{"version":3,"file":"vendors-995dc299.xxxxxxxx.bundle.js","mappings":";6rBAWA,MAAMA,EAAY,+CAIZC,EAA2B,CAC7B,CAAC,MAAiB,+DAClB,CAAC,MAAoB,kDACrB,CAAC,MAAmB,mEACpB,CAAC,MAAiB,qHAAqHD,IACvI,CAAC,MAAgB,oFACjB,CAAC,MAAoC,0GAA0GA,IAC/I,CAAC,MAAqB,8EACtB,CAAC,MAA+B,0EAChC,CAAC,MAAwB,qIAAqIA,IAC9J,CAAC,KAAmB,2GACpB,CAAC,KAAmB,wDACpB,CAAC,MAAgB,2BACjB,CAAC,MAAsB,sDAAsDA,IAC7E,CAAC,MAAuB,uDAAuDA,IAC/E,CAAC,MAAmB,wLACpB,CAAC,MAAoB,2FAA2FA,IAChH,CAAC,MAAoB,sFACrB,CAAC,MAA0B,qDAC3B,CAAC,MAA0B,kFAC3B,CAAC,MAAiB,0JAClB,CAAC,MAAyB,iHAC1B,CAAC,MAA2B,mCAC5B,CAAC,MAAsC,gDACvC,CAAC,MAAyB,6BAC1B,CAAC,MAAyB,iGAC1B,CAAC,MAAmB,qBACpB,CAAC,MAAwB,0EACzB,CAAC,MAAkB,wBACnB,CAAC,MAAwB,2DACzB,CAAC,MAAoB,4IACrB,CAAC,MAAmB,kFACpB,CAAC,MAAwB,yDACzB,CAAC,MAAoB,gCACrB,CAAC,MAAoB,6DACrB,CAAC,MAAmB,+FACpB,CAAC,MAAoC,0EACrC,CAAC,MAAmC,8DACpC,CAAC,MAAsB,gMACvB,CAAC,MAAyC,kDAAkDA,IAC5F,CAAC,MAAyB,0EAC1B,CAAC,MAA8B,kGAC/B,CAAC,MAAiC,gIAAgIA,IAClK,CAAC,MAAuC,kGAAkGA,IAC1I,CAAC,MAA2B,oHAC5B,CAAC,MAAsB,iCACvB,CAAC,MAAyB,4GAYhB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,IACyB,IAGzB,IACyB,IAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAGzB,KACyB,KAMvC,MAAME,UAAyB,KAC3BC,YAAYC,GACRC,MAAMD,EAAWH,EAAyBG,IAC1CE,OAAOC,eAAeC,KAAMN,EAAiBO,WAC7CD,KAAKE,KAAO,kBAChB,EAEJ,SAASC,EAAuBP,GAC5B,OAAO,IAAIF,EAAiBE,EAChC,gnCCvQA,MAAMQ,EAAiB,mBACjBC,EAAoB,qBACpBC,EAAmB,qBACnBC,EAAiB,mBACjBC,EAAgB,mBAChBC,EAAoC,yCACpCC,EAAqB,wBACrBC,EAA+B,kCAC/BC,EAAwB,0BACxBC,EAAmB,qBACnBC,EAAmB,qBACnBC,EAAgB,iBAChBC,EAAsB,wBACtBC,EAAuB,yBACvBC,EAAmB,qBACnBC,EAAoB,sBACpBC,EAAoB,sBACpBC,EAA0B,4BAC1BC,EAA0B,4BAC1BC,EAAiB,mBACjBC,EAAyB,4BACzBC,EAA2B,+BAC3BC,EAAsC,4CACtCC,EAAyB,4BACzBC,EAAyB,6BACzBC,EAAmB,qBACnBC,EAAwB,0BACxBC,EAAkB,oBAClBC,EAAwB,0BACxBC,EAAoB,sBACpBC,EAAmB,qBACnBC,EAAwB,2BACxBC,EAAoB,uBACpBC,EAAoB,uBACpBC,EAAmB,qBACnBC,EAAoC,wCACpCC,EAAmC,uCACnCC,EAAsB,uBACtBC,EAAyC,+CACzCC,EAAyB,2BACzBC,EAA8B,iCAC9BC,EAAiC,oCACjCC,EAAuC,0CACvCC,EAA2B,8BAC3BC,EAAsB,wBACtBC,EAAyB,8GCxC/B,MAAMC,EAAwC,CAC1C,CAAC,MAAsB,wDACvB,CAAC,MAAuC,iLACxC,CAAC,MAA2B,yRAQlB,KACAA,EAAsC,MAGtC,KACAA,EAAsC,MAGtC,KACAA,EAAsC,MAMpD,MAAMC,UAAsC,KACxCxD,YAAYC,EAAWwD,GACnBvD,MAAMD,EAAWwD,GACjBpD,KAAKE,KAAO,gCACZJ,OAAOC,eAAeC,KAAMmD,EAA8BlD,UAC9D,EAEJ,SAASoD,EAAoCzD,GACzC,OAAO,IAAIuD,EAA8BvD,EAAWsD,EAAsCtD,GAC9F,0GCxCA,MAAM0D,EAAsB,wBACtBC,EAAuC,2CACvCC,EAA2B,uNCIjC,MAAMC,GAAwB,WACxBC,EAA0B,CAC5B,CAAC,KAAa,sKAElB,MAAMC,UAAwB,KAC1BhE,YAAYC,EAAWgE,EAAaC,GAChChE,MAAMD,EAAWgE,GACjB9D,OAAOC,eAAeC,KAAM2D,EAAgB1D,WAC5CD,KAAKE,KAAO,kBACZF,KAAK6D,IAAMA,CACf,EAKJ,SAASC,EAAuBC,GAC5B,SAAIA,EAAMF,MACNE,EAAMF,IAAIG,QACTD,EAAMF,IAAIG,SAAW,MAClBD,EAAMF,IAAIG,SAAW,UAGzBD,EAAMF,MACNE,EAAMF,IAAIE,OACVA,EAAMF,IAAIE,QAAUN,IAGhBM,EAAMnE,YACL,GAKb,CAQA,SAASqE,EAAsBC,EAAMN,EAAaC,GAC9C,GAAIA,GAAOA,EAAIG,OACX,OAAQH,EAAIG,QACR,KAAK,KACD,OAAO,QAAmC,MAC9C,KAAK,KACD,OAAO,IAAI,KAA6BE,EAAMN,GAClD,KAAK,KACD,OAAO,QAAuB,MAClC,KAAK,KACD,OAAO,QAAuB,MAG1C,OAAO,IAAID,EAAgBO,EAAMR,EAAwBQ,IAASN,EAAaC,EACnF,gFC7DA,MAAMM,EAAe,eACfC,EAAa,+HCGnB,MAAMC,EACF1E,YAAY2E,EAAQC,GAChBvE,KAAKwE,eAAiB,IAAIC,IAC1BzE,KAAKsE,OAASA,EACdtE,KAAKuE,cAAgBA,EACrBvE,KAAK0E,0BAA2B,EAChC1E,KAAK2E,yBACD3E,KAAK2E,yBAAyBC,KAAK5E,KAC3C,CAKA6E,iBAAiBC,GACb,GAAsB,oBAAXC,OAAwB,CAC/B,MAAMC,GAAa,UAGnB,OAFAhF,KAAKwE,eAAeS,IAAID,EAAYF,GACpC9E,KAAKsE,OAAOY,QAAQ,sCAAsCF,KACnDA,CACX,CACA,OAAO,IACX,CAKAG,oBAAoBH,GAChBhF,KAAKwE,eAAeY,OAAOJ,GAC3BhF,KAAKsE,OAAOY,QAAQ,kBAAkBF,aAC1C,CAIAK,6BAC0B,oBAAXN,SAGN/E,KAAK0E,yBAMN1E,KAAKsE,OAAOY,QAAQ,iDALpBlF,KAAKsE,OAAOY,QAAQ,oCACpBlF,KAAK0E,0BAA2B,EAChCK,OAAOO,iBAAiB,UAAWtF,KAAK2E,2BAKhD,CAIAY,8BAC0B,oBAAXR,SAGP/E,KAAK0E,0BACL1E,KAAKsE,OAAOY,QAAQ,sCACpBH,OAAOS,oBAAoB,UAAWxF,KAAK2E,0BAC3C3E,KAAK0E,0BAA2B,GAGhC1E,KAAKsE,OAAOY,QAAQ,2CAE5B,CAQAO,UAAUC,EAAWC,EAAiBC,EAAS7B,GAC3C,GAAsB,oBAAXgB,OAAwB,CAC/B,MAAMc,EAAU,CACZH,UAAWA,EACXC,gBAAiBA,GAAmB,KACpCC,QAASA,GAAW,KACpB7B,MAAOA,GAAS,KAChB+B,UAAWC,KAAKC,OAEpBhG,KAAKsE,OAAO2B,KAAK,mBAAmBP,KACpC1F,KAAKwE,eAAe0B,SAAQ,CAACpB,EAAUE,KACnChF,KAAKsE,OAAOY,QAAQ,8BAA8BF,MAAeU,KACjEZ,EAASqB,MAAM,KAAM,CAACN,GAAS,GAEvC,CACJ,CAIAlB,yBAAyByB,GACrB,IAEQA,EAAEC,KAAKC,SAAS,8BAEhBtG,KAAKyF,UAAU,4BAGnB,MAAMc,EAAaH,EAAEI,UAAYJ,EAAEK,SACnC,IAAKF,EACD,OAEJ,MAAMG,EAAcC,KAAKC,MAAML,GAC/B,GAA2B,iBAAhBG,IACN,oBAA8BA,GAC/B,OAEJ,MACMG,EADgB,aAAsB,IAAI,IAAiBH,GAC/BI,kBAC7BV,EAAEK,UAAYL,EAAEI,UACjBxG,KAAKsE,OAAO2B,KAAK,oDACjBjG,KAAKyF,UAAU,uBAAyBsB,EAAWF,KAE7CT,EAAEI,UAAYJ,EAAEK,WACtBzG,KAAKsE,OAAO2B,KAAK,wDACjBjG,KAAKyF,UAAU,yBAA2BsB,EAAWF,GAE7D,CACA,MAAOT,GACH,MACJ,CACJ,0DC3HJ,MAAMY,EAAY,CACdC,iBAAkB,uBAClBC,eAAgB,qBAChBC,cAAe,oBACfC,gBAAiB,sBACjBC,uBAAwB,4BACxBC,YAAa,kBACbC,cAAe,oBACfC,cAAe,oBACfC,oBAAqB,yBACrBC,sBAAuB,2BACvBC,sBAAuB,2BACvBC,4BAA6B,oCAC7BC,iBAAkB,sBAClBC,mBAAoB,wBACpBC,mBAAoB,wBACpBC,4BAA6B,+BAC7BC,8BAA+B,iCAC/BC,8BAA+B,iCAC/BC,sBAAuB,2BACvBC,oBAAqB,yBACrBC,aAAc,mBACdC,aAAc,mBACdC,eAAgB,qBAChBC,eAAgB,qBAChBC,WAAY,iBACZC,qBAAsB,kOCpB1B,MAAMC,EACFhJ,YAAYiJ,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmBC,EAAsBC,GAC7HlJ,KAAK4I,OAASA,EACd5I,KAAKmJ,eAAiBN,EACtB7I,KAAKuE,cAAgBA,EACrBvE,KAAKoJ,cAAgBpJ,KAAK4I,OAAOS,OAAOD,cACxCpJ,KAAK8I,aAAeA,EACpB9I,KAAK+I,iBAAmBA,EACxB/I,KAAKiJ,qBAAuBA,EAC5BjJ,KAAKkJ,cAAgBA,IAAiB,UACtClJ,KAAKsE,OAASA,EAAOgF,MAAM,cAA2B,IAAStJ,KAAKkJ,eACpElJ,KAAKgJ,kBAAoBA,CAC7B,CACAO,yBAAyBC,GACrB,GAAIA,EAAS,CACL,uBAAiCA,EAASxJ,KAAKmJ,eAAeM,oBAAoB,KAClFzJ,KAAKsE,OAAOY,QAAQ,kCACpBlF,KAAKmJ,eAAeO,iBAAiB,OAGzC,UACU1J,KAAKmJ,eAAeQ,cAAc,4BAAsCH,IAC9ExJ,KAAKsE,OAAOY,QAAQ,+EACxB,CACA,MAAOnB,GACH/D,KAAKsE,OAAOP,MAAM,2EACtB,CACJ,MAEI,IACI/D,KAAKsE,OAAOY,QAAQ,mEAAoElF,KAAKkJ,qBAEvFlJ,KAAKmJ,eAAeS,cAEpB5J,KAAKuE,cAAcsF,eAC7B,CACA,MAAOzD,GACHpG,KAAKsE,OAAOP,MAAM,6EACtB,CAER,CAQA+F,eAAeC,GACX/J,KAAKsE,OAAOY,QAAQ,yBACpB,MAAM8E,EAAcD,GAChB/J,KAAK4I,OAAOqB,KAAKD,cACjB,UACJ,OAAO,mBAAyBA,GAAa,UACjD,CAOAE,iCAAiCC,EAAOC,GACpCpK,KAAKsE,OAAOY,QAAQ,2CACpB,MAAMmF,EAAmB,CACrBC,SAAUtK,KAAK4I,OAAOqB,KAAKK,SAC3BpB,cAAelJ,KAAKkJ,cACpBiB,MAAOA,EACPC,aAAcA,IAAgB,EAC9BG,WAAYvK,KAAKmJ,eAAeqB,qBAAqB,GACrDC,WAAYzK,KAAKmJ,eAAeqB,qBAAqB,IAEzD,OAAO,IAAI,IAAuBH,EAAkBrK,KAAKmJ,eAC7D,CAOAI,6BAA6BmB,EAAkBC,EAA0BnB,GACrExJ,KAAKgJ,kBAAkB4B,oBAAoB,qDAAmE5K,KAAKkJ,eACnH,MAAM2B,EAAmB,CACrBC,aAAc9K,KAAK4I,OAAOqB,KAAKa,aAC/BC,YAAa/K,KAAK4I,OAAOqB,KAAKc,YAC9BC,iBAAkBhL,KAAK4I,OAAOqB,KAAKe,iBACnCC,uBAAwBjL,KAAK4I,OAAOqB,KAAKgB,uBACzCC,kBAAmBlL,KAAK4I,OAAOqB,KAAKiB,kBACpCC,2BAA4BnL,KAAK4I,OAAOqB,KAAKkB,4BAG3CC,EAAgBV,GAEhB1K,KAAK4I,OAAOqB,KAAKoB,UAEjBC,EAAiB,uBAA4BF,EAAeT,GAA4B3K,KAAK4I,OAAOqB,KAAKsB,mBACzGC,QAA4B,IAAAC,GAAY,IAA2C,8CAA4DzL,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA7J,CAA4KoC,EAAgBtL,KAAK4I,OAAOS,OAAOD,cAAepJ,KAAKmJ,eAAgB0B,EAAkB7K,KAAKsE,OAAQtE,KAAKkJ,cAAelJ,KAAKgJ,mBAC7U,GAAIQ,IAAYgC,EAAoBE,QAAQlC,EAAQmC,aAChD,MAAM,QAA+B,MAEzC,OAAOH,CACX,+WC/FJ,MAAMI,EAEmB,mBAEzB,MAAMC,UAAgC,IAClClM,YAAYiJ,EAAQO,EAAgB5E,EAAeD,EAAQwE,EAAcC,EAAkBoB,EAAOnB,EAAmB8C,EAAUC,EAAWC,EAAmB9C,GACzJrJ,MAAM+I,EAAQO,EAAgB5E,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmB8C,EAAU5C,GAClHlJ,KAAKmK,MAAQA,EACbnK,KAAK+L,UAAYA,EACjB/L,KAAKiJ,qBAAuB6C,EAC5B9L,KAAKiM,qBAAuBD,EAC5BhM,KAAKkM,kBAAoB,IAAI,IAAkBtD,EAAQ5I,KAAKiM,qBAAsB1H,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmB8C,EAAU5C,GACtKlJ,KAAKmM,uBAAyBnM,KAAKkK,iCAAiClK,KAAKmK,OACzE,MAAMiC,EAAgBpM,KAAKiJ,qBAAqBoD,mBAC5C,4BACE,SACArM,KAAKiJ,qBAAqBoD,kBAAkBC,OACxC,eACAvF,EACV/G,KAAKuM,KAAO,uBAA0C,CAClDC,YAAa,cACbC,eAAgB,IAChBL,cAAeA,EACfM,iBAAkB1M,KAAKiJ,qBAAqB0D,uBAEpD,CAMAC,eAAeC,GACXA,EAAQC,gBAAkB,IACnBD,EAAQC,gBACX,CAAC,MAAwC9M,KAAKuM,KAEtD,CAKAhD,mBAAmBsD,GACf7M,KAAKgJ,kBAAkB4B,oBAAoB,yCAAuDiC,EAAQ3D,eAC1GlJ,KAAKsE,OAAOyI,MAAM,kDAElB,MAAMC,EAAsBhN,KAAKgJ,kBAAkBiE,iBAAiB,yCAAuDJ,EAAQ3D,eAC7HgE,EAAe,OACrB,IAEI,MAAMC,QAAsBnN,KAAKoN,wBAAwBP,GAEzD,IACI,MAAMQ,QAAerN,KAAKsN,uBAAuBtN,KAAK+L,UAAWoB,GAMjE,OALAH,EAAoBO,IAAI,CACpBC,SAAS,EACTC,gBAAgB,EAChBC,WAAW,IAERL,CACX,CACA,MAAOjH,GAEHpG,KAAKsE,OAAO2B,KAAK,6EACrB,CACA,SAAW0H,GAAuBR,EAE5BS,EAAc,CAChBC,OAAQ,cACRhB,QAASc,GAEPG,QAAiB9N,KAAKiJ,qBAAqB8E,YAAYH,GACvDI,EAAoBhO,KAAKiO,uBAAuBH,GACtD,aAAa9N,KAAKkO,qBAAqBF,EAAmBb,EAAeD,GACpEiB,MAAMd,IACPL,EAAoBO,IAAI,CACpBC,SAAS,EACTC,gBAAgB,EAChBW,UAAWf,EAAOe,YAEtBpO,KAAKmM,uBAAuBkC,6BACrBhB,KAENiB,OAAOvK,IAOR,MANAiJ,EAAoBO,IAAI,CACpBC,SAAS,EACT5N,UAAWmE,EAAMnE,UACjB2O,aAAcxK,EAAMyK,SACpBf,gBAAgB,IAEd1J,CAAK,GAEnB,CACA,MAAOqC,GAIH,MAHIA,aAAa,MACbpG,KAAKmM,uBAAuBsC,yBAAyBrI,EAAExG,WAErDwG,CACV,CACJ,CAOAsI,yBAAyB7B,EAAS8B,GAC9B,MAAO,CACHtD,UAAWwB,EAAQxB,UACnBnC,cAAelJ,KAAKkJ,cACpB0F,OAAQ,eAAoB/B,EAAQgC,OAAOC,UAC3CtF,QAASmF,EACTvE,cAAc,EAEtB,CAOAb,6BAA6BwF,EAAiBlC,GAC1C,IAAKkC,EAED,MADA/O,KAAKsE,OAAO0K,QAAQ,iFACd,QAAsB,MAGhC,MAAMxF,EAAUxJ,KAAKmJ,eAAe8F,mBAAmB,CACnDF,oBAEJ,IAAKvF,EACD,MAAM,QAAsB,MAGhC,IACI,MAAM0F,EAAgBlP,KAAK0O,yBAAyB7B,EAASrD,GACvD6D,QAAerN,KAAKkM,kBAAkBiD,aAAaD,GACnDE,EAAc,IACb5F,EACH6F,cAAehC,GAAQgC,cACvBC,QAASjC,GAAQiC,SAErB,MAAO,IACAjC,EACH7D,QAAS4F,EAEjB,CACA,MAAOhJ,GACH,MAAMA,CACV,CACJ,CAMAmD,2BAA2BsD,EAAS0C,GAChCvP,KAAKsE,OAAOyI,MAAM,0DAClB,SAAWyC,GAAwB3C,SAC5B2C,EAAoBC,mBAC3B,MAAMtC,QAAsBnN,KAAKoN,wBAAwBoC,GACnD5B,EAAc,CAChBC,OAAQ,cACRhB,QAASM,GAEb,IACI,MAAMW,QAAiB9N,KAAKiJ,qBAAqB8E,YAAYH,GAC7D5N,KAAKiO,uBAAuBH,EAChC,CACA,MAAO1H,GAEH,GAAIA,aAAa,OACbpG,KAAKmM,uBAAuBsC,yBAAyBrI,EAAExG,YACnD,QAAuBwG,IACvB,MAAMA,CAGlB,CACApG,KAAKmJ,eAAeuG,kBAAkB,oBAAmC/I,KAAKgJ,UAAUxC,IAAgB,GACxG,MAAMyC,EAAoB,CACtBzF,MAAO,0BACP0F,QAAS7P,KAAK4I,OAAOS,OAAOyG,0BAC5BC,WAAW,GAET/F,EAAchK,KAAK4I,OAAOqB,KAAK+F,0BAC/BjL,OAAOkL,SAASC,KAChBlQ,KAAK8J,eAAe+C,EAAQ7C,aAClCuF,EAAgBhC,IAAI,CAAEC,SAAS,UACzBxN,KAAK+I,iBAAiBoH,iBAAiBnG,EAAa4F,EAC9D,CAMArG,4BAA4BP,EAAmBE,GAE3C,GADAlJ,KAAKsE,OAAOyI,MAAM,4DACb/M,KAAKmJ,eAAeiH,yBAAwB,GAE7C,OADApQ,KAAKsE,OAAO2B,KAAK,yFACV,KAGX,MAAMoK,EAAgBrQ,KAAKmJ,eAAemH,yBAC1C,IAAKD,EAKD,OAJArQ,KAAKsE,OAAOY,QAAQ,0GAChB8D,GAAqBE,GACrBF,GAAmBuH,UAAU,CAAE3Q,UAAW,qBAAuBsJ,GAE9D,KAEX,MAAM,OAAEsH,KAAW3D,GAAYwD,EAC3BG,GACAxQ,KAAKsE,OAAOY,QAAQ,wMAExBlF,KAAKmJ,eAAesH,WAAWzQ,KAAKmJ,eAAeuH,iBAAiB,sBACpE,MAAM9C,EAAc,CAChBC,OAAQ,cACRhB,QAASA,GAEPK,EAAe,OACrB,IACIlN,KAAKsE,OAAOY,QAAQ,qFACpB,MAAM4I,QAAiB9N,KAAKiJ,qBAAqB8E,YAAYH,GAC7D5N,KAAKiO,uBAAuBH,GAC5B,MAAMT,EAASrN,KAAKkO,qBAAqBJ,EAAUjB,EAASK,GAC5DlN,KAAKmJ,eAAewH,0BAAyB,GAC7C,MAAMC,QAAYvD,EAElB,OADArN,KAAKmM,uBAAuBkC,6BACrBuC,CACX,CACA,MAAOxK,GAEH,MADApG,KAAKmJ,eAAewH,0BAAyB,GACvCvK,CACV,CACJ,CAKAyK,SAEI,OADA7Q,KAAKsE,OAAOyI,MAAM,4CACX+D,QAAQC,OAAO,6BAC1B,CAOAxH,2BAA2BuE,EAAUjB,EAASK,GAC1ClN,KAAKsE,OAAOyI,MAAM,0DAElB,MAAMsC,EAAgB,KAA6BvB,EAASkD,SAAU,KAChEC,EAAwBjR,KAAKkR,4BAA4BpD,EAAUuB,GACnE8B,EAAsBnR,KAAKmJ,eAAeiI,yBAAyB,CACrErC,gBAAiBlC,EAAQd,aACzBsF,cACJ,GAAIJ,IAA0BE,GAC1BrD,EAAStE,QAAQ8H,KAAOzE,EAAQd,UAEhC,MAAM,QAAsB,KAGhC,MAAMV,QAAkBrL,KAAKuR,uBAAuB1E,EAAQxB,WACtDmG,GAAc,OAAoBxR,KAAKmJ,eAAgBkC,EAAW4F,EAAuB,IAAc5B,EAAevB,EAAS2D,iBAAa1K,EAClJsI,EAAcqC,SAAK3K,EACnB+G,EAAStE,QAAQ8H,GAAItR,KAAKsE,QAEpB+I,QAAerN,KAAK2R,6BAA6B7D,EAAUjB,EAASwC,EAAemC,EAAanG,EAAUuG,mBAAoB1E,GAIpI,OAFAlN,KAAK6R,aAAaL,GAClBxR,KAAK8R,kBAAkBhE,EAAUjB,EAASoE,EAAuB5B,EAAevB,EAASiE,aAAc1E,EAAO2E,SAAU9E,GACjHG,CACX,CAOA6D,4BAA4BpD,EAAUuB,GAGlC,OAD8B,0BAAoCvB,EAAS2D,aAAe,kBAAwB,YAAuBzR,KAAKsE,OAAQtE,KAAKuE,cAAe8K,EAE9K,CAOA4C,eAAenE,EAAUjB,GACrB,OAAOiB,EAASe,MACV,eAAoBf,EAASe,OAC7B,eAAoBhC,EAAQgC,MACtC,CAMAtF,6BAA6BuE,EAAUjB,GACnC,GAAIA,EAAQqF,YAAc,UACtBrF,EAAQsF,aAAc,CAMtB,GAAIrE,EAASsE,IAET,OADApS,KAAKsE,OAAOyI,MAAM,8DACXe,EAASsE,IAGpB,MAAMC,EAAoB,IAAI,IAAkBrS,KAAKuE,eAC/C+N,EAAgB,CAClBC,sBAAuB1F,EAAQ0F,sBAC/BC,mBAAoB3F,EAAQ2F,mBAC5BC,UAAW5F,EAAQ4F,UACnBC,SAAU7F,EAAQ6F,UAMtB,IAAK7F,EAAQ8F,MACT,MAAM,QAAsB,MAEhC,OAAON,EAAkBF,aAAarE,EAASiE,aAAclF,EAAQ8F,MAAOL,EAChF,CAEI,OAAOxE,EAASiE,YAExB,CAWAxI,mCAAmCuE,EAAUjB,EAASwC,EAAeuD,EAAevH,EAAW6B,GAE3F,MAAM2F,EAAO7S,KAAK8S,+BAA+BhF,GAE3CiF,EAAiBjF,EAASe,MAC1B,eAAoBf,EAASe,OAC7B,eAAoBhC,EAAQgC,OAC5BmE,EAAoBlF,EAAStE,QAAQyJ,YAAc,CAAC,EACpDC,EAAMF,EAAuB,KAC/B3D,EAAc8D,KACd9D,EAAc+D,KACd,kBACE1B,EAAMsB,EAA4B,UACpC3D,EAAcqC,KACd,kBACE7K,GAAc,QAA+B+L,EAAc9L,sBAAkBC,EACnFsI,EAAevB,EAASkD,UAKpBnK,EAAYkI,kBAAoBjB,EAAStE,QAAQ8H,KACjDzK,EAAYkI,gBAAkBjB,EAAStE,QAAQ8H,IAGnD,MAAM+B,QAA4BrT,KAAKsT,uBAAuBxF,EAAUjB,GAClEqF,EAAYrF,EAAQqF,YAAc,SAClC,SACA,YAiBN,MAhBe,CACX7G,UAAWA,EACXkI,SAAUL,EACVlB,SAAUN,EACV9C,OAAQmE,EAAejE,UACvBtF,QAAS3C,EACTyI,QAASxB,EAASkD,SAClB3B,cAAeA,EACfmE,YAAaH,EACb3F,YAAWmF,GAAO7S,KAAKyT,oBAAoBZ,GAC3Ca,UAAW,IAAI3N,KAAkD,IAA7C4N,OAAOzG,EAAeY,EAAS8F,aACnD1B,UAAWA,EACXhJ,cAAelJ,KAAKkJ,cACpB2K,MAAO/F,EAAS+F,MAChBC,kBAAkB,EAG1B,CAKAjC,aAAae,GAET5S,KAAKmJ,eAAe4K,WAAWnB,GAE/B5S,KAAKmJ,eAAe6K,qBAAqBpB,GAAetE,OAAOlI,IAC3DpG,KAAKsE,OAAOP,MAAM,uEAAuEqC,IAAI,GAErG,CAWA0L,kBAAkBhE,EAAUjB,EAASoE,EAAuB5B,EAAegE,EAAqBrB,EAAU9E,GACtG,MAAM+G,EAAgB,KAAiChD,EAAuBpE,EAAQxB,UAAWyC,EAASkD,UAAY,GAAInE,EAAQvC,SAAU+E,EAAcqC,KAAO,IAO3JwC,EAAyBhH,GALbL,EAAQqF,YAAc,SAClC,yBACgC,iBAAxBpE,EAAS8F,WACbO,SAASrG,EAAS8F,WAAY,IAC9B9F,EAAS8F,aAAe,GAE5Bb,EAAiB/S,KAAKiS,eAAenE,EAAUjB,GAE/CuH,EAAoB,CACtB9E,QAAS2E,EACTT,YAHsB,KAAqCvC,EAAuBpE,EAAQxB,UAAWgI,EAAqBxG,EAAQvC,SAAU+E,EAAcqC,KAAOM,EAAUe,EAAesB,cAAeH,EAAwB,EAAG,SAAcnN,EAAW8F,EAAQqF,eAAWnL,EAAW8F,EAAQ8F,QAKlS3S,KAAKiM,qBAAqBqI,gBAAgBF,EAAmBvH,EAAQ0H,aAC9E,CACAzB,+BAA+BhF,GAC3B,MAAM+E,EAAO7S,KAAKwU,oBAAoB1G,GACtC,OAAK+E,GAGL7S,KAAKgJ,kBAAkBuH,UAAU,CAC7BkE,YAAazU,KAAKiJ,qBAAqBoD,iBACvCK,iBAAkB1M,KAAKiJ,qBAAqB0D,sBAC5C+H,kBAAmB7B,EAAK8B,eACxBC,uBAAwB/B,EAAKgC,sBAC7BC,qBAAsBjC,EAAKkC,oBAC3BC,eAAgBnC,EAAKoC,YACrBC,mBAAoBrC,EAAKsC,gBACzBC,iBAAkBvC,EAAKwC,eACvBC,cAAezC,EAAK0C,WACpBC,eAAgB3C,EAAK4C,YACrBC,oBAAqB7C,EAAK8C,mBAC1BC,kBAAmB/C,EAAKgD,eACxBC,iBAAkBjD,EAAKkD,cACvBC,eAAgBnD,EAAKoD,YACrBC,mBAAoBrD,EAAKsD,kBAC1BnW,KAAKkJ,eACD2J,GAnBI,IAoBf,CAKA5E,uBAAuBH,GACnB,GAAIA,EAASsI,eAAe,iBACxBtI,EAASsI,eAAe,aACxBtI,EAASsI,eAAe,gBACxBtI,EAASsI,eAAe,YACxBtI,EAASsI,eAAe,UACxBtI,EAASsI,eAAe,cACxB,OAAOtI,EAGP,MAAM,QAAgB,IAAgC,wCAE9D,CAMA0G,oBAAoB1G,GAChB,GAAIA,EAASmF,WAAWoD,KACpB,IACI,OAAO1P,KAAKC,MAAMkH,EAASmF,WAAWoD,KAC1C,CACA,MAAOjQ,GACHpG,KAAKsE,OAAOP,MAAM,iFACtB,CAEJ,OAAO,IACX,CAMA0P,oBAAoBZ,GAChB,YAA8B,IAAnBA,EAAKyD,WACZtW,KAAKsE,OAAOY,QAAQ,mIACb,KAEF2N,EAAKyD,SAClB,CAKA/M,8BAA8BsD,GAC1B7M,KAAKsE,OAAOyI,MAAM,4DAClB,MAAM1B,EAAYwB,EAAQxB,WAAarL,KAAK4I,OAAOqB,KAAKoB,UACpDwB,EAAQrD,eAEFxJ,KAAKuR,uBAAuBlG,EAAWwB,EAAQtB,kBAAmBsB,EAAQrD,SAEpF,MAAMoI,EAAqB,IAAI,IAAUvG,GACzCuG,EAAmB2E,gBAEnB,MAAM,OAAE3H,KAAW4H,GAAwB3J,EACrC4J,EAAW,IAAI,IAAS7H,GAAU,IACxC6H,EAASC,aAAa,MACtB,MAyBMC,EAAmB,IAClBH,EACHzK,UAAW/L,KAAK+L,UAChBzB,SAAUtK,KAAK4I,OAAOqB,KAAKK,SAC3Be,UAAWuG,EAAmBgF,UAC9B/H,MAAO4H,EAASpC,cAChBrK,YAAahK,KAAK8J,eAAe+C,EAAQ7C,aACzCwG,OAhCc,MAEd,OAAQxQ,KAAKmK,OACT,KAAK,eACL,KAAK,mCAED,OADAnK,KAAKsE,OAAOyI,MAAM,+DACX,UAGf,GAAKF,EAAQ2D,OAKb,OAAQ3D,EAAQ2D,QACZ,KAAK,UACL,KAAK,aACL,KAAK,WAED,OADAxQ,KAAKsE,OAAOyI,MAAM,kEACXF,EAAQ2D,OACnB,QAEI,MADAxQ,KAAKsE,OAAOyI,MAAM,qCAAqCF,EAAQ2D,8CACzD,QAAuB,WAZjCxQ,KAAKsE,OAAOyI,MAAM,mDAatB,EASQ8J,GACR3N,cAAelJ,KAAKkJ,cACpBgJ,UAAWrF,EAAQiK,qBACnBC,qBAAsBC,SAASC,MAC/BnK,gBAAiB,IACVD,EAAQqK,wBACRrK,EAAQsK,sBAEfC,qBAAqB,EACrBzE,MAAO9F,EAAQwK,QAGnB,GAAIV,EAAiBxE,cAAkBtF,EAAQwK,OAC3C,MAAM,QAAuB,MAOjC,GALArX,KAAKsX,wBAAwBX,GAC7BA,EAAiB7J,gBACb6J,EAAiB7J,iBAAmB,CAAC,EACzC6J,EAAiB7J,gBAAgByK,UAC7B,oBACA1K,EAAQiK,uBAAyB,SAA0B,CAE3D,MAAMxE,EAAgB,CAClBE,mBAAoB3F,EAAQ2F,mBAC5BD,sBAAuB1F,EAAQ0F,sBAC/BE,UAAW5F,EAAQ4F,UACnBC,SAAU7F,EAAQ6F,UAEhBL,EAAoB,IAAI,IAAkBrS,KAAKuE,eAErD,IAAIiT,EACJ,GAAKb,EAAiBhE,MAOlB6E,EAAaxX,KAAKuE,cAAckT,gBAAgB9Q,KAAKgJ,UAAU,CAAE+H,IAAKf,EAAiBhE,SACvFgE,EAAiBxE,cAAe,MARP,CACzB,MAAMwF,QAA4B,IAAAlM,GAAY4G,EAAkBuF,YAAYhT,KAAKyN,GAAoB,yBAAuCrS,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAAvJ,CAAsKoJ,EAAetS,KAAKsE,QAC5NkT,EAAaG,EAAoBE,aACjClB,EAAiBhE,MAAQgF,EAAoBD,IAC7Cf,EAAiBxE,cAAe,CACpC,CAMAwE,EAAiBmB,OAASN,CAC9B,CAEA,OADAxX,KAAK4M,eAAe+J,GACbA,CACX,CAMAW,wBAAwBzK,GACpB,GAAKA,EAAQC,iBAGTD,EAAQC,gBAAgBsJ,eA1lBd,kBA2lBVvJ,EAAQC,gBAAgBsJ,eAAexK,IACvCiB,EAAQC,gBAAgBsJ,eAAe,MAA+B,CACtE,MAAM2B,EAAkBlL,EAAQC,gBAAgB,MAC1CkL,EAAqBnL,EAAQ7C,YAC7BiO,EAAmBpL,EAAQC,gBAAgBlB,GACjDiB,EAAQC,gBAAkB,CACtBiL,kBACAC,sBAEJnL,EAAQ7C,YAAciO,CAC1B,CACJ,kQCtmBJ,MAAMC,UAAoB,IACtBvY,YAAYiJ,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmBgD,EAAmB/C,EAAsBC,GAChJrJ,MAAM+I,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmBC,EAAsBC,GAE3HlJ,KAAKmY,aAAenY,KAAKmY,aAAavT,KAAK5E,MAC3CA,KAAKoY,cAAgBpM,CACzB,CAKAmD,aAAatC,GACT,IACI,MAAMwL,EAAYrY,KAAKsY,kBAAkBzL,EAAQ+B,QAAU,KAAqB/B,EAAQxB,WAAarL,KAAK4I,OAAOqB,KAAKoB,WAChHkN,EAAwB1L,EAAQ0L,uBAAyB,CAAC,EAEhE,GAAIvY,KAAK4I,OAAOS,OAAOmP,YAGnB,OAFAxY,KAAKsE,OAAOY,QAAQ,4CAEblF,KAAKyY,uBAAuB5L,EAASwL,EAAWE,GAEtD,CAEDvY,KAAKsE,OAAOY,QAAQ,iEACpB,MAAMwT,EAAQ1Y,KAAK2Y,eAAe,cAAeN,EAAWE,GAC5D,OAAOvY,KAAKyY,uBAAuB5L,EAASwL,EAAWE,EAAuBG,EAClF,CACJ,CACA,MAAOtS,GACH,OAAO0K,QAAQC,OAAO3K,EAC1B,CACJ,CAKAyK,OAAO+H,GACH,IACI5Y,KAAKsE,OAAOY,QAAQ,sBACpB,MAAM2T,EAAqB7Y,KAAK8Y,wBAAwBF,GAClDP,EAAYrY,KAAK+Y,wBAAwBF,GACzCxN,EAAYuN,GAAiBA,EAAcvN,UAC3C2N,EAAwBJ,GAAiBA,EAAcI,sBACvDT,EAAwBK,GAAeL,uBAAyB,CAAC,EAEvE,GAAIvY,KAAK4I,OAAOS,OAAOmP,YAGnB,OAFAxY,KAAKsE,OAAOY,QAAQ,2BAEblF,KAAKiZ,iBAAiBJ,EAAoBR,EAAWE,EAAuBlN,OAAWtE,EAAWiS,GAExG,CAEDhZ,KAAKsE,OAAOY,QAAQ,0CACpB,MAAMwT,EAAQ1Y,KAAK2Y,eAAe,cAAeN,EAAWE,GAC5D,OAAOvY,KAAKiZ,iBAAiBJ,EAAoBR,EAAWE,EAAuBlN,EAAWqN,EAAOM,EACzG,CACJ,CACA,MAAO5S,GAEH,OAAO0K,QAAQC,OAAO3K,EAC1B,CACJ,CAUAmD,6BAA6BsD,EAASwL,EAAWE,EAAuBG,GACpE1Y,KAAKsE,OAAOY,QAAQ,iCACpB,MAAMiH,EAAyBnM,KAAKkK,iCAAiC,wBAC/DgP,QAAqB,IAAAzN,GAAYzL,KAAKmZ,+BAA+BvU,KAAK5E,MAAO,6DAA2EA,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAjL,CAAgM2D,EAAS,aACpO,QAAWqM,EAAa7N,WACxB,IAEI,MAAM+N,QAAwB,IAAA3N,GAAYzL,KAAKqZ,mCAAmCzU,KAAK5E,MAAO,iEAA+EA,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAzL,CAAwMgQ,GAEhOI,QAAmB,IAAA7N,GAAYzL,KAAKuZ,qBAAqB3U,KAAK5E,MAAO,mDAAiEA,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA7J,CAA4KiD,EAAwB+M,EAAa7N,UAAW6N,EAAa3N,kBAAmB2N,EAAa1P,SAC5RiE,EAAiB,sBAAuCzN,KAAK4I,OAAQ5I,KAAKsE,OAAQtE,KAAKiJ,qBAAsB4D,EAAQiK,sBAE3H,IAAI0C,EACA/L,IACA+L,EACIxZ,KAAKgJ,kBAAkBiE,iBAAiB,oCAAkDJ,EAAQ3D,gBAG1G,MAAMuQ,QAAoBH,EAAWI,eAAe,IAC7CR,EACHS,aAAclM,IAGZmM,EAAqB,IAAI,EAAAC,EAAmBP,EAAYtZ,KAAKmJ,eAAgBiQ,EAAiBpZ,KAAKsE,OAAQtE,KAAKgJ,mBAEhH8Q,EAAkB,CACpBpB,QACAL,YACAE,yBAEEwB,EAAc/Z,KAAKga,oBAAoBP,EAAaK,GAC1D9Z,KAAK8I,aAAarD,UAAU,iBAAwB,WAAuB,CAAEsU,eAAe,MAE5F,MAAME,QAAuBja,KAAKka,oBAAoBH,GAChDI,GAAe,OAAO,IAAqB,yBAAuCna,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA7G,CAA4H+Q,EAAgBja,KAAK4I,OAAOqB,KAAKc,YAAYqP,mBAAoBpa,KAAKsE,QAGvN,GADA,mBAA+BtE,KAAKmJ,eAAgBnJ,KAAK4I,OAAOqB,KAAKK,SAAU8O,GAC3Ee,EAAapO,UAAW,CASxB,GARA/L,KAAKsE,OAAOY,QAAQ,mDAEhBsU,GACAA,EAAgCjM,IAAI,CAChCC,SAAS,EACTC,gBAAgB,KAGnBzN,KAAKiJ,qBACN,MAAM,QAAuB,MAEjC,MAAMoR,EAA0B,IAAI,IAAwBra,KAAK4I,OAAQ5I,KAAKmJ,eAAgBnJ,KAAKuE,cAAevE,KAAKsE,OAAQtE,KAAK8I,aAAc9I,KAAK+I,iBAAkB,uBAAyB/I,KAAKgJ,kBAAmBhJ,KAAKiJ,qBAAsBkR,EAAapO,UAAW/L,KAAKoY,cAAec,EAAahQ,gBACxS,iBAAEoR,GAAqB,sBAAgCta,KAAKuE,cAAe2U,EAAarF,OAC9F,aAAawG,EAAwBlL,aAAa,IAC3C+J,EACHrF,MAAOyG,EACP9J,YAAQzJ,GAEhB,CAGA,aADqB6S,EAAmBW,mBAAmBJ,EAAcjB,EAE7E,CACA,MAAO9S,GASH,MARIsS,GAEAA,EAAM8B,QAENpU,aAAa,OACbA,EAAEqU,iBAAiBza,KAAKkJ,eACxBiD,EAAuBuO,mBAAmBtU,IAExCA,CACV,CACJ,CAUAmD,uBAAuB2P,EAAcb,EAAWE,EAAuB7N,EAAkBgO,EAAOM,GAC5FhZ,KAAKsE,OAAOY,QAAQ,2BACpBlF,KAAK8I,aAAarD,UAAU,iBAAwB,WAAuByT,GAC3E,MAAM/M,EAAyBnM,KAAKkK,iCAAiC,kBACrE,UAEUlK,KAAK2a,mBAAmBzB,EAAa1P,SAE3C,MAAM8P,QAAmB,IAAA7N,GAAYzL,KAAKuZ,qBAAqB3U,KAAK5E,MAAO,mDAAiEA,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA7J,CAA4KiD,EAAwBzB,OAAkB3D,EAC/OmS,EAAa1P,cAAWzC,GACxB,IACIuS,EAAWjO,UAAUuP,kBACzB,CACA,MACI,GAAI1B,EAAa1P,SAAS6H,eACtB6H,EAAa2B,uBACbvB,EAAWjO,UAAUP,eAAiB,SAAmB,CAGzD,GAFK9K,KAAKmJ,eAAeQ,cAAcuP,EAAa1P,SAAS6H,eAC7DrR,KAAK8I,aAAarD,UAAU,mBAA0B,WAAuByT,GACzEF,EAAuB,CACvB,MAAMpJ,EAAoB,CACtBzF,MAAO,iBACP0F,QAAS7P,KAAK4I,OAAOS,OAAOyG,0BAC5BC,WAAW,GAET+K,EAAc,mBAAyB9B,GAAuB,iBAC9DhZ,KAAK+I,iBAAiBgS,iBAAiBD,EAAalL,EAC9D,CAIA,YAHI8I,GACAA,EAAM8B,QAGd,CACJ,CAEA,MAAMQ,EAAY1B,EAAW2B,aAAa/B,GAC1ClZ,KAAK8I,aAAarD,UAAU,mBAA0B,WAAuByT,GAE7E,MAAMa,EAAc/Z,KAAKkb,UAAUF,EAAW,CAC1C3C,YACAE,wBACAG,UAMJ,GAJA1Y,KAAK8I,aAAarD,UAAU,iBAAwB,WAAuB,CAAEsU,eAAe,YACtF/Z,KAAKka,oBAAoBH,GAAazL,OAAM,SAG9C0K,EAAuB,CACvB,MAAMpJ,EAAoB,CACtBzF,MAAO,iBACP0F,QAAS7P,KAAK4I,OAAOS,OAAOyG,0BAC5BC,WAAW,GAET+K,EAAc,mBAAyB9B,GAAuB,WACpEhZ,KAAKsE,OAAOY,QAAQ,2DACpBlF,KAAKsE,OAAO6W,WAAW,+BAA+BL,WAChD9a,KAAK+I,iBAAiBgS,iBAAiBD,EAAalL,EAC9D,MAEI5P,KAAKsE,OAAOY,QAAQ,sCAE5B,CACA,MAAOkB,GAYH,MAXIsS,GAEAA,EAAM8B,QAENpU,aAAa,OACbA,EAAEqU,iBAAiBza,KAAKkJ,eACxBiD,EAAuBuO,mBAAmBtU,IAE9CpG,KAAKmJ,eAAewH,0BAAyB,GAC7C3Q,KAAK8I,aAAarD,UAAU,mBAA0B,WAAuB,KAAMW,GACnFpG,KAAK8I,aAAarD,UAAU,eAAsB,YAC5CW,CACV,CACApG,KAAK8I,aAAarD,UAAU,eAAsB,WACtD,CAKAuU,oBAAoBoB,EAAYC,GAE5B,GAAID,EAGA,OAFApb,KAAKsE,OAAOgX,QAAQ,gBAAgBF,KAE7Bpb,KAAKkb,UAAUE,EAAYC,GAKlC,MADArb,KAAKsE,OAAOP,MAAM,0BACZ,QAAuB,KAErC,CAMAmW,oBAAoBH,GAChB,OAAO,IAAIjJ,SAAQ,CAACyK,EAASxK,KACzB/Q,KAAKsE,OAAOY,QAAQ,sDACpB,MAAMsW,EAAaC,aAAY,KAE3B,GAAI1B,EAAY2B,OAIZ,OAHA1b,KAAKsE,OAAOP,MAAM,oDAClB4X,cAAcH,QACdzK,GAAO,QAAuB,OAGlC,IAAIb,EAAO,GACX,IAMIA,EAAO6J,EAAY9J,SAASC,IAChC,CACA,MAAO9J,GAAK,CAEZ,IAAK8J,GAAiB,gBAATA,EACT,OAEJyL,cAAcH,GACd,IAAIvB,EAAiB,GACrB,MAAM2B,EAAe5b,KAAK4I,OAAOqB,KAAKc,YAAYqP,mBAC9CL,IAEIE,EADA2B,IAAiB,WACA7B,EAAY9J,SAAS4L,OAGrB9B,EAAY9J,SAAS6L,MAG9C9b,KAAKsE,OAAOY,QAAQ,+EACpBqW,EAAQtB,EAAe,GACxBja,KAAK4I,OAAOS,OAAO0S,yBAAyB,IAChDC,SAAQ,KACPhc,KAAKic,WAAWlC,EAAY,GAEpC,CAcAmB,UAAUgB,EAAaC,GACnB,IACI,IAAIpC,EAaJ,GAXIoC,EAAYzD,OACZqB,EAAcoC,EAAYzD,MAC1B1Y,KAAKsE,OAAO6W,WAAW,+BAA+Be,KACtDnC,EAAY9J,SAASmM,OAAOF,SAEM,IAAtBC,EAAYzD,QAExB1Y,KAAKsE,OAAO6W,WAAW,4BAA4Be,KACnDnC,EAAc/Z,KAAK2Y,eAAeuD,EAAaC,EAAY9D,UAAW8D,EAAY5D,yBAGjFwB,EACD,MAAM,QAAuB,KAOjC,OALIA,EAAYsC,OACZtC,EAAYsC,QAEhBrc,KAAKsc,cAAgBvC,EACrBhV,OAAOO,iBAAiB,eAAgBtF,KAAKmY,cACtC4B,CACX,CACA,MAAO3T,GAGH,MAFApG,KAAKsE,OAAOP,MAAM,uBAAyBqC,EAAEP,SAC7C7F,KAAKmJ,eAAewH,0BAAyB,IACvC,QAAuB,IACjC,CACJ,CAQAgI,eAAeuD,EAAa7D,EAAWE,GAKnC,MAAMgE,EAAUxX,OAAOyX,WAAazX,OAAOyX,WAAazX,OAAO0X,QACzDC,EAAS3X,OAAO4X,UAAY5X,OAAO4X,UAAY5X,OAAO6X,QAKtDC,EAAW9X,OAAO+X,YACpB9F,SAAS+F,gBAAgBC,aACzBhG,SAASiG,KAAKD,YACZE,EAAYnY,OAAOoY,aACrBnG,SAAS+F,gBAAgBK,cACzBpG,SAASiG,KAAKG,aAClB,IAAIC,EAAQ9E,EAAsB+E,WAAWD,MACzCE,EAAShF,EAAsB+E,WAAWC,OAC1CC,EAAMjF,EAAsBkF,eAAeD,IAC3CE,EAAOnF,EAAsBkF,eAAeC,KAiBhD,QAhBKL,GAASA,EAAQ,GAAKA,EAAQR,KAC/B7c,KAAKsE,OAAOY,QAAQ,4EACpBmY,EAAQ,oBAEPE,GAAUA,EAAS,GAAKA,EAASL,KAClCld,KAAKsE,OAAOY,QAAQ,8EACpBqY,EAAS,qBAERC,GAAOA,EAAM,GAAKA,EAAMN,KACzBld,KAAKsE,OAAOY,QAAQ,iFACpBsY,EAAMG,KAAKC,IAAI,EAAGV,EAAY,EAAI,kBAAgC,EAAIR,MAErEgB,GAAQA,EAAO,GAAKA,EAAOb,KAC5B7c,KAAKsE,OAAOY,QAAQ,mFACpBwY,EAAOC,KAAKC,IAAI,EAAGf,EAAW,EAAI,iBAA+B,EAAIN,IAElExX,OAAO8Y,KAAK3B,EAAa7D,EAAW,SAASgF,aAAiBE,UAAeC,WAAaE,oBACrG,CAIAvF,aAAa/R,GACTpG,KAAKmJ,eAAe2U,8BAA8B,YAC9C9d,KAAKsc,eACLtc,KAAKsc,cAAc9B,QAGvBpU,EAAE2X,gBACN,CAKA9B,WAAWlC,GACHA,GAEAA,EAAYS,QAGhBzV,OAAOS,oBAAoB,eAAgBxF,KAAKmY,cAEhDnY,KAAKmJ,eAAewH,0BAAyB,EACjD,CAMA2H,kBAAkB1J,EAAQvD,GACtB,MAAO,GAAG,0BAAsCrL,KAAK4I,OAAOqB,KAAKK,YAAYsE,EAAOoP,KAAK,QAAQ3S,KAAarL,KAAKkJ,eACvH,CAMA6P,wBAAwBlM,GACpB,MAAMwE,EAAgBxE,EAAQrD,SAAWqD,EAAQrD,QAAQ6H,cACzD,MAAO,GAAG,0BAAsCrR,KAAK4I,OAAOqB,KAAKK,YAAY+G,KAAiBrR,KAAKkJ,eACvG,4OClbJ,MAAM+U,EACFte,YAAYue,EAAgBrV,EAAauQ,EAAiB9U,EAAQ0E,GAC9DhJ,KAAKme,WAAaD,EAClBle,KAAKmJ,eAAiBN,EACtB7I,KAAKoZ,gBAAkBA,EACvBpZ,KAAKsE,OAASA,EACdtE,KAAKgJ,kBAAoBA,CAC7B,CAKAO,0BAA0B6R,EAAYC,GAGlC,GAFArb,KAAKsE,OAAOY,QAAQ,8CAEhBkW,EAAY,CAERC,EAAO+C,oBACPpe,KAAKsE,OAAOY,QAAQ,kFACpBlF,KAAKmJ,eAAeuG,kBAAkB,gBAA+B2L,EAAO+C,mBAAmB,IAGnGpe,KAAKmJ,eAAeuG,kBAAkB,oBAAmC1P,KAAKoZ,gBAAgBlQ,eAAe,GAC7GlJ,KAAKmJ,eAAekV,iBAAiBre,KAAKoZ,iBAC1CpZ,KAAKsE,OAAOgX,QAAQ,qDAAqDF,KACzE,MAAMxL,EAAoB,CACtBzF,MAAO,0BACP0F,QAASwL,EAAOiD,gBAChBvO,WAAW,GAGf,MAAyC,mBAA9BsL,EAAO5L,oBACdzP,KAAKsE,OAAOY,QAAQ,8EAGH,IAFAmW,EAAO5L,mBAAmB2L,IAGvCpb,KAAKsE,OAAOY,QAAQ,uGACdmW,EAAOtS,iBAAiBoH,iBAAiBiL,EAAYxL,SAI3D5P,KAAKsE,OAAOY,QAAQ,iGAMxBlF,KAAKsE,OAAOY,QAAQ,qFACdmW,EAAOtS,iBAAiBoH,iBAAiBiL,EAAYxL,GAGnE,CAII,MADA5P,KAAKsE,OAAO2B,KAAK,+DACX,QAAuB,KAErC,CAKAsD,yBAAyBuE,EAAU+F,GAC/B7T,KAAKsE,OAAOY,QAAQ,6CAEpBlF,KAAKmJ,eAAewH,0BAAyB,GAE7C,MAAM4N,EAAWve,KAAKmJ,eAAeqV,iBAAiB3K,GAChD4K,EAAeze,KAAKmJ,eAAeuV,kBAAkBH,GAC3D,IAAKE,EACD,MAAM,QAAsBE,EAAA,GAAoC,gBAEpE,IAAIC,EACJ,IACIA,EAAmB5e,KAAKme,WAAWU,uBAAuB/Q,EAAU2Q,EACxE,CACA,MAAOrY,GACH,MAAIA,aAAa0Y,EAAA,GACb1Y,EAAEoI,WAAa,MAET,QAAuB,MAGvBpI,CAEd,CAEA,MAAM2Y,EAAW/e,KAAKmJ,eAAe6V,iBAAiBP,GAChDQ,EAAcjf,KAAKmJ,eAAeuV,kBAAkBK,GAU1D,GARA/e,KAAKoZ,gBAAgBlV,KAAO0a,EAAiB1a,KAEzC0a,EAAiBM,gCACX,IAAAzT,GAAYzL,KAAKme,WAAWgB,gBAAgBva,KAAK5E,KAAKme,YAAaiB,EAAA,gCAAgDpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKoZ,gBAAgBlQ,cAA7K,CAA4L0V,EAAiBM,yBAA0Blf,KAAKoZ,gBAAgBlQ,eAEtQ0V,EAAiBS,MAAQJ,QAAelY,EACxC6X,EAAiB/K,MAAQ4K,EAErBG,EAAiBnN,YACjBzR,KAAKoZ,gBAAgBkG,WAAaV,EAAiBnN,gBAElD,CACD,MAAM8N,EAAgBvf,KAAKwf,sBACvBD,IACAvf,KAAKoZ,gBAAgBqG,cAAgBF,EAE7C,CAEA,MAAMG,QAAuB1f,KAAKme,WAAWhP,aAAanP,KAAKoZ,gBAAiBwF,GAEhF,OADA5e,KAAKmJ,eAAewW,oBAAoB9L,GACjC6L,CACX,CAIAF,sBAEI,MAAMD,EAAgBvf,KAAKmJ,eAAeuV,kBAAkB,qBAAmC,GAC/F,GAAIa,EACA,IACI,OAAO5Y,KAAKC,MAAM2Y,EACtB,CACA,MAAOnZ,GACHpG,KAAKme,WAAW7Z,OAAOP,MAAM,wCAC7B/D,KAAKme,WAAW7Z,OAAOsb,SAAS,yCAAyCL,IAC7E,CAEJ,OAAO,IACX,6DCzHJ,MAAMM,UAAuBC,EAAA,EACzBngB,YAAYiJ,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmBgD,EAAmB/C,EAAsBC,GAChJrJ,MAAM+I,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmBC,EAAsBC,GAC3HlJ,KAAKoY,cAAgBpM,CACzB,CAKAzC,mBAAmBsD,GACf,MAAMqM,QAAqB,IAAAzN,GAAYzL,KAAKmZ,+BAA+BvU,KAAK5E,MAAOof,EAAA,2DAA2Epf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAjL,CAAgM2D,EAAS,eACpO7M,KAAKmJ,eAAe4W,mBAAmB7G,EAAarF,MAAOqF,EAAamG,MAAOnG,EAAa7N,UAAW6N,EAAa8G,WAAa,GAAI9G,EAAa1P,SAAW,MAC7J,MAAM2C,EAAyBnM,KAAKkK,iCAAiC,2BAC/D+V,EAAoBC,IAElBA,EAAMC,YACNngB,KAAKsE,OAAOY,QAAQ,wEACpBlF,KAAKmJ,eAAewW,oBAAoBzG,EAAarF,OACrD7T,KAAK8I,aAAarD,UAAUuB,EAAA,uBAAgC,eAChE,EAEJ,IAEI,MAAMoS,QAAwB,IAAA3N,GAAYzL,KAAKqZ,mCAAmCzU,KAAK5E,MAAOof,EAAA,+DAA+Epf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAzL,CAAwMgQ,GAEhOI,QAAmB,IAAA7N,GAAYzL,KAAKuZ,qBAAqB3U,KAAK5E,MAAOof,EAAA,iDAAiEpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA7J,CAA4KiD,EAAwB+M,EAAa7N,UAAW6N,EAAa3N,kBAAmB2N,EAAa1P,SAE5RoQ,EAAqB,IAAIqE,EAAgB3E,EAAYtZ,KAAKmJ,eAAgBiQ,EAAiBpZ,KAAKsE,OAAQtE,KAAKgJ,mBAE7GyQ,QAAoBH,EAAWI,eAAe,IAC7CR,EACHS,aAAcyG,EAAA,oBAAuCpgB,KAAK4I,OAAQ5I,KAAKsE,OAAQtE,KAAKiJ,qBAAsB4D,EAAQiK,wBAEhHsH,EAAoBpe,KAAKqgB,qBAAqBxT,EAAQuR,mBAK5D,OAJApe,KAAKsE,OAAO6W,WAAW,wBAAwBiD,KAE/CrZ,OAAOO,iBAAiB,WAAY2a,SAEvBrG,EAAmBI,oBAAoBP,EAAa,CAC7D1Q,iBAAkB/I,KAAK+I,iBACvBuV,gBAAiBte,KAAK4I,OAAOS,OAAOyG,0BACpCsO,kBAAmBA,EACnB3O,mBAAoB5C,EAAQ4C,oBACxBzP,KAAK4I,OAAOqB,KAAKwF,oBAE7B,CACA,MAAOrJ,GAOH,MANIA,aAAaka,EAAA,KACbla,EAAEqU,iBAAiBza,KAAKkJ,eACxBiD,EAAuBuO,mBAAmBtU,IAE9CrB,OAAOS,oBAAoB,WAAYya,GACvCjgB,KAAKmJ,eAAewW,oBAAoBzG,EAAarF,OAC/CzN,CACV,CACJ,CAQAmD,4BAA4BuS,EAAO,GAAIyE,GACnC,MAAMpU,EAAyBnM,KAAKkK,iCAAiC,4BACrE,IACI,IAAKlK,KAAKmJ,eAAeiH,yBAAwB,GAE7C,OADApQ,KAAKsE,OAAO2B,KAAK,yFACV,KAEX,MAAOkU,EAAcF,GAAkBja,KAAKwgB,oBAAoB1E,GAAQ,IACxE,IAAK3B,EAKD,OAHAna,KAAKsE,OAAO2B,KAAK,wGACjBjG,KAAKmJ,eAAe2U,8BAA8B,eAClDyC,EAAkBL,MAAMtgB,UAAY,qBAC7B,KAGX,MAAM6gB,EAAkBzgB,KAAKmJ,eAAeuV,kBAAkB,iBAA+B,IAASgC,EAAA,gBAGtG,GAFkCC,EAAA,oBAA4BF,KACjCE,EAAA,oBAA4B5b,OAAOkL,SAASC,OAErElQ,KAAK4I,OAAOqB,KAAK+F,0BAQjB,OANAhQ,KAAKsE,OAAOY,QAAQ,sDAChBub,EAAgBG,QAAQ,MAAQ,IAEhC,QAAYH,SAEezgB,KAAK6gB,eAAe1G,EAAchO,GAGhE,IAAKnM,KAAK4I,OAAOqB,KAAK+F,0BAEvB,OADAhQ,KAAKsE,OAAOY,QAAQ,mEACPlF,KAAK6gB,eAAe1G,EAAchO,GAE9C,KAAK,WACNnM,KAAK4I,OAAOS,OAAOyX,sBAAuB,CAK1C9gB,KAAKmJ,eAAeuG,kBAAkB,cAA6BuK,GAAgB,GACnF,MAAMrK,EAAoB,CACtBzF,MAAO,2BACP0F,QAAS7P,KAAK4I,OAAOS,OAAOyG,0BAC5BC,WAAW,GAMf,IAAIgR,GAAwB,EAC5B,GAAKN,GAAuC,SAApBA,EAWpBzgB,KAAKsE,OAAOY,QAAQ,kCAAkCub,KACtDM,QACU/gB,KAAK+I,iBAAiBgS,iBAAiB0F,EAAiB7Q,OAblB,CAEhD,MAAMoR,GAAW,UAEjBhhB,KAAKmJ,eAAeuG,kBAAkB,gBAA+