Error,this,this.constructor)}}class Xe extends Error{constructor(e,t){var n;super(e,t),N(this,"cause",void 0),N(this,"code",void 0),N(this,"response",void 0),N(this,"status",void 0),this.name=this.constructor.name,this.code=Et,this.cause=t.cause,this.status=t.response.status,this.response=t.response,Object.defineProperty(this,"response",{enumerable:!1}),null===(n=Error.captureStackTrace)||void 0===n||n.call(Error,this,this.constructor)}}const Je="[a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+",Ve="("+Je+')\\s*=\\s*"((?:[^"\\\\]|\\\\[\\s\\S])*)"',Ye="("+Je+")\\s*=\\s*("+Je+")",ze=new RegExp("^[,\\s]*("+Je+")"),qe=new RegExp("^[,\\s]*"+Ve+"[,\\s]*(.*)"),Ze=new RegExp("^[,\\s]*"+Ye+"[,\\s]*(.*)"),Qe=new RegExp("^([a-zA-Z0-9\\-\\._\\~\\+\\/]+={0,2})(?:$|[,\\s])(.*)");async function $e(e,t,n){if(e.status!==t){let t;var r;if(lt(e),t=await async function(e){if(e.status>399&&e.status<500){Dt(e),Ne(e);try{const t=await e.clone().json();if(Se(t)&&"string"==typeof t.error&&t.error.length)return t}catch(e){}}}(e))throw await(null===(r=e.body)||void 0===r?void 0:r.cancel()),new Fe("server responded with an error in the response body",{cause:t,response:e});throw be('"response" is not a conform '.concat(n," response (unexpected HTTP status code)"),Nt,e)}}function et(e){if(!yt.has(e))throw se('"options.DPoP" is not a valid DPoPHandle',ie)}const tt=Symbol();function nt(e){var t;return null===(t=e.headers.get("content-type"))||void 0===t?void 0:t.split(";")[0]}async function rt(e,t,n,r,o){if(xe(e),Ue(t),!oe(r,Response))throw se('"response" must be an instance of Response',ae);if(lt(r),200!==r.status)throw be('"response" is not a conform UserInfo Endpoint response (unexpected HTTP status code)',Nt,r);let i;if(Dt(r),"application/jwt"===nt(r)){const n=await Wt(await r.text(),Kt.bind(void 0,t.userinfo_signed_response_alg,e.userinfo_signing_alg_values_supported,void 0),Le(t),Pe(t),null==o?void 0:o[fe]).then(dt.bind(void 0,t.client_id)).then(ft.bind(void 0,e)),i=n.claims,a=n.jwt;st.set(r,a)}else{if(t.userinfo_signed_response_alg)throw be("JWT UserInfo Response expected",_t,r);await Jt(r)}if(Ie(i.sub,'"response" body "sub" property',Ot,{body:i}),n===tt);else if(Ie(n,'"expectedSubject"'),i.sub!==n)throw be('unexpected "response" body "sub" property value',Mt,{expected:n,body:i,attribute:"sub"});return i}async function ot(e,t,n,r,o,i,a){return await n(e,t,o,i),i.set("content-type","application/x-www-form-urlencoded;charset=UTF-8"),((null==a?void 0:a[de])||fetch)(r.href,{body:o,headers:Object.fromEntries(i.entries()),method:"POST",redirect:"manual",signal:_e(r,null==a?void 0:a.signal)})}async function it(e,t,n,r,o,i){var a;const s=Ke(e,"token_endpoint",t.use_mtls_endpoint_aliases,!0!==(null==i?void 0:i[ce]));o.set("grant_type",r);const c=Te(null==i?void 0:i.headers);c.set("accept","application/json"),void 0!==(null==i?void 0:i.DPoP)&&(et(i.DPoP),await i.DPoP.addProof(s,c,"POST"));const u=await ot(e,t,n,s,o,c,i);return null==i||null===(a=i.DPoP)||void 0===a||a.cacheNonce(u,s),u}const at=new WeakMap,st=new WeakMap;function ct(e){if(!e.id_token)return;const t=at.get(e);if(!t)throw se('"ref" was already garbage collected or did not resolve from the proper sources',ie);return t}async function ut(e,t,n,r,o,i){if(xe(e),Ue(t),!oe(n,Response))throw se('"response" must be an instance of Response',ae);await $e(n,200,"Token Endpoint"),Dt(n);const a=await Jt(n);if(Ie(a.access_token,'"response" body "access_token" property',Ot,{body:a}),Ie(a.token_type,'"response" body "token_type" property',Ot,{body:a}),a.token_type=a.token_type.toLowerCase(),void 0!==a.expires_in){let e="number"!=typeof a.expires_in?parseFloat(a.expires_in):a.expires_in;Oe(e,!0,'"response" body "expires_in" property',Ot,{body:a}),a.expires_in=e}if(void 0!==a.refresh_token&&Ie(a.refresh_token,'"response" body "refresh_token" property',Ot,{body:a}),void 0!==a.scope&&"string"!=typeof a.scope)throw be('"response" body "scope" property must be a string',Ot,{body:a});if(void 0!==a.id_token){Ie(a.id_token,'"response" body "id_token" property',Ot,{body:a});const i=["aud","exp","iat","iss","sub"];!0===t.require_auth_time&&i.push("auth_time"),void 0!==t.default_max_age&&(Oe(t.default_max_age,!0,'"client.default_max_age"'),i.push("auth_time")),null!=r&&r.length&&i.push(...r);const s=await Wt(a.id_token,Kt.bind(void 0,t.id_token_signed_response_alg,e.id_token_signing_alg_values_supported,"RS256"),Le(t),Pe(t),o).then(mt.bind(void 0,i)).then(pt.bind(void 0,e)).then(ht.bind(void 0,t.client_id)),c=s.claims,u=s.jwt;if(Array.isArray(c.aud)&&1!==c.aud.length){if(void 0===c.azp)throw be('ID Token "aud" (audience) claim includes additional untrusted audiences',Pt,{claims:c,claim:"aud"});if(c.azp!==t.client_id)throw be('unexpected ID Token "azp" (authorized party) claim value',Pt,{expected:t.client_id,claims:c,claim:"azp"})}void 0!==c.auth_time&&Oe(c.auth_time,!0,'ID Token "auth_time" (authentication time)',Ot,{claims:c}),st.set(n,u),at.set(a,c)}if(void 0!==(null==i?void 0:i[a.token_type]))i[a.token_type](n,a);else if("dpop"!==a.token_type&&"bearer"!==a.token_type)throw new Ae("unsupported `token_type` value",{cause:{body:a}});return a}function lt(e){let t;if(t=function(e){if(!oe(e,Response))throw se('"response" must be an instance of Response',ae);const t=e.headers.get("www-authenticate");if(null===t)return;const n=[];let r=t;for(;r;){var o;let t=r.match(ze);const c=null===(o=t)||void 0===o?void 0:o[1].toLowerCase();if(!c)return;const u=r.substring(t[0].length);if(u&&!u.match(/^[\s,]/))return;const l=u.match(/^\s+(.*)$/),d=!!l;r=l?l[1]:void 0;const h={};let f;if(d)for(;r;){let n,o;if(t=r.match(qe)){var i=P(t,4);if(n=i[1],o=i[2],r=i[3],o.includes("\\"))try{o=JSON.parse('"'.concat(o,'"'))}catch(e){}h[n.toLowerCase()]=o}else{if(!(t=r.match(Ze))){if(t=r.match(Qe)){if(Object.keys(h).length)break;var a=P(t,3);f=a[1],r=a[2];break}return}var s=P(t,4);n=s[1],o=s[2],r=s[3],h[n.toLowerCase()]=o}}else r=u||void 0;const p={scheme:c,parameters:h};f&&(p.token68=f),n.push(p)}return n.length?n:void 0}(e))throw new Xe("server responded with a challenge in the WWW-Authenticate HTTP Header",{cause:t,response:e})}function dt(e,t){return void 0!==t.claims.aud?ht(e,t):t}function ht(e,t){if(Array.isArray(t.claims.aud)){if(!t.claims.aud.includes(e))throw be('unexpected JWT "aud" (audience) claim value',Pt,{expected:e,claims:t.claims,claim:"aud"})}else if(t.claims.aud!==e)throw be('unexpected JWT "aud" (audience) claim value',Pt,{expected:e,claims:t.claims,claim:"aud"});return t}function ft(e,t){return void 0!==t.claims.iss?pt(e,t):t}function pt(e,t){var n,r;const o=null!==(n=null===(r=e[Yt])||void 0===r?void 0:r.call(e,t))&&void 0!==n?n:e.issuer;if(t.claims.iss!==o)throw be('unexpected JWT "iss" (issuer) claim value',Pt,{expected:o,claims:t.claims,claim:"iss"});return t}const yt=new WeakSet,gt=Symbol(),wt={aud:"audience",c_hash:"code hash",client_id:"client id",exp:"expiration time",iat:"issued at",iss:"issuer",jti:"jwt id",nonce:"nonce",s_hash:"state hash",sub:"subject",ath:"access token hash",htm:"http method",htu:"http uri",cnf:"confirmation",auth_time:"authentication time"};function mt(e,t){for(const n of e)if(void 0===t.claims[n])throw be('JWT "'.concat(n,'" (').concat(wt[n],") claim missing"),Ot,{claims:t.claims});return t}const vt=Symbol(),At=Symbol();const Et="OAUTH_WWW_AUTHENTICATE_CHALLENGE",bt="OAUTH_RESPONSE_BODY_ERROR",St="OAUTH_UNSUPPORTED_OPERATION",Tt="OAUTH_AUTHORIZATION_RESPONSE_E

2class nn extends Error{constructor(e,t){var n;super(e,t),N(this,"code","ERR_JOSE_GENERIC"),this.name=this.constructor.name,null===(n=Error.captureStackTrace)||void 0===n||n.call(Error,this,this.constructor)}}N(nn,"code","ERR_JOSE_GENERIC");class rn extends nn{constructor(e,t){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"unspecified",r=arguments.length>3&&void 0!==arguments[3]?arguments[3]:"unspecified";super(e,{cause:{claim:n,reason:r,payload:t}}),N(this,"code","ERR_JWT_CLAIM_VALIDATION_FAILED"),N(this,"claim",void 0),N(this,"reason",void 0),N(this,"payload",void 0),this.claim=n,this.reason=r,this.payload=t}}N(rn,"code","ERR_JWT_CLAIM_VALIDATION_FAILED");class on extends nn{constructor(e,t){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"unspecified",r=arguments.length>3&&void 0!==arguments[3]?arguments[3]:"unspecified";super(e,{cause:{claim:n,reason:r,payload:t}}),N(this,"code","ERR_JWT_EXPIRED"),N(this,"claim",void 0),N(this,"reason",void 0),N(this,"payload",void 0),this.claim=n,this.reason=r,this.payload=t}}N(on,"code","ERR_JWT_EXPIRED");class an extends nn{constructor(){super(...arguments),N(this,"code","ERR_JOSE_ALG_NOT_ALLOWED")}}N(an,"code","ERR_JOSE_ALG_NOT_ALLOWED");class sn extends nn{constructor(){super(...arguments),N(this,"code","ERR_JOSE_NOT_SUPPORTED")}}N(sn,"code","ERR_JOSE_NOT_SUPPORTED"),N(class extends nn{constructor(){super(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"decryption operation failed",arguments.length>1?arguments[1]:void 0),N(this,"code","ERR_JWE_DECRYPTION_FAILED")}},"code","ERR_JWE_DECRYPTION_FAILED"),N(class extends nn{constructor(){super(...arguments),N(this,"code","ERR_JWE_INVALID")}},"code","ERR_JWE_INVALID");class cn extends nn{constructor(){super(...arguments),N(this,"code","ERR_JWS_INVALID")}}N(cn,"code","ERR_JWS_INVALID");class un extends nn{constructor(){super(...arguments),N(this,"code","ERR_JWT_INVALID")}}N(un,"code","ERR_JWT_INVALID"),N(class extends nn{constructor(){super(...arguments),N(this,"code","ERR_JWK_INVALID")}},"code","ERR_JWK_INVALID");class ln extends nn{constructor(){super(...arguments),N(this,"code","ERR_JWKS_INVALID")}}N(ln,"code","ERR_JWKS_INVALID");class dn extends nn{constructor(){super(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"no applicable key found in the JSON Web Key Set",arguments.length>1?arguments[1]:void 0),N(this,"code","ERR_JWKS_NO_MATCHING_KEY")}}N(dn,"code","ERR_JWKS_NO_MATCHING_KEY");class hn extends nn{constructor(){super(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"multiple matching keys found in the JSON Web Key Set",arguments.length>1?arguments[1]:void 0),N(this,Symbol.asyncIterator,M(function*(){})),N(this,"code","ERR_JWKS_MULTIPLE_MATCHING_KEYS")}}N(hn,"code","ERR_JWKS_MULTIPLE_MATCHING_KEYS");class fn extends nn{constructor(){super(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"request timed out",arguments.length>1?arguments[1]:void 0),N(this,"code","ERR_JWKS_TIMEOUT")}}N(fn,"code","ERR_JWKS_TIMEOUT");class pn extends nn{constructor(){super(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"signature verification failed",arguments.length>1?arguments[1]:void 0),N(this,"code","ERR_JWS_SIGNATURE_VERIFICATION_FAILED")}}N(pn,"code","ERR_JWS_SIGNATURE_VERIFICATION_FAILED");const yn=e=>{if("CryptoKey"===(null==e?void 0:e[Symbol.toStringTag]))return!0;try{return e instanceof CryptoKey}catch(e){return!1}};function gn(e){if(Uint8Array.fromBase64)return Uint8Array.fromBase64(e);const t=atob(e),n=new Uint8Array(t.length);for(let e=0;e<t.length;e++)n[e]=t.charCodeAt(e);return n}const wn="The input to be decoded is not correctly encoded.";function mn(e){if(Uint8Array.fromBase64)try{return Uint8Array.fromBase64("string"==typeof e?e:qt.decode(e),{alphabet:"base64url"})}catch(e){throw new TypeError(wn,{cause:e})}let t=e;if(t instanceof Uint8Array&&(t=qt.decode(t)),t.includes("+")||t.includes("/"))throw new TypeError(wn);t=t.replace(/-/g,"+").replace(/_/g,"/");try{return gn(t)}catch(e){throw new TypeError(wn)}}function vn(e){let t=e;return"string"==typeof t&&(t=zt.encode(t)),Uint8Array.prototype.toBase64?t.toBase64({alphabet:"base64url",omitPadding:!0}):function(e){if(Uint8Array.prototype.toBase64)return e.toBase64();const t=[];for(let n=0;n<e.length;n+=32768)t.push(String.fromCharCode.apply(null,e.subarray(n,n+32768)));return btoa(t.join(""))}(t).