BsR,GAAU,GAC/EhhB,KAAKsE,OAAO0K,QAAQ,8EACpB+R,QACU/gB,KAAK+I,iBAAiBgS,iBAAiBiG,EAAUpR,EAC/D,CAQA,IAAKmR,EACD,aAAa/gB,KAAK6gB,eAAe1G,EAAchO,EAEvD,CACA,OAAO,IACX,CACA,MAAO/F,GAMH,MALIA,aAAaka,EAAA,KACbla,EAAEqU,iBAAiBza,KAAKkJ,eACxBiD,EAAuBuO,mBAAmBtU,IAE9CpG,KAAKmJ,eAAe2U,8BAA8B,eAC5C1X,CACV,CACJ,CAMAoa,oBAAoBS,GAChBjhB,KAAKsE,OAAOY,QAAQ,kCAEpB,IAAI+U,EAAiBgH,EAChBhH,IAGGA,EAFAja,KAAK4I,OAAOqB,KAAKc,YAAYqP,qBAC7B,WACiBrV,OAAOkL,SAAS4L,OAGhB9W,OAAOkL,SAAS6L,MAGzC,IAAIhO,EAAWoT,EAAA,EAAiCjH,GAChD,GAAInM,EAAU,CACV,KACI,IAAAqT,GAAwBrT,EAAU9N,KAAKuE,cAAe,cAC1D,CACA,MAAO6B,GAIH,OAHIA,aAAaka,EAAA,IACbtgB,KAAKsE,OAAOP,MAAM,6CAA6CqC,EAAExG,cAAcwG,EAAEhD,gBAE9E,CAAC,KAAM,GAClB,CAGA,OAFA,QAAU2B,QACV/E,KAAKsE,OAAOY,QAAQ,2DACb,CAAC4I,EAAUmM,EACtB,CACA,MAAMmH,EAAaphB,KAAKmJ,eAAeuV,kBAAkB,eAA6B,GAEtF,OADA1e,KAAKmJ,eAAesH,WAAWzQ,KAAKmJ,eAAeuH,iBAAiB,gBAChE0Q,IACAtT,EAAWoT,EAAA,EAAiCE,GACxCtT,IACA9N,KAAKsE,OAAOY,QAAQ,iEACb,CAAC4I,EAAUsT,IAGnB,CAAC,KAAM,GAClB,CAMA7X,qBAAqB4Q,EAAchO,GAC/B,MAAM0H,EAAQsG,EAAatG,MAC3B,IAAKA,EACD,MAAM,QAAuB,MAEjC,MAAMxD,EAAgBrQ,KAAKmJ,eAAekY,iBAAiBxN,GAE3D,GADA7T,KAAKsE,OAAOY,QAAQ,mDAChBiV,EAAapO,UAAW,CAExB,GADA/L,KAAKsE,OAAOY,QAAQ,oDACflF,KAAKiJ,qBACN,MAAM,QAAuB,MAEjC,MAAMoR,EAA0B,IAAIxO,EAAA,EAAwB7L,KAAK4I,OAAQ5I,KAAKmJ,eAAgBnJ,KAAKuE,cAAevE,KAAKsE,OAAQtE,KAAK8I,aAAc9I,KAAK+I,iBAAkB,uBAAyB/I,KAAKgJ,kBAAmBhJ,KAAKiJ,qBAAsBkR,EAAapO,UAAW/L,KAAKoY,cAAe/H,EAAcnH,gBACzS,iBAAEoR,GAAqBgH,EAAA,oBAAgCthB,KAAKuE,cAAesP,GACjF,OAAOwG,EACFlL,aAAa,IACXkB,EACHwD,MAAOyG,EACP9J,YAAQzJ,IAEPiV,SAAQ,KACThc,KAAKmJ,eAAewW,oBAAoB9L,EAAM,GAEtD,CAEA,MAAM0N,EAAmBvhB,KAAKmJ,eAAeqY,mBAAmB3N,GAChE,IAAK0N,EACD,MAAM,QAAuB,MAEjC,MAAMjI,QAAmB,IAAA7N,GAAYzL,KAAKuZ,qBAAqB3U,KAAK5E,MAAOof,EAAA,iDAAiEpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA7J,CAA4KiD,EAAwBoV,GAG7N,OAFAE,EAAA,iBAA+BzhB,KAAKmJ,eAAgBnJ,KAAK4I,OAAOqB,KAAKK,SAAU+F,GACpD,IAAI4N,EAAgB3E,EAAYtZ,KAAKmJ,eAAgBkH,EAAerQ,KAAKsE,OAAQtE,KAAKgJ,mBACvFuR,mBAAmBJ,EAActG,EAC/D,CAMAtK,aAAaqP,GACT5Y,KAAKsE,OAAOY,QAAQ,yBACpB,MAAM2T,EAAqB7Y,KAAK8Y,wBAAwBF,GAClDzM,EAAyBnM,KAAKkK,iCAAiC,aACrE,IACIlK,KAAK8I,aAAarD,UAAUuB,EAAA,eAAwB,cAA0B4R,SAExE5Y,KAAK2a,mBAAmB9B,EAAmBrP,SACjD,MAAMoG,EAAoB,CACtBzF,MAAO,YACP0F,QAAS7P,KAAK4I,OAAOS,OAAOyG,0BAC5BC,WAAW,GAETuJ,QAAmB,IAAA7N,GAAYzL,KAAKuZ,qBAAqB3U,KAAK5E,MAAOof,EAAA,iDAAiEpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA7J,CAA4KiD,EAAwByM,GAAiBA,EAAcvN,eAAWtE,EACtQ6R,GAAiBA,EAAcpP,cAAYzC,GAC5C,GAAIuS,EAAWjO,UAAUP,eAAiB4W,EAAA,OACtC,IACIpI,EAAWjO,UAAUuP,kBACzB,CACA,MACI,GAAI/B,EAAmBrP,SAAS6H,cAG5B,OAFKrR,KAAKmJ,eAAeQ,cAAckP,EAAmBrP,SAAS6H,oBACnErR,KAAK8I,aAAarD,UAAUuB,EAAA,iBAA0B,cAA0B6R,EAGxF,CAGJ,MAAMmC,EAAY1B,EAAW2B,aAAapC,GAG1C,GAFA7Y,KAAK8I,aAAarD,UAAUuB,EAAA,iBAA0B,cAA0B6R,IAE5ED,GAC4C,mBAArCA,EAAcnJ,mBAuBrB,OAJKzP,KAAKmJ,eAAewY,4BACrB3hB,KAAKmJ,eAAewH,0BAAyB,cAE3C3Q,KAAK+I,iBAAiBoH,iBAAiB6K,EAAWpL,GApBxD,IAAiB,IADAgJ,EAAcnJ,mBAAmBuL,GAQ9C,OANAhb,KAAKsE,OAAOY,QAAQ,8DAEflF,KAAKmJ,eAAewY,4BACrB3hB,KAAKmJ,eAAewH,0BAAyB,cAE3C3Q,KAAK+I,iBAAiBoH,iBAAiB6K,EAAWpL,GAKxD5P,KAAKmJ,eAAewH,0BAAyB,GAC7C3Q,KAAKsE,OAAOY,QAAQ,gEAWhC,CACA,MAAOkB,GAOH,MANIA,aAAaka,EAAA,KACbla,EAAEqU,iBAAiBza,KAAKkJ,eACxBiD,EAAuBuO,mBAAmBtU,IAE9CpG,KAAK8I,aAAarD,UAAUuB,EAAA,iBAA0B,cAA0B,KAAMZ,GACtFpG,KAAK8I,aAAarD,UAAUuB,EAAA,aAAsB,eAC5CZ,CACV,CACApG,KAAK8I,aAAarD,UAAUuB,EAAA,aAAsB,cACtD,CAKAqZ,qBAAqBuB,GACjB,MAAMxD,EAAoBwD,GAAoB7c,OAAOkL,SAASC,KAC9D,OAAOyQ,EAAA,iBAAyBvC,GAAmB,UACvD,0IC/TJ,MAAMyD,UAAyCC,EAAA,EAC3CniB,YAAYiJ,GACR/I,MAAM+I,GACN5I,KAAK+hB,oBAAqB,CAC9B,2BCEJ,MAAMC,UAA6BlC,EAAA,EAC/BngB,YAAYiJ,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBoB,EAAOnB,EAAmBC,EAAsBC,GACpIrJ,MAAM+I,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmBC,EAAsBC,GAC3HlJ,KAAKmK,MAAQA,CACjB,CAKAZ,mBAAmBsD,GAEf,IAAKA,EAAQ3I,KACT,MAAM,QAAuB,MAGjC,MAAMgL,QAAsB,IAAAzD,GAAYzL,KAAKmZ,+BAA+BvU,KAAK5E,MAAOof,EAAA,2DAA2Epf,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAApL,CAAmM2D,EAAS,aAClOV,EAAyBnM,KAAKkK,iCAAiClK,KAAKmK,OAC1E,IAEI,MAAMiP,EAAkB,IACjBlK,EACHhL,KAAM2I,EAAQ3I,MAGZ+d,QAAqB,IAAAxW,GAAYzL,KAAKkiB,uBAAuBtd,KAAK5E,MAAOof,EAAA,mDAAmEpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAApK,CAAmLiD,EAAwB+C,EAAc7D,UAAW6D,EAAc3D,kBAAmB2D,EAAc1F,SACxS8P,EAAa,IAAIuI,EAAiCI,GACxDjiB,KAAKsE,OAAOY,QAAQ,4BAEpB,MAAM0U,EAAqB,IAAIuI,EAAAtI,EAAmBP,EAAYtZ,KAAKmJ,eAAgBiQ,EAAiBpZ,KAAKsE,OAAQtE,KAAKgJ,mBAEtH,aAAa,IAAAyC,GAAYmO,EAAmBwI,6BAA6Bxd,KAAKgV,GAAqBwF,EAAA,gCAAgDpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAAnL,CAAkM,CAC3MhF,KAAM2I,EAAQ3I,KACdme,aAAcxV,EAAQyV,YACtBC,sBAAuB1V,EAAQ2V,mBAC/BtD,yBAA0BrS,EAAQ4V,uBACnCvT,GAAe,EACtB,CACA,MAAO9I,GAKH,MAJIA,aAAaka,EAAA,KACbla,EAAEqU,iBAAiBza,KAAKkJ,eACxBiD,EAAuBuO,mBAAmBtU,IAExCA,CACV,CACJ,CAIAyK,SAEI,OAAOC,QAAQC,QAAO,QAAuB,MACjD,0ICrDJ,MAAM2R,UAA0B,IAK5BnZ,mBAAmB2F,GACflP,KAAKgJ,kBAAkB4B,oBAAoB,mCAAiDsE,EAAchG,eAE1G,MAAMiD,EAAyBnM,KAAKkK,iCAAiC,oCAC/D+X,QAAqB,IAAAxW,GAAYzL,KAAKkiB,uBAAuBtd,KAAK5E,MAAO,qDAAmEA,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAjK,CAAgLiD,EAAwB+C,EAAc7D,UAAW6D,EAAc3D,kBAAmB2D,EAAc1F,SACrSmZ,EAAmB,IAAI,IAAiBV,EAAcjiB,KAAKgJ,mBACjEhJ,KAAKsE,OAAOY,QAAQ,8BACpB,IACI,MACM0d,SADiB,IAAAnX,GAAYkX,EAAiBE,mBAAmBje,KAAK+d,GAAmB,wCAAsD3iB,KAAKsE,OAAQtE,KAAKgJ,kBAAmBkG,EAAchG,cAAjL,CAAgMgG,IACzL,GAI9B,OAHAlP,KAAKgJ,kBAAkBuH,UAAU,CAC7B7C,WAAW,GACZwB,EAAchG,eACV0Z,CACX,CACA,MAAO7e,GAKH,MAJIA,aAAiB,MACjBA,EAAMnE,YAAc,MACpBI,KAAKsE,OAAOY,QAAQ,wHAElBnB,CACV,CACJ,CAKA8M,OAAO+H,GACH5Y,KAAKsE,OAAOY,QAAQ,yBACpB,MAAM2T,EAAqB7Y,KAAK8Y,wBAAwBF,GACxD,OAAO5Y,KAAK2a,mBAAmB9B,GAAoBrP,QACvD,0KChCJD,eAAeyQ,EAAoBoB,EAAYpS,EAAmB1E,EAAQ4E,EAAe4Z,GAErF,GADA9Z,EAAkB4B,oBAAoBwU,EAAA,oCAAoDlW,IACrFkS,EAGD,MADA9W,EAAO2B,KAAK,0BACN,QAAuB,MAEjC,OAAI6c,GACO,IAAArX,GAAYsX,EAAW3D,EAAA,0BAA0C9a,EAAQ0E,EAAmBE,EAA5F,CAA2GkS,EAAY0H,EAAmB9Z,EAAmBE,IAEjK,OAAO8Z,EAAe5D,EAAA,8BAA8C9a,EAAQ0E,EAAmBE,EAA/F,CAA8GkS,EACzH,CAMA7R,eAAe0Z,EAAqBC,EAAQrT,EAASkM,EAA0B/S,EAAmB1E,EAAQ4E,EAAe0S,GAErH,OADA5S,EAAkB4B,oBAAoBwU,EAAA,qCAAqDlW,GACpF,IAAI4H,SAAQ,CAACyK,EAASxK,KACrBlB,EAAU,MACVvL,EAAO0K,QAAQ,qEAAqEa,0BAAgC,yCAMxH,MAAMsT,EAAYpe,OAAOqe,YAAW,KAChCre,OAAO4W,cAAcH,GACrBzK,GAAO,QAAuB,MAAsB,GACrDlB,GACG2L,EAAazW,OAAO0W,aAAY,KAClC,IAAIvL,EAAO,GACX,MAAMmT,EAAgBH,EAAOG,cAC7B,IAMInT,EAAOmT,EAAgBA,EAAcpT,SAASC,KAAO,EACzD,CACA,MAAO9J,GAAK,CACZ,IAAK8J,GAAiB,gBAATA,EACT,OAEJ,IAAI+J,EAAiB,GACjBoJ,IAEIpJ,EADA2B,IAAiB,WACAyH,EAAcpT,SAAS4L,OAGvBwH,EAAcpT,SAAS6L,MAGhD/W,OAAOue,aAAaH,GACpBpe,OAAO4W,cAAcH,GACrBD,EAAQtB,EAAe,GACxB8B,EAAyB,IAC7BC,SAAQ,MACP,OAAOuH,EAAoBnE,EAAA,sBAAsC9a,EAAQ0E,EAAmBE,EAA5F,CAA2Gga,EAAO,GAE1H,CAOA,SAASH,EAAU7G,EAAa4G,EAAmB9Z,EAAmBE,GAMlE,OALAF,EAAkB4B,oBAAoBwU,EAAA,0BAA0ClW,GAKzE,IAAI4H,SAAQ,CAACyK,EAASxK,KACzB,MAAMyS,EAAcC,IACpB1e,OAAOqe,YAAW,KACTI,GAILA,EAAYE,IAAMxH,EAClBX,EAAQiI,IAJJzS,EAAO,wBAIS,GACrB+R,EAAkB,GAE7B,CAQA,SAASE,EAAc9G,GACnB,MAAMsH,EAAcC,IAEpB,OADAD,EAAYE,IAAMxH,EACXsH,CACX,CAMA,SAASC,IACL,MAAME,EAAY3M,SAAS4M,cAAc,UAQzC,OAPAD,EAAUE,UAAY,mBACtBF,EAAUG,MAAMC,WAAa,SAC7BJ,EAAUG,MAAME,SAAW,WAC3BL,EAAUG,MAAMzG,MAAQsG,EAAUG,MAAMvG,OAAS,IACjDoG,EAAUG,MAAMG,OAAS,IACzBN,EAAUO,aAAa,UAAW,+CAClClN,SAASiG,KAAKkH,YAAYR,GACnBA,CACX,CAMA,SAASJ,EAAmBL,GACpBlM,SAASiG,OAASiG,EAAOkB,YACzBpN,SAASiG,KAAKoH,YAAYnB,EAElC,2DC1HA,MAAMoB,UAA2BxE,EAAA,EAC7BngB,YAAYiJ,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBoB,EAAOnB,EAAmBgD,EAAmB/C,EAAsBC,GACvJrJ,MAAM+I,EAAQC,EAAatE,EAAeD,EAAQwE,EAAcC,EAAkBC,EAAmBC,EAAsBC,GAC3HlJ,KAAKmK,MAAQA,EACbnK,KAAKoY,cAAgBpM,CACzB,CAKAzC,mBAAmBsD,GACf7M,KAAKgJ,kBAAkB4B,oBAAoBwU,EAAA,kCAAkDvS,EAAQ3D,eAEhG2D,EAAQmT,WACRnT,EAAQ0X,KACP1X,EAAQrD,SAAYqD,EAAQrD,QAAQgb,UACtCxkB,KAAKsE,OAAO0K,QAAQ,uGAGxB,MAAMyV,EAAe,IAAK5X,GACtB4X,EAAajU,OACTiU,EAAajU,SAAW,WACxBiU,EAAajU,SAAW,kBACxBxQ,KAAKsE,OAAO0K,QAAQ,gDAAgDyV,EAAajU,eAAe,aAChGiU,EAAajU,OAAS,WAI1BiU,EAAajU,OAAS,UAG1B,MAAMtB,QAAsB,IAAAzD,GAAYzL,KAAKmZ,+BAA+BvU,KAAK5E,MAAOof,EAAA,2DAA2Epf,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAApL,CAAmMub,EAAc,cAC7O,QAAWvV,EAAc7D,WACzB,MAAMc,EAAyBnM,KAAKkK,iCAAiClK,KAAKmK,OAC1E,IAAImP,EACJ,IAGI,OADAA,QAAmB,IAAA7N,GAAYzL,KAAKuZ,qBAAqB3U,KAAK5E,MAAOof,EAAA,iDAAiEpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAAhK,CAA+KiD,EAAwB+C,EAAc7D,UAAW6D,EAAc3D,kBAAmB2D,EAAc1F,eACrR,IAAAiC,GAAYzL,KAAK0kB,kBAAkB9f,KAAK5E,MAAOof,EAAA,iCAAiDpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAA7I,CAA4JoQ,EAAYpK,EACzL,CACA,MAAO9I,GAKH,GAJIA,aAAaka,EAAA,KACbla,EAAEqU,iBAAiBza,KAAKkJ,eACxBiD,EAAuBuO,mBAAmBtU,MAEzCkT,GACClT,aAAaka,EAAA,IACfla,EAAExG,YAAc+kB,EAAA,wBAChB,MAAMve,EAEVpG,KAAKgJ,kBAAkBuH,UAAU,CAC7BqU,WAAYxe,EAAExG,WACfI,KAAKkJ,eACR,MAAM2b,QAA2B,IAAApZ,GAAYzL,KAAKmZ,+BAA+BvU,KAAK5E,MAAOof,EAAA,2DAA2Epf,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAApL,CAAmMub,EAAc,aAClP,aAAa,IAAAhZ,GAAYzL,KAAK0kB,kBAAkB9f,KAAK5E,MAAOof,EAAA,iCAAiDpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA1I,CAAyJoQ,EAAYuL,EACtL,CACJ,CAIAhU,SAEI,OAAOC,QAAQC,QAAO,QAAuB,MACjD,CAOAxH,wBAAwB+P,EAAYpK,GAChC,MAAMhG,EAAgBgG,EAAchG,cACpClJ,KAAKgJ,kBAAkB4B,oBAAoBwU,EAAA,iCAAiDlW,GAE5F,MAAMkQ,QAAwB,IAAA3N,GAAYzL,KAAKqZ,mCAAmCzU,KAAK5E,MAAOof,EAAA,+DAA+Epf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBE,EAApL,CAAmMgG,GAE3NuK,QAAoB,IAAAhO,GAAY6N,EAAWI,eAAe9U,KAAK0U,GAAa8F,EAAA,kBAAkCpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBE,EAA/H,CAA8I,IACjKgG,EACHyK,aAAcyG,EAAA,oBAAuCpgB,KAAK4I,OAAQ5I,KAAKsE,OAAQtE,KAAKiJ,qBAAsBiG,EAAc4H,wBAGtH8C,EAAqB,IAAIuI,EAAAtI,EAAmBP,EAAYtZ,KAAKmJ,eAAgBiQ,EAAiBpZ,KAAKsE,OAAQtE,KAAKgJ,mBAEhH8b,QAAkB,IAAArZ,GAAYuO,EAAqBoF,EAAA,oCAAoDpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBE,EAA1H,CAAyIuQ,EAAazZ,KAAKgJ,kBAAmBhJ,KAAKsE,OAAQ4E,EAAelJ,KAAK4I,OAAOS,OAAOyZ,mBAC/OlH,EAAe5b,KAAK4I,OAAOqB,KAAKc,YAAYqP,mBAE5CH,QAAuB,IAAAxO,GAAYwX,EAAsB7D,EAAA,qCAAqDpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBE,EAA5H,CAA2I4b,EAAW9kB,KAAK4I,OAAOS,OAAO0b,kBAAmB/kB,KAAK4I,OAAOS,OAAO0S,yBAA0B/b,KAAKgJ,kBAAmBhJ,KAAKsE,OAAQ4E,EAAe0S,GACpTzB,GAAe,OAAO,IAAqBiF,EAAA,uBAAuCpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA7G,CAA4H+Q,EAAgB2B,EAAc5b,KAAKsE,QACpL,GAAI6V,EAAapO,UAAW,CAExB,GADA/L,KAAKsE,OAAOY,QAAQ,oDACflF,KAAKiJ,qBACN,MAAM,QAAuB,MAEjC,MAAMoR,EAA0B,IAAIxO,EAAA,EAAwB7L,KAAK4I,OAAQ5I,KAAKmJ,eAAgBnJ,KAAKuE,cAAevE,KAAKsE,OAAQtE,KAAK8I,aAAc9I,KAAK+I,iBAAkB/I,KAAKmK,MAAOnK,KAAKgJ,kBAAmBhJ,KAAKiJ,qBAAsBkR,EAAapO,UAAW/L,KAAKmJ,eAAgBD,IAC/Q,iBAAEoR,GAAqBgH,EAAA,oBAAgCthB,KAAKuE,cAAe2K,EAAc2E,OAC/F,OAAO,IAAApI,GAAY4O,EAAwBlL,aAAavK,KAAKyV,GAA0B+E,EAAA,uCAAuDpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBE,EAA5K,CAA2L,IAC3LgG,EACH2E,MAAOyG,EACP9J,OAAQtB,EAAcsB,QAAU,WAExC,CAEA,OAAO,IAAA/E,GAAYmO,EAAmBW,mBAAmB3V,KAAKgV,GAAqBwF,EAAA,sBAAsCpf,KAAKsE,OAAQtE,KAAKgJ,kBAAmBE,EAAvJ,CAAsKiR,EAAcjL,EAC/L,kJC5GJ,MAAM8V,UAA4B,IAK9Bzb,mBAAmBsD,GACf7M,KAAKgJ,kBAAkB4B,oBAAoB,qCAAmDiC,EAAQ3D,eACtG,MAAM+b,QAAoB,IAAAxZ,GAAY,IAAuB,2BAAyCzL,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAAzH,CAAwI2D,EAAS7M,KAAK4I,OAAQ5I,KAAKgJ,kBAAmBhJ,KAAKsE,QAC/M4K,EAAgB,IACfrC,KACAoY,GAEHpY,EAAQ7C,cAERkF,EAAclF,YAAchK,KAAK8J,eAAe+C,EAAQ7C,cAE5D,MAAMmC,EAAyBnM,KAAKkK,iCAAiC,oCAC/Dgb,QAA2BllB,KAAKmlB,yBAAyBhZ,EAAwB+C,EAAc7D,UAAW6D,EAAc3D,kBAAmB2D,EAAc1F,SAE/J,OAAO,IAAAiC,GAAYyZ,EAAmBE,2BAA2BxgB,KAAKsgB,GAAqB,kDAAgEllB,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAAjM,CAAgNgG,GAAeZ,OAAOlI,IAGzO,MAFAA,EAAEqU,iBAAiBza,KAAKkJ,eACxBiD,EAAuBuO,mBAAmBtU,GACpCA,CAAC,GAEf,CAIAyK,SAEI,OAAOC,QAAQC,QAAO,QAAuB,MACjD,CAMAxH,+BAA+B4C,EAAwBkZ,EAAc9Z,EAAmB/B,GAEpF,MAAMyY,QAAqB,IAAAxW,GAAYzL,KAAKkiB,uBAAuBtd,KAAK5E,MAAO,qDAAmEA,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAjK,CAAgLiD,EAAwBkZ,EAAc9Z,EAAmB/B,GACpQ,OAAO,IAAI,IAAmByY,EAAcjiB,KAAKgJ,kBACrD,yMCpCJ,MAAM8W,UAAkC,IAKpCvW,yCAAyCsD,GACrC7M,KAAKgJ,kBAAkB4B,oBAAoB,iEAA+E5K,KAAKkJ,eAC/H,MAAMoc,QAA4B,IAAA7Z,GAAY,IAAmB,uBAAqCzL,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAA9G,CAA6HlJ,KAAKgJ,kBAAmBhJ,KAAKsE,OAAQtE,KAAKkJ,eACnMkQ,EAAkB,IACjBvM,EACH7C,YAAa6C,EAAQ7C,YACrB9F,KAAM,kBACNqhB,aAAcD,EAAoBE,UAItC,OAFA3Y,EAAQ4Y,cAAgBH,EAAoBI,UAC5C7Y,EAAQ8Y,oBAAsB,gCACvBvM,CACX,CAKAN,wBAAwBF,GACpB5Y,KAAKsE,OAAOY,QAAQ,iCAAkC0T,GAAe1P,eACrE,MAAM2P,EAAqB,CACvB3P,cAAelJ,KAAKkJ,gBAAiB,aAClC0P,GAMP,GAAIA,EAEA,GAAKA,EAAcgN,WAaf5lB,KAAKsE,OAAOY,QAAQ,yDAZpB,GAAI0T,EAAcpP,QAAS,CACvB,MAAMoc,EAAa5lB,KAAK6lB,+BAA+BjN,EAAcpP,SACjEoc,IACA5lB,KAAKsE,OAAOY,QAAQ,kFACpB2T,EAAmB+M,WAAaA,EAExC,MAEI5lB,KAAKsE,OAAOY,QAAQ,0GAQ5BlF,KAAKsE,OAAOY,QAAQ,qEA6BxB,OAvBK0T,GAAyD,OAAxCA,EAAciC,sBAqBhC7a,KAAKsE,OAAOY,QAAQ,6EAA8E2T,EAAmB3P,eApBjH0P,GAAiBA,EAAciC,uBAC/B7a,KAAKsE,OAAOY,QAAQ,6DAA8D2T,EAAmB3P,eACrG2P,EAAmBgC,sBACf,mBAAyBjC,EAAciC,uBAAuB,YAElB,OAA3C7a,KAAK4I,OAAOqB,KAAK4Q,sBACtB7a,KAAKsE,OAAOY,QAAQ,uGAAwG2T,EAAmB3P,eAE1IlJ,KAAK4I,OAAOqB,KAAK4Q,uBACtB7a,KAAKsE,OAAOY,QAAQ,kDAAmD2T,EAAmB3P,eAC1F2P,EAAmBgC,sBACf,mBAAyB7a,KAAK4I,OAAOqB,KAAK4Q,uBAAuB,aAGrE7a,KAAKsE,OAAOY,QAAQ,gDAAiD2T,EAAmB3P,eACxF2P,EAAmBgC,sBACf,oBAAyB,WAAiB,YAM/ChC,CACX,CAMAgN,+BAA+Brc,GAC3B,MAAM6F,EAAgB7F,EAAQ6F,cAC9B,GAAIA,EAAe,CACf,GAAIA,EAAcyW,WACd,OAAOzW,EAAcyW,WAGrB9lB,KAAKsE,OAAOY,QAAQ,qIAE5B,MAEIlF,KAAKsE,OAAOY,QAAQ,yGAExB,OAAO,IACX,CAMAqE,2BAA2B4C,EAAwBkZ,EAAc1a,EAA0BnB,GACvFxJ,KAAKgJ,kBAAkB4B,oBAAoB,mDAAiE5K,KAAKkJ,eAEjH,MAAM+Y,QAAqB,IAAAxW,GAAYzL,KAAKkiB,uBAAuBtd,KAAK5E,MAAO,qDAAmEA,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAjK,CAAgLiD,EAAwBkZ,EAAc1a,EAA0BnB,GAC3Q,OAAO,IAAI,IAAwByY,EAAcjiB,KAAKgJ,kBAC1D,CAOAO,6BAA6B4C,EAAwBzB,EAAkBC,EAA0BnB,GAC7FxJ,KAAKgJ,kBAAkB4B,oBAAoB,qDAAmE5K,KAAKkJ,eACnH,MAAMsC,QAA4B,IAAAC,GAAYzL,KAAKuR,uBAAuB3M,KAAK5E,MAAO,qDAAmEA,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAjK,CAAgLwB,EAAkBC,EAA0BnB,GACxPlF,EAAStE,KAAK4I,OAAOS,OAAO0c,cAClC,MAAO,CACHC,YAAa,CACT1b,SAAUtK,KAAK4I,OAAOqB,KAAKK,SAC3Be,UAAWG,EACXya,mBAAoBjmB,KAAK4I,OAAOqB,KAAKgc,oBAEzCC,cAAe,CACXC,0BAA2BnmB,KAAK4I,OAAOS,OAAO8c,0BAC9CC,sBAAsB,GAE1BL,cAAe,CACXM,eAAgB/hB,EAAO+hB,eACvBC,kBAAmBhiB,EAAOgiB,kBAC1BC,SAAUjiB,EAAOiiB,SACjBrd,cAAelJ,KAAKkJ,eAExBsd,aAAc,CACVC,0BAA2BzmB,KAAK4I,OAAO8d,MAAMD,2BAEjDE,gBAAiB3mB,KAAKuE,cACtBqiB,iBAAkB5mB,KAAKoJ,cACvByd,iBAAkB7mB,KAAKmJ,eACvBgD,uBAAwBA,EACxB2a,YAAa,CACTC,IAAK,cACLC,QAAS,IACTC,IAAK,kBACLC,GAAI,mBAER3P,UAAWvX,KAAK4I,OAAO2O,UAE/B,CAMAhO,qCAAqCsD,EAASlH,GAC1C3F,KAAKgJ,kBAAkB4B,oBAAoB,6DAA2E5K,KAAKkJ,eAC3H,MAAMc,EAAchK,KAAK8J,eAAe+C,EAAQ7C,aAC1Cmd,EAAe,CACjBxhB,gBAAiBA,GAEfkO,EAAQ,oBAA8B7T,KAAKuE,cAAgBsI,GAAWA,EAAQgH,OAAU,kBAAwBsT,GAEhHxQ,EAAmB,UADC,IAAAlL,GAAY,IAAuB,2BAAyCzL,KAAKsE,OAAQtE,KAAKgJ,kBAAmBhJ,KAAKkJ,cAAtH,CAAqI,IAAK2D,EAAS3D,cAAelJ,KAAKkJ,eAAiBlJ,KAAK4I,OAAQ5I,KAAKgJ,kBAAmBhJ,KAAKsE,QAGxP0F,YAAaA,EACb6J,MAAOA,EACPwL,MAAOxS,EAAQwS,QAAS,UACxB+H,aAAcpnB,KAAK4I,OAAOqB,KAAKc,YAC1BqP,oBAEH5Q,EAAUqD,EAAQrD,SAAWxJ,KAAKmJ,eAAeM,mBAOvD,GANID,IACAxJ,KAAKsE,OAAOY,QAAQ,oCAAqClF,KAAKkJ,eAC9DlJ,KAAKsE,OAAO6W,WAAW,sCAAsC3R,EAAQ6H,gBAAiBrR,KAAKkJ,eAC3FyN,EAAiBnN,QAAUA,IAG1BmN,EAAiBqJ,YAAcxW,EAAS,CACzC,MAAM6d,EAAkBrnB,KAAKmJ,eAAeme,qBACxCD,IACA1Q,EAAiBqJ,UAAYqH,EAErC,CACA,OAAO1Q,CACX,+HCnMJ,MAAMwL,EACFxiB,YAAYue,EAAgBrV,EAAauQ,EAAiB9U,EAAQ0E,GAC9DhJ,KAAKme,WAAaD,EAClBle,KAAKmJ,eAAiBN,EACtB7I,KAAKoZ,gBAAkBA,EACvBpZ,KAAKsE,OAASA,EACdtE,KAAKgJ,kBAAoBA,CAC7B,CAKAO,yBAAyBuE,EAAUjB,GAE/B,IAAI+R,EADJ5e,KAAKgJ,kBAAkB4B,oBAAoB,wBAAsCiC,EAAQ3D,eAEzF,IACI0V,EAAmB5e,KAAKme,WAAWU,uBAAuB/Q,EAAUjB,EAAQgH,MAChF,CACA,MAAOzN,GACH,MAAIA,aAAa,KACbA,EAAEoI,WAAa,MAET,QAAuB,MAGvBpI,CAEd,CACA,OAAO,IAAAqF,GAAYzL,KAAKoiB,6BAA6Bxd,KAAK5E,MAAO,kCAAgDA,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAAvJ,CAAsK0V,EAAkB/R,EACnM,CASAtD,mCAAmCqV,EAAkB/R,EAAS0a,GAAgB,GAgB1E,GAfAvnB,KAAKgJ,kBAAkB4B,oBAAoB,kCAAgDiC,EAAQ3D,eACnGlJ,KAAKsE,OAAOyI,MAAM,0DAElB/M,KAAKoZ,gBAAgBlV,KAAO0a,EAAiB1a,KAEzC0a,EAAiBM,gCACX,IAAAzT,GAAYzL,KAAKme,WAAWgB,gBAAgBva,KAAK5E,KAAKme,YAAa,kCAAgDne,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAAhK,CAA+K0V,EAAiBM,yBAA0BrS,EAAQ3D,eAGxOqe,IAEA3I,EAAiBS,MAAQxS,EAAQwS,YAAStY,GAE9C6X,EAAiB/K,MAAQhH,EAAQgH,MAE7B+K,EAAiBnN,YACjBzR,KAAKoZ,gBAAgBkG,WAAaV,EAAiBnN,gBAElD,CACD,MAAM+V,EAAUxnB,KAAKynB,qBAAqB5a,GACtC2a,IACAxnB,KAAKoZ,gBAAgBqG,cAAgB+H,EAE7C,CAGA,aAD6B,IAAA/b,GAAYzL,KAAKme,WAAWhP,aAAavK,KAAK5E,KAAKme,YAAa,4BAA0Cne,KAAKsE,OAAQtE,KAAKgJ,kBAAmB6D,EAAQ3D,cAAvJ,CAAsKlJ,KAAKoZ,gBAAiBwF,EAE7N,CAIA6I,qBAAqB5a,GACjB,OAAIA,EAAQrD,QACD,CACHke,WAAY7a,EAAQrD,QAAQ6H,cAC5BsW,KAAM,qBAGL9a,EAAQmT,UACN,CACH0H,WAAY7a,EAAQmT,UACpB2H,KAAM,SAGP,IACX,0DC3FJ,MAAMC,EAMF7M,iBAAiB8M,EAAKC,GAClB,OAAOF,EAAiBG,sBAAsBF,EAAKC,EACvD,CAMA3X,iBAAiB0X,EAAKC,GAClB,OAAOF,EAAiBG,sBAAsBF,EAAKC,EACvD,CAMAE,6BAA6BH,EAAKC,GAO9B,OANIA,EAAQ/X,UACRhL,OAAOkL,SAASgY,QAAQJ,GAGxB9iB,OAAOkL,SAASmM,OAAOyL,GAEpB,IAAI/W,SAASyK,IAChB6H,YAAW,KACP7H,GAAQ,EAAK,GACduM,EAAQjY,QAAQ,GAE3B,wGC1BJ,MAAMqY,EAOF3e,0BAA0Bse,EAAKC,GAC3B,IAAIha,EACJ,IACIA,QAAiBqa,MAAMN,EAAK,CACxBha,OAAQ,SACRua,QAASpoB,KAAKqoB,gBAAgBP,IAEtC,CACA,MAAO1hB,GACH,MAAIrB,OAAOujB,UAAUC,QACX,QAAuB,OAGvB,QAAuB,KAErC,CACA,IACI,MAAO,CACHH,QAASpoB,KAAKwoB,cAAc1a,EAASsa,SACrCnL,WAAanP,EAAS2a,OACtBzkB,OAAQ8J,EAAS9J,OAEzB,CACA,MAAOoC,GACH,MAAM,QAAuB,KACjC,CACJ,CAOAmD,2BAA2Bse,EAAKC,GAC5B,MAAMY,EAAWZ,GAAWA,EAAQ7K,MAAS,kBAC7C,IAAInP,EACJ,IACIA,QAAiBqa,MAAMN,EAAK,CACxBha,OAAQ,UACRua,QAASpoB,KAAKqoB,gBAAgBP,GAC9B7K,KAAMyL,GAEd,CACA,MAAOtiB,GACH,MAAIrB,OAAOujB,UAAUC,QACX,QAAuB,OAGvB,QAAuB,KAErC,CACA,IACI,MAAO,CACHH,QAASpoB,KAAKwoB,cAAc1a,EAASsa,SACrCnL,WAAanP,EAAS2a,OACtBzkB,OAAQ8J,EAAS9J,OAEzB,CACA,MAAOoC,GACH,MAAM,QAAuB,KACjC,CACJ,CAKAiiB,gBAAgBP,GACZ,MAAMM,EAAU,IAAIO,QACpB,IAAMb,IAAWA,EAAQM,QACrB,OAAOA,EAEX,MAAMQ,EAAiBd,EAAQM,QAI/B,OAHAtoB,OAAO+oB,KAAKD,GAAgB1iB,SAASG,IACjC+hB,EAAQU,OAAOziB,EAAKuiB,EAAeviB,GAAK,IAErC+hB,CACX,CACAI,cAAcJ,GACV,MAAMW,EAAa,CAAC,EAIpB,OAHAX,EAAQliB,SAAQ,CAAC8iB,EAAO3iB,KACpB0iB,EAAW1iB,GAAO2iB,CAAK,IAEpBD,CACX","sources":["webpack://iadviser/./node_modules/@azure/msal-browser/dist/error/BrowserAuthError.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/error/BrowserAuthErrorCodes.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/error/BrowserConfigurationAuthError.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/error/BrowserConfigurationAuthErrorCodes.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/error/NativeAuthError.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/error/NativeAuthErrorCodes.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/event/EventHandler.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/event/EventType.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/BaseInteractionClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/NativeInteractionClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/PopupClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_handler/RedirectHandler.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/RedirectClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/HybridSpaAuthorizationCodeClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/SilentAuthCodeClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/SilentCacheClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_handler/SilentHandler.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/SilentIframeClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/SilentRefreshClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_client/StandardInteractionClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/interaction_handler/InteractionHandler.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/navigation/NavigationClient.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/network/FetchClient.mjs"],"sourcesContent":["/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { AuthError } from '@azure/msal-common';\nimport { pkceNotCreated, cryptoNonExistent, emptyNavigateUri, hashEmptyError, noStateInHash, hashDoesNotContainKnownProperties, unableToParseState, stateInteractionTypeMismatch, interactionInProgress, popupWindowError, emptyWindowError, userCancelled, monitorPopupTimeout, monitorWindowTimeout, redirectInIframe, blockIframeReload, blockNestedPopups, iframeClosedPrematurely, silentLogoutUnsupported, noAccountError, silentPromptValueError, noTokenRequestCacheError, unableToParseTokenRequestCacheError, noCachedAuthorityError, authRequestNotSetError, invalidCacheType, nonBrowserEnvironment, databaseNotOpen, noNetworkConnectivity, postRequestFailed, getRequestFailed, failedToParseResponse, unableToLoadToken, cryptoKeyNotFound, authCodeRequired, authCodeOrNativeAccountIdRequired, spaCodeAndNativeAccountIdPresent, databaseUnavailable, unableToAcquireTokenFromNativePlatform, nativeHandshakeTimeout, nativeExtensionNotInstalled, nativeConnectionNotEstablished, uninitializedPublicClientApplication, nativePromptNotSupported, invalidBase64String, invalidPopTokenRequest } from './BrowserAuthErrorCodes.mjs';\nimport * as BrowserAuthErrorCodes from './BrowserAuthErrorCodes.mjs';\nexport { BrowserAuthErrorCodes };\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nconst ErrorLink = \"For more visit: aka.ms/msaljs/browser-errors\";\r\n/**\r\n * BrowserAuthErrorMessage class containing string constants used by error codes and messages.\r\n */\r\nconst BrowserAuthErrorMessages = {\r\n    [pkceNotCreated]: \"The PKCE code challenge and verifier could not be generated.\",\r\n    [cryptoNonExistent]: \"The crypto object or function is not available.\",\r\n    [emptyNavigateUri]: \"Navigation URI is empty. Please check stack trace for more info.\",\r\n    [hashEmptyError]: `Hash value cannot be processed because it is empty. Please verify that your redirectUri is not clearing the hash. ${ErrorLink}`,\r\n    [noStateInHash]: \"Hash does not contain state. Please verify that the request originated from msal.\",\r\n    [hashDoesNotContainKnownProperties]: `Hash does not contain known properites. Please verify that your redirectUri is not changing the hash.  ${ErrorLink}`,\r\n    [unableToParseState]: \"Unable to parse state. Please verify that the request originated from msal.\",\r\n    [stateInteractionTypeMismatch]: \"Hash contains state but the interaction type does not match the caller.\",\r\n    [interactionInProgress]: `Interaction is currently in progress. Please ensure that this interaction has been completed before calling an interactive API.   ${ErrorLink}`,\r\n    [popupWindowError]: \"Error opening popup window. This can happen if you are using IE or if popups are blocked in the browser.\",\r\n    [emptyWindowError]: \"window.open returned null or undefined window object.\",\r\n    [userCancelled]: \"User cancelled the flow.\",\r\n    [monitorPopupTimeout]: `Token acquisition in popup failed due to timeout.  ${ErrorLink}`,\r\n    [monitorWindowTimeout]: `Token acquisition in iframe failed due to timeout.  ${ErrorLink}`,\r\n    [redirectInIframe]: \"Redirects are not supported for iframed or brokered applications. Please ensure you are using MSAL.js in a top frame of the window if using the redirect APIs, or use the popup APIs.\",\r\n    [blockIframeReload]: `Request was blocked inside an iframe because MSAL detected an authentication response.  ${ErrorLink}`,\r\n    [blockNestedPopups]: \"Request was blocked inside a popup because MSAL detected it was running in a popup.\",\r\n    [iframeClosedPrematurely]: \"The iframe being monitored was closed prematurely.\",\r\n    [silentLogoutUnsupported]: \"Silent logout not supported. Please call logoutRedirect or logoutPopup instead.\",\r\n    [noAccountError]: \"No account object provided to acquireTokenSilent and no active account has been set. Please call setActiveAccount or provide an account on the request.\",\r\n    [silentPromptValueError]: \"The value given for the prompt value is not valid for silent requests - must be set to 'none' or 'no_session'.\",\r\n    [noTokenRequestCacheError]: \"No token request found in cache.\",\r\n    [unableToParseTokenRequestCacheError]: \"The cached token request could not be parsed.\",\r\n    [noCachedAuthorityError]: \"No cached authority found.\",\r\n    [authRequestNotSetError]: \"Auth Request not set. Please ensure initiateAuthRequest was called from the InteractionHandler\",\r\n    [invalidCacheType]: \"Invalid cache type\",\r\n    [nonBrowserEnvironment]: \"Login and token requests are not supported in non-browser environments.\",\r\n    [databaseNotOpen]: \"Database is not open!\",\r\n    [noNetworkConnectivity]: \"No network connectivity. Check your internet connection.\",\r\n    [postRequestFailed]: \"Network request failed: If the browser threw a CORS error, check that the redirectUri is registered in the Azure App Portal as type 'SPA'\",\r\n    [getRequestFailed]: \"Network request failed. Please check the network trace to determine root cause.\",\r\n    [failedToParseResponse]: \"Failed to parse network response. Check network trace.\",\r\n    [unableToLoadToken]: \"Error loading token to cache.\",\r\n    [cryptoKeyNotFound]: \"Cryptographic Key or Keypair not found in browser storage.\",\r\n    [authCodeRequired]: \"An authorization code must be provided (as the `code` property on the request) to this flow.\",\r\n    [authCodeOrNativeAccountIdRequired]: \"An authorization code or nativeAccountId must be provided to this flow.\",\r\n    [spaCodeAndNativeAccountIdPresent]: \"Request cannot contain both spa code and native account id.\",\r\n    [databaseUnavailable]: \"IndexedDB, which is required for persistent cryptographic key storage, is unavailable. This may be caused by browser privacy features which block persistent storage in third-party contexts.\",\r\n    [unableToAcquireTokenFromNativePlatform]: `Unable to acquire token from native platform.  ${ErrorLink}`,\r\n    [nativeHandshakeTimeout]: \"Timed out while attempting to establish connection to browser extension\",\r\n    [nativeExtensionNotInstalled]: \"Native extension is not installed. If you think this is a mistake call the initialize function.\",\r\n    [nativeConnectionNotEstablished]: `Connection to native platform has not been established. Please install a compatible browser extension and run initialize().  ${ErrorLink}`,\r\n    [uninitializedPublicClientApplication]: `You must call and await the initialize function before attempting to call any other MSAL API.  ${ErrorLink}`,\r\n    [nativePromptNotSupported]: \"The provided prompt is not supported by the native platform. This request should be routed to the web based flow.\",\r\n    [invalidBase64String]: \"Invalid base64 encoded string.\",\r\n    [invalidPopTokenRequest]: \"Invalid PoP token request. The request should not have both a popKid value and signPopToken set to true.\",\r\n};\r\n/**\r\n * BrowserAuthErrorMessage class containing string constants used by error codes and messages.\r\n * @deprecated Use exported BrowserAuthErrorCodes instead.\r\n * In your app you can do :\r\n * ```\r\n * import { BrowserAuthErrorCodes } from \"@azure/msal-browser\";\r\n * ```\r\n */\r\nconst BrowserAuthErrorMessage = {\r\n    pkceNotGenerated: {\r\n        code: pkceNotCreated,\r\n        desc: BrowserAuthErrorMessages[pkceNotCreated],\r\n    },\r\n    cryptoDoesNotExist: {\r\n        code: cryptoNonExistent,\r\n        desc: BrowserAuthErrorMessages[cryptoNonExistent],\r\n    },\r\n    emptyNavigateUriError: {\r\n        code: emptyNavigateUri,\r\n        desc: BrowserAuthErrorMessages[emptyNavigateUri],\r\n    },\r\n    hashEmptyError: {\r\n        code: hashEmptyError,\r\n        desc: BrowserAuthErrorMessages[hashEmptyError],\r\n    },\r\n    hashDoesNotContainStateError: {\r\n        code: noStateInHash,\r\n        desc: BrowserAuthErrorMessages[noStateInHash],\r\n    },\r\n    hashDoesNotContainKnownPropertiesError: {\r\n        code: hashDoesNotContainKnownProperties,\r\n        desc: BrowserAuthErrorMessages[hashDoesNotContainKnownProperties],\r\n    },\r\n    unableToParseStateError: {\r\n        code: unableToParseState,\r\n        desc: BrowserAuthErrorMessages[unableToParseState],\r\n    },\r\n    stateInteractionTypeMismatchError: {\r\n        code: stateInteractionTypeMismatch,\r\n        desc: BrowserAuthErrorMessages[stateInteractionTypeMismatch],\r\n    },\r\n    interactionInProgress: {\r\n        code: interactionInProgress,\r\n        desc: BrowserAuthErrorMessages[interactionInProgress],\r\n    },\r\n    popupWindowError: {\r\n        code: popupWindowError,\r\n        desc: BrowserAuthErrorMessages[popupWindowError],\r\n    },\r\n    emptyWindowError: {\r\n        code: emptyWindowError,\r\n        desc: BrowserAuthErrorMessages[emptyWindowError],\r\n    },\r\n    userCancelledError: {\r\n        code: userCancelled,\r\n        desc: BrowserAuthErrorMessages[userCancelled],\r\n    },\r\n    monitorPopupTimeoutError: {\r\n        code: monitorPopupTimeout,\r\n        desc: BrowserAuthErrorMessages[monitorPopupTimeout],\r\n    },\r\n    monitorIframeTimeoutError: {\r\n        code: monitorWindowTimeout,\r\n        desc: BrowserAuthErrorMessages[monitorWindowTimeout],\r\n    },\r\n    redirectInIframeError: {\r\n        code: redirectInIframe,\r\n        desc: BrowserAuthErrorMessages[redirectInIframe],\r\n    },\r\n    blockTokenRequestsInHiddenIframeError: {\r\n        code: blockIframeReload,\r\n        desc: BrowserAuthErrorMessages[blockIframeReload],\r\n    },\r\n    blockAcquireTokenInPopupsError: {\r\n        code: blockNestedPopups,\r\n        desc: BrowserAuthErrorMessages[blockNestedPopups],\r\n    },\r\n    iframeClosedPrematurelyError: {\r\n        code: iframeClosedPrematurely,\r\n        desc: BrowserAuthErrorMessages[iframeClosedPrematurely],\r\n    },\r\n    silentLogoutUnsupportedError: {\r\n        code: silentLogoutUnsupported,\r\n        desc: BrowserAuthErrorMessages[silentLogoutUnsupported],\r\n    },\r\n    noAccountError: {\r\n        code: noAccountError,\r\n        desc: BrowserAuthErrorMessages[noAccountError],\r\n    },\r\n    silentPromptValueError: {\r\n        code: silentPromptValueError,\r\n        desc: BrowserAuthErrorMessages[silentPromptValueError],\r\n    },\r\n    noTokenRequestCacheError: {\r\n        code: noTokenRequestCacheError,\r\n        desc: BrowserAuthErrorMessages[noTokenRequestCacheError],\r\n    },\r\n    unableToParseTokenRequestCacheError: {\r\n        code: unableToParseTokenRequestCacheError,\r\n        desc: BrowserAuthErrorMessages[unableToParseTokenRequestCacheError],\r\n    },\r\n    noCachedAuthorityError: {\r\n        code: noCachedAuthorityError,\r\n        desc: BrowserAuthErrorMessages[noCachedAuthorityError],\r\n    },\r\n    authRequestNotSet: {\r\n        code: authRequestNotSetError,\r\n        desc: BrowserAuthErrorMessages[authRequestNotSetError],\r\n    },\r\n    invalidCacheType: {\r\n        code: invalidCacheType,\r\n        desc: BrowserAuthErrorMessages[invalidCacheType],\r\n    },\r\n    notInBrowserEnvironment: {\r\n        code: nonBrowserEnvironment,\r\n        desc: BrowserAuthErrorMessages[nonBrowserEnvironment],\r\n    },\r\n    databaseNotOpen: {\r\n        code: databaseNotOpen,\r\n        desc: BrowserAuthErrorMessages[databaseNotOpen],\r\n    },\r\n    noNetworkConnectivity: {\r\n        code: noNetworkConnectivity,\r\n        desc: BrowserAuthErrorMessages[noNetworkConnectivity],\r\n    },\r\n    postRequestFailed: {\r\n        code: postRequestFailed,\r\n        desc: BrowserAuthErrorMessages[postRequestFailed],\r\n    },\r\n    getRequestFailed: {\r\n        code: getRequestFailed,\r\n        desc: BrowserAuthErrorMessages[getRequestFailed],\r\n    },\r\n    failedToParseNetworkResponse: {\r\n        code: failedToParseResponse,\r\n        desc: BrowserAuthErrorMessages[failedToParseResponse],\r\n    },\r\n    unableToLoadTokenError: {\r\n        code: unableToLoadToken,\r\n        desc: BrowserAuthErrorMessages[unableToLoadToken],\r\n    },\r\n    signingKeyNotFoundInStorage: {\r\n        code: cryptoKeyNotFound,\r\n        desc: BrowserAuthErrorMessages[cryptoKeyNotFound],\r\n    },\r\n    authCodeRequired: {\r\n        code: authCodeRequired,\r\n        desc: BrowserAuthErrorMessages[authCodeRequired],\r\n    },\r\n    authCodeOrNativeAccountRequired: {\r\n        code: authCodeOrNativeAccountIdRequired,\r\n        desc: BrowserAuthErrorMessages[authCodeOrNativeAccountIdRequired],\r\n    },\r\n    spaCodeAndNativeAccountPresent: {\r\n        code: spaCodeAndNativeAccountIdPresent,\r\n        desc: BrowserAuthErrorMessages[spaCodeAndNativeAccountIdPresent],\r\n    },\r\n    databaseUnavailable: {\r\n        code: databaseUnavailable,\r\n        desc: BrowserAuthErrorMessages[databaseUnavailable],\r\n    },\r\n    unableToAcquireTokenFromNativePlatform: {\r\n        code: unableToAcquireTokenFromNativePlatform,\r\n        desc: BrowserAuthErrorMessages[unableToAcquireTokenFromNativePlatform],\r\n    },\r\n    nativeHandshakeTimeout: {\r\n        code: nativeHandshakeTimeout,\r\n        desc: BrowserAuthErrorMessages[nativeHandshakeTimeout],\r\n    },\r\n    nativeExtensionNotInstalled: {\r\n        code: nativeExtensionNotInstalled,\r\n        desc: BrowserAuthErrorMessages[nativeExtensionNotInstalled],\r\n    },\r\n    nativeConnectionNotEstablished: {\r\n        code: nativeConnectionNotEstablished,\r\n        desc: BrowserAuthErrorMessages[nativeConnectionNotEstablished],\r\n    },\r\n    uninitializedPublicClientApplication: {\r\n        code: uninitializedPublicClientApplication,\r\n        desc: BrowserAuthErrorMessages[uninitializedPublicClientApplication],\r\n    },\r\n    nativePromptNotSupported: {\r\n        code: nativePromptNotSupported,\r\n        desc: BrowserAuthErrorMessages[nativePromptNotSupported],\r\n    },\r\n    invalidBase64StringError: {\r\n        code: invalidBase64String,\r\n        desc: BrowserAuthErrorMessages[invalidBase64String],\r\n    },\r\n    invalidPopTokenRequest: {\r\n        code: invalidPopTokenRequest,\r\n        desc: BrowserAuthErrorMessages[invalidPopTokenRequest],\r\n    },\r\n};\r\n/**\r\n * Browser library error class thrown by the MSAL.js library for SPAs\r\n */\r\nclass BrowserAuthError extends AuthError {\r\n    constructor(errorCode) {\r\n        super(errorCode, BrowserAuthErrorMessages[errorCode]);\r\n        Object.setPrototypeOf(this, BrowserAuthError.prototype);\r\n        this.name = \"BrowserAuthError\";\r\n    }\r\n}\r\nfunction createBrowserAuthError(errorCode) {\r\n    return new BrowserAuthError(errorCode);\r\n}\n\nexport { BrowserAuthError, BrowserAuthErrorMessage, BrowserAuthErrorMessages, createBrowserAuthError };\n//# sourceMappingURL=BrowserAuthError.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nconst pkceNotCreated = \"pkce_not_created\";\r\nconst cryptoNonExistent = \"crypto_nonexistent\";\r\nconst emptyNavigateUri = \"empty_navigate_uri\";\r\nconst hashEmptyError = \"hash_empty_error\";\r\nconst noStateInHash = \"no_state_in_hash\";\r\nconst hashDoesNotContainKnownProperties = \"hash_does_not_contain_known_properties\";\r\nconst unableToParseState = \"unable_to_parse_state\";\r\nconst stateInteractionTypeMismatch = \"state_interaction_type_mismatch\";\r\nconst interactionInProgress = \"interaction_in_progress\";\r\nconst popupWindowError = \"popup_window_error\";\r\nconst emptyWindowError = \"empty_window_error\";\r\nconst userCancelled = \"user_cancelled\";\r\nconst monitorPopupTimeout = \"monitor_popup_timeout\";\r\nconst monitorWindowTimeout = \"monitor_window_timeout\";\r\nconst redirectInIframe = \"redirect_in_iframe\";\r\nconst blockIframeReload = \"block_iframe_reload\";\r\nconst blockNestedPopups = \"block_nested_popups\";\r\nconst iframeClosedPrematurely = \"iframe_closed_prematurely\";\r\nconst silentLogoutUnsupported = \"silent_logout_unsupported\";\r\nconst noAccountError = \"no_account_error\";\r\nconst silentPromptValueError = \"silent_prompt_value_error\";\r\nconst noTokenRequestCacheError = \"no_token_request_cache_error\";\r\nconst unableToParseTokenRequestCacheError = \"unable_to_parse_token_request_cache_error\";\r\nconst noCachedAuthorityError = \"no_cached_authority_error\";\r\nconst authRequestNotSetError = \"auth_request_not_set_error\";\r\nconst invalidCacheType = \"invalid_cache_type\";\r\nconst nonBrowserEnvironment = \"non_browser_environment\";\r\nconst databaseNotOpen = \"database_not_open\";\r\nconst noNetworkConnectivity = \"no_network_connectivity\";\r\nconst postRequestFailed = \"post_request_failed\";\r\nconst getRequestFailed = \"get_request_failed\";\r\nconst failedToParseResponse = \"failed_to_parse_response\";\r\nconst unableToLoadToken = \"unable_to_load_token\";\r\nconst cryptoKeyNotFound = \"crypto_key_not_found\";\r\nconst authCodeRequired = \"auth_code_required\";\r\nconst authCodeOrNativeAccountIdRequired = \"auth_code_or_nativeAccountId_required\";\r\nconst spaCodeAndNativeAccountIdPresent = \"spa_code_and_nativeAccountId_present\";\r\nconst databaseUnavailable = \"database_unavailable\";\r\nconst unableToAcquireTokenFromNativePlatform = \"unable_to_acquire_token_from_native_platform\";\r\nconst nativeHandshakeTimeout = \"native_handshake_timeout\";\r\nconst nativeExtensionNotInstalled = \"native_extension_not_installed\";\r\nconst nativeConnectionNotEstablished = \"native_connection_not_established\";\r\nconst uninitializedPublicClientApplication = \"uninitialized_public_client_application\";\r\nconst nativePromptNotSupported = \"native_prompt_not_supported\";\r\nconst invalidBase64String = \"invalid_base64_string\";\r\nconst invalidPopTokenRequest = \"invalid_pop_token_request\";\n\nexport { authCodeOrNativeAccountIdRequired, authCodeRequired, authRequestNotSetError, blockIframeReload, blockNestedPopups, cryptoKeyNotFound, cryptoNonExistent, databaseNotOpen, databaseUnavailable, emptyNavigateUri, emptyWindowError, failedToParseResponse, getRequestFailed, hashDoesNotContainKnownProperties, hashEmptyError, iframeClosedPrematurely, interactionInProgress, invalidBase64String, invalidCacheType, invalidPopTokenRequest, monitorPopupTimeout, monitorWindowTimeout, nativeConnectionNotEstablished, nativeExtensionNotInstalled, nativeHandshakeTimeout, nativePromptNotSupported, noAccountError, noCachedAuthorityError, noNetworkConnectivity, noStateInHash, noTokenRequestCacheError, nonBrowserEnvironment, pkceNotCreated, popupWindowError, postRequestFailed, redirectInIframe, silentLogoutUnsupported, silentPromptValueError, spaCodeAndNativeAccountIdPresent, stateInteractionTypeMismatch, unableToAcquireTokenFromNativePlatform, unableToLoadToken, unableToParseState, unableToParseTokenRequestCacheError, uninitializedPublicClientApplication, userCancelled };\n//# sourceMappingURL=BrowserAuthErrorCodes.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { AuthError } from '@azure/msal-common';\nimport { storageNotSupported, stubbedPublicClientApplicationCalled, inMemRedirectUnavailable } from './BrowserConfigurationAuthErrorCodes.mjs';\nimport * as BrowserConfigurationAuthErrorCodes from './BrowserConfigurationAuthErrorCodes.mjs';\nexport { BrowserConfigurationAuthErrorCodes };\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nconst BrowserConfigurationAuthErrorMessages = {\r\n    [storageNotSupported]: \"Given storage configuration option was not supported.\",\r\n    [stubbedPublicClientApplicationCalled]: \"Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors\",\r\n    [inMemRedirectUnavailable]: \"Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true.\",\r\n};\r\n/**\r\n * BrowserAuthErrorMessage class containing string constants used by error codes and messages.\r\n * @deprecated Use BrowserAuthErrorCodes instead\r\n */\r\nconst BrowserConfigurationAuthErrorMessage = {\r\n    storageNotSupportedError: {\r\n        code: storageNotSupported,\r\n        desc: BrowserConfigurationAuthErrorMessages[storageNotSupported],\r\n    },\r\n    stubPcaInstanceCalled: {\r\n        code: stubbedPublicClientApplicationCalled,\r\n        desc: BrowserConfigurationAuthErrorMessages[stubbedPublicClientApplicationCalled],\r\n    },\r\n    inMemRedirectUnavailable: {\r\n        code: inMemRedirectUnavailable,\r\n        desc: BrowserConfigurationAuthErrorMessages[inMemRedirectUnavailable],\r\n    },\r\n};\r\n/**\r\n * Browser library error class thrown by the MSAL.js library for SPAs\r\n */\r\nclass BrowserConfigurationAuthError extends AuthError {\r\n    constructor(errorCode, errorMessage) {\r\n        super(errorCode, errorMessage);\r\n        this.name = \"BrowserConfigurationAuthError\";\r\n        Object.setPrototypeOf(this, BrowserConfigurationAuthError.prototype);\r\n    }\r\n}\r\nfunction createBrowserConfigurationAuthError(errorCode) {\r\n    return new BrowserConfigurationAuthError(errorCode, BrowserConfigurationAuthErrorMessages[errorCode]);\r\n}\n\nexport { BrowserConfigurationAuthError, BrowserConfigurationAuthErrorMessage, BrowserConfigurationAuthErrorMessages, createBrowserConfigurationAuthError };\n//# sourceMappingURL=BrowserConfigurationAuthError.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nconst storageNotSupported = \"storage_not_supported\";\r\nconst stubbedPublicClientApplicationCalled = \"stubbed_public_client_application_called\";\r\nconst inMemRedirectUnavailable = \"in_mem_redirect_unavailable\";\n\nexport { inMemRedirectUnavailable, storageNotSupported, stubbedPublicClientApplicationCalled };\n//# sourceMappingURL=BrowserConfigurationAuthErrorCodes.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { AuthError, InteractionRequiredAuthError, createInteractionRequiredAuthError, InteractionRequiredAuthErrorCodes } from '@azure/msal-common';\nimport { createBrowserAuthError } from './BrowserAuthError.mjs';\nimport { contentError, userSwitch } from './NativeAuthErrorCodes.mjs';\nimport { PERSISTENT_ERROR, DISABLED, NO_NETWORK, USER_CANCEL, USER_INTERACTION_REQUIRED, ACCOUNT_UNAVAILABLE } from '../broker/nativeBroker/NativeStatusCodes.mjs';\nimport { noNetworkConnectivity, userCancelled } from './BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nconst INVALID_METHOD_ERROR = -2147186943;\r\nconst NativeAuthErrorMessages = {\r\n    [userSwitch]: \"User attempted to switch accounts in the native broker, which is not allowed. All new accounts must sign-in through the standard web flow first, please try again.\",\r\n};\r\nclass NativeAuthError extends AuthError {\r\n    constructor(errorCode, description, ext) {\r\n        super(errorCode, description);\r\n        Object.setPrototypeOf(this, NativeAuthError.prototype);\r\n        this.name = \"NativeAuthError\";\r\n        this.ext = ext;\r\n    }\r\n}\r\n/**\r\n * These errors should result in a fallback to the 'standard' browser based auth flow.\r\n */\r\nfunction isFatalNativeAuthError(error) {\r\n    if (error.ext &&\r\n        error.ext.status &&\r\n        (error.ext.status === PERSISTENT_ERROR ||\r\n            error.ext.status === DISABLED)) {\r\n        return true;\r\n    }\r\n    if (error.ext &&\r\n        error.ext.error &&\r\n        error.ext.error === INVALID_METHOD_ERROR) {\r\n        return true;\r\n    }\r\n    switch (error.errorCode) {\r\n        case contentError:\r\n            return true;\r\n        default:\r\n            return false;\r\n    }\r\n}\r\n/**\r\n * Create the appropriate error object based on the WAM status code.\r\n * @param code\r\n * @param description\r\n * @param ext\r\n * @returns\r\n */\r\nfunction createNativeAuthError(code, description, ext) {\r\n    if (ext && ext.status) {\r\n        switch (ext.status) {\r\n            case ACCOUNT_UNAVAILABLE:\r\n                return createInteractionRequiredAuthError(InteractionRequiredAuthErrorCodes.nativeAccountUnavailable);\r\n            case USER_INTERACTION_REQUIRED:\r\n                return new InteractionRequiredAuthError(code, description);\r\n            case USER_CANCEL:\r\n                return createBrowserAuthError(userCancelled);\r\n            case NO_NETWORK:\r\n                return createBrowserAuthError(noNetworkConnectivity);\r\n        }\r\n    }\r\n    return new NativeAuthError(code, NativeAuthErrorMessages[code] || description, ext);\r\n}\n\nexport { NativeAuthError, NativeAuthErrorMessages, createNativeAuthError, isFatalNativeAuthError };\n//# sourceMappingURL=NativeAuthError.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nconst contentError = \"ContentError\";\r\nconst userSwitch = \"user_switch\";\n\nexport { contentError, userSwitch };\n//# sourceMappingURL=NativeAuthErrorCodes.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { PersistentCacheKeys, AccountEntity, CacheManager } from '@azure/msal-common';\nimport { EventType } from './EventType.mjs';\nimport { createNewGuid } from '../crypto/BrowserCrypto.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass EventHandler {\r\n    constructor(logger, browserCrypto) {\r\n        this.eventCallbacks = new Map();\r\n        this.logger = logger;\r\n        this.browserCrypto = browserCrypto;\r\n        this.listeningToStorageEvents = false;\r\n        this.handleAccountCacheChange =\r\n            this.handleAccountCacheChange.bind(this);\r\n    }\r\n    /**\r\n     * Adds event callbacks to array\r\n     * @param callback\r\n     */\r\n    addEventCallback(callback) {\r\n        if (typeof window !== \"undefined\") {\r\n            const callbackId = createNewGuid();\r\n            this.eventCallbacks.set(callbackId, callback);\r\n            this.logger.verbose(`Event callback registered with id: ${callbackId}`);\r\n            return callbackId;\r\n        }\r\n        return null;\r\n    }\r\n    /**\r\n     * Removes callback with provided id from callback array\r\n     * @param callbackId\r\n     */\r\n    removeEventCallback(callbackId) {\r\n        this.eventCallbacks.delete(callbackId);\r\n        this.logger.verbose(`Event callback ${callbackId} removed.`);\r\n    }\r\n    /**\r\n     * Adds event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window\r\n     */\r\n    enableAccountStorageEvents() {\r\n        if (typeof window === \"undefined\") {\r\n            return;\r\n        }\r\n        if (!this.listeningToStorageEvents) {\r\n            this.logger.verbose(\"Adding account storage listener.\");\r\n            this.listeningToStorageEvents = true;\r\n            window.addEventListener(\"storage\", this.handleAccountCacheChange);\r\n        }\r\n        else {\r\n            this.logger.verbose(\"Account storage listener already registered.\");\r\n        }\r\n    }\r\n    /**\r\n     * Removes event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window\r\n     */\r\n    disableAccountStorageEvents() {\r\n        if (typeof window === \"undefined\") {\r\n            return;\r\n        }\r\n        if (this.listeningToStorageEvents) {\r\n            this.logger.verbose(\"Removing account storage listener.\");\r\n            window.removeEventListener(\"storage\", this.handleAccountCacheChange);\r\n            this.listeningToStorageEvents = false;\r\n        }\r\n        else {\r\n            this.logger.verbose(\"No account storage listener registered.\");\r\n        }\r\n    }\r\n    /**\r\n     * Emits events by calling callback with event message\r\n     * @param eventType\r\n     * @param interactionType\r\n     * @param payload\r\n     * @param error\r\n     */\r\n    emitEvent(eventType, interactionType, payload, error) {\r\n        if (typeof window !== \"undefined\") {\r\n            const message = {\r\n                eventType: eventType,\r\n                interactionType: interactionType || null,\r\n                payload: payload || null,\r\n                error: error || null,\r\n                timestamp: Date.now(),\r\n            };\r\n            this.logger.info(`Emitting event: ${eventType}`);\r\n            this.eventCallbacks.forEach((callback, callbackId) => {\r\n                this.logger.verbose(`Emitting event to callback ${callbackId}: ${eventType}`);\r\n                callback.apply(null, [message]);\r\n            });\r\n        }\r\n    }\r\n    /**\r\n     * Emit account added/removed events when cached accounts are changed in a different tab or frame\r\n     */\r\n    handleAccountCacheChange(e) {\r\n        try {\r\n            // Handle active account filter change\r\n            if (e.key?.includes(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS)) {\r\n                // This event has no payload, it only signals cross-tab app instances that the results of calling getActiveAccount() will have changed\r\n                this.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);\r\n            }\r\n            // Handle account object change\r\n            const cacheValue = e.newValue || e.oldValue;\r\n            if (!cacheValue) {\r\n                return;\r\n            }\r\n            const parsedValue = JSON.parse(cacheValue);\r\n            if (typeof parsedValue !== \"object\" ||\r\n                !AccountEntity.isAccountEntity(parsedValue)) {\r\n                return;\r\n            }\r\n            const accountEntity = CacheManager.toObject(new AccountEntity(), parsedValue);\r\n            const accountInfo = accountEntity.getAccountInfo();\r\n            if (!e.oldValue && e.newValue) {\r\n                this.logger.info(\"Account was added to cache in a different window\");\r\n                this.emitEvent(EventType.ACCOUNT_ADDED, undefined, accountInfo);\r\n            }\r\n            else if (!e.newValue && e.oldValue) {\r\n                this.logger.info(\"Account was removed from cache in a different window\");\r\n                this.emitEvent(EventType.ACCOUNT_REMOVED, undefined, accountInfo);\r\n            }\r\n        }\r\n        catch (e) {\r\n            return;\r\n        }\r\n    }\r\n}\n\nexport { EventHandler };\n//# sourceMappingURL=EventHandler.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nconst EventType = {\r\n    INITIALIZE_START: \"msal:initializeStart\",\r\n    INITIALIZE_END: \"msal:initializeEnd\",\r\n    ACCOUNT_ADDED: \"msal:accountAdded\",\r\n    ACCOUNT_REMOVED: \"msal:accountRemoved\",\r\n    ACTIVE_ACCOUNT_CHANGED: \"msal:activeAccountChanged\",\r\n    LOGIN_START: \"msal:loginStart\",\r\n    LOGIN_SUCCESS: \"msal:loginSuccess\",\r\n    LOGIN_FAILURE: \"msal:loginFailure\",\r\n    ACQUIRE_TOKEN_START: \"msal:acquireTokenStart\",\r\n    ACQUIRE_TOKEN_SUCCESS: \"msal:acquireTokenSuccess\",\r\n    ACQUIRE_TOKEN_FAILURE: \"msal:acquireTokenFailure\",\r\n    ACQUIRE_TOKEN_NETWORK_START: \"msal:acquireTokenFromNetworkStart\",\r\n    SSO_SILENT_START: \"msal:ssoSilentStart\",\r\n    SSO_SILENT_SUCCESS: \"msal:ssoSilentSuccess\",\r\n    SSO_SILENT_FAILURE: \"msal:ssoSilentFailure\",\r\n    ACQUIRE_TOKEN_BY_CODE_START: \"msal:acquireTokenByCodeStart\",\r\n    ACQUIRE_TOKEN_BY_CODE_SUCCESS: \"msal:acquireTokenByCodeSuccess\",\r\n    ACQUIRE_TOKEN_BY_CODE_FAILURE: \"msal:acquireTokenByCodeFailure\",\r\n    HANDLE_REDIRECT_START: \"msal:handleRedirectStart\",\r\n    HANDLE_REDIRECT_END: \"msal:handleRedirectEnd\",\r\n    POPUP_OPENED: \"msal:popupOpened\",\r\n    LOGOUT_START: \"msal:logoutStart\",\r\n    LOGOUT_SUCCESS: \"msal:logoutSuccess\",\r\n    LOGOUT_FAILURE: \"msal:logoutFailure\",\r\n    LOGOUT_END: \"msal:logoutEnd\",\r\n    RESTORE_FROM_BFCACHE: \"msal:restoreFromBFCache\",\r\n};\n\nexport { EventType };\n//# sourceMappingURL=EventType.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { AccountEntity, UrlString, ServerTelemetryManager, PerformanceEvents, Authority, invokeAsync, AuthorityFactory, createClientConfigurationError, ClientConfigurationErrorCodes } from '@azure/msal-common';\nimport { version } from '../packageMetadata.mjs';\nimport { BrowserConstants } from '../utils/BrowserConstants.mjs';\nimport { getCurrentUri } from '../utils/BrowserUtils.mjs';\nimport { createNewGuid } from '../crypto/BrowserCrypto.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass BaseInteractionClient {\r\n    constructor(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId) {\r\n        this.config = config;\r\n        this.browserStorage = storageImpl;\r\n        this.browserCrypto = browserCrypto;\r\n        this.networkClient = this.config.system.networkClient;\r\n        this.eventHandler = eventHandler;\r\n        this.navigationClient = navigationClient;\r\n        this.nativeMessageHandler = nativeMessageHandler;\r\n        this.correlationId = correlationId || createNewGuid();\r\n        this.logger = logger.clone(BrowserConstants.MSAL_SKU, version, this.correlationId);\r\n        this.performanceClient = performanceClient;\r\n    }\r\n    async clearCacheOnLogout(account) {\r\n        if (account) {\r\n            if (AccountEntity.accountInfoIsEqual(account, this.browserStorage.getActiveAccount(), false)) {\r\n                this.logger.verbose(\"Setting active account to null\");\r\n                this.browserStorage.setActiveAccount(null);\r\n            }\r\n            // Clear given account.\r\n            try {\r\n                await this.browserStorage.removeAccount(AccountEntity.generateAccountCacheKey(account));\r\n                this.logger.verbose(\"Cleared cache items belonging to the account provided in the logout request.\");\r\n            }\r\n            catch (error) {\r\n                this.logger.error(\"Account provided in logout request was not found. Local cache unchanged.\");\r\n            }\r\n        }\r\n        else {\r\n            try {\r\n                this.logger.verbose(\"No account provided in logout request, clearing all cache items.\", this.correlationId);\r\n                // Clear all accounts and tokens\r\n                await this.browserStorage.clear();\r\n                // Clear any stray keys from IndexedDB\r\n                await this.browserCrypto.clearKeystore();\r\n            }\r\n            catch (e) {\r\n                this.logger.error(\"Attempted to clear all MSAL cache items and failed. Local cache unchanged.\");\r\n            }\r\n        }\r\n    }\r\n    /**\r\n     *\r\n     * Use to get the redirect uri configured in MSAL or null.\r\n     * @param requestRedirectUri\r\n     * @returns Redirect URL\r\n     *\r\n     */\r\n    getRedirectUri(requestRedirectUri) {\r\n        this.logger.verbose(\"getRedirectUri called\");\r\n        const redirectUri = requestRedirectUri ||\r\n            this.config.auth.redirectUri ||\r\n            getCurrentUri();\r\n        return UrlString.getAbsoluteUrl(redirectUri, getCurrentUri());\r\n    }\r\n    /**\r\n     *\r\n     * @param apiId\r\n     * @param correlationId\r\n     * @param forceRefresh\r\n     */\r\n    initializeServerTelemetryManager(apiId, forceRefresh) {\r\n        this.logger.verbose(\"initializeServerTelemetryManager called\");\r\n        const telemetryPayload = {\r\n            clientId: this.config.auth.clientId,\r\n            correlationId: this.correlationId,\r\n            apiId: apiId,\r\n            forceRefresh: forceRefresh || false,\r\n            wrapperSKU: this.browserStorage.getWrapperMetadata()[0],\r\n            wrapperVer: this.browserStorage.getWrapperMetadata()[1],\r\n        };\r\n        return new ServerTelemetryManager(telemetryPayload, this.browserStorage);\r\n    }\r\n    /**\r\n     * Used to get a discovered version of the default authority.