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function An(e){if("object"!=typeof e||null===e||"[object Object]"!==Object.prototype.toString.call(e))return!1;const t=Object.getPrototypeOf(e);return null===t||null===Object.getPrototypeOf(t)}function En(e){return An(e)&&Array.isArray(e.keys)&&Array.from(e.keys).every(An)}function bn(e,t,n){try{return mn(e)}catch(e){throw new n("Failed to base64url decode the ".concat(t))}}async function Sn(e,t){var n,r,o,i;if("RSA"===t.kty&&"oth"in t&&void 0!==t.oth)throw new sn('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');if(!e.kty.includes(t.kty))throw new sn('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');const a=null!==(n=null===(r=e.resolve)||void 0===r?void 0:r.call(e,{kty:t.kty,crv:t.crv}))&&void 0!==n?n:e.subtle,s=!(!t.d&&!t.priv),c=k({},t);return"AKP"!==c.kty&&delete c.alg,delete c.use,crypto.subtle.importKey("jwk",c,a,null!==(o=t.ext)&&void 0!==o?o:!s,null!==(i=t.key_ops)&&void 0!==i?i:e.usages[s?1:0])}function Tn(e){return k({__proto__:null},e)}const _n=e=>e[Symbol.toStringTag];function Rn(e,t,n){const r=e.alg,o=e.secret,i="decrypt"===n||"sign"===n;if(o&&t instanceof Uint8Array)return[On,t];if(An(t)){const a=function(e){const t=Tn(e);if(void 0!==t.ext&&"boolean"!=typeof t.ext)throw new TypeError('"ext" (Extractable) Parameter must be a boolean');if(void 0!==t.key_ops){const e=t.key_ops,n=Array.isArray(e)?[...e]:void 0;if(!n||n.some(e=>"string"!=typeof e)||new Set(n).size!==n.length)throw new TypeError('"key_ops" (Key Operations) Parameter must be an array of unique strings');t.key_ops=n}return t}(t);if("string"!=typeof a.kty)throw new TypeError(o?tn(r,t,"CryptoKey","KeyObject","JSON Web Key","Uint8Array"):tn(r,t,"CryptoKey","KeyObject","JSON Web Key"));if(!(o?"oct"===a.kty&&"string"==typeof a.k:"oct"!==a.kty&&(i?"AKP"===a.kty&&"string"==typeof a.priv||"string"==typeof a.d:void 0===a.d&&void 0===a.priv)))throw new TypeError(o?'JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present':"JSON Web Key for this operation must be a ".concat(i?"private":"public"," JWK"));return((e,t,n)=>{const r=e.alg;if(void 0!==t.use){const e="sign"===n||"verify"===n?"sig":"enc";if(t.use!==e)throw new TypeError('Invalid key for this operation, its "use" must be "'.concat(e,'" when present'))}if(void 0!==t.alg&&t.alg!==r)throw new TypeError('Invalid key for this operation, its "alg" must be "'.concat(r,'" when present'));if(Array.isArray(t.key_ops)){var o;const r="encrypt"===n||"decrypt"===n?null===(o=e.ops)||void 0===o?void 0:o["encrypt"===n?0:1]:n;if(r&&!t.key_ops.includes(r))throw new TypeError('Invalid key for this operation, its "key_ops" must include "'.concat(r,'" when present'))}})(e,a,n),[Cn,t,a]}if(!(e=>yn(e)||(e=>"KeyObject"===(null==e?void 0:e[Symbol.toStringTag]))(e))(t))throw new TypeError(o?tn(r,t,"CryptoKey","KeyObject","JSON Web Key","Uint8Array"):tn(r,t,"CryptoKey","KeyObject","JSON Web Key"));if(o){if("secret"!==t.type)throw new TypeError("".concat(_n(t),' instances for symmetric algorithms must be of type "secret"'))}else{if("secret"===t.type)throw new TypeError("".concat(_n(t),' instances for asymmetric algorithms must not be of type "secret"'));const e=i?"private":"public";if(("public"===t.type||"private"===t.type)&&t.type!==e){const r="sign"===n?"signing":"verify"===n?"verifying":"".concat(n.slice(0,-1),"tion");throw new TypeError("".concat(_n(t)," instances for asymmetric algorithm ").concat(r,' must be of type "').concat(e,'"'))}}return yn(t)?[In,t]:[Nn,t]}const On=0,In=1,Nn=2,Cn=3;let kn;const Ln={__proto__:null,prime256v1:"P-256",secp384r1:"P-384",secp521r1:"P-521"};function Pn(e,t,n){kn||(kn=new WeakMap);const r=kn.get(e);return n&&(r?r[t]=n:kn.set(e,{[t]:n})),null!=n?n:null==r?void 0:r[t]}const Mn=async(e,t,n)=>{var r;return null!==(r=Pn(e,n.alg))&&void 0!==r?r:Pn(e,n.alg,await Sn(n,k(k({},t),{},{alg:n.alg})))};async function xn(e,t,n){const r=Rn(e,t,n);switch(r[0]){case On:case In:return r[1];case Cn:{const t=r[1],n=r[2];if("oct"===n.kty)return mn(n.k);if(!Object.isFrozen(t)){const e=t.key_ops;Array.isArray(e)&&Object.freeze(e),Object.freeze(t)}return Mn(t,n,e)}case Nn:{const t=r[1];return"secret"===t.type?t.export():"toCryptoKey"in t&&"function"==typeof t.toCryptoKey?((e,t)=>{var n,r,o;const i=Pn(e,t.alg);if(i)return i;const a="public"===e.type,s=t.usages[a?0:1],c=e.asymmetricKeyType,u=Ln[null===(n=e.asymmetricKeyDetails)||void 0===n?void 0:n.namedCurve],l=null!==(r=null===(o=t.resolve)||void 0===o?void 0:o.call(t,{crv:u,asymmetricKeyType:c}))&&void 0!==r?r:t.subtle;return Pn(e,t.alg,e.toCryptoKey(l,a,s))})(t,e):Mn(t,t.export({format:"jwk"}),e)}}}function Un(e){const t={__proto__:null};for(const n in e)t[n]=k(k({},e[n]),{},{alg:n});return t}const Bn=[["encrypt","wrapKey"],["decrypt","unwrapKey"]],Dn=[[],["deriveBits"]],Hn=[[],[]];function Gn(e){return{kty:["RSA"],subtle:{name:"RSA-OAEP",hash:"SHA-".concat(e)},usages:Bn,ops:["wrapKey","unwrapKey"]}}function Wn(){return{kty:["EC","OKP"],subtle:{name:"ECDH"},resolve:e=>{let t=e.kty,n=e.crv,r=e.asymmetricKeyType;if("X25519"===n||"x25519"===r)return{name:"X25519"};if("OKP"===t)throw new sn('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');return{name:"ECDH",namedCurve:n}},usages:Dn,ops:[void 0,"deriveBits"]}}function Kn(e){let t=arguments.length>1&&void 0!==arguments[1]&&arguments[1];return{kty:["oct"],secret:!0,subtle:{name:t?"AES-GCM":"AES-KW",length:e},usages:Hn,ops:t?["encrypt","decrypt"]:["wrapKey","unwrapKey"]}}function Fn(){return{kty:["oct"],secret:!0,subtle:{name:"PBKDF2"},usages:Hn,ops:["deriveBits","deriveBits"]}}const jn=Un({dir:{kty:["oct"],secret:!0,subtle:{name:"AES-GCM"},usages:Hn,ops:["encrypt","decrypt"]},"RSA-OAEP":Gn(1),"RSA-OAEP-256":Gn(256),"RSA-OAEP-384":Gn(384),"RSA-OAEP-512":Gn(512),"ECDH-ES":Wn(),"ECDH-ES+A128KW":Wn(),"ECDH-ES+A192KW":Wn(),"ECDH-ES+A256KW":Wn(),A128KW:Kn(128),A192KW:Kn(192),A256KW:Kn(256),A128GCMKW:Kn(128,!0),A192GCMKW:Kn(192,!0),A256GCMKW:Kn(256,!0),"PBES2-HS256+A128KW":Fn(),"PBES2-HS384+A192KW":Fn(),"PBES2-HS512+A256KW":Fn()}),Xn=["encrypt","decrypt"];function Jn(e){let t=arguments.length>1&&void 0!==arguments[1]&&arguments[1];return{kty:["oct"],secret:!0,subtle:{name:t?"AES-CBC":"AES-GCM",length:e},usages:Hn,ops:Xn,cekBits:e,ivBits:t?128:96,cbc:t}}Un({A128GCM:Jn(128),A192GCM:Jn(192),A256GCM:Jn(256),"A128CBC-HS256":Jn(256,!0),"A192CBC-HS384":Jn(384,!0),"A256CBC-HS512":Jn(512,!0)});const Vn={__proto__:null,b64:!0};function Yn(e,t){if(void 0!==t&&(!Array.isArray(t)||t.some(e=>"string"!=typeof e)))throw new TypeError('"'.concat(e,'" option must be an array of strings'));if(t)return new Set(t)}function zn(e,t,n,r,o){if(void 0!==o.crit&&void 0===(null==r?void 0:r.crit))throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');if(!r||void 0===r.crit)return[];if(!Array.isArray(r.crit)||0===r.crit.length||r.crit.some(e=>"string"!=typeof e||0===e.length))throw new e('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');const i=void 0===n?t:k(k({__proto__:null},n),t);for(const t of r.crit){if(!(t in i))throw new sn('Extension Header Parameter "'.concat(t,'" is not recognized'));if(!Object.hasOwn(o,t)||void 0===o[t])throw new e('Extension Header Parameter "'.concat(t,'" is missing'));if(i[t]&&(!Object.hasOwn(r,t)||void 0===r[t]))throw new e('Extension Header Parameter "'.concat(t,'" MUST be integrity protected'))}return r.crit}function qn(e,t){if(t.includes("b64")){const t=e.b64;if("boolean"!=typeof t)throw new cn('The "b64" (base64url-encode payload) Header Parameter must be a boolean');return t}return!0}var Zn,Qn;let $n,er;if("undefined"==typeof navigator||null===(Zn=navigator.userAgent)||void 0===Zn||null===(Qn=Zn.startsWith)||void 0===Qn||!Qn.call(Zn,"Mozilla/5.0 ")){const e="v6.8.4";er="".concat("openid-client","/").concat(e),$n={"user-agent":er}}const tr=e=>nr.get(e);let nr,rr;function or(e){return void 0!==e?Be(e):(rr||(rr=new WeakMap),(e,t,n,r)=>{let o;return(o=rr.get(t))||(function(e,t){if("string"!=typeof e)throw ur("".concat(t," must be a string"),cr);if(0===e.length)throw ur("".concat(t," must not be empty"),sr)}(t.client_secret,'"metadata.client_secret"'),o=Be(t.client_secret),rr.set(t,o)),o(e,t,n,r)})}const ir=tt,ar=de,sr="ERR_INVALID_ARG_VALUE",cr="ERR_INVALID_ARG_TYPE";function ur(e,t,n){const r=new TypeError(e,{cause:n});return Object.assign(r,{code:t}),r}class lr extends Error{constructor(e,t){var n;super(e,t),N(this,"code",void 0),this.name=this.constructor.name,this.code=null==t?void 0:t.code,null===(n=Error.captureStackTrace)||void 0===n||n.call(Error,this,this.constructor)}}function dr(e,t,n){return new lr(e,{cause:t,code:n})}function hr(e){if(e instanceof TypeError||e instanceof lr||e instanceof Fe||e instanceof je||e instanceof Xe)throw e;if(e instanceof Ee)switch(e.code){case Ct:throw dr("only requests to HTTPS are allowed",e,e.code);case kt:throw dr("only requests to HTTP or HTTPS are allowed",e,e.code);case Nt:throw dr("unexpected HTTP response status code",e.cause,e.code);case It:throw dr("unexpected response content-type",e.cause,e.code);case Rt:throw dr("parsing error occured",e,e.code);case Ot:throw dr("invalid response encountered",e,e.code);case Pt:throw dr("unexpected JWT claim value encountered",e,e.code);case Mt:throw dr("unexpected JSON attribute value encountered",e,e.code);case Lt:throw dr("JWT timestamp claim value failed validation",e,e.code);default:throw dr(e.message,e,e.code)}if(e instanceof Ae)throw dr("unsupported operation",e,e.code);if(e instanceof DOMException)switch(e.name){case"OperationError":throw dr("runtime operation error",e,St);case"NotSupportedError":throw dr("runtime unsupported operation",e,St);case"TimeoutError":throw dr("operation timed out",e,"OAUTH_TIMEOUT");case"AbortError":throw dr("operation aborted",e,"OAUTH_ABORT")}throw new lr("something went wrong",{cause:e})}async function fr(e,t,n,r,o){const i=await async function(e,t){var n,r;if(!(e instanceof URL))throw ur('"server" must be an instance of URL',cr);const o=!e.href.includes("/.well-known/"),i=null!==(null==t?void 0:t.timeout)&&void 0!==n?n:30,a=AbortSignal.timeout(1e3*i),s=await(o?async function(e,t){return async function(e,t,n,r){if(!(e instanceof URL))throw se('"'.concat("issuerIdentifier",'" must be an instance of URL'),ae);Ge(e,!0!==(null==r?void 0:r[ce]));const o=n(new URL(e.href)),i=Te(null==r?void 0:r.headers);return i.set("accept","application/json"),((null==r?void 0:r[de])||fetch)(o.href,{body:void 0,headers:Object.fromEntries(i.entries()),method:"GET",redirect:"manual",signal:_e(o,null==r?void 0:r.signal)})}(e,0,e=>{switch(null==t?void 0:t.algorithm){case void 0:case"oidc":!function(e){e.pathname=Re("".concat(e.pathname,"/").concat(".well-known/openid-configuration"))}(e);break;case"oauth2":!function(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&arguments[2];"/"===e.pathname?e.pathname=t:e.pathname=Re("".concat(t,"/").concat(n?e.pathname:e.pathname.replace(/(\/)$/,"")))}(e,".well-known/oauth-authorization-server");break;default:throw se('"options.algorithm" must be "oidc" (default), or "oauth2"',ie)}return e},t)}(e,{algorithm:null==t?void 0:t.algorithm,[de]:null==t?void 0:t[ar],[ce]:null==t||null===t.execute||void 0===r?void 0:r.includes(Er),signal:a,headers:new Headers($n)}):((null==t?void 0:t[ar])||fetch)((Ge(e,null==t||null===t.execute||void 0===c||!c.includes(Er)),e.href),{headers:Object.fromEntries(new Headers(k({accept:"application/json"},$n)).entries()),body:void 0,method:"GET",redirect:"manual",signal:a})).then(e=>async function(e,t){const n=e;if(!(n instanceof URL)&&n!==Vt)throw se('"expectedIssuerIdentifier" must be an instance of URL',ae);if(!oe(t,Response))throw se('"response" must be an instance of Response',ae);if(200!==t.status)throw be('"response" is not a conform Authorization Server Metadata response (unexpected HTTP status code)',Nt,t);Dt(t);const r=await Jt(t);if(Ie(r.issuer,'"response" body "issuer" property',Ot,{body:r}),n!==Vt&&new URL(r.issuer).href!==n.href)throw be('"response" body "issuer" property does not match the expected value',Mt,{expected:n.href,body:r,attribute:"issuer"});return r}(Vt,e)).catch(hr);var c;return o&&new URL(s.issuer).href!==e.href&&(function(e,t,n){return!("https://login.microsoftonline.com"!==e.origin||null!=n&&n.algorithm&&"oidc"!==n.algorithm||(t[pr]=!0,0))}(e,s,t)||function(e,t){return!(!e.hostname.endsWith(".b2clogin.com")||null!=t&&t.algorithm&&"oidc"!==t.algorithm)}(e,t)||(()=>{throw new lr("discovered metadata issuer does not match the expected issuer",{code:Mt,cause:{expected:e.href,body:s,attribute:"issuer"}})})()),s}(e,o),a=new yr(i,t,n,r);let s=tr(a);if(null!=o&&o[ar]&&(s.fetch=o[ar]),null!=o&&o.timeout&&(s.timeout=o.timeout),null!=o&&o.execute)for(const e of o.execute)e(a);return a}new TextDecoder;const pr=Symbol();class yr{constructor(e,t,n,r){var o,i,a,s,c;if("string"!=typeof t||!t.length)throw ur('"clientId" must be a non-empty string',cr);if("string"==typeof n&&(n={client_secret:n}),void 0!==(null===(o=n)||void 0===o?void 0:o.client_id)&&t!==n.client_id)throw ur('"clientId" and "metadata.client_id" must be the same',sr);const u=k(k({},structuredClone(n)),{},{client_id:t});let l;u[ue]=null!==(i=null===(a=n)||void 0===a?void 0:a[ue])&&void 0!==i?i:0,u[le]=null!==(s=null===(c=n)||void 0===c?void 0:c[le])&&void 0!==s?s:30,l=r||("string"==typeof u.client_secret&&u.client_secret.length?or(u.client_secret):(e,t,n,r)=>{n.set("client_id",t.client_id)});let d=Object.freeze(u);const h=structuredClone(e);pr in e&&(h[Yt]=t=>{let n=t.claims.tid;return e.issuer.replace("{tenantid}",n)});let f=Object.freeze(h);nr||(nr=new WeakMap),nr.set(this,{__proto__:null,as:f,c:d,auth:l,tlsOnly:!0,jwksCache:{}})}serverMetadata(){const e=structuredClone(tr(this).as);return function(e){Object.defineProperties(e,function(e){return{supportsPKCE:{__proto__:null,value(){var t;let n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"S256";return!0===(null===(t=e.code_challenge_methods_supported)||void 0===t?void 0:t.includes(n))}}}}(e))}(e),e}clientMetadata(){return structuredClone(tr(this).c)}get timeout(){return tr(this).timeout}set timeout(e){tr(this).timeout=e}get[ar](){return tr(this).fetch}set[ar](e){tr(this).fetch=e}}function gr(e){Object.defineProperties(e,function(e){let t;if(void 0!==e.expires_in){const n=new Date;n.setSeconds(n.getSeconds()+e.expires_in),t=n.getTime()}return{expiresIn:{__proto__:null,value(){if(t){const e=Date.now();return t>e?Math.floor((t-e)/1e3):0}}},claims:{__proto__:null,value(){try{return ct(this)}catch(e){return}}}}}(e))}async function wr(e,t,n){var r;let o=arguments.length>3&&void 0!==arguments[3]&&arguments[3];const i=null===e.headers.get("retry-after")||void 0===r?void 0:r.trim();if(void 0===i)return;let a;if(/^\d+$/.test(i))parseInt(i,10);else{const e=new Date(i);if(Number.isFinite(e.getTime())){const t=new Date,n=e.getTime()-t.getTime();n>0&&Math.ceil(n/1e3)}}if(o&&!Number.isFinite(a))throw new Ee("invalid Retry-After header value",{cause:e});a>t&&await mr(a-t,n)}function mr(e,t){return new Promise((n,r)=>{const o=e=>{try{t.throwIfAborted()}catch(e){return void r(e)}if(e<=0)return void n();const i=Math.min(e,5);setTimeout(()=>o(e-i),1e3*i)};o(e)})}async function vr(e,t){Or(e);const n=tr(e),r=n.as,o=n.c,i=n.auth,a=n.fetch,s=n.tlsOnly,c=n.timeout;return async function(e,t,n,r,o){xe(e),Ue(t);const i=Ke(e,"backchannel_authentication_endpoint",t.use_mtls_endpoint_aliases,!0!==(null==o?void 0:o[ce])),a=new URLSearchParams(r);a.set("client_id",t.client_id);const s=Te(null==o?void 0:o.headers);return s.set("accept","application/json"),ot(e,t,n,i,a,s,o)}(r,o,i,t,{[de]:a,[ce]:!s,headers:new Headers($n),signal:Ir(c)}).then(e=>async function(e,t,n){if(xe(e),Ue(t),!oe(n,Response))throw se('"response" must be an instance of Response',ae);await $e(n,200,"Backchannel Authentication Endpoint"),Dt(n);const r=await Jt(n);Ie(r.auth_req_id,'"response" body "auth_req_id" property',Ot,{body:r});let o="number"!=typeof r.expires_in?parseFloat(r.expires_in):r.expires_in;return Oe(o,!0,'"response" body "expires_in" property',Ot,{body:r}),r.expires_in=o,void 0!==r.interval&&Oe(r.interval,!1,'"response" body "interval" property',Ot,{body:r}),r}(r,o,e)).catch(hr)}async function Ar(e,t,n,r){var o,i;Or(e),new URLSearchParams(n);let a=null!==t.interval&&void 0!==o?o:5;const s=null!==(null==r?void 0:r.signal)&&void 0!==i?i:AbortSignal.timeout(1e3*t.expires_in);try{await mr(a,s)}catch(e){hr(e)}const c=tr(e),u=c.as,l=c.c,d=c.auth,h=c.fetch,f=c.tlsOnly,p=c.nonRepudiation,y=c.timeout,g=c.decrypt,w=(o,i)=>Ar(e,k(k({},t),{},{interval:o}),n,k(k({},r),{},{signal:s,flag:i})),m=function(e,t){const n=Ir(t);if(!n)return{signal:e,cleanup(){}};const r=new AbortController,o=e=>{const t=e.target;r.abort(t.reason)};return e.aborted?r.abort(e.reason):n.aborted?r.abort(n.reason):(e.addEventListener("abort",o,{once:!0}),n.addEventListener("abort",o,{once:!0})),{signal:r.signal,cleanup(){e.removeEventListener("abort",o),n.removeEventListener("abort",o)}}}(s,y),v=await async function(e,t,n,r,o){xe(e),Ue(t),Ie(r,'"authReqId"');const i=new URLSearchParams(null==o?void 0:o.additionalParameters);return i.set("auth_req_id",r),it(e,t,n,"urn:openid:params:grant-type:ciba",i,o)}(u,l,d,t.auth_req_id,{[de]:h,[ce]:!f,additionalParameters:n,DPoP:null==r?void 0:r.DPoP,headers:new Headers($n),signal:m.signal}).catch(hr).finally(m.cleanup);var A;if(503===v.status&&v.headers.has("retry-after"))return await wr(v,a,s,!0),await(null===v.body||void 0===A?void 0:A.cancel()),w(a);const E=async function(e,t,n,r){return ut(e,t,n,void 0,null==r?void 0:r[fe],null==r?void 0:r.recognizedTokenTypes)}(u,l,v,{[fe]:g});let b;try{await E}catch(e){if(Cr(e,r))return w(a,kr);if(e instanceof Fe)switch(e.error){case"slow_down":0;case"authorization_pending":return await wr(e.response,a,s),w(a)}hr(e)}return b.id_token&&await(null==p?void 0:p(v)),gr(b),b}function Er(e){tr(e).tlsOnly=!1}async function br(e,t,n,r,o){if(Or(e),!((null==o?void 0:o.flag)===kr||t instanceof URL||function(e){try{return"Request"===Object.getPrototypeOf(e)[Symbol.toStringTag]}catch(e){return!1}}(t)))throw ur('"currentUrl" must be an instance of URL, or Request',cr);let i,a;const s=tr(e),c=s.as,u=s.c,l=s.auth,d=s.fetch,h=s.tlsOnly,f=s.jarm,p=s.hybrid,y=s.nonRepudiation,g=s.timeout,w=s.decrypt,m=s.implicit;if((null==o?void 0:o.flag)===kr)o.authResponse,o.redirectUri;else{if(!(t instanceof URL)){const e=t;switch(new URL(t.url),e.method){case"GET":break;case"POST":const n=new URLSearchParams(await async function(e){if("POST"!==e.method)throw se("form_post responses are expected to use the POST method",ie,{cause:e});if("application/x-www-form-urlencoded"!==nt(e))throw se("form_post responses are expected to use the application/x-www-form-urlencoded content-type",ie,{cause:e});return async function(e){if(e.bodyUsed)throw se("form_post Request instances must contain a readable body",ie,{cause:e});return e.text()}(e)}(e));if(p)t.hash=n.toString();else for(const e of n.entries()){var v=P(e,2);const n=v[0],r=v[1];t.searchParams.append(n,r)}break;default:throw ur("unexpected Request HTTP method",sr)}}switch(function(e){return new URL(e).search="",e.hash="",e.href}(t),!0){case!!f:await f(t,null==n?void 0:n.expectedState);break;case!!p:await p(t,null==n?void 0:n.expectedNonce,null==n?void 0:n.expectedState,null==n?void 0:n.maxAge);break;case!!m:throw new TypeError("authorizationCodeGrant() cannot be used by response_type=id_token clients");default:try{(function(e,t,n,r){if(xe(e),Ue(t),n instanceof URL&&n.searchParams,!(n instanceof URLSearchParams))throw se('"parameters" must be an instance of URLSearchParams, or URL',ae);if(Ft(n,"response"))throw be('"parameters" contains a JARM response, use validateJwtAuthResponse() instead of validateAuthResponse()',Ot,{parameters:n});const o=Ft(n,"iss"),i=Ft(n,"state");if(!o&&e.authorization_response_iss_parameter_supported)throw be('response parameter "iss" (issuer) missing',Ot,{parameters:n});if(o&&o!==e.issuer)throw be('unexpected "iss" (issuer) response parameter value',Ot,{expected:e.issuer,parameters:n});switch(r){case void 0:case Xt:if(void 0!==i)throw be('unexpected "state" response parameter encountered',Ot,{expected:void 0,parameters:n});break;case jt:break;default:if(Ie(r,'"expectedState" argument'),i!==r)throw be(void 0===i?'response parameter "state" missing':'unexpected "state" response parameter value',Ot,{expected:r,parameters:n})}if(Ft(n,"error"))throw new je("authorization response from the server is an error",{cause:n});const a=Ft(n,"id_token"),s=Ft(n,"token");if(void 0!==a||void 0!==s)throw new Ae("implicit and hybrid flows are not supported");return new URLSearchParams(n),yt.add(c),c;var c})(c,u,t.searchParams,null==n?void 0:n.expectedState)}catch(e){hr(e)}}}const A=await async function(e,t,n,r,o,i,a){if(xe(e),Ue(t),!yt.has(r))throw se('"callbackParameters" must be an instance of URLSearchParams obtained from "validateAuthResponse()", or "validateJwtAuthResponse()',ie);Ie(o,'"redirectUri"');const s=Ft(r,"code");if(!s)throw be('no authorization code in "callbackParameters"',Ot);const c=new URLSearchParams(null==a?void 0:a.additionalParameters);return c.set("redirect_uri",o),c.set("code",s),i!==gt&&(Ie(i,'"codeVerifier"'),c.set("code_verifier",i)),it(e,t,n,"authorization_code",c,a)}(c,u,l,i,a,(null==n?void 0:n.pkceCodeVerifier)||gt,{additionalParameters:r,[de]:d,[ce]:!h,DPoP:null==o?void 0:o.DPoP,headers:new Headers($n),signal:Ir(g)}).catch(hr);"string"!=typeof(null==n?void 0:n.expectedNonce)&&"number"!=typeof(null==n?void 0:n.maxAge)||(n.idTokenExpected=!0);const E=async function(e,t,n,r){return"string"==typeof(null==r?void 0:r.expectedNonce)||"number"==typeof(null==r?void 0:r.maxAge)||null!