\r\n     * @param requestAuthority\r\n     * @param requestAzureCloudOptions\r\n     * @param account\r\n     */\r\n    async getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions, account) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);\r\n        const authorityOptions = {\r\n            protocolMode: this.config.auth.protocolMode,\r\n            OIDCOptions: this.config.auth.OIDCOptions,\r\n            knownAuthorities: this.config.auth.knownAuthorities,\r\n            cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,\r\n            authorityMetadata: this.config.auth.authorityMetadata,\r\n            skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,\r\n        };\r\n        // build authority string based on auth params, precedence - azureCloudInstance + tenant >> authority\r\n        const userAuthority = requestAuthority\r\n            ? requestAuthority\r\n            : this.config.auth.authority;\r\n        // fall back to the authority from config\r\n        const builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);\r\n        const discoveredAuthority = await invokeAsync(AuthorityFactory.createDiscoveredInstance, PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, this.logger, this.performanceClient, this.correlationId)(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger, this.correlationId, this.performanceClient);\r\n        if (account && !discoveredAuthority.isAlias(account.environment)) {\r\n            throw createClientConfigurationError(ClientConfigurationErrorCodes.authorityMismatch);\r\n        }\r\n        return discoveredAuthority;\r\n    }\r\n}\n\nexport { BaseInteractionClient };\n//# sourceMappingURL=BaseInteractionClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { ServerTelemetryManager, AADServerParamKeys, PerformanceEvents, TimeUtils, ScopeSet, createClientAuthError, ClientAuthErrorCodes, AuthToken, buildAccountToCache, AccountEntity, Constants, AuthorityType, AuthenticationScheme, PopTokenGenerator, updateAccountTenantProfileData, CacheHelpers, createAuthError, AuthErrorCodes, UrlString, OIDC_DEFAULT_SCOPES, invokeAsync, PromptValue } from '@azure/msal-common';\nimport { BaseInteractionClient } from './BaseInteractionClient.mjs';\nimport { NativeConstants, BrowserConstants, NativeExtensionMethod, TemporaryCacheKeys, ApiId } from '../utils/BrowserConstants.mjs';\nimport { NativeAuthError, isFatalNativeAuthError, createNativeAuthError } from '../error/NativeAuthError.mjs';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { SilentCacheClient } from './SilentCacheClient.mjs';\nimport { base64Decode } from '../encode/Base64Decode.mjs';\nimport { version } from '../packageMetadata.mjs';\nimport { invalidPopTokenRequest, nativePromptNotSupported } from '../error/BrowserAuthErrorCodes.mjs';\nimport { userSwitch } from '../error/NativeAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nconst BrokerServerParamKeys = {\r\n    BROKER_CLIENT_ID: \"brk_client_id\",\r\n    BROKER_REDIRECT_URI: \"brk_redirect_uri\",\r\n};\r\nclass NativeInteractionClient extends BaseInteractionClient {\r\n    constructor(config, browserStorage, browserCrypto, logger, eventHandler, navigationClient, apiId, performanceClient, provider, accountId, nativeStorageImpl, correlationId) {\r\n        super(config, browserStorage, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);\r\n        this.apiId = apiId;\r\n        this.accountId = accountId;\r\n        this.nativeMessageHandler = provider;\r\n        this.nativeStorageManager = nativeStorageImpl;\r\n        this.silentCacheClient = new SilentCacheClient(config, this.nativeStorageManager, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);\r\n        this.serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);\r\n        const extensionName = this.nativeMessageHandler.getExtensionId() ===\r\n            NativeConstants.PREFERRED_EXTENSION_ID\r\n            ? \"chrome\"\r\n            : this.nativeMessageHandler.getExtensionId()?.length\r\n                ? \"unknown\"\r\n                : undefined;\r\n        this.skus = ServerTelemetryManager.makeExtraSkuString({\r\n            libraryName: BrowserConstants.MSAL_SKU,\r\n            libraryVersion: version,\r\n            extensionName: extensionName,\r\n            extensionVersion: this.nativeMessageHandler.getExtensionVersion(),\r\n        });\r\n    }\r\n    /**\r\n     * Adds SKUs to request extra query parameters\r\n     * @param request {NativeTokenRequest}\r\n     * @private\r\n     */\r\n    addRequestSKUs(request) {\r\n        request.extraParameters = {\r\n            ...request.extraParameters,\r\n            [AADServerParamKeys.X_CLIENT_EXTRA_SKU]: this.skus,\r\n        };\r\n    }\r\n    /**\r\n     * Acquire token from native platform via browser extension\r\n     * @param request\r\n     */\r\n    async acquireToken(request) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);\r\n        this.logger.trace(\"NativeInteractionClient - acquireToken called.\");\r\n        // start the perf measurement\r\n        const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);\r\n        const reqTimestamp = TimeUtils.nowSeconds();\r\n        try {\r\n            // initialize native request\r\n            const nativeRequest = await this.initializeNativeRequest(request);\r\n            // check if the tokens can be retrieved from internal cache\r\n            try {\r\n                const result = await this.acquireTokensFromCache(this.accountId, nativeRequest);\r\n                nativeATMeasurement.end({\r\n                    success: true,\r\n                    isNativeBroker: false,\r\n                    fromCache: true,\r\n                });\r\n                return result;\r\n            }\r\n            catch (e) {\r\n                // continue with a native call for any and all errors\r\n                this.logger.info(\"MSAL internal Cache does not contain tokens, proceed to make a native call\");\r\n            }\r\n            const { ...nativeTokenRequest } = nativeRequest;\r\n            // fall back to native calls\r\n            const messageBody = {\r\n                method: NativeExtensionMethod.GetToken,\r\n                request: nativeTokenRequest,\r\n            };\r\n            const response = await this.nativeMessageHandler.sendMessage(messageBody);\r\n            const validatedResponse = this.validateNativeResponse(response);\r\n            return await this.handleNativeResponse(validatedResponse, nativeRequest, reqTimestamp)\r\n                .then((result) => {\r\n                nativeATMeasurement.end({\r\n                    success: true,\r\n                    isNativeBroker: true,\r\n                    requestId: result.requestId,\r\n                });\r\n                this.serverTelemetryManager.clearNativeBrokerErrorCode();\r\n                return result;\r\n            })\r\n                .catch((error) => {\r\n                nativeATMeasurement.end({\r\n                    success: false,\r\n                    errorCode: error.errorCode,\r\n                    subErrorCode: error.subError,\r\n                    isNativeBroker: true,\r\n                });\r\n                throw error;\r\n            });\r\n        }\r\n        catch (e) {\r\n            if (e instanceof NativeAuthError) {\r\n                this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);\r\n            }\r\n            throw e;\r\n        }\r\n    }\r\n    /**\r\n     * Creates silent flow request\r\n     * @param request\r\n     * @param cachedAccount\r\n     * @returns CommonSilentFlowRequest\r\n     */\r\n    createSilentCacheRequest(request, cachedAccount) {\r\n        return {\r\n            authority: request.authority,\r\n            correlationId: this.correlationId,\r\n            scopes: ScopeSet.fromString(request.scope).asArray(),\r\n            account: cachedAccount,\r\n            forceRefresh: false,\r\n        };\r\n    }\r\n    /**\r\n     * Fetches the tokens from the cache if un-expired\r\n     * @param nativeAccountId\r\n     * @param request\r\n     * @returns authenticationResult\r\n     */\r\n    async acquireTokensFromCache(nativeAccountId, request) {\r\n        if (!nativeAccountId) {\r\n            this.logger.warning(\"NativeInteractionClient:acquireTokensFromCache - No nativeAccountId provided\");\r\n            throw createClientAuthError(ClientAuthErrorCodes.noAccountFound);\r\n        }\r\n        // fetch the account from browser cache\r\n        const account = this.browserStorage.getBaseAccountInfo({\r\n            nativeAccountId,\r\n        });\r\n        if (!account) {\r\n            throw createClientAuthError(ClientAuthErrorCodes.noAccountFound);\r\n        }\r\n        // leverage silent flow for cached tokens retrieval\r\n        try {\r\n            const silentRequest = this.createSilentCacheRequest(request, account);\r\n            const result = await this.silentCacheClient.acquireToken(silentRequest);\r\n            const fullAccount = {\r\n                ...account,\r\n                idTokenClaims: result?.idTokenClaims,\r\n                idToken: result?.idToken,\r\n            };\r\n            return {\r\n                ...result,\r\n                account: fullAccount,\r\n            };\r\n        }\r\n        catch (e) {\r\n            throw e;\r\n        }\r\n    }\r\n    /**\r\n     * Acquires a token from native platform then redirects to the redirectUri instead of returning the response\r\n     * @param {RedirectRequest} request\r\n     * @param {InProgressPerformanceEvent} rootMeasurement\r\n     */\r\n    async acquireTokenRedirect(request, rootMeasurement) {\r\n        this.logger.trace(\"NativeInteractionClient - acquireTokenRedirect called.\");\r\n        const { ...remainingParameters } = request;\r\n        delete remainingParameters.onRedirectNavigate;\r\n        const nativeRequest = await this.initializeNativeRequest(remainingParameters);\r\n        const messageBody = {\r\n            method: NativeExtensionMethod.GetToken,\r\n            request: nativeRequest,\r\n        };\r\n        try {\r\n            const response = await this.nativeMessageHandler.sendMessage(messageBody);\r\n            this.validateNativeResponse(response);\r\n        }\r\n        catch (e) {\r\n            // Only throw fatal errors here to allow application to fallback to regular redirect. Otherwise proceed and the error will be thrown in handleRedirectPromise\r\n            if (e instanceof NativeAuthError) {\r\n                this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);\r\n                if (isFatalNativeAuthError(e)) {\r\n                    throw e;\r\n                }\r\n            }\r\n        }\r\n        this.browserStorage.setTemporaryCache(TemporaryCacheKeys.NATIVE_REQUEST, JSON.stringify(nativeRequest), true);\r\n        const navigationOptions = {\r\n            apiId: ApiId.acquireTokenRedirect,\r\n            timeout: this.config.system.redirectNavigationTimeout,\r\n            noHistory: false,\r\n        };\r\n        const redirectUri = this.config.auth.navigateToLoginRequestUrl\r\n            ? window.location.href\r\n            : this.getRedirectUri(request.redirectUri);\r\n        rootMeasurement.end({ success: true });\r\n        await this.navigationClient.navigateExternal(redirectUri, navigationOptions); // Need to treat this as external to ensure handleRedirectPromise is run again\r\n    }\r\n    /**\r\n     * If the previous page called native platform for a token using redirect APIs, send the same request again and return the response\r\n     * @param performanceClient {IPerformanceClient?}\r\n     * @param correlationId {string?} correlation identifier\r\n     */\r\n    async handleRedirectPromise(performanceClient, correlationId) {\r\n        this.logger.trace(\"NativeInteractionClient - handleRedirectPromise called.\");\r\n        if (!this.browserStorage.isInteractionInProgress(true)) {\r\n            this.logger.info(\"handleRedirectPromise called but there is no interaction in progress, returning null.\");\r\n            return null;\r\n        }\r\n        // remove prompt from the request to prevent WAM from prompting twice\r\n        const cachedRequest = this.browserStorage.getCachedNativeRequest();\r\n        if (!cachedRequest) {\r\n            this.logger.verbose(\"NativeInteractionClient - handleRedirectPromise called but there is no cached request, returning null.\");\r\n            if (performanceClient && correlationId) {\r\n                performanceClient?.addFields({ errorCode: \"no_cached_request\" }, correlationId);\r\n            }\r\n            return null;\r\n        }\r\n        const { prompt, ...request } = cachedRequest;\r\n        if (prompt) {\r\n            this.logger.verbose(\"NativeInteractionClient - handleRedirectPromise called and prompt was included in the original request, removing prompt from cached request to prevent second interaction with native broker window.\");\r\n        }\r\n        this.browserStorage.removeItem(this.browserStorage.generateCacheKey(TemporaryCacheKeys.NATIVE_REQUEST));\r\n        const messageBody = {\r\n            method: NativeExtensionMethod.GetToken,\r\n            request: request,\r\n        };\r\n        const reqTimestamp = TimeUtils.nowSeconds();\r\n        try {\r\n            this.logger.verbose(\"NativeInteractionClient - handleRedirectPromise sending message to native broker.\");\r\n            const response = await this.nativeMessageHandler.sendMessage(messageBody);\r\n            this.validateNativeResponse(response);\r\n            const result = this.handleNativeResponse(response, request, reqTimestamp);\r\n            this.browserStorage.setInteractionInProgress(false);\r\n            const res = await result;\r\n            this.serverTelemetryManager.clearNativeBrokerErrorCode();\r\n            return res;\r\n        }\r\n        catch (e) {\r\n            this.browserStorage.setInteractionInProgress(false);\r\n            throw e;\r\n        }\r\n    }\r\n    /**\r\n     * Logout from native platform via browser extension\r\n     * @param request\r\n     */\r\n    logout() {\r\n        this.logger.trace(\"NativeInteractionClient - logout called.\");\r\n        return Promise.reject(\"Logout not implemented yet\");\r\n    }\r\n    /**\r\n     * Transform response from native platform into AuthenticationResult object which will be returned to the end user\r\n     * @param response\r\n     * @param request\r\n     * @param reqTimestamp\r\n     */\r\n    async handleNativeResponse(response, request, reqTimestamp) {\r\n        this.logger.trace(\"NativeInteractionClient - handleNativeResponse called.\");\r\n        // generate identifiers\r\n        const idTokenClaims = AuthToken.extractTokenClaims(response.id_token, base64Decode);\r\n        const homeAccountIdentifier = this.createHomeAccountIdentifier(response, idTokenClaims);\r\n        const cachedhomeAccountId = this.browserStorage.getAccountInfoFilteredBy({\r\n            nativeAccountId: request.accountId,\r\n        })?.homeAccountId;\r\n        if (homeAccountIdentifier !== cachedhomeAccountId &&\r\n            response.account.id !== request.accountId) {\r\n            // User switch in native broker prompt is not supported. All users must first sign in through web flow to ensure server state is in sync\r\n            throw createNativeAuthError(userSwitch);\r\n        }\r\n        // Get the preferred_cache domain for the given authority\r\n        const authority = await this.getDiscoveredAuthority(request.authority);\r\n        const baseAccount = buildAccountToCache(this.browserStorage, authority, homeAccountIdentifier, base64Decode, idTokenClaims, response.client_info, undefined, // environment\r\n        idTokenClaims.tid, undefined, // auth code payload\r\n        response.account.id, this.logger);\r\n        // generate authenticationResult\r\n        const result = await this.generateAuthenticationResult(response, request, idTokenClaims, baseAccount, authority.canonicalAuthority, reqTimestamp);\r\n        // cache accounts and tokens in the appropriate storage\r\n        this.cacheAccount(baseAccount);\r\n        this.cacheNativeTokens(response, request, homeAccountIdentifier, idTokenClaims, response.access_token, result.tenantId, reqTimestamp);\r\n        return result;\r\n    }\r\n    /**\r\n     * creates an homeAccountIdentifier for the account\r\n     * @param response\r\n     * @param idTokenObj\r\n     * @returns\r\n     */\r\n    createHomeAccountIdentifier(response, idTokenClaims) {\r\n        // Save account in browser storage\r\n        const homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenClaims);\r\n        return homeAccountIdentifier;\r\n    }\r\n    /**\r\n     * Helper to generate scopes\r\n     * @param response\r\n     * @param request\r\n     * @returns\r\n     */\r\n    generateScopes(response, request) {\r\n        return response.scope\r\n            ? ScopeSet.fromString(response.scope)\r\n            : ScopeSet.fromString(request.scope);\r\n    }\r\n    /**\r\n     * If PoP token is requesred, records the PoP token if returned from the WAM, else generates one in the browser\r\n     * @param request\r\n     * @param response\r\n     */\r\n    async generatePopAccessToken(response, request) {\r\n        if (request.tokenType === AuthenticationScheme.POP &&\r\n            request.signPopToken) {\r\n            /**\r\n             * This code prioritizes SHR returned from the native layer. In case of error/SHR not calculated from WAM and the AT\r\n             * is still received, SHR is calculated locally\r\n             */\r\n            // Check if native layer returned an SHR token\r\n            if (response.shr) {\r\n                this.logger.trace(\"handleNativeServerResponse: SHR is enabled in native layer\");\r\n                return response.shr;\r\n            }\r\n            // Generate SHR in msal js if WAM does not compute it when POP is enabled\r\n            const popTokenGenerator = new PopTokenGenerator(this.browserCrypto);\r\n            const shrParameters = {\r\n                resourceRequestMethod: request.resourceRequestMethod,\r\n                resourceRequestUri: request.resourceRequestUri,\r\n                shrClaims: request.shrClaims,\r\n                shrNonce: request.shrNonce,\r\n            };\r\n            /**\r\n             * KeyID must be present in the native request from when the PoP key was generated in order for\r\n             * PopTokenGenerator to query the full key for signing\r\n             */\r\n            if (!request.keyId) {\r\n                throw createClientAuthError(ClientAuthErrorCodes.keyIdMissing);\r\n            }\r\n            return popTokenGenerator.signPopToken(response.access_token, request.keyId, shrParameters);\r\n        }\r\n        else {\r\n            return response.access_token;\r\n        }\r\n    }\r\n    /**\r\n     * Generates authentication result\r\n     * @param response\r\n     * @param request\r\n     * @param idTokenObj\r\n     * @param accountEntity\r\n     * @param authority\r\n     * @param reqTimestamp\r\n     * @returns\r\n     */\r\n    async generateAuthenticationResult(response, request, idTokenClaims, accountEntity, authority, reqTimestamp) {\r\n        // Add Native Broker fields to Telemetry\r\n        const mats = this.addTelemetryFromNativeResponse(response);\r\n        // If scopes not returned in server response, use request scopes\r\n        const responseScopes = response.scope\r\n            ? ScopeSet.fromString(response.scope)\r\n            : ScopeSet.fromString(request.scope);\r\n        const accountProperties = response.account.properties || {};\r\n        const uid = accountProperties[\"UID\"] ||\r\n            idTokenClaims.oid ||\r\n            idTokenClaims.sub ||\r\n            Constants.EMPTY_STRING;\r\n        const tid = accountProperties[\"TenantId\"] ||\r\n            idTokenClaims.tid ||\r\n            Constants.EMPTY_STRING;\r\n        const accountInfo = updateAccountTenantProfileData(accountEntity.getAccountInfo(), undefined, // tenantProfile optional\r\n        idTokenClaims, response.id_token);\r\n        /**\r\n         * In pairwise broker flows, this check prevents the broker's native account id\r\n         * from being returned over the embedded app's account id.\r\n         */\r\n        if (accountInfo.nativeAccountId !== response.account.id) {\r\n            accountInfo.nativeAccountId = response.account.id;\r\n        }\r\n        // generate PoP token as needed\r\n        const responseAccessToken = await this.generatePopAccessToken(response, request);\r\n        const tokenType = request.tokenType === AuthenticationScheme.POP\r\n            ? AuthenticationScheme.POP\r\n            : AuthenticationScheme.BEARER;\r\n        const result = {\r\n            authority: authority,\r\n            uniqueId: uid,\r\n            tenantId: tid,\r\n            scopes: responseScopes.asArray(),\r\n            account: accountInfo,\r\n            idToken: response.id_token,\r\n            idTokenClaims: idTokenClaims,\r\n            accessToken: responseAccessToken,\r\n            fromCache: mats ? this.isResponseFromCache(mats) : false,\r\n            expiresOn: new Date(Number(reqTimestamp + response.expires_in) * 1000),\r\n            tokenType: tokenType,\r\n            correlationId: this.correlationId,\r\n            state: response.state,\r\n            fromNativeBroker: true,\r\n        };\r\n        return result;\r\n    }\r\n    /**\r\n     * cache the account entity in browser storage\r\n     * @param accountEntity\r\n     */\r\n    cacheAccount(accountEntity) {\r\n        // Store the account info and hence `nativeAccountId` in browser cache\r\n        this.browserStorage.setAccount(accountEntity);\r\n        // Remove any existing cached tokens for this account in browser storage\r\n        this.browserStorage.removeAccountContext(accountEntity).catch((e) => {\r\n            this.logger.error(`Error occurred while removing account context from browser storage. ${e}`);\r\n        });\r\n    }\r\n    /**\r\n     * Stores the access_token and id_token in inmemory storage\r\n     * @param response\r\n     * @param request\r\n     * @param homeAccountIdentifier\r\n     * @param idTokenObj\r\n     * @param responseAccessToken\r\n     * @param tenantId\r\n     * @param reqTimestamp\r\n     */\r\n    cacheNativeTokens(response, request, homeAccountIdentifier, idTokenClaims, responseAccessToken, tenantId, reqTimestamp) {\r\n        const cachedIdToken = CacheHelpers.createIdTokenEntity(homeAccountIdentifier, request.authority, response.id_token || \"\", request.clientId, idTokenClaims.tid || \"\");\r\n        // cache accessToken in inmemory storage\r\n        const expiresIn = request.tokenType === AuthenticationScheme.POP\r\n            ? Constants.SHR_NONCE_VALIDITY\r\n            : (typeof response.expires_in === \"string\"\r\n                ? parseInt(response.expires_in, 10)\r\n                : response.expires_in) || 0;\r\n        const tokenExpirationSeconds = reqTimestamp + expiresIn;\r\n        const responseScopes = this.generateScopes(response, request);\r\n        const cachedAccessToken = CacheHelpers.createAccessTokenEntity(homeAccountIdentifier, request.authority, responseAccessToken, request.clientId, idTokenClaims.tid || tenantId, responseScopes.printScopes(), tokenExpirationSeconds, 0, base64Decode, undefined, request.tokenType, undefined, request.keyId);\r\n        const nativeCacheRecord = {\r\n            idToken: cachedIdToken,\r\n            accessToken: cachedAccessToken,\r\n        };\r\n        void this.nativeStorageManager.saveCacheRecord(nativeCacheRecord, request.storeInCache);\r\n    }\r\n    addTelemetryFromNativeResponse(response) {\r\n        const mats = this.getMATSFromResponse(response);\r\n        if (!mats) {\r\n            return null;\r\n        }\r\n        this.performanceClient.addFields({\r\n            extensionId: this.nativeMessageHandler.getExtensionId(),\r\n            extensionVersion: this.nativeMessageHandler.getExtensionVersion(),\r\n            matsBrokerVersion: mats.broker_version,\r\n            matsAccountJoinOnStart: mats.account_join_on_start,\r\n            matsAccountJoinOnEnd: mats.account_join_on_end,\r\n            matsDeviceJoin: mats.device_join,\r\n            matsPromptBehavior: mats.prompt_behavior,\r\n            matsApiErrorCode: mats.api_error_code,\r\n            matsUiVisible: mats.ui_visible,\r\n            matsSilentCode: mats.silent_code,\r\n            matsSilentBiSubCode: mats.silent_bi_sub_code,\r\n            matsSilentMessage: mats.silent_message,\r\n            matsSilentStatus: mats.silent_status,\r\n            matsHttpStatus: mats.http_status,\r\n            matsHttpEventCount: mats.http_event_count,\r\n        }, this.correlationId);\r\n        return mats;\r\n    }\r\n    /**\r\n     * Validates native platform response before processing\r\n     * @param response\r\n     */\r\n    validateNativeResponse(response) {\r\n        if (response.hasOwnProperty(\"access_token\") &&\r\n            response.hasOwnProperty(\"id_token\") &&\r\n            response.hasOwnProperty(\"client_info\") &&\r\n            response.hasOwnProperty(\"account\") &&\r\n            response.hasOwnProperty(\"scope\") &&\r\n            response.hasOwnProperty(\"expires_in\")) {\r\n            return response;\r\n        }\r\n        else {\r\n            throw createAuthError(AuthErrorCodes.unexpectedError, \"Response missing expected properties.\");\r\n        }\r\n    }\r\n    /**\r\n     * Gets MATS telemetry from native response\r\n     * @param response\r\n     * @returns\r\n     */\r\n    getMATSFromResponse(response) {\r\n        if (response.properties.MATS) {\r\n            try {\r\n                return JSON.parse(response.properties.MATS);\r\n            }\r\n            catch (e) {\r\n                this.logger.error(\"NativeInteractionClient - Error parsing MATS telemetry, returning null instead\");\r\n            }\r\n        }\r\n        return null;\r\n    }\r\n    /**\r\n     * Returns whether or not response came from native cache\r\n     * @param response\r\n     * @returns\r\n     */\r\n    isResponseFromCache(mats) {\r\n        if (typeof mats.is_cached === \"undefined\") {\r\n            this.logger.verbose(\"NativeInteractionClient - MATS telemetry does not contain field indicating if response was served from cache. Returning false.\");\r\n            return false;\r\n        }\r\n        return !!mats.is_cached;\r\n    }\r\n    /**\r\n     * Translates developer provided request object into NativeRequest object\r\n     * @param request\r\n     */\r\n    async initializeNativeRequest(request) {\r\n        this.logger.trace(\"NativeInteractionClient - initializeNativeRequest called\");\r\n        const authority = request.authority || this.config.auth.authority;\r\n        if (request.account) {\r\n            // validate authority\r\n            await this.getDiscoveredAuthority(authority, request.azureCloudOptions, request.account);\r\n        }\r\n        const canonicalAuthority = new UrlString(authority);\r\n        canonicalAuthority.validateAsUri();\r\n        // scopes are expected to be received by the native broker as \"scope\" and will be added to the request below. Other properties that should be dropped from the request to the native broker can be included in the object destructuring here.