=r&&r.requireIdToken?async function(e,t,n,r,o,i,a){const s=[];switch(r){case void 0:0;break;case vt:break;default:Ie(r,'"expectedNonce" argument'),s.push("nonce")}switch(null!=o||t.default_max_age,o){case void 0:0;break;case At:break;default:Oe(o,!0,'"maxAge" argument'),s.push("auth_time")}const c=await ut(e,t,n,s,i,a);Ie(c.id_token,'"response" body "id_token" property',Ot,{body:c});const u=ct(c);if(o!==At){const e=Me()+Le(t),n=Pe(t);if(u.auth_time+o<e-n)throw be("too much time has elapsed since the last End-User authentication",Lt,{claims:u,now:e,tolerance:n,claim:"auth_time"})}if(r===vt){if(void 0!==u.nonce)throw be('unexpected ID Token "nonce" claim value',Pt,{expected:void 0,claims:u,claim:"nonce"})}else if(u.nonce!==r)throw be('unexpected ID Token "nonce" claim value',Pt,{expected:r,claims:u,claim:"nonce"});return c}(e,t,n,r.expectedNonce,r.maxAge,r[fe],r.recognizedTokenTypes):async function(e,t,n,r,o){const i=await ut(e,t,n,void 0,r,o),a=ct(i);if(a){if(void 0!==t.default_max_age){Oe(t.default_max_age,!0,'"client.default_max_age"');const e=Me()+Le(t),n=Pe(t);if(a.auth_time+t.default_max_age<e-n)throw be("too much time has elapsed since the last End-User authentication",Lt,{claims:a,now:e,tolerance:n,claim:"auth_time"})}if(void 0!==a.nonce)throw be('unexpected ID Token "nonce" claim value',Pt,{expected:void 0,claims:a,claim:"nonce"})}return i}(e,t,n,null==r?void 0:r[fe],null==r?void 0:r.recognizedTokenTypes)}(c,u,A,{expectedNonce:null==n?void 0:n.expectedNonce,maxAge:null==n?void 0:n.maxAge,requireIdToken:null==n?void 0:n.idTokenExpected,[fe]:w});let b;try{await E}catch(t){if(Cr(t,o))return br(e,void 0,n,r,k(k({},o),{},{flag:kr,authResponse:i,redirectUri:a}));hr(t)}return b.id_token&&await(null==y?void 0:y(A)),gr(b),b}async function Sr(e,t,n,r){Or(e),new URLSearchParams(n);const o=tr(e),i=o.as,a=o.c,s=o.auth,c=o.fetch,u=o.tlsOnly,l=o.nonRepudiation,d=o.timeout,h=o.decrypt,f=await async function(e,t,n,r,o){xe(e),Ue(t),Ie(r,'"refreshToken"');const i=new URLSearchParams(null==o?void 0:o.additionalParameters);return i.set("refresh_token",r),it(e,t,n,"refresh_token",i,o)}(i,a,s,t,{[de]:c,[ce]:!u,additionalParameters:n,DPoP:null==r?void 0:r.DPoP,headers:new Headers($n),signal:Ir(d)}).catch(hr),p=async function(e,t,n,r){return ut(e,t,n,void 0,null==r?void 0:r[fe],null==r?void 0:r.recognizedTokenTypes)}(i,a,f,{[fe]:h});let y;try{await p}catch(o){if(Cr(o,r))return Sr(e,t,n,k(k({},r),{},{flag:kr}));hr(o)}return y.id_token&&await(null==l?void 0:l(f)),gr(y),y}async function Tr(e,t,n){Or(e),new URLSearchParams(t);const r=tr(e),o=r.as,i=r.c,a=r.auth,s=r.fetch,c=r.tlsOnly,u=r.timeout,l=await async function(e,t,n,r,o){return xe(e),Ue(t),it(e,t,n,"client_credentials",new URLSearchParams(r),o)}(o,i,a,t,{[de]:s,[ce]:!c,DPoP:null==n?void 0:n.DPoP,headers:new Headers($n),signal:Ir(u)}).catch(hr),d=async function(e,t,n){return ut(e,t,n,void 0,void 0,void 0)}(o,i,l);let h;try{await d}catch(r){if(Cr(r,n))return Tr(e,t,k(k({},n),{},{flag:kr}));hr(r)}return gr(h),h}function _r(e,t){Or(e);const n=tr(e),r=n.as,o=n.c,i=n.tlsOnly,a=n.hybrid,s=n.jarm,c=n.implicit,u=Ke(r,"authorization_endpoint",!1,i);if(new URLSearchParams(t).has("client_id")||t.set("client_id",o.client_id),!t.has("request_uri")&&!t.has("request")){if(t.has("response_type")||t.set("response_type",a?"code id_token":c?"id_token":"code"),c&&!t.has("nonce"))throw ur("response_type=id_token clients must provide a nonce parameter in their authorization request parameters",sr);s&&t.set("response_mode","jwt")}for(const e of t.entries()){var l=P(e,2);const t=l[0],n=l[1];u.searchParams.append(t,n)}return u}async function Rr(e,t,n){Or(e);const r=_r(e,t),o=tr(e),i=o.as,a=o.c,s=o.auth,c=o.fetch,u=o.tlsOnly,l=o.timeout,d=await async function(e,t,n,r,o){var i;xe(e),Ue(t);const a=Ke(e,"pushed_authorization_request_endpoint",t.use_mtls_endpoint_aliases,!0!==(null==o?void 0:o[ce])),s=new URLSearchParams(r);s.set("client_id",t.client_id);const c=Te(null==o?void 0:o.headers);c.set("accept","application/json"),void 0!==(null==o?void 0:o.DPoP)&&(et(o.DPoP),await o.DPoP.addProof(a,c,"POST"));const u=await ot(e,t,n,a,s,c,o);return null==o||null===o.DPoP||void 0===i||i.cacheNonce(u,a),u}(i,a,s,r.searchParams,{[de]:c,[ce]:!u,DPoP:null==n?void 0:n.DPoP,headers:new Headers($n),signal:Ir(l)}).catch(hr),h=async function(e,t,n){if(xe(e),Ue(t),!oe(n,Response))throw se('"response" must be an instance of Response',ae);await $e(n,201,"Pushed Authorization Request Endpoint"),Dt(n);const r=await Jt(n);Ie(r.request_uri,'"response" body "request_uri" property',Ot,{body:r});let o="number"!=typeof r.expires_in?parseFloat(r.expires_in):r.expires_in;return Oe(o,!0,'"response" body "expires_in" property',Ot,{body:r}),r.expires_in=o,r}(i,a,d);let f;try{await h}catch(r){if(Cr(r,n))return Rr(e,t,k(k({},n),{},{flag:kr}));hr(r)}return _r(e,{request_uri:f.request_uri})}function Or(e){if(!(e instanceof yr))throw ur('"config" must be an instance of Configuration',cr);if(Object.getPrototypeOf(e)!==yr.prototype)throw ur("subclassing Configuration is not allowed",sr)}function Ir(e){return e?AbortSignal.timeout(1e3*e):void 0}async function Nr(e,t,n,r){Or(e);const o=tr(e),i=o.as,a=o.c,s=o.fetch,c=o.tlsOnly,u=o.nonRepudiation,l=o.timeout,d=o.decrypt,h=await async function(e,t,n,r){xe(e),Ue(t);const o=Ke(e,"userinfo_endpoint",t.use_mtls_endpoint_aliases,!0!==(null==r?void 0:r[ce])),i=Te(null==r?void 0:r.headers);return t.userinfo_signed_response_alg?i.set("accept","application/jwt"):(i.set("accept","application/json"),i.append("accept","application/jwt")),async function(e,t,n,r,o,i){var a;if(Ie(e,'"accessToken"'),!(n instanceof URL))throw se('"url" must be an instance of URL',ae);Ge(n,!0!==(null==i?void 0:i[ce])),Te(r),null!=i&&i.DPoP&&(et(i.DPoP),await i.DPoP.addProof(n,r,"GET".toUpperCase(),e)),r.set("authorization","".concat(r.has("dpop")?"DPoP":"Bearer"," ").concat(e));const s=await((null==i?void 0:i[de])||fetch)(n.href,{duplex:oe(null,ReadableStream)?"half":void 0,body:null,headers:Object.fromEntries(r.entries()),method:"GET",redirect:"manual",signal:_e(n,null==i?void 0:i.signal)});return null==i||null===i.DPoP||void 0===a||a.cacheNonce(s,n),s}(n,0,o,i,0,k(k({},r),{},{[ue]:Le(t)}))}(i,a,t,{[de]:s,[ce]:!c,DPoP:null==r?void 0:r.DPoP,headers:new Headers($n),signal:Ir(l)}).catch(hr);let f,p=rt(i,a,n,h,{[fe]:d});try{await p}catch(o){if(Cr(o,r))return Nr(e,t,n,k(k({},r),{},{flag:kr}));hr(o)}return"application/jwt"===nt(h)&&await(null==u?void 0:u(h)),f}function Cr(e,t){return!(null==t||!t.DPoP||t.flag===kr)&&function(e){if(e instanceof Xe){const t=e.cause,n=t[0];return 1===t.length&&"dpop"===n.scheme&&"use_dpop_nonce"===n.parameters.error}return e instanceof Fe&&"use_dpop_nonce"===e.error}(e)}Object.freeze(yr.prototype);const kr=Symbol();async function Lr(e,t,n,r){Or(e);const o=tr(e),i=o.as,a=o.c,s=o.auth,c=o.fetch,u=o.tlsOnly,l=o.timeout,d=o.decrypt,h=o.nonRepudiation,f=await async function(e,t,n,r,o,i){return xe(e),Ue(t),Ie(r,'"grantType"'),it(e,t,n,r,new URLSearchParams(o),i)}(i,a,s,t,new URLSearchParams(n),{[de]:c,[ce]:!u,DPoP:null==r?void 0:r.DPoP,headers:new Headers($n),signal:Ir(l)}).catch(hr);let p;"urn:ietf:params:oauth:grant-type:token-exchange"===t&&(p={n_a:()=>{}});const y=async function(e,t,n,r){return ut(e,t,n,void 0,null==r?void 0:r[fe],null==r?void 0:r.recognizedTokenTypes)}(i,a,f,{[fe]:d,recognizedTokenTypes:p});let g;try{g=await y}catch(o){if(Cr(o,r))return Lr(e,t,n,k(k({},r),{},{flag:kr}));hr(o)}return g.id_token&&await(null==h?void 0:h(f)),gr(g),g}async function Pr(e,t,n){return t instanceof Uint8Array?crypto.subtle.importKey("raw",t,e.subtle,!1,[n]):(function(e,t,n){var r;const o=e.algorithm;if(o.name!==t.name)throw en(t.name);if(t.hash&&(null===(r=o.hash)||void 0===r?void 0:r.name)!==t.hash)throw en(t.hash,"algorithm.hash");if(t.namedCurve&&o.namedCurve!==t.namedCurve)throw en(t.namedCurve,"algorithm.namedCurve");if(void 0!==t.length&&o.length!==t.length)throw en(t.length,"algorithm.length");!function(e,t){if(t&&!e.usages.includes(t))throw new TypeError("CryptoKey does not support this operation, its usages must include ".concat(t,"."))}(e,n)}(t,e.subtle,n),e.minRsaBits&&function(e,t){const n=t.algorithm.modulusLength;if("number"!=typeof n||n<2048)throw new TypeError("".concat(e," requires key modulusLength to be 2048 bits or larger"))}(e.alg,t),t)}const Mr=[["verify"],["sign"]];function xr(e){const t={name:"HMAC",hash:"SHA-".concat(e)};return{kty:["oct"],secret:!0,subtle:t,signing:t,usages:Mr}}function Ur(e,t){const n={name:t?"RSA-PSS":"RSASSA-PKCS1-v1_5",hash:"SHA-".concat(e)};return{kty:["RSA"],subtle:n,signing:t?k(k({},n),{},{saltLength:t}):n,usages:Mr,minRsaBits:2048}}function Br(e,t){return{kty:["EC"],crv:e,subtle:{name:"ECDSA",namedCurve:e},signing:{name:"ECDSA",hash:"SHA-".concat(t)},usages:Mr}}function Dr(){const e={name:"Ed25519"};return{kty:["OKP"],crv:"Ed25519",subtle:e,signing:e,usages:Mr}}function Hr(e){const t={name:"ML-DSA-".concat(e)};return{kty:["AKP"],subtle:t,signing:t,usages:Mr}}const Gr=Un({HS256:xr(256),HS384:xr(384),HS512:xr(512),RS256:Ur(256),RS384:Ur(384),RS512:Ur(512),PS256:Ur(256,32),PS384:Ur(384,48),PS512:Ur(512,64),ES256:Br("P-256",256),ES384:Br("P-384",384),ES512:Br("P-521",512),EdDSA:Dr(),Ed25519:Dr(),"ML-DSA-44":Hr(44),"ML-DSA-65":Hr(65),"ML-DSA-87":Hr(87)});function Wr(e){const t="string"==typeof e?Gr[e]:void 0;if(!t)throw new sn("alg ".concat(e," is not supported either by JOSE or your javascript runtime"));return t}async function Kr(e,t,n){if(e instanceof Uint8Array&&qt.decode(e),"string"!=typeof e)throw new cn("Compact JWS must be a string or Uint8Array");const r=e.split("."),o=r[0],i=r[1],a=r[2];if(3!==r.length)throw new cn("Invalid Compact JWS");const s={payload:i,protected:o,signature:a},c=function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:void 0===e?{}:function(e,t,n){let r;try{JSON.parse(Zt.decode(mn(e)))}catch(e){throw new t(n)}if(!An(r))throw new t(n);return r}(e,cn,"JWS Protected Header is invalid");return t}(o),u=function(e,t,n){const r=qn(e,zn(cn,Vn,n[1],e,t)),o=t.alg;if("string"!=typeof o||!o)throw new cn('JWS "alg" (Algorithm) Header Parameter missing or invalid');if(n[0]&&!n[0].has(o))throw new an('"alg" (Algorithm) Header Parameter value not allowed');return[r,o]}(c,c,t),l=P(u,2),d=l[0],h=l[1],f=d?i:function(e){try{return $t(e)}catch(e){throw new cn("JWS Compact Serialization payload must use only ASCII characters")}}(i);return async function(e,t,n,r,o,i,a){var s;let c=!1;"function"==typeof n&&(await n(o,e),!0);const u="string"==typeof a,l=Wr(i),d=Qt(void 0!==r?$t(r):new Uint8Array,$t("."),u?null!==t[2]&&void 0!==s?s:t[2]=function(e,t,n){try{return $t(e)}catch(e){throw new n("The ".concat("payload"," is not a valid base64url string"))}}(a,0,cn):a),h=bn(e.signature,"signature",cn),f=await xn(l,n,"verify");if(!await async function(e,t,n,r){const o=await Pr(e,t,"verify");try{return await crypto.subtle.verify(e.signing,o,n,r)}catch(e){return!1}}(l,f,h,d))throw new pn;return[u?bn(a,"payload",cn):a,o,u,f,c]}(s,t,n,o,c,h,f)}const Fr=e=>Math.floor(e.getTime()/1e3),jr={s:1,m:60,h:3600,d:86400,w:604800,y:31557600},Xr=/^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i,Jr="check_failed";function Vr(){throw new TypeError("Invalid time period format")}function Yr(e){"string"!=typeof e&&Vr();const t=Xr.exec(e);(!t||t[4]&&t[1])&&Vr();const n=parseFloat(t[2]),r=Math.round(n*jr[t[3][0].toLowerCase()]);return Number.isFinite(r)||Vr(),"-"===t[1]||"ago"===t[4]?-r:r}function zr(e,t){if(!Number.isFinite(t))throw new TypeError("Invalid ".concat(e," input"));return t}function qr(e,t){if("string"!=typeof t)throw new TypeError('"'.concat(e,'" claim must be a string'))}function Zr(e,t){return"number"==typeof e?zr(t,e):e instanceof Date?zr(t,Fr(e)):Fr(new Date)+Yr(e)}const Qr=e=>{const t=e.toLowerCase();return e.includes("/")?t:"application/".concat(t)};function $r(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&arguments[2];const r=e[t];if(void 0!==r||n){if("number"!=typeof r)throw new rn('"'.concat(t,'" claim must be a number'),e,t,"invalid");return r}}function eo(e,t){throw new rn('unexpected "'.concat(t,'" claim value'),e,t,Jr)}function to(e,t){let n,r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};try{JSON.parse(Zt.decode(t))}catch(e){}if(!An(n))throw new un("JWT Claims Set must be a top-level JSON object");const o=r.typ;if(void 0!==o&&("string"!=typeof e.typ||Qr(e.typ)!==Qr(o)))throw new rn('unexpected "typ" JWT header value',n,"typ",Jr);const i=r.requiredClaims,a=void 0===i?[]:i,s=r.issuer,c=r.subject,u=r.audience,l=r.maxTokenAge,d=[...a];void 0!==l&&d.push("iat"),void 0!==u&&d.push("aud"),void 0!==c&&d.push("sub"),void 0!==s&&d.push("iss");for(const e of new Set(d.reverse()))if(!Object.hasOwn(n,e))throw new rn('missing required "'.concat(e,'" claim'),n,e,"missing");var h,f;void 0===s||(Array.isArray(s)?s:[s]).includes(n.iss)||eo(n,"iss"),void 0!==c&&n.sub!==c&&eo(n,"sub"),void 0===u||("string"==typeof n.aud?f.includes(h):Array.isArray(h)&&f.some(e=>h.includes(e)))||eo(n,"aud");const p=r.clockTolerance;let y=0;if("string"==typeof p)Yr(p);else if(void 0!==p){if("number"!=typeof p)throw new TypeError("Invalid clockTolerance option type");0}zr("clockTolerance option",y);const g=r.currentDate,w=zr("currentDate option",Fr(void 0===g?new Date:g)),m=$r(n,"iat",void 0!==l),v=$r(n,"nbf");if(void 0!==v&&v>w+y)throw new rn('"nbf" claim timestamp check failed',n,"nbf",Jr);const A=$r(n,"exp");if(void 0!==A&&A<=w-y)throw new on('"exp" claim timestamp check failed',n,"exp",Jr);if(void 0!==l){const e=w-m;if(e-y>zr("maxTokenAge option","number"==typeof l?l:Yr(l)))throw new on('"iat" claim timestamp check failed (too far in the past)',n,"iat",Jr);if(e<-y)throw new rn('"iat" claim timestamp check failed (it should be in the past)',n,"iat",Jr)}return n}let no;function ro(e){return no.get(e)}async function oo(e,t,n,r,o){const i=P(function(e){if(void 0===e)return[void 0,""];const t=function(e,t){let n,r;try{n=JSON.stringify(t),r=JSON.parse(n)}catch(t){throw new e("JOSE Header is not valid JSON",{cause:t})}if(!An(r))throw new e("JOSE Header is not a JSON object");return[r,n]}(cn,e);return[t[0],vn(t[1])]}(t),2),a=i[0],s=i[1];if(!a)throw new cn("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");(function(e,t,n){return function(e,t){const n=(null!=t?t:{}).crit;if(Array.isArray(n)&&new Set(n).size!==n.length)throw new e('"crit" (Critical) Header Parameter MUST NOT contain duplicate values')}(cn,e),qn(e,zn(cn,Vn,n,e,t))})(a,a,n)||o();const c=function(e){const t=e.alg;if("string"!=typeof t||!t)throw new cn('JWS "alg" (Algorithm) Header Parameter missing or invalid');return Wr(t)}(a),u=vn(e),l=await async function(e,t,n,r){const o=Qt($t(e),$t("."),t),i=await xn(n,r,"sign");return vn(await async function(e,t,n){const r=await Pr(e,t,"sign"),o=await crypto.subtle.sign(e.signing,r,n);return new Uint8Array(o)}(n,i,o))}(s,$t(u),c,r);return"".concat(s,".").concat(u,".").concat(l)}const io=class{constructor(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};if(!An(e))throw new TypeError("JWT Claims Set MUST be an object");(no||(no=new WeakMap)).set(this,structuredClone(e))}setIssuer(e){return qr("iss",e),ro(this).iss=e,this}setSubject(e){return qr("sub",e),ro(this).sub=e,this}setAudience(e){return function(e){if("string"!=typeof e&&(!Array.isArray(e)||Array.from(e).some(e=>"string"!=typeof e)))throw new TypeError('"aud" claim must be a string or an array of strings')}(e),ro(this).aud=e,this}setJti(e){return qr("jti",e),ro(this).jti=e,this}setNotBefore(e){return ro(this).nbf=Zr(e,"setNotBefore"),this}setExpirationTime(e){return ro(this).exp=Zr(e,"setExpirationTime"),this}setIssuedAt(e){return ro(this).iat=void 0===e?Fr(new Date):"string"==typeof e?zr("setIssuedAt",Fr(new Date)+Yr(e)):Zr(e,"setIssuedAt"),this}};var ao=new WeakMap;class so extends io{constructor(){super(...arguments),R(this,ao,void 0)}setProtectedHeader(e){return function(e){if(void 0!==e)throw new TypeError("".concat("setProtectedHeader"," can only be called once"))}(_(ao,this)),O(ao,this,e),this}async sign(e,t){return oo(function(e){const t=ro(e);for(const e of["iat","nbf","exp"]){const n=t[e];if("number"==typeof n&&!Number.isFinite(n))throw new TypeError('"'.concat(e,'" claim must be a finite number'))}return zt.encode(JSON.stringify(t))}(this),_(ao,this),null==t?void 0:t.crit,e,()=>{throw new un("JWTs MUST NOT use unencoded payload")})}}const co='"alg" (Algorithm)';function uo(){throw new sn("Invalid or unsupported ".concat(arguments.length>0&&void 0!==arguments[0]?arguments[0]:'JWK "alg" (Algorithm) Parameter'," value"))}const lo=(e,t)=>{if(e.byteLength!==t.length)return!1;for(let n=0;n<e.byteLength;n++)if(e[n]!==t[n])return!1;return!0},ho=e=>{const t=e.data[e.pos++];if(void 0===t)throw new Error("Unexpected end of ASN.1 input");return t},fo=e=>{const t=ho(e);if(128&t){const n=127&t;let r=0;for(let t=0;t<n;t++)r=r<<8|ho(e);return r}return t},po=(e,t,n)=>{if(ho(e)!==t)throw new Error(n)},yo=(e,t)=>{if(t<0||e.pos+t>e.data.length)throw new Error("Unexpected end of ASN.1 input");const n=e.data.subarray(e.pos,e.pos+t);return e.pos+=t,n},go=e=>{const t=(e=>{po(e,6,"Expected algorithm OID");const t=fo(e);return yo(e,t)})(e);if(lo(t,[43,101,110]))return"X25519";if(!lo(t,[42,134,72,206,61,2,1]))throw new Error("Unsupported key algorithm");po(e,6,"Expected curve OID");const n=fo(e),r=yo(e,n);if(lo(r,[42,134,72,206,61,3,1,7]))return"P-256";if(lo(r,[43,129,4,0,34]))return"P-384";if(lo(r,[43,129,4,0,35]))return"P-521";throw new Error("Unsupported named curve")},wo=(e,t,n)=>{const r=(e=>gn(e.replace(/(?:-----(?:BEGIN|END) PRIVATE KEY-----|\s)/g,"")))(e);return(async(e,t,n,r)=>{const o=function(e){if(void 0!==e&&"boolean"!=typeof e)throw new TypeError('"extractable" option must be a boolean');return e}(null==r?void 0:r.extractable),i=function(e,t){var n,r;return null!==(n="string"==typeof e?null!==(r=Gr[e])&&void 0!==r?r:jn[e]:void 0)&&void 0!==n?n:uo(t)}(n,co);i.secret&&uo(co);const a="spki"===e;let s;if(i.resolve)try{const n={data:t,pos:0};!function(e,t){if(po(e,48,"Invalid ".concat("spki"===t?"SPKI":"PKCS#8"," structure")),fo(e),"pkcs8"===t){po(e,2,"Expected version field");const t=fo(e);e.pos+=t}po(e,48,"Expected algorithm identifier"),fo(e)}(n,e),s=i.resolve({crv:go(n)})}catch(e){throw new sn("Invalid or unsupported key format")}else s=i.subtle;return crypto.subtle.importKey(e,t,s,null!=o?o:a,i.usages[a?0:1])})("pkcs8",r,t,n)};async function mo(e,t,n){const r=e.get(t)||e.set(t,{}).get(t),o=n.alg;if(void 0===r[o]){const e=await Sn(n,k(k({},t),{},{alg:o,ext:!0}));if("public"!==e.type)throw new ln("JSON Web Key Set members must be public keys");r[o]=e}return r[o]}function vo(e){let t;try{structuredClone(e)}catch(e){}if(!En(t))throw new ln("JSON Web Key Set malformed");const n=new WeakMap;return Object.defineProperty(async(e,r)=>{const o=k(k({},e),null==r?void 0:r.header),i=o.alg,a=o.kid,s="string"==typeof i?Gr[i]:void 0;if(!s||s.secret)throw new sn('Unsupported "alg" value for a JSON Web Key Set');const c=t.keys.filter(e=>function(e,t,n,r){const o=Tn(e),i=o.kty,a=o.key_ops,s=o.ext,c=o.kid,u=o.alg,l=o.use,d=o.crv,h=Array.isArray(a)?[...a]:a;return(void 0===s||"boolean"==typeof s)&&(void 0===h||Array.isArray(h)&&h.every((e,t)=>"string"==typeof e&&h.indexOf(e)===t)&&h.includes("verify"))&&t.kty.includes(i)&&(void 0===r||"string"==typeof r&&r===c)&&(void 0===u?"AKP"!==i:n===u)&&(void 0===l||"sig"===l)&&(!t.crv||d===t.crv)}(e,s,i,a)),u=c[0],l=c.length;if(!l)throw new dn;if(1!==l){const e=new hn;throw e[Symbol.asyncIterator]=M(function*(){for(const e of c)try{yield yield S(mo(n,e,s))}catch(e){}}),e}return mo(n,u,s)},"jwks",{value:()=>structuredClone(t)})}var Ao,Eo;let bo;if("undefined"==typeof navigator||null===(Ao=navigator.userAgent)||void 0===Ao||null===(Eo=Ao.startsWith)||void 0===Eo||!Eo.call(Ao,"Mozilla/5.0 ")){const e="v6.2.10";bo="".concat("jose","/").concat(e)}const So=Symbol(),To=Symbol();function _o(e,t){return Number.isFinite(e)&&Date.now()<e+t}function Ro(e,t,n){if(Number.isNaN(e))throw new TypeError('"'.concat(n,'" option must not be NaN'));return"number"==typeof e?e:t}async function Oo(e,t,n){if("string"!=typeof e||0!==e.indexOf("-----BEGIN PRIVATE KEY-----"))throw new TypeError('"pkcs8" must be PKCS#8 formatted string');return wo(e,t,n)}const Io=["mfaToken"],No=["mfaToken"];var Co,ko,Lo,Po,Mo,xo,Uo,Bo,Do,Ho,Go,Wo,Ko,Fo,jo,Xo,Jo,Vo,Yo,zo,qo,Zo,Qo,$o,ei,ti,ni,ri,oi,ii,ai,si,ci,ui,li,di,hi,fi,pi,yi,gi,wi,mi,vi,Ai,Ei,bi,Si,Ti,_i,Ri,Oi;function Ii(e){if("object"!=typeof e||null===e)return{};const t=e;return{statusCode:"number"==typeof t.statusCode?t.statusCode:void 0,headers:t.headers instanceof Headers?t.headers:void 0,body:"string"==typeof t.body?t.body:void 0}}function Ni(e){var t,n;if("object"!=typeof e||null===e)return{error:"unknown_error",error_description:String(e)};const r=e;let o;if(r.response instanceof Response)try{o=new Headers(r.response.headers),o.delete("set-cookie")}catch(e){o=void 0}const i={error:null!==(t=r.error)&&void 0!==t?t:"",error_description:null!==(n=r.error_description)&&void 0!==n?n:"",message:r.message,statusCode:"number"==typeof r.status?r.status:void 0,headers:o};if("mfa_required"===r.error&&r.cause){i.mfa_token="string"==typeof r.cause.mfa_token?r.cause.mfa_token:void 0;const e=r.cause.mfa_requirements;"object"==typeof e&&null!