\r\n        const { scopes, ...remainingProperties } = request;\r\n        const scopeSet = new ScopeSet(scopes || []);\r\n        scopeSet.appendScopes(OIDC_DEFAULT_SCOPES);\r\n        const getPrompt = () => {\r\n            // If request is silent, prompt is always none\r\n            switch (this.apiId) {\r\n                case ApiId.ssoSilent:\r\n                case ApiId.acquireTokenSilent_silentFlow:\r\n                    this.logger.trace(\"initializeNativeRequest: silent request sets prompt to none\");\r\n                    return PromptValue.NONE;\r\n            }\r\n            // Prompt not provided, request may proceed and native broker decides if it needs to prompt\r\n            if (!request.prompt) {\r\n                this.logger.trace(\"initializeNativeRequest: prompt was not provided\");\r\n                return undefined;\r\n            }\r\n            // If request is interactive, check if prompt provided is allowed to go directly to native broker\r\n            switch (request.prompt) {\r\n                case PromptValue.NONE:\r\n                case PromptValue.CONSENT:\r\n                case PromptValue.LOGIN:\r\n                    this.logger.trace(\"initializeNativeRequest: prompt is compatible with native flow\");\r\n                    return request.prompt;\r\n                default:\r\n                    this.logger.trace(`initializeNativeRequest: prompt = ${request.prompt} is not compatible with native flow`);\r\n                    throw createBrowserAuthError(nativePromptNotSupported);\r\n            }\r\n        };\r\n        const validatedRequest = {\r\n            ...remainingProperties,\r\n            accountId: this.accountId,\r\n            clientId: this.config.auth.clientId,\r\n            authority: canonicalAuthority.urlString,\r\n            scope: scopeSet.printScopes(),\r\n            redirectUri: this.getRedirectUri(request.redirectUri),\r\n            prompt: getPrompt(),\r\n            correlationId: this.correlationId,\r\n            tokenType: request.authenticationScheme,\r\n            windowTitleSubstring: document.title,\r\n            extraParameters: {\r\n                ...request.extraQueryParameters,\r\n                ...request.tokenQueryParameters,\r\n            },\r\n            extendedExpiryToken: false,\r\n            keyId: request.popKid,\r\n        };\r\n        // Check for PoP token requests: signPopToken should only be set to true if popKid is not set\r\n        if (validatedRequest.signPopToken && !!request.popKid) {\r\n            throw createBrowserAuthError(invalidPopTokenRequest);\r\n        }\r\n        this.handleExtraBrokerParams(validatedRequest);\r\n        validatedRequest.extraParameters =\r\n            validatedRequest.extraParameters || {};\r\n        validatedRequest.extraParameters.telemetry =\r\n            NativeConstants.MATS_TELEMETRY;\r\n        if (request.authenticationScheme === AuthenticationScheme.POP) {\r\n            // add POP request type\r\n            const shrParameters = {\r\n                resourceRequestUri: request.resourceRequestUri,\r\n                resourceRequestMethod: request.resourceRequestMethod,\r\n                shrClaims: request.shrClaims,\r\n                shrNonce: request.shrNonce,\r\n            };\r\n            const popTokenGenerator = new PopTokenGenerator(this.browserCrypto);\r\n            // generate reqCnf if not provided in the request\r\n            let reqCnfData;\r\n            if (!validatedRequest.keyId) {\r\n                const generatedReqCnfData = await invokeAsync(popTokenGenerator.generateCnf.bind(popTokenGenerator), PerformanceEvents.PopTokenGenerateCnf, this.logger, this.performanceClient, request.correlationId)(shrParameters, this.logger);\r\n                reqCnfData = generatedReqCnfData.reqCnfString;\r\n                validatedRequest.keyId = generatedReqCnfData.kid;\r\n                validatedRequest.signPopToken = true;\r\n            }\r\n            else {\r\n                reqCnfData = this.browserCrypto.base64UrlEncode(JSON.stringify({ kid: validatedRequest.keyId }));\r\n                validatedRequest.signPopToken = false;\r\n            }\r\n            // SPAs require whole string to be passed to broker\r\n            validatedRequest.reqCnf = reqCnfData;\r\n        }\r\n        this.addRequestSKUs(validatedRequest);\r\n        return validatedRequest;\r\n    }\r\n    /**\r\n     * Handles extra broker request parameters\r\n     * @param request {NativeTokenRequest}\r\n     * @private\r\n     */\r\n    handleExtraBrokerParams(request) {\r\n        if (!request.extraParameters) {\r\n            return;\r\n        }\r\n        if (request.extraParameters.hasOwnProperty(BrokerServerParamKeys.BROKER_CLIENT_ID) &&\r\n            request.extraParameters.hasOwnProperty(BrokerServerParamKeys.BROKER_REDIRECT_URI) &&\r\n            request.extraParameters.hasOwnProperty(AADServerParamKeys.CLIENT_ID)) {\r\n            const child_client_id = request.extraParameters[AADServerParamKeys.CLIENT_ID];\r\n            const child_redirect_uri = request.redirectUri;\r\n            const brk_redirect_uri = request.extraParameters[BrokerServerParamKeys.BROKER_REDIRECT_URI];\r\n            request.extraParameters = {\r\n                child_client_id,\r\n                child_redirect_uri,\r\n            };\r\n            request.redirectUri = brk_redirect_uri;\r\n        }\r\n    }\r\n}\n\nexport { NativeInteractionClient };\n//# sourceMappingURL=NativeInteractionClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { OIDC_DEFAULT_SCOPES, invokeAsync, PerformanceEvents, invoke, ThrottlingUtils, ProtocolUtils, AuthError, ProtocolMode, UrlString, ServerResponseType } from '@azure/msal-common';\nimport { StandardInteractionClient } from './StandardInteractionClient.mjs';\nimport { EventType } from '../event/EventType.mjs';\nimport { ApiId, InteractionType, BrowserConstants } from '../utils/BrowserConstants.mjs';\nimport { preconnect, getCurrentUri } from '../utils/BrowserUtils.mjs';\nimport { NativeInteractionClient } from './NativeInteractionClient.mjs';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.mjs';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { InteractionHandler } from '../interaction_handler/InteractionHandler.mjs';\nimport { deserializeResponse } from '../response/ResponseHandler.mjs';\nimport { nativeConnectionNotEstablished, emptyNavigateUri, userCancelled, emptyWindowError, popupWindowError } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass PopupClient extends StandardInteractionClient {\r\n    constructor(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeStorageImpl, nativeMessageHandler, correlationId) {\r\n        super(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId);\r\n        // Properly sets this reference for the unload event.\r\n        this.unloadWindow = this.unloadWindow.bind(this);\r\n        this.nativeStorage = nativeStorageImpl;\r\n    }\r\n    /**\r\n     * Acquires tokens by opening a popup window to the /authorize endpoint of the authority\r\n     * @param request\r\n     */\r\n    acquireToken(request) {\r\n        try {\r\n            const popupName = this.generatePopupName(request.scopes || OIDC_DEFAULT_SCOPES, request.authority || this.config.auth.authority);\r\n            const popupWindowAttributes = request.popupWindowAttributes || {};\r\n            // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.\r\n            if (this.config.system.asyncPopups) {\r\n                this.logger.verbose(\"asyncPopups set to true, acquiring token\");\r\n                // Passes on popup position and dimensions if in request\r\n                return this.acquireTokenPopupAsync(request, popupName, popupWindowAttributes);\r\n            }\r\n            else {\r\n                // asyncPopups flag is set to false. Opens popup before acquiring token.\r\n                this.logger.verbose(\"asyncPopup set to false, opening popup before acquiring token\");\r\n                const popup = this.openSizedPopup(\"about:blank\", popupName, popupWindowAttributes);\r\n                return this.acquireTokenPopupAsync(request, popupName, popupWindowAttributes, popup);\r\n            }\r\n        }\r\n        catch (e) {\r\n            return Promise.reject(e);\r\n        }\r\n    }\r\n    /**\r\n     * Clears local cache for the current user then opens a popup window prompting the user to sign-out of the server\r\n     * @param logoutRequest\r\n     */\r\n    logout(logoutRequest) {\r\n        try {\r\n            this.logger.verbose(\"logoutPopup called\");\r\n            const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);\r\n            const popupName = this.generateLogoutPopupName(validLogoutRequest);\r\n            const authority = logoutRequest && logoutRequest.authority;\r\n            const mainWindowRedirectUri = logoutRequest && logoutRequest.mainWindowRedirectUri;\r\n            const popupWindowAttributes = logoutRequest?.popupWindowAttributes || {};\r\n            // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.\r\n            if (this.config.system.asyncPopups) {\r\n                this.logger.verbose(\"asyncPopups set to true\");\r\n                // Passes on popup position and dimensions if in request\r\n                return this.logoutPopupAsync(validLogoutRequest, popupName, popupWindowAttributes, authority, undefined, mainWindowRedirectUri);\r\n            }\r\n            else {\r\n                // asyncPopups flag is set to false. Opens popup before logging out.\r\n                this.logger.verbose(\"asyncPopup set to false, opening popup\");\r\n                const popup = this.openSizedPopup(\"about:blank\", popupName, popupWindowAttributes);\r\n                return this.logoutPopupAsync(validLogoutRequest, popupName, popupWindowAttributes, authority, popup, mainWindowRedirectUri);\r\n            }\r\n        }\r\n        catch (e) {\r\n            // Since this function is synchronous we need to reject\r\n            return Promise.reject(e);\r\n        }\r\n    }\r\n    /**\r\n     * Helper which obtains an access_token for your API via opening a popup window in the user's browser\r\n     * @param validRequest\r\n     * @param popupName\r\n     * @param popup\r\n     * @param popupWindowAttributes\r\n     *\r\n     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n     */\r\n    async acquireTokenPopupAsync(request, popupName, popupWindowAttributes, popup) {\r\n        this.logger.verbose(\"acquireTokenPopupAsync called\");\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenPopup);\r\n        const validRequest = await invokeAsync(this.initializeAuthorizationRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.logger, this.performanceClient, this.correlationId)(request, InteractionType.Popup);\r\n        preconnect(validRequest.authority);\r\n        try {\r\n            // Create auth code request and generate PKCE params\r\n            const authCodeRequest = await invokeAsync(this.initializeAuthorizationCodeRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, this.logger, this.performanceClient, this.correlationId)(validRequest);\r\n            // Initialize the client\r\n            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions, validRequest.account);\r\n            const isNativeBroker = NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, request.authenticationScheme);\r\n            // Start measurement for server calls with native brokering enabled\r\n            let fetchNativeAccountIdMeasurement;\r\n            if (isNativeBroker) {\r\n                fetchNativeAccountIdMeasurement =\r\n                    this.performanceClient.startMeasurement(PerformanceEvents.FetchAccountIdWithNativeBroker, request.correlationId);\r\n            }\r\n            // Create acquire token url.\r\n            const navigateUrl = await authClient.getAuthCodeUrl({\r\n                ...validRequest,\r\n                nativeBroker: isNativeBroker,\r\n            });\r\n            // Create popup interaction handler.\r\n            const interactionHandler = new InteractionHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.performanceClient);\r\n            // Show the UI once the url has been created. Get the window handle for the popup.\r\n            const popupParameters = {\r\n                popup,\r\n                popupName,\r\n                popupWindowAttributes,\r\n            };\r\n            const popupWindow = this.initiateAuthRequest(navigateUrl, popupParameters);\r\n            this.eventHandler.emitEvent(EventType.POPUP_OPENED, InteractionType.Popup, { popupWindow }, null);\r\n            // Monitor the window for the hash. Return the string value and close the popup when the hash is received. Default timeout is 60 seconds.\r\n            const responseString = await this.monitorPopupForHash(popupWindow);\r\n            const serverParams = invoke(deserializeResponse, PerformanceEvents.DeserializeResponse, this.logger, this.performanceClient, this.correlationId)(responseString, this.config.auth.OIDCOptions.serverResponseType, this.logger);\r\n            // Remove throttle if it exists\r\n            ThrottlingUtils.removeThrottle(this.browserStorage, this.config.auth.clientId, authCodeRequest);\r\n            if (serverParams.accountId) {\r\n                this.logger.verbose(\"Account id found in hash, calling WAM for token\");\r\n                // end measurement for server call with native brokering enabled\r\n                if (fetchNativeAccountIdMeasurement) {\r\n                    fetchNativeAccountIdMeasurement.end({\r\n                        success: true,\r\n                        isNativeBroker: true,\r\n                    });\r\n                }\r\n                if (!this.nativeMessageHandler) {\r\n                    throw createBrowserAuthError(nativeConnectionNotEstablished);\r\n                }\r\n                const nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.nativeStorage, validRequest.correlationId);\r\n                const { userRequestState } = ProtocolUtils.parseRequestState(this.browserCrypto, validRequest.state);\r\n                return await nativeInteractionClient.acquireToken({\r\n                    ...validRequest,\r\n                    state: userRequestState,\r\n                    prompt: undefined, // Server should handle the prompt, ideally native broker can do this part silently\r\n                });\r\n            }\r\n            // Handle response from hash string.\r\n            const result = await interactionHandler.handleCodeResponse(serverParams, validRequest);\r\n            return result;\r\n        }\r\n        catch (e) {\r\n            if (popup) {\r\n                // Close the synchronous popup if an error is thrown before the window unload event is registered\r\n                popup.close();\r\n            }\r\n            if (e instanceof AuthError) {\r\n                e.setCorrelationId(this.correlationId);\r\n                serverTelemetryManager.cacheFailedRequest(e);\r\n            }\r\n            throw e;\r\n        }\r\n    }\r\n    /**\r\n     *\r\n     * @param validRequest\r\n     * @param popupName\r\n     * @param requestAuthority\r\n     * @param popup\r\n     * @param mainWindowRedirectUri\r\n     * @param popupWindowAttributes\r\n     */\r\n    async logoutPopupAsync(validRequest, popupName, popupWindowAttributes, requestAuthority, popup, mainWindowRedirectUri) {\r\n        this.logger.verbose(\"logoutPopupAsync called\");\r\n        this.eventHandler.emitEvent(EventType.LOGOUT_START, InteractionType.Popup, validRequest);\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.logoutPopup);\r\n        try {\r\n            // Clear cache on logout\r\n            await this.clearCacheOnLogout(validRequest.account);\r\n            // Initialize the client\r\n            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, requestAuthority, undefined, // AzureCloudOptions\r\n            validRequest.account || undefined);\r\n            try {\r\n                authClient.authority.endSessionEndpoint;\r\n            }\r\n            catch {\r\n                if (validRequest.account?.homeAccountId &&\r\n                    validRequest.postLogoutRedirectUri &&\r\n                    authClient.authority.protocolMode === ProtocolMode.OIDC) {\r\n                    void this.browserStorage.removeAccount(validRequest.account?.homeAccountId);\r\n                    this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Popup, validRequest);\r\n                    if (mainWindowRedirectUri) {\r\n                        const navigationOptions = {\r\n                            apiId: ApiId.logoutPopup,\r\n                            timeout: this.config.system.redirectNavigationTimeout,\r\n                            noHistory: false,\r\n                        };\r\n                        const absoluteUrl = UrlString.getAbsoluteUrl(mainWindowRedirectUri, getCurrentUri());\r\n                        await this.navigationClient.navigateInternal(absoluteUrl, navigationOptions);\r\n                    }\r\n                    if (popup) {\r\n                        popup.close();\r\n                    }\r\n                    return;\r\n                }\r\n            }\r\n            // Create logout string and navigate user window to logout.\r\n            const logoutUri = authClient.getLogoutUri(validRequest);\r\n            this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Popup, validRequest);\r\n            // Open the popup window to requestUrl.\r\n            const popupWindow = this.openPopup(logoutUri, {\r\n                popupName,\r\n                popupWindowAttributes,\r\n                popup,\r\n            });\r\n            this.eventHandler.emitEvent(EventType.POPUP_OPENED, InteractionType.Popup, { popupWindow }, null);\r\n            await this.monitorPopupForHash(popupWindow).catch(() => {\r\n                // Swallow any errors related to monitoring the window. Server logout is best effort\r\n            });\r\n            if (mainWindowRedirectUri) {\r\n                const navigationOptions = {\r\n                    apiId: ApiId.logoutPopup,\r\n                    timeout: this.config.system.redirectNavigationTimeout,\r\n                    noHistory: false,\r\n                };\r\n                const absoluteUrl = UrlString.getAbsoluteUrl(mainWindowRedirectUri, getCurrentUri());\r\n                this.logger.verbose(\"Redirecting main window to url specified in the request\");\r\n                this.logger.verbosePii(`Redirecting main window to: ${absoluteUrl}`);\r\n                await this.navigationClient.navigateInternal(absoluteUrl, navigationOptions);\r\n            }\r\n            else {\r\n                this.logger.verbose(\"No main window navigation requested\");\r\n            }\r\n        }\r\n        catch (e) {\r\n            if (popup) {\r\n                // Close the synchronous popup if an error is thrown before the window unload event is registered\r\n                popup.close();\r\n            }\r\n            if (e instanceof AuthError) {\r\n                e.setCorrelationId(this.correlationId);\r\n                serverTelemetryManager.cacheFailedRequest(e);\r\n            }\r\n            this.browserStorage.setInteractionInProgress(false);\r\n            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, InteractionType.Popup, null, e);\r\n            this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Popup);\r\n            throw e;\r\n        }\r\n        this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Popup);\r\n    }\r\n    /**\r\n     * Opens a popup window with given request Url.\r\n     * @param requestUrl\r\n     */\r\n    initiateAuthRequest(requestUrl, params) {\r\n        // Check that request url is not empty.\r\n        if (requestUrl) {\r\n            this.logger.infoPii(`Navigate to: ${requestUrl}`);\r\n            // Open the popup window to requestUrl.\r\n            return this.openPopup(requestUrl, params);\r\n        }\r\n        else {\r\n            // Throw error if request URL is empty.\r\n            this.logger.error(\"Navigate url is empty\");\r\n            throw createBrowserAuthError(emptyNavigateUri);\r\n        }\r\n    }\r\n    /**\r\n     * Monitors a window until it loads a url with the same origin.\r\n     * @param popupWindow - window that is being monitored\r\n     * @param timeout - timeout for processing hash once popup is redirected back to application\r\n     */\r\n    monitorPopupForHash(popupWindow) {\r\n        return new Promise((resolve, reject) => {\r\n            this.logger.verbose(\"PopupHandler.monitorPopupForHash - polling started\");\r\n            const intervalId = setInterval(() => {\r\n                // Window is closed\r\n                if (popupWindow.closed) {\r\n                    this.logger.error(\"PopupHandler.monitorPopupForHash - window closed\");\r\n                    clearInterval(intervalId);\r\n                    reject(createBrowserAuthError(userCancelled));\r\n                    return;\r\n                }\r\n                let href = \"\";\r\n                try {\r\n                    /*\r\n                     * Will throw if cross origin,\r\n                     * which should be caught and ignored\r\n                     * since we need the interval to keep running while on STS UI.\r\n                     */\r\n                    href = popupWindow.location.href;\r\n                }\r\n                catch (e) { }\r\n                // Don't process blank pages or cross domain\r\n                if (!href || href === \"about:blank\") {\r\n                    return;\r\n                }\r\n                clearInterval(intervalId);\r\n                let responseString = \"\";\r\n                const responseType = this.config.auth.OIDCOptions.serverResponseType;\r\n                if (popupWindow) {\r\n                    if (responseType === ServerResponseType.QUERY) {\r\n                        responseString = popupWindow.location.search;\r\n                    }\r\n                    else {\r\n                        responseString = popupWindow.location.hash;\r\n                    }\r\n                }\r\n                this.logger.verbose(\"PopupHandler.monitorPopupForHash - popup window is on same origin as caller\");\r\n                resolve(responseString);\r\n            }, this.config.system.pollIntervalMilliseconds);\r\n        }).finally(() => {\r\n            this.cleanPopup(popupWindow);\r\n        });\r\n    }\r\n    /**\r\n     * @hidden\r\n     *\r\n     * Configures popup window for login.\r\n     *\r\n     * @param urlNavigate\r\n     * @param title\r\n     * @param popUpWidth\r\n     * @param popUpHeight\r\n     * @param popupWindowAttributes\r\n     * @ignore\r\n     * @hidden\r\n     */\r\n    openPopup(urlNavigate, popupParams) {\r\n        try {\r\n            let popupWindow;\r\n            // Popup window passed in, setting url to navigate to\r\n            if (popupParams.popup) {\r\n                popupWindow = popupParams.popup;\r\n                this.logger.verbosePii(`Navigating popup window to: ${urlNavigate}`);\r\n                popupWindow.location.assign(urlNavigate);\r\n            }\r\n            else if (typeof popupParams.popup === \"undefined\") {\r\n                // Popup will be undefined if it was not passed in\r\n                this.logger.verbosePii(`Opening popup window to: ${urlNavigate}`);\r\n                popupWindow = this.openSizedPopup(urlNavigate, popupParams.popupName, popupParams.popupWindowAttributes);\r\n            }\r\n            // Popup will be null if popups are blocked\r\n            if (!popupWindow) {\r\n                throw createBrowserAuthError(emptyWindowError);\r\n            }\r\n            if (popupWindow.focus) {\r\n                popupWindow.focus();\r\n            }\r\n            this.currentWindow = popupWindow;\r\n            window.addEventListener(\"beforeunload\", this.unloadWindow);\r\n            return popupWindow;\r\n        }\r\n        catch (e) {\r\n            this.logger.error(\"error opening popup \" + e.message);\r\n            this.browserStorage.setInteractionInProgress(false);\r\n            throw createBrowserAuthError(popupWindowError);\r\n        }\r\n    }\r\n    /**\r\n     * Helper function to set popup window dimensions and position\r\n     * @param urlNavigate\r\n     * @param popupName\r\n     * @param popupWindowAttributes\r\n     * @returns\r\n     */\r\n    openSizedPopup(urlNavigate, popupName, popupWindowAttributes) {\r\n        /**\r\n         * adding winLeft and winTop to account for dual monitor\r\n         * using screenLeft and screenTop for IE8 and earlier\r\n         */\r\n        const winLeft = window.screenLeft ? window.screenLeft : window.screenX;\r\n        const winTop = window.screenTop ? window.screenTop : window.screenY;\r\n        /**\r\n         * window.innerWidth displays browser window\"s height and width excluding toolbars\r\n         * using document.documentElement.clientWidth for IE8 and earlier\r\n         */\r\n        const winWidth = window.innerWidth ||\r\n            document.documentElement.clientWidth ||\r\n            document.body.clientWidth;\r\n        const winHeight = window.innerHeight ||\r\n            document.documentElement.clientHeight ||\r\n            document.body.clientHeight;\r\n        let width = popupWindowAttributes.popupSize?.width;\r\n        let height = popupWindowAttributes.popupSize?.height;\r\n        let top = popupWindowAttributes.popupPosition?.top;\r\n        let left = popupWindowAttributes.popupPosition?.left;\r\n        if (!width || width < 0 || width > winWidth) {\r\n            this.logger.verbose(\"Default popup window width used. Window width not configured or invalid.\");\r\n            width = BrowserConstants.POPUP_WIDTH;\r\n        }\r\n        if (!height || height < 0 || height > winHeight) {\r\n            this.logger.verbose(\"Default popup window height used. Window height not configured or invalid.\");\r\n            height = BrowserConstants.POPUP_HEIGHT;\r\n        }\r\n        if (!top || top < 0 || top > winHeight) {\r\n            this.logger.verbose(\"Default popup window top position used. Window top not configured or invalid.\");\r\n            top = Math.max(0, winHeight / 2 - BrowserConstants.POPUP_HEIGHT / 2 + winTop);\r\n        }\r\n        if (!left || left < 0 || left > winWidth) {\r\n            this.logger.verbose(\"Default popup window left position used. Window left not configured or invalid.\");\r\n            left = Math.max(0, winWidth / 2 - BrowserConstants.POPUP_WIDTH / 2 + winLeft);\r\n        }\r\n        return window.open(urlNavigate, popupName, `width=${width}, height=${height}, top=${top}, left=${left}, scrollbars=yes`);\r\n    }\r\n    /**\r\n     * Event callback to unload main window.\r\n     */\r\n    unloadWindow(e) {\r\n        this.browserStorage.cleanRequestByInteractionType(InteractionType.Popup);\r\n        if (this.currentWindow) {\r\n            this.currentWindow.close();\r\n        }\r\n        // Guarantees browser unload will happen, so no other errors will be thrown.\r\n        e.preventDefault();\r\n    }\r\n    /**\r\n     * Closes popup, removes any state vars created during popup calls.\r\n     * @param popupWindow\r\n     */\r\n    cleanPopup(popupWindow) {\r\n        if (popupWindow) {\r\n            // Close window.\r\n            popupWindow.close();\r\n        }\r\n        // Remove window unload function\r\n        window.removeEventListener(\"beforeunload\", this.unloadWindow);\r\n        // Interaction is completed - remove interaction status.\r\n        this.browserStorage.setInteractionInProgress(false);\r\n    }\r\n    /**\r\n     * Generates the name for the popup based on the client id and request\r\n     * @param clientId\r\n     * @param request\r\n     */\r\n    generatePopupName(scopes, authority) {\r\n        return `${BrowserConstants.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${scopes.join(\"-\")}.${authority}.${this.correlationId}`;\r\n    }\r\n    /**\r\n     * Generates the name for the popup based on the client id and request for logouts\r\n     * @param clientId\r\n     * @param request\r\n     */\r\n    generateLogoutPopupName(request) {\r\n        const homeAccountId = request.account && request.account.homeAccountId;\r\n        return `${BrowserConstants.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${homeAccountId}.${this.correlationId}`;\r\n    }\r\n}\n\nexport { PopupClient };\n//# sourceMappingURL=PopupClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { createClientAuthError, ClientAuthErrorCodes, ServerError, invokeAsync, PerformanceEvents } from '@azure/msal-common';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { TemporaryCacheKeys, ApiId } from '../utils/BrowserConstants.mjs';\nimport { emptyNavigateUri, userCancelled } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass RedirectHandler {\r\n    constructor(authCodeModule, storageImpl, authCodeRequest, logger, performanceClient) {\r\n        this.authModule = authCodeModule;\r\n        this.browserStorage = storageImpl;\r\n        this.authCodeRequest = authCodeRequest;\r\n        this.logger = logger;\r\n        this.performanceClient = performanceClient;\r\n    }\r\n    /**\r\n     * Redirects window to given URL.\r\n     * @param urlNavigate\r\n     */\r\n    async initiateAuthRequest(requestUrl, params) {\r\n        this.logger.verbose(\"RedirectHandler.initiateAuthRequest called\");\r\n        // Navigate if valid URL\r\n        if (requestUrl) {\r\n            // Cache start page, returns to this page after redirectUri if navigateToLoginRequestUrl is true\r\n            if (params.redirectStartPage) {\r\n                this.logger.verbose(\"RedirectHandler.initiateAuthRequest: redirectStartPage set, caching start page\");\r\n                this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, params.redirectStartPage, true);\r\n            }\r\n            // Set interaction status in the library.\r\n            this.browserStorage.setTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, this.authCodeRequest.correlationId, true);\r\n            this.browserStorage.cacheCodeRequest(this.authCodeRequest);\r\n            this.logger.infoPii(`RedirectHandler.initiateAuthRequest: Navigate to: ${requestUrl}`);\r\n            const navigationOptions = {\r\n                apiId: ApiId.acquireTokenRedirect,\r\n                timeout: params.redirectTimeout,\r\n                noHistory: false,\r\n            };\r\n            // If onRedirectNavigate is implemented, invoke it and provide requestUrl\r\n            if (typeof params.onRedirectNavigate === \"function\") {\r\n                this.logger.verbose(\"RedirectHandler.initiateAuthRequest: Invoking onRedirectNavigate callback\");\r\n                const navigate = params.onRedirectNavigate(requestUrl);\r\n                // Returning false from onRedirectNavigate will stop navigation\r\n                if (navigate !== false) {\r\n                    this.logger.verbose(\"RedirectHandler.initiateAuthRequest: onRedirectNavigate did not return false, navigating\");\r\n                    await params.navigationClient.navigateExternal(requestUrl, navigationOptions);\r\n                    return;\r\n                }\r\n                else {\r\n                    this.logger.verbose(\"RedirectHandler.initiateAuthRequest: onRedirectNavigate returned false, stopping navigation\");\r\n                    return;\r\n                }\r\n            }\r\n            else {\r\n                // Navigate window to request URL\r\n                this.logger.verbose(\"RedirectHandler.initiateAuthRequest: Navigating window to navigate url\");\r\n                await params.navigationClient.navigateExternal(requestUrl, navigationOptions);\r\n                return;\r\n            }\r\n        }\r\n        else {\r\n            // Throw error if request URL is empty.\r\n            this.logger.info(\"RedirectHandler.initiateAuthRequest: Navigate url is empty\");\r\n            throw createBrowserAuthError(emptyNavigateUri);\r\n        }\r\n    }\r\n    /**\r\n     * Handle authorization code response in the window.\r\n     * @param hash\r\n     */\r\n    async handleCodeResponse(response, state) {\r\n        this.logger.verbose(\"RedirectHandler.handleCodeResponse called\");\r\n        // Interaction is completed - remove interaction status.\r\n        this.browserStorage.setInteractionInProgress(false);\r\n        // Handle code response.\r\n        const stateKey = this.browserStorage.generateStateKey(state);\r\n        const requestState = this.browserStorage.getTemporaryCache(stateKey);\r\n        if (!requestState) {\r\n            throw createClientAuthError(ClientAuthErrorCodes.stateNotFound, \"Cached State\");\r\n        }\r\n        let authCodeResponse;\r\n        try {\r\n            authCodeResponse = this.authModule.handleFragmentResponse(response, requestState);\r\n        }\r\n        catch (e) {\r\n            if (e instanceof ServerError &&\r\n                e.subError === userCancelled) {\r\n                // Translate server error caused by user closing native prompt to corresponding first class MSAL error\r\n                throw createBrowserAuthError(userCancelled);\r\n            }\r\n            else {\r\n                throw e;\r\n            }\r\n        }\r\n        // Get cached items\r\n        const nonceKey = this.browserStorage.generateNonceKey(requestState);\r\n        const cachedNonce = this.browserStorage.getTemporaryCache(nonceKey);\r\n        // Assign code to request\r\n        this.authCodeRequest.code = authCodeResponse.code;\r\n        // Check for new cloud instance\r\n        if (authCodeResponse.cloud_instance_host_name) {\r\n            await invokeAsync(this.authModule.updateAuthority.bind(this.authModule), PerformanceEvents.UpdateTokenEndpointAuthority, this.logger, this.performanceClient, this.authCodeRequest.correlationId)(authCodeResponse.cloud_instance_host_name, this.authCodeRequest.correlationId);\r\n        }\r\n        authCodeResponse.nonce = cachedNonce || undefined;\r\n        authCodeResponse.state = requestState;\r\n        // Add CCS parameters if available\r\n        if (authCodeResponse.client_info) {\r\n            this.authCodeRequest.clientInfo = authCodeResponse.client_info;\r\n        }\r\n        else {\r\n            const cachedCcsCred = this.checkCcsCredentials();\r\n            if (cachedCcsCred) {\r\n                this.authCodeRequest.ccsCredential = cachedCcsCred;\r\n            }\r\n        }\r\n        // Acquire token with retrieved code.\r\n        const tokenResponse = (await this.authModule.acquireToken(this.authCodeRequest, authCodeResponse));\r\n        this.browserStorage.cleanRequestByState(state);\r\n        return tokenResponse;\r\n    }\r\n    /**\r\n     * Looks up ccs creds in the cache\r\n     */\r\n    checkCcsCredentials() {\r\n        // Look up ccs credential in temp cache\r\n        const cachedCcsCred = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, true);\r\n        if (cachedCcsCred) {\r\n            try {\r\n                return JSON.parse(cachedCcsCred);\r\n            }\r\n            catch (e) {\r\n                this.authModule.logger.error(\"Cache credential could not be parsed\");\r\n                this.authModule.logger.errorPii(`Cache credential could not be parsed: ${cachedCcsCred}`);\r\n            }\r\n        }\r\n        return null;\r\n    }\r\n}\n\nexport { RedirectHandler };\n//# sourceMappingURL=RedirectHandler.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { invokeAsync, PerformanceEvents, AuthError, Constants, UrlString, UrlUtils, ProtocolUtils, ThrottlingUtils, ProtocolMode, ServerResponseType } from '@azure/msal-common';\nimport { StandardInteractionClient } from './StandardInteractionClient.mjs';\nimport { InteractionType, ApiId, TemporaryCacheKeys } from '../utils/BrowserConstants.mjs';\nimport { RedirectHandler } from '../interaction_handler/RedirectHandler.mjs';\nimport { replaceHash, isInIframe, getHomepage, clearHash, getCurrentUri } from '../utils/BrowserUtils.mjs';\nimport { EventType } from '../event/EventType.mjs';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { NativeInteractionClient } from './NativeInteractionClient.mjs';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.mjs';\nimport { validateInteractionType } from '../response/ResponseHandler.mjs';\nimport { noStateInHash, nativeConnectionNotEstablished, noCachedAuthorityError } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass RedirectClient extends StandardInteractionClient {\r\n    constructor(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeStorageImpl, nativeMessageHandler, correlationId) {\r\n        super(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId);\r\n        this.nativeStorage = nativeStorageImpl;\r\n    }\r\n    /**\r\n     * Redirects the page to the /authorize endpoint of the IDP\r\n     * @param request\r\n     */\r\n    async acquireToken(request) {\r\n        const validRequest = await invokeAsync(this.initializeAuthorizationRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.logger, this.performanceClient, this.correlationId)(request, InteractionType.Redirect);\r\n        this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || \"\", validRequest.account || null);\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenRedirect);\r\n        const handleBackButton = (event) => {\r\n            // Clear temporary cache if the back button is clicked during the redirect flow.\r\n            if (event.persisted) {\r\n                this.logger.verbose(\"Page was restored from back/forward cache. Clearing temporary cache.\");\r\n                this.browserStorage.cleanRequestByState(validRequest.state);\r\n                this.eventHandler.emitEvent(EventType.RESTORE_FROM_BFCACHE, InteractionType.Redirect);\r\n            }\r\n        };\r\n        try {\r\n            // Create auth code request and generate PKCE params\r\n            const authCodeRequest = await invokeAsync(this.initializeAuthorizationCodeRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, this.logger, this.performanceClient, this.correlationId)(validRequest);\r\n            // Initialize the client\r\n            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions, validRequest.account);\r\n            // Create redirect interaction handler.\r\n            const interactionHandler = new RedirectHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.performanceClient);\r\n            // Create acquire token url.\r\n            const navigateUrl = await authClient.getAuthCodeUrl({\r\n                ...validRequest,\r\n                nativeBroker: NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, request.authenticationScheme),\r\n            });\r\n            const redirectStartPage = this.getRedirectStartPage(request.redirectStartPage);\r\n            this.logger.verbosePii(`Redirect start page: ${redirectStartPage}`);\r\n            // Clear temporary cache if the back button is clicked during the redirect flow.\r\n            window.addEventListener(\"pageshow\", handleBackButton);\r\n            // Show the UI once the url has been created. Response will come back in the hash, which will be handled in the handleRedirectCallback function.\r\n            return await interactionHandler.initiateAuthRequest(navigateUrl, {\r\n                navigationClient: this.navigationClient,\r\n                redirectTimeout: this.config.system.redirectNavigationTimeout,\r\n                redirectStartPage: redirectStartPage,\r\n                onRedirectNavigate: request.onRedirectNavigate ||\r\n                    this.config.auth.onRedirectNavigate,\r\n            });\r\n        }\r\n        catch (e) {\r\n            if (e instanceof AuthError) {\r\n                e.setCorrelationId(this.correlationId);\r\n                serverTelemetryManager.cacheFailedRequest(e);\r\n            }\r\n            window.removeEventListener(\"pageshow\", handleBackButton);\r\n            this.browserStorage.cleanRequestByState(validRequest.state);\r\n            throw e;\r\n        }\r\n    }\r\n    /**\r\n     * Checks if navigateToLoginRequestUrl is set, and:\r\n     * - if true, performs logic to cache and navigate\r\n     * - if false, handles hash string and parses response\r\n     * @param hash {string} url hash\r\n     * @param parentMeasurement {InProgressPerformanceEvent} parent measurement\r\n     */\r\n    async handleRedirectPromise(hash = \"\", parentMeasurement) {\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.handleRedirectPromise);\r\n        try {\r\n            if (!this.browserStorage.isInteractionInProgress(true)) {\r\n                this.logger.info(\"handleRedirectPromise called but there is no interaction in progress, returning null.\");\r\n                return null;\r\n            }\r\n            const [serverParams, responseString] = this.getRedirectResponse(hash || \"\");\r\n            if (!serverParams) {\r\n                // Not a recognized server response hash or hash not associated with a redirect request\r\n                this.logger.info(\"handleRedirectPromise did not detect a response as a result of a redirect. Cleaning temporary cache.\");\r\n                this.browserStorage.cleanRequestByInteractionType(InteractionType.Redirect);\r\n                parentMeasurement.event.errorCode = \"no_server_response\";\r\n                return null;\r\n            }\r\n            // If navigateToLoginRequestUrl is true, get the url where the redirect request was initiated\r\n            const loginRequestUrl = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, true) || Constants.EMPTY_STRING;\r\n            const loginRequestUrlNormalized = UrlString.removeHashFromUrl(loginRequestUrl);\r\n            const currentUrlNormalized = UrlString.removeHashFromUrl(window.location.href);\r\n            if (loginRequestUrlNormalized === currentUrlNormalized &&\r\n                this.config.auth.navigateToLoginRequestUrl) {\r\n                // We are on the page we need to navigate to - handle hash\r\n                this.logger.verbose(\"Current page is loginRequestUrl, handling response\");\r\n                if (loginRequestUrl.indexOf(\"#\") > -1) {\r\n                    // Replace current hash with non-msal hash, if present\r\n                    replaceHash(loginRequestUrl);\r\n                }\r\n                const handleHashResult = await this.handleResponse(serverParams, serverTelemetryManager);\r\n                return handleHashResult;\r\n            }\r\n            else if (!this.config.auth.navigateToLoginRequestUrl) {\r\n                this.logger.verbose(\"NavigateToLoginRequestUrl set to false, handling response\");\r\n                return await this.handleResponse(serverParams, serverTelemetryManager);\r\n            }\r\n            else if (!isInIframe() ||\r\n                this.config.system.allowRedirectInIframe) {\r\n                /*\r\n                 * Returned from authority using redirect - need to perform navigation before processing response\r\n                 * Cache the hash to be retrieved after the next redirect\r\n                 */\r\n                this.browserStorage.setTemporaryCache(TemporaryCacheKeys.URL_HASH, responseString, true);\r\n                const navigationOptions = {\r\n                    apiId: ApiId.handleRedirectPromise,\r\n                    timeout: this.config.system.redirectNavigationTimeout,\r\n                    noHistory: true,\r\n                };\r\n                /**\r\n                 * Default behavior is to redirect to the start page and not process the hash now.\r\n                 * The start page is expected to also call handleRedirectPromise which will process the hash in one of the checks above.\r\n                 */\r\n                let processHashOnRedirect = true;\r\n                if (!loginRequestUrl || loginRequestUrl === \"null\") {\r\n                    // Redirect to home page if login request url is null (real null or the string null)\r\n                    const homepage = getHomepage();\r\n                    // Cache the homepage under ORIGIN_URI to ensure cached hash is processed on homepage\r\n                    this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, homepage, true);\r\n                    this.logger.warning(\"Unable to get valid login request url from cache, redirecting to home page\");\r\n                    processHashOnRedirect =\r\n                        await this.navigationClient.navigateInternal(homepage, navigationOptions);\r\n                }\r\n                else {\r\n                    // Navigate to page that initiated the redirect request\r\n                    this.logger.verbose(`Navigating to loginRequestUrl: ${loginRequestUrl}`);\r\n                    processHashOnRedirect =\r\n                        await this.navigationClient.navigateInternal(loginRequestUrl, navigationOptions);\r\n                }\r\n                // If navigateInternal implementation returns false, handle the hash now\r\n                if (!processHashOnRedirect) {\r\n                    return await this.handleResponse(serverParams, serverTelemetryManager);\r\n                }\r\n            }\r\n            return null;\r\n        }\r\n        catch (e) {\r\n            if (e instanceof AuthError) {\r\n                e.setCorrelationId(this.correlationId);\r\n                serverTelemetryManager.cacheFailedRequest(e);\r\n            }\r\n            this.browserStorage.cleanRequestByInteractionType(InteractionType.Redirect);\r\n            throw e;\r\n        }\r\n    }\r\n    /**\r\n     * Gets the response hash for a redirect request\r\n     * Returns null if interactionType in the state value is not \"redirect\" or the hash does not contain known properties\r\n     * @param hash\r\n     */\r\n    getRedirectResponse(userProvidedResponse) {\r\n        this.logger.verbose(\"getRedirectResponseHash called\");\r\n        // Get current location hash from window or cache.\r\n        let responseString = userProvidedResponse;\r\n        if (!responseString) {\r\n            if (this.config.auth.OIDCOptions.serverResponseType ===\r\n                ServerResponseType.QUERY) {\r\n                responseString = window.location.search;\r\n            }\r\n            else {\r\n                responseString = window.location.hash;\r\n            }\r\n        }\r\n        let response = UrlUtils.getDeserializedResponse(responseString);\r\n        if (response) {\r\n            try {\r\n                validateInteractionType(response, this.browserCrypto, InteractionType.Redirect);\r\n            }\r\n            catch (e) {\r\n                if (e instanceof AuthError) {\r\n                    this.logger.error(`Interaction type validation failed due to ${e.errorCode}: ${e.errorMessage}`);\r\n                }\r\n                return [null, \"\"];\r\n            }\r\n            clearHash(window);\r\n            this.logger.verbose(\"Hash contains known properties, returning response hash\");\r\n            return [response, responseString];\r\n        }\r\n        const cachedHash = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.URL_HASH, true);\r\n        this.browserStorage.removeItem(this.browserStorage.generateCacheKey(TemporaryCacheKeys.URL_HASH));\r\n        if (cachedHash) {\r\n            response = UrlUtils.getDeserializedResponse(cachedHash);\r\n            if (response) {\r\n                this.logger.verbose(\"Hash does not contain known properties, returning cached hash\");\r\n                return [response, cachedHash];\r\n            }\r\n        }\r\n        return [null, \"\"];\r\n    }\r\n    /**\r\n     * Checks if hash exists and handles in window.\r\n     * @param hash\r\n     * @param state\r\n     */\r\n    async handleResponse(serverParams, serverTelemetryManager) {\r\n        const state = serverParams.state;\r\n        if (!state) {\r\n            throw createBrowserAuthError(noStateInHash);\r\n        }\r\n        const cachedRequest = this.browserStorage.getCachedRequest(state);\r\n        this.logger.verbose(\"handleResponse called, retrieved cached request\");\r\n        if (serverParams.accountId) {\r\n            this.logger.verbose(\"Account id found in hash, calling WAM for token\");\r\n            if (!this.nativeMessageHandler) {\r\n                throw createBrowserAuthError(nativeConnectionNotEstablished);\r\n            }\r\n            const nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.nativeStorage, cachedRequest.correlationId);\r\n            const { userRequestState } = ProtocolUtils.parseRequestState(this.browserCrypto, state);\r\n            return nativeInteractionClient\r\n                .acquireToken({\r\n                ...cachedRequest,\r\n                state: userRequestState,\r\n                prompt: undefined, // Server should handle the prompt, ideally native broker can do this part silently\r\n            })\r\n                .finally(() => {\r\n                this.browserStorage.cleanRequestByState(state);\r\n            });\r\n        }\r\n        // Hash contains known properties - handle and return in callback\r\n        const currentAuthority = this.browserStorage.getCachedAuthority(state);\r\n        if (!currentAuthority) {\r\n            throw createBrowserAuthError(noCachedAuthorityError);\r\n        }\r\n        const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, currentAuthority);\r\n        ThrottlingUtils.removeThrottle(this.browserStorage, this.config.auth.clientId, cachedRequest);\r\n        const interactionHandler = new RedirectHandler(authClient, this.browserStorage, cachedRequest, this.logger, this.performanceClient);\r\n        return interactionHandler.handleCodeResponse(serverParams, state);\r\n    }\r\n    /**\r\n     * Use to log out the current user, and redirect the user to the postLogoutRedirectUri.\r\n     * Default behaviour is to redirect the user to `window.location.href`.\r\n     * @param logoutRequest\r\n     */\r\n    async logout(logoutRequest) {\r\n        this.logger.verbose(\"logoutRedirect called\");\r\n        const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.logout);\r\n        try {\r\n            this.eventHandler.emitEvent(EventType.LOGOUT_START, InteractionType.Redirect, logoutRequest);\r\n            // Clear cache on logout\r\n            await this.clearCacheOnLogout(validLogoutRequest.account);\r\n            const navigationOptions = {\r\n                apiId: ApiId.logout,\r\n                timeout: this.config.system.redirectNavigationTimeout,\r\n                noHistory: false,\r\n            };\r\n            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, logoutRequest && logoutRequest.authority, undefined, // AzureCloudOptions\r\n            (logoutRequest && logoutRequest.account) || undefined);\r\n            if (authClient.authority.protocolMode === ProtocolMode.OIDC) {\r\n                try {\r\n                    authClient.authority.endSessionEndpoint;\r\n                }\r\n                catch {\r\n                    if (validLogoutRequest.account?.homeAccountId) {\r\n                        void this.browserStorage.removeAccount(validLogoutRequest.account?.homeAccountId);\r\n                        this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Redirect, validLogoutRequest);\r\n                        return;\r\n                    }\r\n                }\r\n            }\r\n            // Create logout string and navigate user window to logout.\r\n            const logoutUri = authClient.getLogoutUri(validLogoutRequest);\r\n            this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, InteractionType.Redirect, validLogoutRequest);\r\n            // Check if onRedirectNavigate is implemented, and invoke it if so\r\n            if (logoutRequest &&\r\n                typeof logoutRequest.onRedirectNavigate === \"function\") {\r\n                const navigate = logoutRequest.onRedirectNavigate(logoutUri);\r\n                if (navigate !