==e&&(i.mfa_requirements=e)}return i}var Ci=class extends Error{constructor(e,t){super(t),N(this,"code",void 0),this.name="NotSupportedError",this.code=e}},ki=class extends Error{constructor(e,t,n){super(t),N(this,"cause",void 0),N(this,"code",void 0),N(this,"statusCode",void 0),N(this,"headers",void 0),N(this,"body",void 0),this.code=e,this.cause=n&&{error:n.error,error_description:n.error_description,message:n.message,mfa_token:n.mfa_token,mfa_requirements:n.mfa_requirements};const r=Ii(n);this.statusCode=r.statusCode,this.headers=r.headers,this.body=r.body}},Li=class extends ki{constructor(e,t){super("token_by_code_error",e,t),this.name="TokenByCodeError"}},Pi=class extends ki{constructor(e,t){super("token_by_client_credentials_error",e,t),this.name="TokenByClientCredentialsError"}},Mi=class extends ki{constructor(e,t){super("token_by_refresh_token_error",e,t),this.name="TokenByRefreshTokenError"}},xi=class extends ki{constructor(e,t){super("token_by_password_error",e,t),this.name="TokenByPasswordError"}},Ui=class extends ki{constructor(e,t){super("token_for_connection_error",e,t),this.name="TokenForConnectionErrorCode"}},Bi=class extends ki{constructor(e,t){super("token_exchange_error",e,t),this.name="TokenExchangeError"}},Di=class extends ki{constructor(e,t){super("token_revocation_error",e,t),this.name="TokenRevocationError"}},Hi=class extends ki{constructor(e,t){super("user_info_error",e,t),this.name="UserInfoError"}},Gi=class extends Error{constructor(e){super(e),N(this,"code","verify_logout_token_error"),this.name="VerifyLogoutTokenError"}},Wi=class extends ki{constructor(e){super("backchannel_authentication_error","There was an error when trying to use Client-Initiated Backchannel Authentication.",e),N(this,"code","backchannel_authentication_error"),this.name="BackchannelAuthenticationError"}},Ki=class extends ki{constructor(e){super("build_authorization_url_error","There was an error when trying to build the authorization URL.",e),this.name="BuildAuthorizationUrlError"}},Fi=class extends ki{constructor(e){super("build_link_user_url_error","There was an error when trying to build the Link User URL.",e),this.name="BuildLinkUserUrlError"}},ji=class extends ki{constructor(e){super("build_unlink_user_url_error","There was an error when trying to build the Unlink User URL.",e),this.name="BuildUnlinkUserUrlError"}},Xi=class extends Error{constructor(){super("The client secret or client assertion signing key must be provided."),N(this,"code","missing_client_auth_error"),this.name="MissingClientAuthError"}},Ji=class extends Error{constructor(e){super(e),N(this,"code","organization_validation_error"),this.name="OrganizationValidationError"}},Vi=class extends Error{constructor(e){super(e||"fullResponse: true requested but no HTTP Response was captured. This is a bug in CapturingFetch."),N(this,"code","missing_captured_response_error"),this.name="MissingCapturedResponseError"}};function Yi(e){try{const t=new Headers(e);return t.delete("set-cookie"),t}catch(e){return new Headers}}function zi(e,t,n){var r;const o="object"==typeof t&&null!==t?t:void 0,i=null!==(r=null==o?void 0:o.response)&&void 0!==r?r:n,a="number"==typeof(null==o?void 0:o.status)?o.status:null==i?void 0:i.status;"number"==typeof a&&(e.statusCode=a),null!=i&&i.headers&&(e.headers=Yi(i.headers))}function qi(e){return Object.entries(e).filter(e=>void 0!==P(e,2)[1]).reduce((e,t)=>k(k({},e),{},{[t[0]]:t[1]}),{})}function Zi(e){if(!e.trim())throw new Ji("organization must not be blank")}function Qi(e,t){if(!e)return;const n=t.trim();if(n.startsWith("org_")){const t=e.org_id;if("string"!=typeof t)throw new Ji("Organization Id (org_id) claim must be a string present in the ID token");if(t!==n)throw new Ji('Organization Id (org_id) claim value mismatch in the ID token; expected "'.concat(n,'", found "').concat(t,'"'))}else{const t=e.org_name;if("string"!=typeof t)throw new Ji("Organization Name (org_name) claim must be a string present in the ID token");if(t.toLowerCase()!==n.toLowerCase())throw new Ji('Organization Name (org_name) claim value mismatch in the ID token; expected "'.concat(n,'", found "').concat(t,'"'))}}var $i=class extends Error{constructor(e,t,n){super(t),N(this,"cause",void 0),N(this,"code",void 0),N(this,"statusCode",void 0),N(this,"headers",void 0),N(this,"body",void 0),this.code=e,this.cause=n&&{error:n.error,error_description:n.error_description,message:n.message};const r=Ii(n);this.statusCode=r.statusCode,this.headers=r.headers,this.body=r.body}},ea=class extends $i{constructor(e,t){super("mfa_list_authenticators_error",e,t),this.name="MfaListAuthenticatorsError"}},ta=class extends $i{constructor(e,t){super("mfa_enrollment_error",e,t),this.name="MfaEnrollmentError"}},na=class extends $i{constructor(e,t){super("mfa_delete_authenticator_error",e,t),this.name="MfaDeleteAuthenticatorError"}},ra=class extends $i{constructor(e,t){super("mfa_challenge_error",e,t),this.name="MfaChallengeError"}},oa=class extends $i{constructor(e,t){super("mfa_verify_error",e,t),this.name="MfaVerifyError"}};function ia(e){return{id:e.id,authenticatorType:e.authenticator_type,active:e.active,name:e.name,oobChannels:e.oob_channels,type:e.type}}var aa=class e{constructor(e,t,n,r,o,i,a){N(this,"accessToken",void 0),N(this,"idToken",void 0),N(this,"refreshToken",void 0),N(this,"expiresAt",void 0),N(this,"scope",void 0),N(this,"claims",void 0),N(this,"authorizationDetails",void 0),N(this,"tokenType",void 0),N(this,"issuedTokenType",void 0),N(this,"recoveryCode",void 0),N(this,"act",void 0),this.accessToken=e,this.idToken=n,this.refreshToken=r,this.expiresAt=t,this.scope=o,this.claims=i,this.authorizationDetails=a}static fromTokenEndpointResponse(t){const n=t.id_token?t.claims():void 0,r=new e(t.access_token,Math.floor(Date.now()/1e3)+Number(t.expires_in),t.id_token,t.refresh_token,t.scope,n,t.authorization_details);return r.tokenType=t.token_type,r.issuedTokenType=t.issued_token_type,r}};function sa(e,t){if(!1===t.enabled)return e;const n={name:t.name,version:t.version},r=btoa(JSON.stringify(n));return async(t,n)=>{const o=t instanceof Request?new Headers(t.headers):new Headers;return null!=n&&n.headers&&new Headers(n.headers).forEach((e,t)=>{o.set(t,e)}),o.set("Auth0-Client",r),e(t,k(k({},n),{},{headers:o}))}}function ca(e){var t,n;return!1===(null==e?void 0:e.enabled)?e:{enabled:!0,name:null!==(t=null==e?void 0:e.name)&&void 0!==t?t:"@auth0/auth0-auth-js",version:null!==(n=null==e?void 0:e.version)&&void 0!==n?n:"1.16.0"}}function ua(e){let t;const n=async(n,r)=>{const o=await e(n,r);return t=o.clone(),o};return n.getCapturedResponse=()=>t,n}function la(e,t,n){if(!t)return e;const r=t.signal,o=t.headers,i=t.customFetch,a=i?sa(i,n):e;return r||o?async(e,t)=>{const n=o?new Headers(e instanceof Request?e.headers:void 0):void 0;if(n&&null!=t&&t.headers&&new Headers(t.headers).forEach((e,t)=>n.set(t,e)),o)for(const e of Object.entries(o)){var i=P(e,2);const t=i[0],r=i[1],o=t.toLowerCase();"authorization"!==o&&"auth0-client"!==o&&n.set(t,r)}const s=function(e,t){if(!e)return{signal:null!=t?t:void 0};if(!t)return{signal:e};if("undefined"!=typeof AbortSignal&&"function"==typeof AbortSignal.any)return{signal:AbortSignal.any([e,t])};const n=new AbortController,r=[e,t],o=r.find(e=>e.aborted);if(o)return n.abort(o.reason),{signal:n.signal};const i=[],a=()=>{r.forEach((e,t)=>{const n=i[t];n&&e.removeEventListener("abort",n)})};return r.forEach((e,t)=>{const r=()=>{a(),n.abort(e.reason)};i[t]=r,e.addEventListener("abort",r,{once:!0})}),{signal:n.signal,cleanup:a}}(r,null==t?void 0:t.signal);try{return await a(e,k(k(k({},t),n&&{headers:n}),{},{signal:s.signal}))}finally{var c;null===(c=s.cleanup)||void 0===c||c.call(s)}}:a}var da={otp:"http://auth0.com/oauth/grant-type/mfa-otp",oob:"http://auth0.com/oauth/grant-type/mfa-oob","recovery-code":"http://auth0.com/oauth/grant-type/mfa-rec

2try{const t=await Lr(c,da[e.factorType],n),r=aa.fromTokenEndpointResponse(t);t.recovery_code&&(r.recoveryCode=t.recovery_code);const o=s.getCapturedResponse();if(!o)throw new Vi;return{data:r,response:o}}catch(e){var o,i,a;if(e instanceof Vi)throw e;if(e instanceof oa)throw e;const t=e,n=new oa(t.error_description||t.message||"Failed to verify MFA challenge",{error:null!==(o=t.error)&&void 0!==o?o:"mfa_verify_error",error_description:null!==(i=null!==(a=t.error_description)&&void 0!==a?a:t.message)&&void 0!==i?i:"Failed to verify MFA challenge"});throw zi(n,e,s.getCapturedResponse()),n}}const s=await _(xo,this).call(this,t);try{const t=await Lr(s,da[e.factorType],n),r=aa.fromTokenEndpointResponse(t);return t.recovery_code&&(r.recoveryCode=t.recovery_code),r}catch(e){var c,u,l;if(e instanceof oa)throw e;const t=e,n=new oa(t.error_description||t.message||"Failed to verify MFA challenge",{error:null!==(c=t.error)&&void 0!==c?c:"mfa_verify_error",error_description:null!==(u=null!==(l=t.error_description)&&void 0!==l?l:t.message)&&void 0!==u?u:"Failed to verify MFA challenge"});throw zi(n,e),n}}});function fa(e){return la(_(Po,this),e,_(Mo,this))}var pa=class extends Error{constructor(e,t,n){super(t),N(this,"cause",void 0),N(this,"code",void 0),N(this,"statusCode",void 0),N(this,"headers",void 0),N(this,"body",void 0),this.code=e,this.cause=n&&{error:n.error,error_description:n.error_description,message:n.message};const r=Ii(n);this.statusCode=r.statusCode,this.headers=r.headers,this.body=r.body}},ya=class extends pa{constructor(e,t){super("passkey_register_error",e,t),this.name="PasskeyRegisterError"}},ga=class extends pa{constructor(e,t){super("passkey_challenge_error",e,t),this.name="PasskeyChallengeError"}},wa=class extends pa{constructor(e,t){super("passkey_get_token_error",e,t),this.name="PasskeyGetTokenError",this.cause=t&&{error:t.error,error_description:t.error_description,message:t.message,mfa_token:t.mfa_token,mfa_requirements:t.mfa_requirements}}};function ma(e){return e.useMtls?{}:e.clientSecret?{client_secret:e.clientSecret}:{}}var va="urn:okta:params:oauth:grant-type:webauthn",Aa=(Do=new WeakMap,Ho=new WeakMap,Go=new WeakMap,Wo=new WeakMap,Ko=new WeakMap,Fo=new WeakMap,jo=new WeakSet,class{constructor(e){var t,n;I(this,jo),R(this,Do,void 0),R(this,Ho,void 0),R(this,Go,void 0),R(this,Wo,void 0),R(this,Ko,void 0),R(this,Fo,void 0),O(Do,this,"https://".concat(e.domain)),O(Ho,this,e.clientId),O(Go,this,{clientSecret:e.clientSecret,useMtls:e.useMtls}),O(Wo,this,null!==(t=e.customFetch)&&void 0!==t?t:function(){return fetch(...arguments)}),O(Ko,this,null!==(n=e.telemetryConfig)&&void 0!==n?n:ca()),O(Fo,this,e.grantRequest)}async register(e,t){const n="".concat(_(Do,this),"/passkey/register"),r=k(k(k(k(k(k(k(k({},e.email&&{email:e.email}),e.name&&{name:e.name}),e.phoneNumber&&{phone_number:e.phoneNumber}),e.username&&{username:e.username}),e.givenName&&{given_name:e.givenName}),e.familyName&&{family_name:e.familyName}),e.nickname&&{nickname:e.nickname}),e.picture&&{picture:e.picture}),o=k(k({client_id:_(Ho,this)},ma(_(Go,this))),{},{user_profile:r});e.realm&&(o.realm=e.realm),e.organization&&(o.organization=e.organization),e.userMetadata&&(o.user_metadata=e.userMetadata);const i=await b(jo,this,Ea).call(this,t)(n,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(o)});if(!i.ok){const e=await b(jo,this,ba).call(this,i),t=new ya(e.error_description||"Failed to request signup challenge",e);throw t.statusCode=i.status,t.headers=Yi(i.headers),t}return{authSession:(a=await i.json()).auth_session,authnParamsPublicKey:k({},a.authn_params_public_key)};var a}async challenge(e,t){const n="".concat(_(Do,this),"/passkey/challenge"),r=k({client_id:_(Ho,this)},ma(_(Go,this)));null!=e&&e.realm&&(r.realm=e.realm),null!=e&&e.organization&&(r.organization=e.organization);const o=await b(jo,this,Ea).call(this,t)(n,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(r)});if(!o.ok){const e=await b(jo,this,ba).call(this,o),t=new ga(e.error_description||"Failed to request login challenge",e);throw t.statusCode=o.status,t.headers=Yi(o.headers),t}return{authSession:(i=await o.json()).auth_session,authnParamsPublicKey:k({},i.authn_params_public_key)};var i}async getTokenByPasskey(e,t){void 0!