== false) {\r\n                    this.logger.verbose(\"Logout onRedirectNavigate did not return false, navigating\");\r\n                    // Ensure interaction is in progress\r\n                    if (!this.browserStorage.getInteractionInProgress()) {\r\n                        this.browserStorage.setInteractionInProgress(true);\r\n                    }\r\n                    await this.navigationClient.navigateExternal(logoutUri, navigationOptions);\r\n                    return;\r\n                }\r\n                else {\r\n                    // Ensure interaction is not in progress\r\n                    this.browserStorage.setInteractionInProgress(false);\r\n                    this.logger.verbose(\"Logout onRedirectNavigate returned false, stopping navigation\");\r\n                }\r\n            }\r\n            else {\r\n                // Ensure interaction is in progress\r\n                if (!this.browserStorage.getInteractionInProgress()) {\r\n                    this.browserStorage.setInteractionInProgress(true);\r\n                }\r\n                await this.navigationClient.navigateExternal(logoutUri, navigationOptions);\r\n                return;\r\n            }\r\n        }\r\n        catch (e) {\r\n            if (e instanceof AuthError) {\r\n                e.setCorrelationId(this.correlationId);\r\n                serverTelemetryManager.cacheFailedRequest(e);\r\n            }\r\n            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, InteractionType.Redirect, null, e);\r\n            this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Redirect);\r\n            throw e;\r\n        }\r\n        this.eventHandler.emitEvent(EventType.LOGOUT_END, InteractionType.Redirect);\r\n    }\r\n    /**\r\n     * Use to get the redirectStartPage either from request or use current window\r\n     * @param requestStartPage\r\n     */\r\n    getRedirectStartPage(requestStartPage) {\r\n        const redirectStartPage = requestStartPage || window.location.href;\r\n        return UrlString.getAbsoluteUrl(redirectStartPage, getCurrentUri());\r\n    }\r\n}\n\nexport { RedirectClient };\n//# sourceMappingURL=RedirectClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { AuthorizationCodeClient } from '@azure/msal-common';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass HybridSpaAuthorizationCodeClient extends AuthorizationCodeClient {\r\n    constructor(config) {\r\n        super(config);\r\n        this.includeRedirectUri = false;\r\n    }\r\n}\n\nexport { HybridSpaAuthorizationCodeClient };\n//# sourceMappingURL=HybridSpaAuthorizationCodeClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { invokeAsync, PerformanceEvents, AuthError } from '@azure/msal-common';\nimport { StandardInteractionClient } from './StandardInteractionClient.mjs';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { InteractionType } from '../utils/BrowserConstants.mjs';\nimport { HybridSpaAuthorizationCodeClient } from './HybridSpaAuthorizationCodeClient.mjs';\nimport { InteractionHandler } from '../interaction_handler/InteractionHandler.mjs';\nimport { authCodeRequired, silentLogoutUnsupported } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass SilentAuthCodeClient extends StandardInteractionClient {\r\n    constructor(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, apiId, performanceClient, nativeMessageHandler, correlationId) {\r\n        super(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId);\r\n        this.apiId = apiId;\r\n    }\r\n    /**\r\n     * Acquires a token silently by redeeming an authorization code against the /token endpoint\r\n     * @param request\r\n     */\r\n    async acquireToken(request) {\r\n        // Auth code payload is required\r\n        if (!request.code) {\r\n            throw createBrowserAuthError(authCodeRequired);\r\n        }\r\n        // Create silent request\r\n        const silentRequest = await invokeAsync(this.initializeAuthorizationRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.logger, this.performanceClient, request.correlationId)(request, InteractionType.Silent);\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);\r\n        try {\r\n            // Create auth code request (PKCE not needed)\r\n            const authCodeRequest = {\r\n                ...silentRequest,\r\n                code: request.code,\r\n            };\r\n            // Initialize the client\r\n            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);\r\n            const authClient = new HybridSpaAuthorizationCodeClient(clientConfig);\r\n            this.logger.verbose(\"Auth code client created\");\r\n            // Create silent handler\r\n            const interactionHandler = new InteractionHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.performanceClient);\r\n            // Handle auth code parameters from request\r\n            return await invokeAsync(interactionHandler.handleCodeResponseFromServer.bind(interactionHandler), PerformanceEvents.HandleCodeResponseFromServer, this.logger, this.performanceClient, request.correlationId)({\r\n                code: request.code,\r\n                msgraph_host: request.msGraphHost,\r\n                cloud_graph_host_name: request.cloudGraphHostName,\r\n                cloud_instance_host_name: request.cloudInstanceHostName,\r\n            }, silentRequest, false);\r\n        }\r\n        catch (e) {\r\n            if (e instanceof AuthError) {\r\n                e.setCorrelationId(this.correlationId);\r\n                serverTelemetryManager.cacheFailedRequest(e);\r\n            }\r\n            throw e;\r\n        }\r\n    }\r\n    /**\r\n     * Currently Unsupported\r\n     */\r\n    logout() {\r\n        // Synchronous so we must reject\r\n        return Promise.reject(createBrowserAuthError(silentLogoutUnsupported));\r\n    }\r\n}\n\nexport { SilentAuthCodeClient };\n//# sourceMappingURL=SilentAuthCodeClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { StandardInteractionClient } from './StandardInteractionClient.mjs';\nimport { PerformanceEvents, invokeAsync, SilentFlowClient } from '@azure/msal-common';\nimport { ApiId } from '../utils/BrowserConstants.mjs';\nimport { BrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { cryptoKeyNotFound } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass SilentCacheClient extends StandardInteractionClient {\r\n    /**\r\n     * Returns unexpired tokens from the cache, if available\r\n     * @param silentRequest\r\n     */\r\n    async acquireToken(silentRequest) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentCacheClientAcquireToken, silentRequest.correlationId);\r\n        // Telemetry manager only used to increment cacheHits here\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);\r\n        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);\r\n        const silentAuthClient = new SilentFlowClient(clientConfig, this.performanceClient);\r\n        this.logger.verbose(\"Silent auth client created\");\r\n        try {\r\n            const response = await invokeAsync(silentAuthClient.acquireCachedToken.bind(silentAuthClient), PerformanceEvents.SilentFlowClientAcquireCachedToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest);\r\n            const authResponse = response[0];\r\n            this.performanceClient.addFields({\r\n                fromCache: true,\r\n            }, silentRequest.correlationId);\r\n            return authResponse;\r\n        }\r\n        catch (error) {\r\n            if (error instanceof BrowserAuthError &&\r\n                error.errorCode === cryptoKeyNotFound) {\r\n                this.logger.verbose(\"Signing keypair for bound access token not found. Refreshing bound access token and generating a new crypto keypair.\");\r\n            }\r\n            throw error;\r\n        }\r\n    }\r\n    /**\r\n     * API to silenty clear the browser cache.\r\n     * @param logoutRequest\r\n     */\r\n    logout(logoutRequest) {\r\n        this.logger.verbose(\"logoutRedirect called\");\r\n        const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);\r\n        return this.clearCacheOnLogout(validLogoutRequest?.account);\r\n    }\r\n}\n\nexport { SilentCacheClient };\n//# sourceMappingURL=SilentCacheClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { PerformanceEvents, invokeAsync, invoke, ServerResponseType } from '@azure/msal-common';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { DEFAULT_IFRAME_TIMEOUT_MS } from '../config/Configuration.mjs';\nimport { emptyNavigateUri, monitorWindowTimeout } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Creates a hidden iframe to given URL using user-requested scopes as an id.\r\n * @param urlNavigate\r\n * @param userRequestScopes\r\n */\r\nasync function initiateAuthRequest(requestUrl, performanceClient, logger, correlationId, navigateFrameWait) {\r\n    performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerInitiateAuthRequest, correlationId);\r\n    if (!requestUrl) {\r\n        // Throw error if request URL is empty.\r\n        logger.info(\"Navigate url is empty\");\r\n        throw createBrowserAuthError(emptyNavigateUri);\r\n    }\r\n    if (navigateFrameWait) {\r\n        return invokeAsync(loadFrame, PerformanceEvents.SilentHandlerLoadFrame, logger, performanceClient, correlationId)(requestUrl, navigateFrameWait, performanceClient, correlationId);\r\n    }\r\n    return invoke(loadFrameSync, PerformanceEvents.SilentHandlerLoadFrameSync, logger, performanceClient, correlationId)(requestUrl);\r\n}\r\n/**\r\n * Monitors an iframe content window until it loads a url with a known hash, or hits a specified timeout.\r\n * @param iframe\r\n * @param timeout\r\n */\r\nasync function monitorIframeForHash(iframe, timeout, pollIntervalMilliseconds, performanceClient, logger, correlationId, responseType) {\r\n    performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerMonitorIframeForHash, correlationId);\r\n    return new Promise((resolve, reject) => {\r\n        if (timeout < DEFAULT_IFRAME_TIMEOUT_MS) {\r\n            logger.warning(`system.loadFrameTimeout or system.iframeHashTimeout set to lower (${timeout}ms) than the default (${DEFAULT_IFRAME_TIMEOUT_MS}ms). This may result in timeouts.`);\r\n        }\r\n        /*\r\n         * Polling for iframes can be purely timing based,\r\n         * since we don't need to account for interaction.\r\n         */\r\n        const timeoutId = window.setTimeout(() => {\r\n            window.clearInterval(intervalId);\r\n            reject(createBrowserAuthError(monitorWindowTimeout));\r\n        }, timeout);\r\n        const intervalId = window.setInterval(() => {\r\n            let href = \"\";\r\n            const contentWindow = iframe.contentWindow;\r\n            try {\r\n                /*\r\n                 * Will throw if cross origin,\r\n                 * which should be caught and ignored\r\n                 * since we need the interval to keep running while on STS UI.\r\n                 */\r\n                href = contentWindow ? contentWindow.location.href : \"\";\r\n            }\r\n            catch (e) { }\r\n            if (!href || href === \"about:blank\") {\r\n                return;\r\n            }\r\n            let responseString = \"\";\r\n            if (contentWindow) {\r\n                if (responseType === ServerResponseType.QUERY) {\r\n                    responseString = contentWindow.location.search;\r\n                }\r\n                else {\r\n                    responseString = contentWindow.location.hash;\r\n                }\r\n            }\r\n            window.clearTimeout(timeoutId);\r\n            window.clearInterval(intervalId);\r\n            resolve(responseString);\r\n        }, pollIntervalMilliseconds);\r\n    }).finally(() => {\r\n        invoke(removeHiddenIframe, PerformanceEvents.RemoveHiddenIframe, logger, performanceClient, correlationId)(iframe);\r\n    });\r\n}\r\n/**\r\n * @hidden\r\n * Loads iframe with authorization endpoint URL\r\n * @ignore\r\n * @deprecated\r\n */\r\nfunction loadFrame(urlNavigate, navigateFrameWait, performanceClient, correlationId) {\r\n    performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerLoadFrame, correlationId);\r\n    /*\r\n     * This trick overcomes iframe navigation in IE\r\n     * IE does not load the page consistently in iframe\r\n     */\r\n    return new Promise((resolve, reject) => {\r\n        const frameHandle = createHiddenIframe();\r\n        window.setTimeout(() => {\r\n            if (!frameHandle) {\r\n                reject(\"Unable to load iframe\");\r\n                return;\r\n            }\r\n            frameHandle.src = urlNavigate;\r\n            resolve(frameHandle);\r\n        }, navigateFrameWait);\r\n    });\r\n}\r\n/**\r\n * @hidden\r\n * Loads the iframe synchronously when the navigateTimeFrame is set to `0`\r\n * @param urlNavigate\r\n * @param frameName\r\n * @param logger\r\n */\r\nfunction loadFrameSync(urlNavigate) {\r\n    const frameHandle = createHiddenIframe();\r\n    frameHandle.src = urlNavigate;\r\n    return frameHandle;\r\n}\r\n/**\r\n * @hidden\r\n * Creates a new hidden iframe or gets an existing one for silent token renewal.\r\n * @ignore\r\n */\r\nfunction createHiddenIframe() {\r\n    const authFrame = document.createElement(\"iframe\");\r\n    authFrame.className = \"msalSilentIframe\";\r\n    authFrame.style.visibility = \"hidden\";\r\n    authFrame.style.position = \"absolute\";\r\n    authFrame.style.width = authFrame.style.height = \"0\";\r\n    authFrame.style.border = \"0\";\r\n    authFrame.setAttribute(\"sandbox\", \"allow-scripts allow-same-origin allow-forms\");\r\n    document.body.appendChild(authFrame);\r\n    return authFrame;\r\n}\r\n/**\r\n * @hidden\r\n * Removes a hidden iframe from the page.\r\n * @ignore\r\n */\r\nfunction removeHiddenIframe(iframe) {\r\n    if (document.body === iframe.parentNode) {\r\n        document.body.removeChild(iframe);\r\n    }\r\n}\n\nexport { initiateAuthRequest, monitorIframeForHash };\n//# sourceMappingURL=SilentHandler.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { PerformanceEvents, PromptValue, invokeAsync, AuthError, invoke, ProtocolUtils } from '@azure/msal-common';\nimport { StandardInteractionClient } from './StandardInteractionClient.mjs';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { InteractionType, BrowserConstants } from '../utils/BrowserConstants.mjs';\nimport { initiateAuthRequest, monitorIframeForHash } from '../interaction_handler/SilentHandler.mjs';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.mjs';\nimport { NativeInteractionClient } from './NativeInteractionClient.mjs';\nimport { InteractionHandler } from '../interaction_handler/InteractionHandler.mjs';\nimport { preconnect } from '../utils/BrowserUtils.mjs';\nimport { deserializeResponse } from '../response/ResponseHandler.mjs';\nimport { silentLogoutUnsupported, nativeConnectionNotEstablished } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass SilentIframeClient extends StandardInteractionClient {\r\n    constructor(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, apiId, performanceClient, nativeStorageImpl, nativeMessageHandler, correlationId) {\r\n        super(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, nativeMessageHandler, correlationId);\r\n        this.apiId = apiId;\r\n        this.nativeStorage = nativeStorageImpl;\r\n    }\r\n    /**\r\n     * Acquires a token silently by opening a hidden iframe to the /authorize endpoint with prompt=none or prompt=no_session\r\n     * @param request\r\n     */\r\n    async acquireToken(request) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);\r\n        // Check that we have some SSO data\r\n        if (!request.loginHint &&\r\n            !request.sid &&\r\n            (!request.account || !request.account.username)) {\r\n            this.logger.warning(\"No user hint provided. The authorization server may need more information to complete this request.\");\r\n        }\r\n        // Check the prompt value\r\n        const inputRequest = { ...request };\r\n        if (inputRequest.prompt) {\r\n            if (inputRequest.prompt !== PromptValue.NONE &&\r\n                inputRequest.prompt !== PromptValue.NO_SESSION) {\r\n                this.logger.warning(`SilentIframeClient. Replacing invalid prompt ${inputRequest.prompt} with ${PromptValue.NONE}`);\r\n                inputRequest.prompt = PromptValue.NONE;\r\n            }\r\n        }\r\n        else {\r\n            inputRequest.prompt = PromptValue.NONE;\r\n        }\r\n        // Create silent request\r\n        const silentRequest = await invokeAsync(this.initializeAuthorizationRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.logger, this.performanceClient, request.correlationId)(inputRequest, InteractionType.Silent);\r\n        preconnect(silentRequest.authority);\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);\r\n        let authClient;\r\n        try {\r\n            // Initialize the client\r\n            authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);\r\n            return await invokeAsync(this.silentTokenHelper.bind(this), PerformanceEvents.SilentIframeClientTokenHelper, this.logger, this.performanceClient, request.correlationId)(authClient, silentRequest);\r\n        }\r\n        catch (e) {\r\n            if (e instanceof AuthError) {\r\n                e.setCorrelationId(this.correlationId);\r\n                serverTelemetryManager.cacheFailedRequest(e);\r\n            }\r\n            if (!authClient ||\r\n                !(e instanceof AuthError) ||\r\n                e.errorCode !== BrowserConstants.INVALID_GRANT_ERROR) {\r\n                throw e;\r\n            }\r\n            this.performanceClient.addFields({\r\n                retryError: e.errorCode,\r\n            }, this.correlationId);\r\n            const retrySilentRequest = await invokeAsync(this.initializeAuthorizationRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.logger, this.performanceClient, request.correlationId)(inputRequest, InteractionType.Silent);\r\n            return await invokeAsync(this.silentTokenHelper.bind(this), PerformanceEvents.SilentIframeClientTokenHelper, this.logger, this.performanceClient, this.correlationId)(authClient, retrySilentRequest);\r\n        }\r\n    }\r\n    /**\r\n     * Currently Unsupported\r\n     */\r\n    logout() {\r\n        // Synchronous so we must reject\r\n        return Promise.reject(createBrowserAuthError(silentLogoutUnsupported));\r\n    }\r\n    /**\r\n     * Helper which acquires an authorization code silently using a hidden iframe from given url\r\n     * using the scopes requested as part of the id, and exchanges the code for a set of OAuth tokens.\r\n     * @param navigateUrl\r\n     * @param userRequestScopes\r\n     */\r\n    async silentTokenHelper(authClient, silentRequest) {\r\n        const correlationId = silentRequest.correlationId;\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentIframeClientTokenHelper, correlationId);\r\n        // Create auth code request and generate PKCE params\r\n        const authCodeRequest = await invokeAsync(this.initializeAuthorizationCodeRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, this.logger, this.performanceClient, correlationId)(silentRequest);\r\n        // Create authorize request url\r\n        const navigateUrl = await invokeAsync(authClient.getAuthCodeUrl.bind(authClient), PerformanceEvents.GetAuthCodeUrl, this.logger, this.performanceClient, correlationId)({\r\n            ...silentRequest,\r\n            nativeBroker: NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, silentRequest.authenticationScheme),\r\n        });\r\n        // Create silent handler\r\n        const interactionHandler = new InteractionHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.performanceClient);\r\n        // Get the frame handle for the silent request\r\n        const msalFrame = await invokeAsync(initiateAuthRequest, PerformanceEvents.SilentHandlerInitiateAuthRequest, this.logger, this.performanceClient, correlationId)(navigateUrl, this.performanceClient, this.logger, correlationId, this.config.system.navigateFrameWait);\r\n        const responseType = this.config.auth.OIDCOptions.serverResponseType;\r\n        // Monitor the window for the hash. Return the string value and close the popup when the hash is received. Default timeout is 60 seconds.\r\n        const responseString = await invokeAsync(monitorIframeForHash, PerformanceEvents.SilentHandlerMonitorIframeForHash, this.logger, this.performanceClient, correlationId)(msalFrame, this.config.system.iframeHashTimeout, this.config.system.pollIntervalMilliseconds, this.performanceClient, this.logger, correlationId, responseType);\r\n        const serverParams = invoke(deserializeResponse, PerformanceEvents.DeserializeResponse, this.logger, this.performanceClient, this.correlationId)(responseString, responseType, this.logger);\r\n        if (serverParams.accountId) {\r\n            this.logger.verbose(\"Account id found in hash, calling WAM for token\");\r\n            if (!this.nativeMessageHandler) {\r\n                throw createBrowserAuthError(nativeConnectionNotEstablished);\r\n            }\r\n            const nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.apiId, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.browserStorage, correlationId);\r\n            const { userRequestState } = ProtocolUtils.parseRequestState(this.browserCrypto, silentRequest.state);\r\n            return invokeAsync(nativeInteractionClient.acquireToken.bind(nativeInteractionClient), PerformanceEvents.NativeInteractionClientAcquireToken, this.logger, this.performanceClient, correlationId)({\r\n                ...silentRequest,\r\n                state: userRequestState,\r\n                prompt: silentRequest.prompt || PromptValue.NONE,\r\n            });\r\n        }\r\n        // Handle response from hash string\r\n        return invokeAsync(interactionHandler.handleCodeResponse.bind(interactionHandler), PerformanceEvents.HandleCodeResponse, this.logger, this.performanceClient, correlationId)(serverParams, silentRequest);\r\n    }\r\n}\n\nexport { SilentIframeClient };\n//# sourceMappingURL=SilentIframeClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { StandardInteractionClient } from './StandardInteractionClient.mjs';\nimport { PerformanceEvents, invokeAsync, RefreshTokenClient } from '@azure/msal-common';\nimport { ApiId } from '../utils/BrowserConstants.mjs';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { initializeBaseRequest } from '../request/RequestHelpers.mjs';\nimport { silentLogoutUnsupported } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass SilentRefreshClient extends StandardInteractionClient {\r\n    /**\r\n     * Exchanges the refresh token for new tokens\r\n     * @param request\r\n     */\r\n    async acquireToken(request) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentRefreshClientAcquireToken, request.correlationId);\r\n        const baseRequest = await invokeAsync(initializeBaseRequest, PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, request.correlationId)(request, this.config, this.performanceClient, this.logger);\r\n        const silentRequest = {\r\n            ...request,\r\n            ...baseRequest,\r\n        };\r\n        if (request.redirectUri) {\r\n            // Make sure any passed redirectUri is converted to an absolute URL - redirectUri is not a required parameter for refresh token redemption so only include if explicitly provided\r\n            silentRequest.redirectUri = this.getRedirectUri(request.redirectUri);\r\n        }\r\n        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);\r\n        const refreshTokenClient = await this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);\r\n        // Send request to renew token. Auth module will throw errors if token cannot be renewed.\r\n        return invokeAsync(refreshTokenClient.acquireTokenByRefreshToken.bind(refreshTokenClient), PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, this.logger, this.performanceClient, request.correlationId)(silentRequest).catch((e) => {\r\n            e.setCorrelationId(this.correlationId);\r\n            serverTelemetryManager.cacheFailedRequest(e);\r\n            throw e;\r\n        });\r\n    }\r\n    /**\r\n     * Currently Unsupported\r\n     */\r\n    logout() {\r\n        // Synchronous so we must reject\r\n        return Promise.reject(createBrowserAuthError(silentLogoutUnsupported));\r\n    }\r\n    /**\r\n     * Creates a Refresh Client with the given authority, or the default authority.\r\n     * @param serverTelemetryManager\r\n     * @param authorityUrl\r\n     */\r\n    async createRefreshTokenClient(serverTelemetryManager, authorityUrl, azureCloudOptions, account) {\r\n        // Create auth module.\r\n        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions, account);\r\n        return new RefreshTokenClient(clientConfig, this.performanceClient);\r\n    }\r\n}\n\nexport { SilentRefreshClient };\n//# sourceMappingURL=SilentRefreshClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { PerformanceEvents, invokeAsync, Constants, UrlString, AuthorizationCodeClient, ProtocolUtils } from '@azure/msal-common';\nimport { BaseInteractionClient } from './BaseInteractionClient.mjs';\nimport { BrowserConstants } from '../utils/BrowserConstants.mjs';\nimport { version } from '../packageMetadata.mjs';\nimport { getCurrentUri } from '../utils/BrowserUtils.mjs';\nimport { generatePkceCodes } from '../crypto/PkceGenerator.mjs';\nimport { createNewGuid } from '../crypto/BrowserCrypto.mjs';\nimport { initializeBaseRequest } from '../request/RequestHelpers.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Defines the class structure and helper functions used by the \"standard\", non-brokered auth flows (popup, redirect, silent (RT), silent (iframe))\r\n */\r\nclass StandardInteractionClient extends BaseInteractionClient {\r\n    /**\r\n     * Generates an auth code request tied to the url request.\r\n     * @param request\r\n     */\r\n    async initializeAuthorizationCodeRequest(request) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, this.correlationId);\r\n        const generatedPkceParams = await invokeAsync(generatePkceCodes, PerformanceEvents.GeneratePkceCodes, this.logger, this.performanceClient, this.correlationId)(this.performanceClient, this.logger, this.correlationId);\r\n        const authCodeRequest = {\r\n            ...request,\r\n            redirectUri: request.redirectUri,\r\n            code: Constants.EMPTY_STRING,\r\n            codeVerifier: generatedPkceParams.verifier,\r\n        };\r\n        request.codeChallenge = generatedPkceParams.challenge;\r\n        request.codeChallengeMethod = Constants.S256_CODE_CHALLENGE_METHOD;\r\n        return authCodeRequest;\r\n    }\r\n    /**\r\n     * Initializer for the logout request.\r\n     * @param logoutRequest\r\n     */\r\n    initializeLogoutRequest(logoutRequest) {\r\n        this.logger.verbose(\"initializeLogoutRequest called\", logoutRequest?.correlationId);\r\n        const validLogoutRequest = {\r\n            correlationId: this.correlationId || createNewGuid(),\r\n            ...logoutRequest,\r\n        };\r\n        /**\r\n         * Set logout_hint to be login_hint from ID Token Claims if present\r\n         * and logoutHint attribute wasn't manually set in logout request\r\n         */\r\n        if (logoutRequest) {\r\n            // If logoutHint isn't set and an account was passed in, try to extract logoutHint from ID Token Claims\r\n            if (!logoutRequest.logoutHint) {\r\n                if (logoutRequest.account) {\r\n                    const logoutHint = this.getLogoutHintFromIdTokenClaims(logoutRequest.account);\r\n                    if (logoutHint) {\r\n                        this.logger.verbose(\"Setting logoutHint to login_hint ID Token Claim value for the account provided\");\r\n                        validLogoutRequest.logoutHint = logoutHint;\r\n                    }\r\n                }\r\n                else {\r\n                    this.logger.verbose(\"logoutHint was not set and account was not passed into logout request, logoutHint will not be set\");\r\n                }\r\n            }\r\n            else {\r\n                this.logger.verbose(\"logoutHint has already been set in logoutRequest\");\r\n            }\r\n        }\r\n        else {\r\n            this.logger.verbose(\"logoutHint will not be set since no logout request was configured\");\r\n        }\r\n        /*\r\n         * Only set redirect uri if logout request isn't provided or the set uri isn't null.\r\n         * Otherwise, use passed uri, config, or current page.\r\n         */\r\n        if (!logoutRequest || logoutRequest.postLogoutRedirectUri !