==e.organization&&Zi(e.organization);const n=new URLSearchParams({auth_session:e.authSession,authn_response:JSON.stringify(e.credential)});let r;e.realm&&n.append("realm",e.realm),e.scope&&n.append("scope",e.scope),e.audience&&n.append("audience",e.audience),e.organization&&n.append("organization",e.organization);try{r=await _(Fo,this).call(this,va,n,t,e.fullResponse)}catch(e){if(e instanceof Vi)throw e;const t=Ni(e),n=new wa(t.error_description||"Failed to exchange passkey credential for tokens.",t);throw zi(n,e),n}if(e.fullResponse){const t=r;return e.organization&&Qi(t.data.claims,e.organization),t}const o=r;return e.organization&&Qi(o.claims,e.organization),o}});function Ea(e){return la(_(Wo,this),e,_(Ko,this))}async function ba(e){const t=await e.clone().text();try{return k(k({},JSON.parse(t)),{},{statusCode:e.status,headers:e.headers,body:t})}catch(n){return{error:"unknown_error",error_description:"HTTP ".concat(e.status," ").concat(e.statusText),statusCode:e.status,headers:e.headers,body:t}}}var Sa=class extends Error{constructor(e,t,n){super(t),N(this,"cause",void 0),N(this,"code",void 0),N(this,"statusCode",void 0),N(this,"headers",void 0),N(this,"body",void 0),Object.setPrototypeOf(this,new.target.prototype),this.code=e,this.cause=n&&(n.error||n.error_description)?{error:n.error,error_description:n.error_description,message:n.message,mfa_token:n.mfa_token,mfa_requirements:n.mfa_requirements}:void 0;const r=Ii(n);this.statusCode=r.statusCode,this.headers=r.headers,this.body=r.body}},Ta=class extends Sa{constructor(e,t){super("passwordless_start_error",e,t),this.name="PasswordlessStartError"}},_a=class extends Sa{constructor(e,t){super("passwordless_verify_error",e,t),this.name="PasswordlessVerifyError"}},Ra=class extends Sa{constructor(e,t){super("passwordless_db_get_token_error",e,t),this.name="PasswordlessDbGetTokenError"}},Oa=class extends Sa{constructor(e,t,n,r,o){super("passwordless_challenge_error",e,n),N(this,"statusCode",void 0),N(this,"validationErrors",void 0),this.name="PasswordlessChallengeError",this.statusCode=t,this.validationErrors=r,this.headers=null!=o?o:this.headers}};function Ia(e){return/^\+[1-9]\d{1,14}$/.test(e)}async function Na(e,t,n){if(e.useMtls)return{};if(e.clientAssertionSigningKey){var r;const o=null!==(r=e.clientAssertionSigningAlg)&&void 0!==r?r:"RS256",i=e.clientAssertionSigningKey instanceof CryptoKey?e.clientAssertionSigningKey:await Oo(e.clientAssertionSigningKey,o);return{client_assertion:await new so({}).setProtectedHeader({alg:o}).setIssuer(t).setSubject(t).setAudience("https://".concat(n,"/")).setJti(crypto.randomUUID()).setIssuedAt().setExpirationTime("".concat(120,"s")).sign(i),client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer"}}if(e.clientSecret)return{client_secret:e.clientSecret};throw new Xi}var Ca=(Xo=new WeakMap,Jo=new WeakMap,Vo=new WeakMap,Yo=new WeakMap,zo=new WeakMap,qo=new WeakMap,Zo=new WeakMap,Qo=new WeakSet,class{constructor(e){var t,n;I(this,Qo),R(this,Xo,void 0),R(this,Jo,void 0),R(this,Vo,void 0),R(this,Yo,void 0),R(this,zo,void 0),R(this,qo,void 0),R(this,Zo,void 0),O(Jo,this,e.domain),O(Xo,this,"https://".concat(e.domain)),O(Vo,this,e.clientId),O(Yo,this,null!==(t=e.customFetch)&&void 0!==t?t:function(){return fetch(...arguments)}),O(zo,this,null!==(n=e.telemetryConfig)&&void 0!==n?n:ca()),O(qo,this,{clientSecret:e.clientSecret,clientAssertionSigningKey:e.clientAssertionSigningKey,clientAssertionSigningAlg:e.clientAssertionSigningAlg,useMtls:e.useMtls}),O(Zo,this,e.grantRequest)}async sendEmail(e,t){const n=await b(Qo,this,La).call(this,function(e){var t;const n=null!==(t=e.send)&&void 0!==t?t:"code",r={email:e.email,connection:"email",send:n};return"link"===n&&e.authParams&&(r.authParams=e.authParams),r}(e),"Failed to send passwordless email",e.language,t);if(e.fullResponse)return{data:void 0,response:n}}async sendSms(e,t){if(!Ia(e.phoneNumber))throw new Ta("Phone number must be in E.164 format (e.g. +14155550100).");const n=await b(Qo,this,La).call(this,function(e){return{phone_number:e.phoneNumber,connection:"sms"}}(e),"Failed to send passwordless SMS",e.language,t);if(e.fullResponse)return{data:void 0,response:n}}async challengeWithEmail(e,t){const n=function(e){var t;return{email:e.email,connection:e.connection,allow_signup:null!==(t=e.allowSignup)&&void 0!==t&&t}}(e);return b(Qo,this,Pa).call(this,n,"Failed to request email OTP challenge",t)}async challengeWithPhoneNumber(e,t){if(!Ia(e.phoneNumber))throw new Oa("Phone number must be in E.164 format (e.g. +14155550100).",0,void 0,void 0);const n=function(e){var t;const n={phone_number:e.phoneNumber,connection:e.connection,allow_signup:null!==(t=e.allowSignup)&&void 0!==t&&t};return e.deliveryMethod&&(n.delivery_method=e.deliveryMethod),n}(e);return b(Qo,this,Pa).call(this,n,"Failed to request phone OTP challenge",t)}async getTokenByPasswordlessDbConnection(e,t){const n=new URLSearchParams({auth_session:e.authSession,otp:e.otp});if(e.scope&&n.append("scope",e.scope),e.audience&&n.append("audience",e.audience),!_(Zo,this))throw new Ra("Missing grant request delegate.",Ni(new Error("missing grantRequest")));try{return await _(Zo,this).call(this,"http://auth0.com/oauth/grant-type/passwordless/otp",n,t,e.fullResponse)}catch(e){if(e instanceof Vi)throw e;const t=new Ra("There was an error while trying to request a token.",Ni(e)),n=e;throw t.statusCode=n._statusCode,t.headers=n._headers,t}}});function ka(e){return la(_(Yo,this),e,_(zo,this))}async function La(e,t,n,r){var o;const i=await Na(_(qo,this),_(Vo,this),_(Jo,this)),a=k(k({client_id:_(Vo,this)},e),i);let s;try{s=await b(Qo,this,ka).call(this,r)("".concat(_(Xo,this),"/passwordless/start"),{method:"POST",headers:k({"Content-Type":"application/json"},n?{"x-request-language":n}:{}),body:JSON.stringify(a)})}catch(e){throw new Ta("".concat(t,": a network error occurred."))}if(s.ok)return s;const c=await s.clone().text();let u;if(204!==s.status)try{u=JSON.parse(c)}catch(e){u=void 0}const l=new Ta((null===(o=u)||void 0===o?void 0:o.error_description)||t,u);throw l.statusCode=s.status,l.headers=Yi(s.headers),l.body=c,l}async function Pa(e,t,n){var r,o;const i=await Na(_(qo,this),_(Vo,this),_(Jo,this)),a=k(k({client_id:_(Vo,this)},e),i);let s;try{s=await b(Qo,this,ka).call(this,n)("".concat(_(Xo,this),"/otp/challenge"),{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(a)})}catch(e){throw new Oa("challenge error: a network error occurred.",0,void 0,void 0)}if(s.ok){let n;try{n=await s.json()}catch(e){throw new Oa("".concat(t,": could not parse the response body."),s.status,void 0,void 0,Yi(s.headers))}return{authSession:n.auth_session}}const c=await s.clone().text();let u;try{u=JSON.parse(c)}catch(e){u=void 0}const l=u?k(k({},u),{},{statusCode:s.status,headers:s.headers,body:c}):{error:"",error_description:"",statusCode:s.status,headers:s.headers,body:c};throw new Oa((null===(r=u)||void 0===r?void 0:r.error_description)||t,s.status,l,null===(o=u)||void 0===o?void 0:o.validation_errors,Yi(s.headers))}var Ma=class extends Error{constructor(e,t,n){super(t),N(this,"cause",void 0),N(this,"code",void 0),N(this,"statusCode",void 0),N(this,"headers",void 0),N(this,"body",void 0),Object.setPrototypeOf(this,new.target.prototype),this.code=e,this.cause=n&&{error:n.error,error_description:n.error_description,message:n.message};const r=Ii(n);this.statusCode=r.statusCode,this.headers=r.headers,this.body=r.body}},xa=class extends Ma{constructor(e,t){super("signup_error",e,t),this.name="SignUpError"}},Ua=class extends Ma{constructor(e,t){super("change_password_error",e,t),this.name="ChangePasswordError"}};function Ba(e,t,n){for(const r of t)if(null===e[r]||void 0===e[r]||""===e[r])throw new n('Required parameter "'.concat(String(r),'" was null, undefined, or empty.'))}function Da(e){var t,n;return{id:null!==(t=null!==(n=e._id)&&void 0!==n?n:e.user_id)&&void 0!==t?t:e.id,email:"string"==typeof e.email?e.email:"",emailVerified:Boolean(e.email_verified),username:e.username,givenName:e.given_name,familyName:e.family_name,name:e.name,nickname:e.nickname,picture:e.picture,userMetadata:e.user_metadata}}var Ha=($o=new WeakMap,ei=new WeakMap,ti=new WeakMap,ni=new WeakMap,ri=new WeakSet,class{constructor(e){var t,n;I(this,ri),R(this,$o,void 0),R(this,ei,void 0),R(this,ti,void 0),R(this,ni,void 0),O($o,this,"https://".concat(e.domain)),O(ei,this,e.clientId),O(ti,this,null!==(t=e.customFetch)&&void 0!==t?t:function(){return fetch(...arguments)}),O(ni,this,null!==(n=e.telemetryConfig)&&void 0!==n?n:ca())}async signUp(e,t){var n;Ba(e,["email","password","connection"],xa);const r=k({client_id:null!==(n=e.clientId)&&void 0!==n?n:_(ei,this)},function(e){const t={email:e.email,password:e.password,connection:e.connection};return void 0!==e.username&&(t.username=e.username),void 0!==e.givenName&&(t.given_name=e.givenName),void 0!==e.familyName&&(t.family_name=e.familyName),void 0!==e.name&&(t.name=e.name),void 0!==e.nickname&&(t.nickname=e.nickname),void 0!==e.picture&&(t.picture=e.picture),void 0!==e.userMetadata&&(t.user_metadata=e.userMetadata),t}(e)),o=await b(ri,this,Ga).call(this,"/dbconnections/signup",r,xa,"Failed to sign up",t);if(e.fullResponse){const e=o.clone();return{data:Da(await o.json()),response:e}}return Da(await o.json())}async changePassword(e,t){var n;if(Ba(e,["connection"],Ua),!e.email&&!e.username)throw new Ua('Either "email" or "username" is required.');const r=k({client_id:null!==(n=e.clientId)&&void 0!==n?n:_(ei,this)},function(e){const t={connection:e.connection};return void 0!==e.email&&(t.email=e.email),void 0!==e.username&&(t.username=e.username),void 0!==e.organization&&(t.organization=e.organization),t}(e)),o=await b(ri,this,Ga).call(this,"/dbconnections/change_password",r,Ua,"Failed to request a password change",t);if(e.fullResponse){const e=o.clone();return{data:await o.text(),response:e}}return o.text()}});async function Ga(e,t,n,r,o){const i=la(_(ti,this),o,_(ni,this));let a;try{a=await i("".concat(_($o,this)).concat(e),{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})}catch(e){throw new n("".concat(r,": a network error occurred."))}if(a.ok)return a;const s=await a.clone().text(),c=await async function(e){let t;try{t=await e.json()}catch(e){return}return"string"==typeof t.error?t:"string"==typeof t.code?{error:t.code,error_description:"string"==typeof t.description?t.description:""}:void 0}(a.clone()),u=new n((null==c?void 0:c.error_description)||r,null!=c?c:{error:"unknown_error",error_description:r});throw u.statusCode=a.status,u.headers=Yi(a.headers),u.body=s,u}var Wa=class extends Error{constructor(e,t,n){super(t),N(this,"code",void 0),N(this,"cause",void 0),this.name="AnonymousSessionError",this.code=e,this.cause=n&&{error:n.error,error_description:n.error_description,message:n.message}}};async function Ka(e,t,n){if(e.useMtls)return{};if(e.clientAssertionSigningKey){var r;const o=null!==(r=e.clientAssertionSigningAlg)&&void 0!