== null) {\r\n            if (logoutRequest && logoutRequest.postLogoutRedirectUri) {\r\n                this.logger.verbose(\"Setting postLogoutRedirectUri to uri set on logout request\", validLogoutRequest.correlationId);\r\n                validLogoutRequest.postLogoutRedirectUri =\r\n                    UrlString.getAbsoluteUrl(logoutRequest.postLogoutRedirectUri, getCurrentUri());\r\n            }\r\n            else if (this.config.auth.postLogoutRedirectUri === null) {\r\n                this.logger.verbose(\"postLogoutRedirectUri configured as null and no uri set on request, not passing post logout redirect\", validLogoutRequest.correlationId);\r\n            }\r\n            else if (this.config.auth.postLogoutRedirectUri) {\r\n                this.logger.verbose(\"Setting postLogoutRedirectUri to configured uri\", validLogoutRequest.correlationId);\r\n                validLogoutRequest.postLogoutRedirectUri =\r\n                    UrlString.getAbsoluteUrl(this.config.auth.postLogoutRedirectUri, getCurrentUri());\r\n            }\r\n            else {\r\n                this.logger.verbose(\"Setting postLogoutRedirectUri to current page\", validLogoutRequest.correlationId);\r\n                validLogoutRequest.postLogoutRedirectUri =\r\n                    UrlString.getAbsoluteUrl(getCurrentUri(), getCurrentUri());\r\n            }\r\n        }\r\n        else {\r\n            this.logger.verbose(\"postLogoutRedirectUri passed as null, not setting post logout redirect uri\", validLogoutRequest.correlationId);\r\n        }\r\n        return validLogoutRequest;\r\n    }\r\n    /**\r\n     * Parses login_hint ID Token Claim out of AccountInfo object to be used as\r\n     * logout_hint in end session request.\r\n     * @param account\r\n     */\r\n    getLogoutHintFromIdTokenClaims(account) {\r\n        const idTokenClaims = account.idTokenClaims;\r\n        if (idTokenClaims) {\r\n            if (idTokenClaims.login_hint) {\r\n                return idTokenClaims.login_hint;\r\n            }\r\n            else {\r\n                this.logger.verbose(\"The ID Token Claims tied to the provided account do not contain a login_hint claim, logoutHint will not be added to logout request\");\r\n            }\r\n        }\r\n        else {\r\n            this.logger.verbose(\"The provided account does not contain ID Token Claims, logoutHint will not be added to logout request\");\r\n        }\r\n        return null;\r\n    }\r\n    /**\r\n     * Creates an Authorization Code Client with the given authority, or the default authority.\r\n     * @param serverTelemetryManager\r\n     * @param authorityUrl\r\n     */\r\n    async createAuthCodeClient(serverTelemetryManager, authorityUrl, requestAzureCloudOptions, account) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.correlationId);\r\n        // Create auth module.\r\n        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, requestAzureCloudOptions, account);\r\n        return new AuthorizationCodeClient(clientConfig, this.performanceClient);\r\n    }\r\n    /**\r\n     * Creates a Client Configuration object with the given request authority, or the default authority.\r\n     * @param serverTelemetryManager\r\n     * @param requestAuthority\r\n     * @param requestCorrelationId\r\n     */\r\n    async getClientConfiguration(serverTelemetryManager, requestAuthority, requestAzureCloudOptions, account) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);\r\n        const discoveredAuthority = await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, this.correlationId)(requestAuthority, requestAzureCloudOptions, account);\r\n        const logger = this.config.system.loggerOptions;\r\n        return {\r\n            authOptions: {\r\n                clientId: this.config.auth.clientId,\r\n                authority: discoveredAuthority,\r\n                clientCapabilities: this.config.auth.clientCapabilities,\r\n            },\r\n            systemOptions: {\r\n                tokenRenewalOffsetSeconds: this.config.system.tokenRenewalOffsetSeconds,\r\n                preventCorsPreflight: true,\r\n            },\r\n            loggerOptions: {\r\n                loggerCallback: logger.loggerCallback,\r\n                piiLoggingEnabled: logger.piiLoggingEnabled,\r\n                logLevel: logger.logLevel,\r\n                correlationId: this.correlationId,\r\n            },\r\n            cacheOptions: {\r\n                claimsBasedCachingEnabled: this.config.cache.claimsBasedCachingEnabled,\r\n            },\r\n            cryptoInterface: this.browserCrypto,\r\n            networkInterface: this.networkClient,\r\n            storageInterface: this.browserStorage,\r\n            serverTelemetryManager: serverTelemetryManager,\r\n            libraryInfo: {\r\n                sku: BrowserConstants.MSAL_SKU,\r\n                version: version,\r\n                cpu: Constants.EMPTY_STRING,\r\n                os: Constants.EMPTY_STRING,\r\n            },\r\n            telemetry: this.config.telemetry,\r\n        };\r\n    }\r\n    /**\r\n     * Helper to initialize required request parameters for interactive APIs and ssoSilent()\r\n     * @param request\r\n     * @param interactionType\r\n     */\r\n    async initializeAuthorizationRequest(request, interactionType) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.correlationId);\r\n        const redirectUri = this.getRedirectUri(request.redirectUri);\r\n        const browserState = {\r\n            interactionType: interactionType,\r\n        };\r\n        const state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || Constants.EMPTY_STRING, browserState);\r\n        const baseRequest = await invokeAsync(initializeBaseRequest, PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)({ ...request, correlationId: this.correlationId }, this.config, this.performanceClient, this.logger);\r\n        const validatedRequest = {\r\n            ...baseRequest,\r\n            redirectUri: redirectUri,\r\n            state: state,\r\n            nonce: request.nonce || createNewGuid(),\r\n            responseMode: this.config.auth.OIDCOptions\r\n                .serverResponseType,\r\n        };\r\n        const account = request.account || this.browserStorage.getActiveAccount();\r\n        if (account) {\r\n            this.logger.verbose(\"Setting validated request account\", this.correlationId);\r\n            this.logger.verbosePii(`Setting validated request account: ${account.homeAccountId}`, this.correlationId);\r\n            validatedRequest.account = account;\r\n        }\r\n        // Check for ADAL/MSAL v1 SSO\r\n        if (!validatedRequest.loginHint && !account) {\r\n            const legacyLoginHint = this.browserStorage.getLegacyLoginHint();\r\n            if (legacyLoginHint) {\r\n                validatedRequest.loginHint = legacyLoginHint;\r\n            }\r\n        }\r\n        return validatedRequest;\r\n    }\r\n}\n\nexport { StandardInteractionClient };\n//# sourceMappingURL=StandardInteractionClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { PerformanceEvents, ServerError, invokeAsync, CcsCredentialType } from '@azure/msal-common';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { userCancelled } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Abstract class which defines operations for a browser interaction handling class.\r\n */\r\nclass InteractionHandler {\r\n    constructor(authCodeModule, storageImpl, authCodeRequest, logger, performanceClient) {\r\n        this.authModule = authCodeModule;\r\n        this.browserStorage = storageImpl;\r\n        this.authCodeRequest = authCodeRequest;\r\n        this.logger = logger;\r\n        this.performanceClient = performanceClient;\r\n    }\r\n    /**\r\n     * Function to handle response parameters from hash.\r\n     * @param locationHash\r\n     */\r\n    async handleCodeResponse(response, request) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.HandleCodeResponse, request.correlationId);\r\n        let authCodeResponse;\r\n        try {\r\n            authCodeResponse = this.authModule.handleFragmentResponse(response, request.state);\r\n        }\r\n        catch (e) {\r\n            if (e instanceof ServerError &&\r\n                e.subError === userCancelled) {\r\n                // Translate server error caused by user closing native prompt to corresponding first class MSAL error\r\n                throw createBrowserAuthError(userCancelled);\r\n            }\r\n            else {\r\n                throw e;\r\n            }\r\n        }\r\n        return invokeAsync(this.handleCodeResponseFromServer.bind(this), PerformanceEvents.HandleCodeResponseFromServer, this.logger, this.performanceClient, request.correlationId)(authCodeResponse, request);\r\n    }\r\n    /**\r\n     * Process auth code response from AAD\r\n     * @param authCodeResponse\r\n     * @param state\r\n     * @param authority\r\n     * @param networkModule\r\n     * @returns\r\n     */\r\n    async handleCodeResponseFromServer(authCodeResponse, request, validateNonce = true) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.HandleCodeResponseFromServer, request.correlationId);\r\n        this.logger.trace(\"InteractionHandler.handleCodeResponseFromServer called\");\r\n        // Assign code to request\r\n        this.authCodeRequest.code = authCodeResponse.code;\r\n        // Check for new cloud instance\r\n        if (authCodeResponse.cloud_instance_host_name) {\r\n            await invokeAsync(this.authModule.updateAuthority.bind(this.authModule), PerformanceEvents.UpdateTokenEndpointAuthority, this.logger, this.performanceClient, request.correlationId)(authCodeResponse.cloud_instance_host_name, request.correlationId);\r\n        }\r\n        // Nonce validation not needed when redirect not involved (e.g. hybrid spa, renewing token via rt)\r\n        if (validateNonce) {\r\n            // TODO: Assigning \"response nonce\" to \"request nonce\" is confusing. Refactor the function doing validation to accept request nonce directly\r\n            authCodeResponse.nonce = request.nonce || undefined;\r\n        }\r\n        authCodeResponse.state = request.state;\r\n        // Add CCS parameters if available\r\n        if (authCodeResponse.client_info) {\r\n            this.authCodeRequest.clientInfo = authCodeResponse.client_info;\r\n        }\r\n        else {\r\n            const ccsCred = this.createCcsCredentials(request);\r\n            if (ccsCred) {\r\n                this.authCodeRequest.ccsCredential = ccsCred;\r\n            }\r\n        }\r\n        // Acquire token with retrieved code.\r\n        const tokenResponse = (await invokeAsync(this.authModule.acquireToken.bind(this.authModule), PerformanceEvents.AuthClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(this.authCodeRequest, authCodeResponse));\r\n        return tokenResponse;\r\n    }\r\n    /**\r\n     * Build ccs creds if available\r\n     */\r\n    createCcsCredentials(request) {\r\n        if (request.account) {\r\n            return {\r\n                credential: request.account.homeAccountId,\r\n                type: CcsCredentialType.HOME_ACCOUNT_ID,\r\n            };\r\n        }\r\n        else if (request.loginHint) {\r\n            return {\r\n                credential: request.loginHint,\r\n                type: CcsCredentialType.UPN,\r\n            };\r\n        }\r\n        return null;\r\n    }\r\n}\n\nexport { InteractionHandler };\n//# sourceMappingURL=InteractionHandler.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nclass NavigationClient {\r\n    /**\r\n     * Navigates to other pages within the same web application\r\n     * @param url\r\n     * @param options\r\n     */\r\n    navigateInternal(url, options) {\r\n        return NavigationClient.defaultNavigateWindow(url, options);\r\n    }\r\n    /**\r\n     * Navigates to other pages outside the web application i.e. the Identity Provider\r\n     * @param url\r\n     * @param options\r\n     */\r\n    navigateExternal(url, options) {\r\n        return NavigationClient.defaultNavigateWindow(url, options);\r\n    }\r\n    /**\r\n     * Default navigation implementation invoked by the internal and external functions\r\n     * @param url\r\n     * @param options\r\n     */\r\n    static defaultNavigateWindow(url, options) {\r\n        if (options.noHistory) {\r\n            window.location.replace(url);\r\n        }\r\n        else {\r\n            window.location.assign(url);\r\n        }\r\n        return new Promise((resolve) => {\r\n            setTimeout(() => {\r\n                resolve(true);\r\n            }, options.timeout);\r\n        });\r\n    }\r\n}\n\nexport { NavigationClient };\n//# sourceMappingURL=NavigationClient.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { Constants } from '@azure/msal-common';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { HTTP_REQUEST_TYPE } from '../utils/BrowserConstants.mjs';\nimport { getRequestFailed, noNetworkConnectivity, failedToParseResponse, postRequestFailed } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This class implements the Fetch API for GET and POST requests. See more here: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API\r\n */\r\nclass FetchClient {\r\n    /**\r\n     * Fetch Client for REST endpoints - Get request\r\n     * @param url\r\n     * @param headers\r\n     * @param body\r\n     */\r\n    async sendGetRequestAsync(url, options) {\r\n        let response;\r\n        try {\r\n            response = await fetch(url, {\r\n                method: HTTP_REQUEST_TYPE.GET,\r\n                headers: this.getFetchHeaders(options),\r\n            });\r\n        }\r\n        catch (e) {\r\n            if (window.navigator.onLine) {\r\n                throw createBrowserAuthError(getRequestFailed);\r\n            }\r\n            else {\r\n                throw createBrowserAuthError(noNetworkConnectivity);\r\n            }\r\n        }\r\n        try {\r\n            return {\r\n                headers: this.getHeaderDict(response.headers),\r\n                body: (await response.json()),\r\n                status: response.status,\r\n            };\r\n        }\r\n        catch (e) {\r\n            throw createBrowserAuthError(failedToParseResponse);\r\n        }\r\n    }\r\n    /**\r\n     * Fetch Client for REST endpoints - Post request\r\n     * @param url\r\n     * @param headers\r\n     * @param body\r\n     */\r\n    async sendPostRequestAsync(url, options) {\r\n        const reqBody = (options && options.body) || Constants.EMPTY_STRING;\r\n        let response;\r\n        try {\r\n            response = await fetch(url, {\r\n                method: HTTP_REQUEST_TYPE.POST,\r\n                headers: this.getFetchHeaders(options),\r\n                body: reqBody,\r\n            });\r\n        }\r\n        catch (e) {\r\n            if (window.navigator.onLine) {\r\n                throw createBrowserAuthError(postRequestFailed);\r\n            }\r\n            else {\r\n                throw createBrowserAuthError(noNetworkConnectivity);\r\n            }\r\n        }\r\n        try {\r\n            return {\r\n                headers: this.getHeaderDict(response.headers),\r\n                body: (await response.json()),\r\n                status: response.status,\r\n            };\r\n        }\r\n        catch (e) {\r\n            throw createBrowserAuthError(failedToParseResponse);\r\n        }\r\n    }\r\n    /**\r\n     * Get Fetch API Headers object from string map\r\n     * @param inputHeaders\r\n     */\r\n    getFetchHeaders(options) {\r\n        const headers = new Headers();\r\n        if (!(options && options.headers)) {\r\n            return headers;\r\n        }\r\n        const optionsHeaders = options.headers;\r\n        Object.keys(optionsHeaders).forEach((key) => {\r\n            headers.append(key, optionsHeaders[key]);\r\n        });\r\n        return headers;\r\n    }\r\n    getHeaderDict(headers) {\r\n        const headerDict = {};\r\n        headers.forEach((value, key) => {\r\n            headerDict[key] = value;\r\n        });\r\n        return headerDict;\r\n    }\r\n}\n\nexport { FetchClient };\n//# sourceMappingURL=FetchClient.mjs.map\n"],"names":["ErrorLink","BrowserAuthErrorMessages","BrowserAuthError","constructor","errorCode","super","Object","setPrototypeOf","this","prototype","name","createBrowserAuthError","pkceNotCreated","cryptoNonExistent","emptyNavigateUri","hashEmptyError","noStateInHash","hashDoesNotContainKnownProperties","unableToParseState","stateInteractionTypeMismatch","interactionInProgress","popupWindowError","emptyWindowError","userCancelled","monitorPopupTimeout","monitorWindowTimeout","redirectInIframe","blockIframeReload","blockNestedPopups","iframeClosedPrematurely","silentLogoutUnsupported","noAccountError","silentPromptValueError","noTokenRequestCacheError","unableToParseTokenRequestCacheError","noCachedAuthorityError","authRequestNotSetError","invalidCacheType","nonBrowserEnvironment","databaseNotOpen","noNetworkConnectivity","postRequestFailed","getRequestFailed","failedToParseResponse","unableToLoadToken","cryptoKeyNotFound","authCodeRequired","authCodeOrNativeAccountIdRequired","spaCodeAndNativeAccountIdPresent","databaseUnavailable","unableToAcquireTokenFromNativePlatform","nativeHandshakeTimeout","nativeExtensionNotInstalled","nativeConnectionNotEstablished","uninitializedPublicClientApplication","nativePromptNotSupported","invalidBase64String","invalidPopTokenRequest","BrowserConfigurationAuthErrorMessages","BrowserConfigurationAuthError","errorMessage","createBrowserConfigurationAuthError","storageNotSupported","stubbedPublicClientApplicationCalled","inMemRedirectUnavailable","INVALID_METHOD_ERROR","NativeAuthErrorMessages","NativeAuthError","description","ext","isFatalNativeAuthError","error","status","createNativeAuthError","code","contentError","userSwitch","EventHandler","logger","browserCrypto","eventCallbacks","Map","listeningToStorageEvents","handleAccountCacheChange","bind","addEventCallback","callback","window","callbackId","set","verbose","removeEventCallback","delete","enableAccountStorageEvents","addEventListener","disableAccountStorageEvents","removeEventListener","emitEvent","eventType","interactionType","payload","message","timestamp","Date","now","info","forEach","apply","e","key","includes","cacheValue","newValue","oldValue","parsedValue","JSON","parse","accountInfo","getAccountInfo","undefined","EventType","INITIALIZE_START","INITIALIZE_END","ACCOUNT_ADDED","ACCOUNT_REMOVED","ACTIVE_ACCOUNT_CHANGED","LOGIN_START","LOGIN_SUCCESS","LOGIN_FAILURE","ACQUIRE_TOKEN_START","ACQUIRE_TOKEN_SUCCESS","ACQUIRE_TOKEN_FAILURE","ACQUIRE_TOKEN_NETWORK_START","SSO_SILENT_START","SSO_SILENT_SUCCESS","SSO_SILENT_FAILURE","ACQUIRE_TOKEN_BY_CODE_START","ACQUIRE_TOKEN_BY_CODE_SUCCESS","ACQUIRE_TOKEN_BY_CODE_FAILURE","HANDLE_REDIRECT_START","HANDLE_REDIRECT_END","POPUP_OPENED","LOGOUT_START","LOGOUT_SUCCESS","LOGOUT_FAILURE","LOGOUT_END","RESTORE_FROM_BFCACHE","BaseInteractionClient","config","storageImpl","eventHandler","navigationClient","performanceClient","nativeMessageHandler","correlationId","browserStorage","networkClient","system","clone","async","account","getActiveAccount","setActiveAccount","removeAccount","clear","clearKeystore","getRedirectUri","requestRedirectUri","redirectUri","auth","initializeServerTelemetryManager","apiId","forceRefresh","telemetryPayload","clientId","wrapperSKU","getWrapperMetadata","wrapperVer","requestAuthority","requestAzureCloudOptions","addQueueMeasurement","authorityOptions","protocolMode","OIDCOptions","knownAuthorities","cloudDiscoveryMetadata","authorityMetadata","skipAuthorityMetadataCache","userAuthority","authority","builtAuthority","azureCloudOptions","discoveredAuthority","i","isAlias","environment","BrokerServerParamKeys","NativeInteractionClient","provider","accountId","nativeStorageImpl","nativeStorageManager","silentCacheClient","serverTelemetryManager","extensionName","getExtensionId","length","skus","libraryName","libraryVersion","extensionVersion","getExtensionVersion","addRequestSKUs","request","extraParameters","trace","nativeATMeasurement","startMeasurement","reqTimestamp","nativeRequest","initializeNativeRequest","result","acquireTokensFromCache","end","success","isNativeBroker","fromCache","nativeTokenRequest","messageBody","method","response","sendMessage","validatedResponse","validateNativeResponse","handleNativeResponse","then","requestId","clearNativeBrokerErrorCode","catch","subErrorCode","subError","setNativeBrokerErrorCode","createSilentCacheRequest","cachedAccount","scopes","scope","asArray","nativeAccountId","warning","getBaseAccountInfo","silentRequest","acquireToken","fullAccount","idTokenClaims","idToken","rootMeasurement","remainingParameters","onRedirectNavigate","setTemporaryCache","stringify","navigationOptions","timeout","redirectNavigationTimeout","noHistory","navigateToLoginRequestUrl","location","href","navigateExternal","isInteractionInProgress","cachedRequest","getCachedNativeRequest","addFields","prompt","removeItem","generateCacheKey","setInteractionInProgress","res","logout","Promise","reject","id_token","homeAccountIdentifier","createHomeAccountIdentifier","cachedhomeAccountId","getAccountInfoFilteredBy","homeAccountId","id","getDiscoveredAuthority","baseAccount","client_info","tid","generateAuthenticationResult","canonicalAuthority","cacheAccount","cacheNativeTokens","access_token","tenantId","generateScopes","tokenType","signPopToken","shr","popTokenGenerator","shrParameters","resourceRequestMethod","resourceRequestUri","shrClaims","shrNonce","keyId","accountEntity","mats","addTelemetryFromNativeResponse","responseScopes","accountProperties","properties","uid","oid","sub","responseAccessToken","generatePopAccessToken","uniqueId","accessToken","isResponseFromCache","expiresOn","Number","expires_in","state","fromNativeBroker","setAccount","removeAccountContext","cachedIdToken","tokenExpirationSeconds","parseInt","nativeCacheRecord","printScopes","saveCacheRecord","storeInCache","getMATSFromResponse","extensionId","matsBrokerVersion","broker_version","matsAccountJoinOnStart","account_join_on_start","matsAccountJoinOnEnd","account_join_on_end","matsDeviceJoin","device_join","matsPromptBehavior","prompt_behavior","matsApiErrorCode","api_error_code","matsUiVisible","ui_visible","matsSilentCode","silent_code","matsSilentBiSubCode","silent_bi_sub_code","matsSilentMessage","silent_message","matsSilentStatus","silent_status","matsHttpStatus","http_status","matsHttpEventCount","http_event_count","hasOwnProperty","MATS","is_cached","validateAsUri","remainingProperties","scopeSet","appendScopes","validatedRequest","urlString","getPrompt","authenticationScheme","windowTitleSubstring","document","title","extraQueryParameters","tokenQueryParameters","extendedExpiryToken","popKid","handleExtraBrokerParams","telemetry","reqCnfData","base64UrlEncode","kid","generatedReqCnfData","generateCnf","reqCnfString","reqCnf","child_client_id","child_redirect_uri","brk_redirect_uri","PopupClient","unloadWindow","nativeStorage","popupName","generatePopupName","popupWindowAttributes","asyncPopups","acquireTokenPopupAsync","popup","openSizedPopup","logoutRequest","validLogoutRequest","initializeLogoutRequest","generateLogoutPopupName","mainWindowRedirectUri","logoutPopupAsync","validRequest","initializeAuthorizationRequest","authCodeRequest","initializeAuthorizationCodeRequest","authClient","createAuthCodeClient","fetchNativeAccountIdMeasurement","navigateUrl","getAuthCodeUrl","nativeBroker","interactionHandler","I","popupParameters","popupWindow","initiateAuthRequest","responseString","monitorPopupForHash","serverParams","serverResponseType","nativeInteractionClient","userRequestState","handleCodeResponse","close","setCorrelationId","cacheFailedRequest","clearCacheOnLogout","endSessionEndpoint","postLogoutRedirectUri","absoluteUrl","navigateInternal","logoutUri","getLogoutUri","openPopup","verbosePii","requestUrl","params","infoPii","resolve","intervalId","setInterval","closed","clearInterval","responseType","search","hash","pollIntervalMilliseconds","finally","cleanPopup","urlNavigate","popupParams","assign","focus","currentWindow","winLeft","screenLeft","screenX","winTop","screenTop","screenY","winWidth","innerWidth","documentElement","clientWidth","body","winHeight","innerHeight","clientHeight","width","popupSize","height","top","popupPosition","left","Math","max","open","cleanRequestByInteractionType","preventDefault","join","RedirectHandler","authCodeModule","authModule","redirectStartPage","cacheCodeRequest","redirectTimeout","stateKey","generateStateKey","requestState","getTemporaryCache","ClientAuthErrorCodes","authCodeResponse","handleFragmentResponse","ServerError","nonceKey","generateNonceKey","cachedNonce","cloud_instance_host_name","updateAuthority","PerformanceEvent","nonce","clientInfo","cachedCcsCred","checkCcsCredentials","ccsCredential","tokenResponse","cleanRequestByState","errorPii","RedirectClient","StandardInteractionClient","updateCacheEntries","loginHint","handleBackButton","event","persisted","NativeMessageHandler","getRedirectStartPage","AuthError","parentMeasurement","getRedirectResponse","loginRequestUrl","Constants","UrlString","indexOf","handleResponse","allowRedirectInIframe","processHashOnRedirect","homepage","userProvidedResponse","UrlUtils","v","cachedHash","getCachedRequest","ProtocolUtils","currentAuthority","getCachedAuthority","ThrottlingUtils","ProtocolMode","getInteractionInProgress","requestStartPage","HybridSpaAuthorizationCodeClient","AuthorizationCodeClient","includeRedirectUri","SilentAuthCodeClient","clientConfig","getClientConfiguration","InteractionHandler","handleCodeResponseFromServer","msgraph_host","msGraphHost","cloud_graph_host_name","cloudGraphHostName","cloudInstanceHostName","SilentCacheClient","silentAuthClient","authResponse","acquireCachedToken","navigateFrameWait","loadFrame","loadFrameSync","monitorIframeForHash","iframe","timeoutId","setTimeout","contentWindow","clearTimeout","removeHiddenIframe","frameHandle","createHiddenIframe","src","authFrame","createElement","className","style","visibility","position","border","setAttribute","appendChild","parentNode","removeChild","SilentIframeClient","sid","username","inputRequest","silentTokenHelper","BrowserConstants","retryError","retrySilentRequest","msalFrame","iframeHashTimeout","SilentRefreshClient","baseRequest","refreshTokenClient","createRefreshTokenClient","acquireTokenByRefreshToken","authorityUrl","generatedPkceParams","codeVerifier","verifier","codeChallenge","challenge","codeChallengeMethod","logoutHint","getLogoutHintFromIdTokenClaims","login_hint","loggerOptions","authOptions","clientCapabilities","systemOptions","tokenRenewalOffsetSeconds","preventCorsPreflight","loggerCallback","piiLoggingEnabled","logLevel","cacheOptions","claimsBasedCachingEnabled","cache","cryptoInterface","networkInterface","storageInterface","libraryInfo","sku","version","cpu","os","browserState","responseMode","legacyLoginHint","getLegacyLoginHint","validateNonce","ccsCred","createCcsCredentials","credential","type","NavigationClient","url","options","defaultNavigateWindow","static","replace","FetchClient","fetch","headers","getFetchHeaders","navigator","onLine","getHeaderDict","json","reqBody","Headers","optionsHeaders","keys","append","headerDict","value"],"sourceRoot":""}