==r?r:"RS256",i=e.clientAssertionSigningKey instanceof CryptoKey?e.clientAssertionSigningKey:await Oo(e.clientAssertionSigningKey,o);return{client_assertion:await new so({}).setProtectedHeader({alg:o}).setIssuer(t).setSubject(t).setAudience("https://".concat(n,"/")).setJti(crypto.randomUUID()).setIssuedAt().setExpirationTime("".concat(120,"s")).sign(i),client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer"}}return e.clientSecret?{client_secret:e.clientSecret}:{}}var Fa=new Set(["session_expired","invalid_session_token"]);async function ja(e){const t="Request failed with status ".concat(e.status);let n={};try{n=await e.json()}catch(e){}return{error:"string"==typeof n.error?n.error:"server_error",error_description:"string"==typeof n.error_description?n.error_description:t}}var Xa=(oi=new WeakMap,ii=new WeakMap,ai=new WeakMap,si=new WeakMap,ci=new WeakMap,ui=new WeakMap,li=new WeakMap,di=new WeakMap,hi=new WeakSet,class{constructor(e){var t;I(this,hi),R(this,oi,void 0),R(this,ii,void 0),R(this,ai,void 0),R(this,si,void 0),R(this,ci,void 0),R(this,ui,void 0),R(this,li,void 0),R(this,di,void 0),O(oi,this,e.domain),O(ii,this,"https://".concat(e.domain)),O(ai,this,e.clientId),O(si,this,e.clientSecret),O(ci,this,e.clientAssertionSigningKey),O(ui,this,e.clientAssertionSigningAlg),O(li,this,e.useMtls),O(di,this,null!==(t=e.customFetch)&&void 0!==t?t:function(){return fetch(...arguments)})}async createSession(e){const t={client_id:_(ai,this)};null!=e&&e.audience&&(t.audience=e.audience),null!=e&&e.scope&&(t.scope=e.scope),null!=e&&e.metadata&&(t.metadata=e.metadata);const n=await b(hi,this,Va).call(this,t);if(!n.sessionToken)throw new Wa("server_error","session_token missing from create session response");return{sessionToken:n.sessionToken,accessToken:n.accessToken,expiresAt:n.expiresAt,sessionTokenExpiresAt:n.sessionTokenExpiresAt,scope:n.scope}}async getAccessToken(e){if(null==e||!e.sessionToken)return this.createSession({audience:null==e?void 0:e.audience,scope:null==e?void 0:e.scope});try{return await b(hi,this,Ja).call(this,e.sessionToken,e)}catch(t){if(t instanceof Wa&&Fa.has(t.code))return k(k({},await this.createSession({audience:null==e?void 0:e.audience,scope:null==e?void 0:e.scope})),{},{sessionReplaced:!0});throw t}}async logout(){const e="".concat(_(ii,this),"/anonymous/logout"),t={client_id:_(ai,this)},n=await _(di,this).call(this,e,{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",redirect:"error",body:JSON.stringify(t)});if(!n.ok){const e=await ja(n);throw new Wa(e.error,e.error_description||"Failed to end anonymous session",e)}}async mintTransferToken(e){const t="".concat(_(ii,this),"/anonymous/token"),n={client_id:_(ai,this),session_token:e,audience:"urn:auth0:anon_transfer"};try{const e=await Ka({clientSecret:_(si,this),clientAssertionSigningKey:_(ci,this),clientAssertionSigningAlg:_(ui,this),useMtls:_(li,this)},_(ai,this),_(oi,this));Object.assign(n,e);const r=await _(di,this).call(this,t,{method:"POST",headers:{"Content-Type":"application/json"},redirect:"error",body:JSON.stringify(n)});if(!r.ok)return null;const o=await r.json();return"string"==typeof o.anon_transfer_token?o.anon_transfer_token:null}catch(e){return null}}});async function Ja(e,t){const n={client_id:_(ai,this),session_token:e};null!=t&&t.audience&&(n.audience=t.audience),null!=t&&t.scope&&(n.scope=t.scope);const r=await b(hi,this,Va).call(this,n);return{sessionToken:e,accessToken:r.accessToken,expiresAt:r.expiresAt,sessionTokenExpiresAt:r.sessionTokenExpiresAt,scope:r.scope,sessionReplaced:!1}}async function Va(e){const t="".concat(_(ii,this),"/anonymous/token"),n=await Ka({clientSecret:_(si,this),clientAssertionSigningKey:_(ci,this),clientAssertionSigningAlg:_(ui,this),useMtls:_(li,this)},_(ai,this),_(oi,this));Object.assign(e,n);const r=await _(di,this).call(this,t,{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",redirect:"error",body:JSON.stringify(e)});if(!r.ok){const e=await ja(r);throw new Wa(e.error,e.error_description||"Anonymous token request failed",e)}let o;try{o=await r.json()}catch(e){throw new Wa("server_error","Invalid response from anonymous token endpoint")}return function(e){const t=Math.floor(Date.now()/1e3);if("string"!=typeof e.access_token||!e.access_token)throw new Wa("server_error","access_token missing or invalid in anonymous token response");const n=e.expires_in;if("number"!=typeof n||!Number.isFinite(n))throw new Wa("server_error","expires_in missing or invalid in anonymous token response");return{accessToken:e.access_token,expiresAt:t+n,scope:e.scope,sessionToken:e.session_token,sessionTokenExpiresAt:"number"==typeof e.session_expires_in&&Number.isFinite(e.session_expires_in)?t+e.session_expires_in:void 0}}(o)}var Ya=(fi=new WeakMap,pi=new WeakMap,yi=new WeakMap,class{constructor(e,t){R(this,fi,new Map),R(this,pi,void 0),R(this,yi,void 0),O(yi,this,Math.max(1,Math.floor(e))),O(pi,this,Math.max(0,Math.floor(t)))}get(e){const t=_(fi,this).get(e);if(t){if(!(Date.now()>=t.expiresAt))return _(fi,this).delete(e),_(fi,this).set(e,t),t.value;_(fi,this).delete(e)}}set(e,t,n){_(fi,this).has(e)&&_(fi,this).delete(e);const r=null!=n&&Number.isFinite(n)&&n>0?n:_(pi,this);for(_(fi,this).set(e,{value:t,expiresAt:Date.now()+r});_(fi,this).size>_(yi,this);){const e=_(fi,this).keys().next().value;if(void 0===e)break;_(fi,this).delete(e)}}}),za=new Map;function qa(e){return{ttlMs:1e3*("number"==typeof(null==e?void 0:e.ttl)?e.ttl:600),maxEntries:"number"==typeof(null==e?void 0:e.maxEntries)&&e.maxEntries>0?e.maxEntries:100}}var Za=class{static createDiscoveryCache(e){const t=(n=e.maxEntries,r=e.ttlMs,"".concat(n,":").concat(r));var n,r;let o=(i=t,za.get(i));var i;return o||(o=new Ya(e.maxEntries,e.ttlMs),za.set(t,o)),o}static createJwksCache(){return{}}},Qa="openid profile email offline_access",$a=Object.freeze(new Set(["grant_type","client_id","client_secret","client_assertion","client_assertion_type","subject_token","subject_token_type","requested_token_type","actor_token","actor_token_type","audience","aud","resource","resources","resource_indicator","scope","connection","login_hint","organization","assertion"]));function es(e){if(null==e)throw new Bi("subject_token is required");if("string"!=typeof e)throw new Bi("subject_token must be a string");if(0===e.trim().length)throw new Bi("subject_token cannot be blank or whitespace");if(e!==e.trim())throw new Bi("subject_token must not include leading or trailing whitespace");if(/^bearer\s+/i.test(e))throw new Bi("subject_token must not include the 'Bearer ' prefix")}function ts(e,t){if(t)for(const r of Object.entries(t)){var n=P(r,2);const t=n[0],o=n[1];if(!$a.has(t))if(Array.isArray(o)){if(o.length>20)throw new Bi("Parameter '".concat(t,"' exceeds maximum array size of ").concat(20));o.forEach(n=>{e.append(t,n)})}else e.append(t,o)}}var ns="urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token",rs="urn:ietf:params:oauth:grant-type:token-exchange",os="urn:ietf:params:oauth:token-type:access_token";function is(e,t){return(n,r)=>{const o=null==r?void 0:r.body;if(t!==va||!(o instanceof URLSearchParams))return e(n,r);const i={};for(const e of o){var a=P(e,2);const t=a[0],n=a[1];i[t]="authn_response"===t?JSON.parse(n):n}const s=new Headers(null==r?void 0:r.headers);return s.set("Content-Type","application/json"),e(n,k(k({},r),{},{headers:s,body:JSON.stringify(i)}))}}gi=new WeakMap,wi=new WeakMap,mi=new WeakMap,vi=new WeakMap,Ai=new WeakMap,Ei=new WeakMap,bi=new WeakMap,Si=new WeakMap,Ti=new WeakMap,_i=new WeakMap,Ri=new WeakMap,Oi=new WeakSet;function as(){const e=_(Ai,this).domain.toLowerCase();return"".concat(e,"|mtls:").concat(_(Ai,this).useMtls?"1":"0")}async function ss(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&arguments[2];const r=await b(Oi,this,gs).call(this,n),o=new yr(e,_(Ai,this).clientId,{client_secret:_(Ai,this).clientSecret,use_mtls_endpoint_aliases:_(Ai,this).useMtls},r);return o[ar]=null!=t?t:_(Ei,this),o}function cs(e){return la(_(Ei,this),e,_(bi,this))}async function us(e){let t=arguments.length>1&&void 0!==arguments[1]&&arguments[1];const n=await b(Oi,this,ls).call(this,t),r=n.configuration,o=n.serverMetadata;if(!e)return{configuration:r,serverMetadata:o};const i=b(Oi,this,cs).call(this,e);return{configuration:await b(Oi,this,ss).call(this,o,i,t),serverMetadata:o}}async function ls(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];const t=_(e?wi:gi,this);if(t&&_(mi,this))return{configuration:t,serverMetadata:_(mi,this)};const n=b(Oi,this,as).call(this);e||await b(Oi,this,gs).call(this,!1);const r=_(Ti,this).get(n);if(r)return b(Oi,this,ds).call(this,r.serverMetadata,e);const o=_(_i,this).get(n);if(o){const t=await o;return b(Oi,this,ds).call(this,t.serverMetadata,e)}const i=(async()=>{const e=(await fr(new URL("https://".concat(_(Ai,this).domain)),_(Ai,this).clientId,{use_mtls_endpoint_aliases:_(Ai,this).useMtls},(e,t,n,r)=>{n.set("client_id",t.client_id)},{[ar]:_(Ei,this)})).serverMetadata();return _(Ti,this).set(n,{serverMetadata:e}),{serverMetadata:e}})();i.catch(()=>{}),_(_i,this).set(n,i);try{const t=(await i).serverMetadata;return b(Oi,this,ds).call(this,t,e)}finally{_(_i,this).delete(n)}}async function ds(e,t){const n=await b(Oi,this,ss).call(this,e,void 0,t);return O(mi,this,e),O(t?wi:gi,this,n),{configuration:n,serverMetadata:e}}async function hs(e,t,n){var r,o,i;const a=(await b(Oi,this,us).call(this,t)).configuration;if("audience"in e||"resource"in e)throw new Bi("audience and resource parameters are not supported for Token Vault exchanges");es(e.subjectToken);const s=new URLSearchParams({connection:e.connection,subject_token:e.subjectToken,subject_token_type:null!==e.subjectTokenType&&void 0!==r?r:os,requested_token_type:null!==e.requestedTokenType&&void 0!==o?o:"http://auth0.com/oauth/token-type/federated-connection-access-token"});if(e.loginHint&&s.append("login_hint",e.loginHint),e.scope&&s.append("scope",e.scope),ts(s,e.extra),n){var c;const t=ua(null!==a[ar]&&void 0!==c?c:_(Ei,this)),r=await b(Oi,this,ss).call(this,a.serverMetadata(),t);try{const e=await Lr(r,ns,s),n=aa.fromTokenEndpointResponse(e),o=t.getCapturedResponse();if(!o)throw new Vi;return{data:n,response:o}}catch(n){if(n instanceof Vi)throw n;const r=new Bi("Failed to exchange token for connection '".concat(e.connection,"'."),Ni(n)),o=t.getCapturedResponse();throw r.statusCode=null==o?void 0:o.status,r.headers=o?Yi(o.headers):void 0,r}}const u=ua(null!==a[ar]&&void 0!==i?i:_(Ei,this)),l=await b(Oi,this,ss).call(this,a.serverMetadata(),u);try{const e=await Lr(l,ns,s);return aa.fromTokenEndpointResponse(e)}catch(t){const n=new Bi("Failed to exchange token for connection '".concat(e.connection,"'."),Ni(t)),r=u.getCapturedResponse();throw n.statusCode=null==r?void 0:r.status,n.headers=r?Yi(r.headers):void 0,n}}function fs(e,t,n){var r;if(n.organization&&Qi(e.claims,n.organization),n.actorToken)if(null!==e.claims&&void 0!==r&&r.act)e.act=e.claims.act;else try{e.act=function(e){if("string"!=typeof e)throw new un("JWTs must use Compact JWS serialization, JWT must be a string");const t=e.split("."),n=t[1],r=t.length;