{"version":3,"file":"vendors-114e6879.xxxxxxxx.bundle.js","mappings":";wyBAYA,MAAMA,EAA2B,IAC3BC,EAA4B,IAC5BC,EAA8B,IAC9BC,EAA6C,IAUnD,SAASC,GAAqBC,KAAMC,EAAeC,MAAOC,EAAgBC,OAAQC,EAAiBC,UAAWC,GAAuBC,GAEjI,MAAMC,EAAuB,CACzBC,SAAU,kBACVC,UAAW,GAAG,yBACdC,iBAAkB,GAClBC,uBAAwB,kBACxBC,kBAAmB,kBACnBC,YAAa,kBACbC,sBAAuB,kBACvBC,2BAA2B,EAC3BC,mBAAoB,GACpBC,aAAc,QACdC,YAAa,CACTC,mBAAoB,cACpBC,cAAe,CACX,kBACA,mBACA,4BAGRC,kBAAmB,CACfC,mBAAoB,SACpBC,OAAQ,mBAEZC,4BAA4B,EAC5BC,uBAAuB,GAGrBC,EAAwB,CAC1BC,cAAe,oBACfC,uBAAwB,oBACxBC,wBAAwB,EACxBC,eAAe,EAEfC,yBAAuB9B,GACnBA,EAAe0B,gBAAkB,mBAGrCK,2BAA2B,GAGzBC,EAAyB,CAE3BC,eAAgB,OAGhBC,SAAU,SACVC,mBAAmB,GAuBjBC,EAAwB,IApBS,IAChC,IACHC,cAAeL,EACfM,cAAejC,EACT,IAAI,IACJ,IACNkC,iBAAkB,IAAI,IACtBC,iBAAkB,EAElBC,kBAAmBvC,GAAiBsC,kBAAoBhD,EACxDkD,kBAAmBxC,GAAiBsC,kBAAoB/C,EACxDkD,kBAAmB,EACnBC,0BAA2BlD,EAC3BmD,aAAa,EACbC,uBAAuB,EACvBC,mBAAmB,EACnBC,6BAA8B9C,GAAiB8C,8BAC3CrD,EACJsD,yBAA0B,kCAIvB/C,EACHmC,cAAenC,GAAiBmC,eAAiBL,GAE/CkB,EAA4B,CAC9BC,YAAa,CACTC,QAAS,kBACTC,WAAY,mBAEhBC,OAAQ,IAAI,KAShB,GANIxD,GAAekB,eAAiB,UAChClB,GAAemB,aACA,IAAI,IAAOmB,EAAsBC,eACzCkB,QAAQC,KAAKC,WAAU,QAA+B,QAG7D3D,GAAekB,cACflB,EAAckB,eAAiB,SAC/BoB,GAAuBW,kBACvB,MAAM,QAA+B,MAezC,MAbwB,CACpBlD,KAAM,IACCS,KACAR,EACHmB,YAAa,IACNX,EAAqBW,eACrBnB,GAAemB,cAG1BlB,MAAO,IAAK0B,KAA0BzB,GACtCC,OAAQmC,EACRjC,UAAW,IAAK+C,KAA8B9C,GAGtD,mFC3HAsD,eAAeC,EAAmBC,EAAQC,GACtC,MAAMC,EAAW,IAAI,IAAyBF,GAE9C,aADME,EAASC,aACR,qBAAoCD,EAAUD,EACzD,oJCGA,MAAMG,EACFC,YAAYC,EAAQC,GAChBC,KAAKF,OAASA,GAEd,QAAwBA,GACxBE,KAAKrE,MAAQ,IAAIsE,EAAA,EAAmBD,KAAKF,QACzCE,KAAKD,kBAAoBA,CAC7B,CAKAG,gBACI,OAAO,SACX,CAKAC,aAAaC,GACT,OAAO,QAAaA,EACxB,CAKAC,aAAaD,GACT,OAAO,OAAaA,EACxB,CAKAE,gBAAgBF,GACZ,OAAO,QAAUA,EACrB,CAMAG,UAAUC,GACN,OAAOR,KAAKM,gBAAgBlB,KAAKC,UAAU,CAAEoB,IAAKD,IACtD,CAKAlB,6BAA6BG,GACzB,MAAMiB,EAA4BV,KAAKD,mBAAmBY,iBAAiBC,EAAA,oCAAoDnB,EAAQoB,eAEjIC,QAAgB,QAAgBlB,EAAUmB,YAAanB,EAAUoB,gBAEjEC,QAAqB,QAAUH,EAAQI,WAMvCC,EAAkBC,EALG,CACvBC,EAAGJ,EAAaI,EAChBC,IAAKL,EAAaK,IAClBC,EAAGN,EAAaM,IAGdC,QAAsBxB,KAAKyB,WAAWN,GAEtCO,QAAsB,QAAUZ,EAAQa,YAExCC,QAAgC,QAAUF,GAAe,EAAO,CAAC,SAavE,aAXM1B,KAAKrE,MAAMkG,QAAQL,EAAe,CACpCG,WAAYC,EACZV,UAAWJ,EAAQI,UACnBY,cAAerC,EAAQsC,sBACvBC,WAAYvC,EAAQwC,qBAEpBvB,GACAA,EAA0BwB,IAAI,CAC1BC,SAAS,IAGVX,CACX,CAKAlC,4BAA4BmB,GAGxB,aAFMT,KAAKrE,MAAMyG,WAAW3B,UACLT,KAAKrE,MAAM0G,YAAY5B,EAElD,CAIAnB,sBAEIU,KAAKrE,MAAM2G,gBAKX,IAEI,aADMtC,KAAKrE,MAAM4G,mBACV,CACX,CACA,MAAOlB,GAOH,OANIA,aAAamB,MACbxC,KAAKF,OAAO2C,MAAM,wCAAwCpB,EAAEqB,WAG5D1C,KAAKF,OAAO2C,MAAM,gDAEf,CACX,CACJ,CAMAnD,cAAcqD,EAASlC,EAAKmC,EAAY/B,GACpC,MAAMgC,EAAqB7C,KAAKD,mBAAmBY,iBAAiBC,EAAA,qBAAqCC,GACnGiC,QAAsB9C,KAAKrE,MAAMoH,QAAQtC,GAC/C,IAAKqC,EACD,MAAM,QAAuB,MAGjC,MAAM7B,QAAqB,QAAU6B,EAAc5B,WAC7C8B,EAAqB5B,EAAsBH,GAE3CgC,GAAyB,QAAU7D,KAAKC,UAAU,CAAEoB,IAAKA,KAEzDyC,EAAYC,EAAA,qBAA8B,IACzCP,GAAYQ,OACfC,IAAKpC,EAAaoC,IAClB5C,IAAKwC,IAEHK,GAAmB,QAAUJ,GAEnCP,EAAQY,IAAM,CACVC,IAAKpE,KAAKqE,MAAMT,IAEpB,MAEMU,EAAc,GAAGJ,MAFA,QAAUlE,KAAKC,UAAUsD,MAK1CgB,GADU,IAAIC,aACQC,OAAOH,GAC7BI,QAAwB,QAAKhB,EAAcnB,WAAYgC,GAEvDI,EAAY,GAAGL,MADI,QAAa,IAAIM,WAAWF,MAOrD,OALIjB,GACAA,EAAmBX,IAAI,CACnBC,SAAS,IAGV4B,CACX,CAKAzE,iBAAiB2E,GACb,OAAO,QAAWA,EACtB,EAIJ,SAAS7C,EAAsB8C,GAC3B,OAAO9E,KAAKC,UAAU6E,EAAKC,OAAOC,KAAKF,GAAKG,OAChD,CAJAzE,EAAUoB,eAAiB,CAAC,OAAQ,UACpCpB,EAAUmB,aAAc,+RCzJxB,SAASuD,EAAeC,GACpB,MAAMC,EAAgBD,GAASC,cAC/B,OAAIA,GAAeC,KAAOD,GAAeE,IAC9B,MAENF,GAAeG,IAGY,yCAAvBH,GAAeG,IACb,MAEJ,WANP,CAOJ,CACA,SAASC,EAAeC,EAAaC,GACjC,KACI,QAAiBD,EACrB,CACA,MAAOxD,GAEH,MADAyD,EAAiB5C,IAAI,CAAEC,SAAS,GAASd,GACnCA,CACV,CACJ,CACA,MAAM0D,EAsBFlF,YAAYmF,GACRhF,KAAKgF,iBAAmBA,EACxBhF,KAAK/D,qBACD+D,KAAKgF,iBAAiB/I,uBAE1B+D,KAAKR,OAASwF,EAAiBC,YAC/BjF,KAAK6E,aAAc,EAEnB7E,KAAKF,OAASE,KAAKgF,iBAAiBE,YAEpClF,KAAK9B,cAAgB8B,KAAKR,OAAO3D,OAAOqC,cAExC8B,KAAK7B,iBAAmB6B,KAAKR,OAAO3D,OAAOsC,iBAE3C6B,KAAKmF,iBAAmB,IAAIC,IAE5BpF,KAAKqF,wBAA0B,IAAID,IAEnCpF,KAAKD,kBAAoBC,KAAKR,OAAOzD,UAAUmD,OAE/Cc,KAAKsF,cAAgBtF,KAAK/D,qBACpB,IAAI2D,EAAUI,KAAKF,OAAQE,KAAKD,mBAChC,IACNC,KAAKuF,aAAe,IAAIC,EAAA,EAAaxF,KAAKF,OAAQE,KAAKsF,eAEvDtF,KAAKyF,eAAiBzF,KAAK/D,qBACrB,IAAIyJ,EAAA,EAAoB1F,KAAKR,OAAO/D,KAAKU,SAAU6D,KAAKR,OAAO7D,MAAOqE,KAAKsF,cAAetF,KAAKF,QAAQ,QAA4BE,KAAKR,OAAO/D,MAAOuE,KAAKD,oBAC3J,OAA8BC,KAAKR,OAAO/D,KAAKU,SAAU6D,KAAKF,QAEpE,MAAM6F,EAAqB,CACvBrI,cAAe,mBACfC,uBAAwB,mBACxBC,wBAAwB,EACxBC,eAAe,EACfC,uBAAuB,EACvBC,2BAA2B,GAE/BqC,KAAK4F,sBAAwB,IAAIF,EAAA,EAAoB1F,KAAKR,OAAO/D,KAAKU,SAAUwJ,EAAoB3F,KAAKsF,cAAetF,KAAKF,YAAQ+F,EAAW7F,KAAKD,mBAErJC,KAAK8F,WAAa,IAAIC,EAAA,EAAW/F,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKF,OAAQE,KAAKsF,eACrFtF,KAAKgG,0BAA4B,IAAIZ,IAErCpF,KAAKiG,oBAAsBjG,KAAKiG,oBAAoBC,KAAKlG,MAEzDA,KAAKmG,mCACDnG,KAAKmG,mCAAmCD,KAAKlG,KACrD,CACAoG,8BAA8BpB,EAAkBvF,GAC5C,MAAM4G,EAAa,IAAItB,EAAmBC,GAE1C,aADMqB,EAAW1G,WAAWF,GACrB4G,CACX,CACAJ,oBAAoBpF,GACXA,IAGLb,KAAKF,OAAOwG,KAAK,oCACjBtG,KAAKD,kBAAkBwG,gBAAgB,CAAEC,sBAAuB,GAAK3F,GACzE,CAKAvB,iBAAiBG,GAEb,GADAO,KAAKF,OAAO2G,MAAM,qBACdzG,KAAK6E,YAEL,YADA7E,KAAKF,OAAOwG,KAAK,sDAGrB,MAAMI,EAAoBjH,GAASoB,eAAiBb,KAAK2G,0BACnDhI,EAAoBqB,KAAKR,OAAO3D,OAAO8C,kBACvCiI,EAAkB5G,KAAKD,kBAAkBY,iBAAiBC,EAAA,+BAA+C8F,GAE/G,GADA1G,KAAKuF,aAAasB,UAAUC,EAAA,oBACxBnI,EACA,IACIqB,KAAK+G,8BACKC,EAAA,iBAAoChH,KAAKF,OAAQE,KAAKR,OAAO3D,OAAO+C,6BAA8BoB,KAAKD,kBACrH,CACA,MAAOsB,GACHrB,KAAKF,OAAOmH,QAAQ5F,EACxB,CAECrB,KAAKR,OAAO7D,MAAMgC,4BACnBqC,KAAKF,OAAOmH,QAAQ,mFACd,IAAAC,GAAYlH,KAAKyF,eAAe0B,6BAA6BjB,KAAKlG,KAAKyF,gBAAiB7E,EAAA,gCAAgDZ,KAAKF,OAAQE,KAAKD,kBAAmB2G,EAA7K,CAAgM1G,KAAKD,kBAAmB2G,IAElO1G,KAAK6E,aAAc,EACnB7E,KAAKuF,aAAasB,UAAUC,EAAA,kBAC5BF,EAAgB1E,IAAI,CAAEvD,oBAAmBwD,SAAS,GACtD,CASA7C,4BAA4B8H,GAIxB,GAHApH,KAAKF,OAAOmH,QAAQ,iCAEpB,QAA8BjH,KAAK6E,aAC/B7E,KAAK/D,qBAAsB,CAM3B,MAAMoL,EAAsBD,GAAQ,GACpC,IAAIE,EAAWtH,KAAKmF,iBAAiBoC,IAAIF,GASzC,YARwB,IAAbC,GACPA,EAAWtH,KAAKwH,8BAA8BJ,GAC9CpH,KAAKmF,iBAAiBsC,IAAIJ,EAAqBC,GAC/CtH,KAAKF,OAAOmH,QAAQ,kFAGpBjH,KAAKF,OAAOmH,QAAQ,8FAEjBK,CACX,CAEA,OADAtH,KAAKF,OAAOmH,QAAQ,+DACb,IACX,CAMA3H,oCAAoC8H,GAChC,MAAMM,EAAmB1H,KAAK2H,iBACxBlI,EAAUO,KAAKyF,eAAemC,yBAC9BC,EAAYpI,GACduH,EAAA,oBAAuChH,KAAKR,OAAQQ,KAAKF,OAAQE,KAAK+G,0BACtE/G,KAAK+G,0BACJK,EACCvG,EAAgBgH,EAChBpI,GAASoB,cACTb,KAAKyF,eAAeqC,kBAAkB,qBAAmC,IAAS,GAClFC,EAAkB/H,KAAKD,kBAAkBY,iBAAiBC,EAAA,wBAAwCC,GAExG,IAAIsE,EACJ,GAFAnF,KAAKuF,aAAasB,UAAUC,EAAA,wBAAiC,eAEzDe,GAAa7H,KAAK+G,wBAAyB,CAC3C/G,KAAKF,OAAO2G,MAAM,gEAClB,MAAMuB,EAAe,IAAIC,EAAA,EAAwBjI,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB,2BAA6B6B,KAAKD,kBAAmBC,KAAK+G,wBAAyBtH,EAAQyI,UAAWlI,KAAK4F,sBAAuBnG,EAAQoB,eACxSsE,GAAmB,IAAA+B,GAAYc,EAAaG,sBAAsBjC,KAAK8B,GAAepH,EAAA,0CAA0DZ,KAAKF,OAAQE,KAAKD,kBAAmBgI,EAAgBK,MAAMvH,cAAxL,CAAuMb,KAAKD,kBAAmBgI,EAAgBK,MAAMvH,cAC5Q,KACK,CACDb,KAAKF,OAAO2G,MAAM,yDAClB,MAAM4B,EAAiBrI,KAAKsI,qBAAqBzH,GACjDsE,GAAmB,IAAA+B,GAAYmB,EAAeF,sBAAsBjC,KAAKmC,GAAiBzH,EAAA,oCAAoDZ,KAAKF,OAAQE,KAAKD,kBAAmBgI,EAAgBK,MAAMvH,cAAtL,CAAqMuG,EAAMW,EAClO,CACA,OAAO5C,EACFoD,MAAMC,IACHA,GAEoBd,EAAiBe,OAASzI,KAAK2H,iBAAiBc,QAEhEzI,KAAKuF,aAAasB,UAAUC,EAAA,gBAAyB,cAA0B0B,GAC/ExI,KAAKF,OAAOmH,QAAQ,2DAGpBjH,KAAKuF,aAAasB,UAAUC,EAAA,wBAAiC,cAA0B0B,GACvFxI,KAAKF,OAAOmH,QAAQ,kEAExBc,EAAgB7F,IAAI,CAChBC,SAAS,EACTuG,YAAapE,EAAekE,EAAOjE,YAQnCwD,EAAgBK,MAAMO,UACtBZ,EAAgB7F,IAAI,CAAEC,SAAS,IAG/B4F,EAAgBa,UAGxB5I,KAAKuF,aAAasB,UAAUC,EAAA,sBAA+B,eACpD0B,KAENK,OAAOxH,IACR,MAAMyH,EAAazH,EAYnB,MAVIqG,EAAiBe,OAAS,EAC1BzI,KAAKuF,aAAasB,UAAUC,EAAA,wBAAiC,cAA0B,KAAMgC,GAG7F9I,KAAKuF,aAAasB,UAAUC,EAAA,gBAAyB,cAA0B,KAAMgC,GAEzF9I,KAAKuF,aAAasB,UAAUC,EAAA,sBAA+B,eAC3DiB,EAAgB7F,IAAI,CAChBC,SAAS,GACV2G,GACGzH,CAAC,GAEf,CAUA/B,2BAA2BG,GAEvB,MAAMoB,EAAgBb,KAAK2G,wBAAwBlH,GACnDO,KAAKF,OAAOmH,QAAQ,8BAA+BpG,GACnD,MAAMkI,EAAiB/I,KAAKD,kBAAkBY,iBAAiBC,EAAA,2BAA2CC,GAC1GkI,EAAeC,IAAI,CACfN,YAAapE,EAAe7E,EAAQ8E,SACpC0E,WAAYxJ,EAAQwJ,aAGxB,MAAMC,EAAuBzJ,EAAQ0J,mBACrC,GAAID,EACAzJ,EAAQ0J,mBAAsBC,IAC1B,MAAMC,EAA2C,mBAAzBH,EAClBA,EAAqBE,QACrBvD,EAON,OANiB,IAAbwD,EACAN,EAAe7G,IAAI,CAAEC,SAAS,IAG9B4G,EAAeH,UAEZS,CAAQ,MAGlB,CACD,MAAMC,EAA6BtJ,KAAKR,OAAO/D,KAAK0N,mBACpDnJ,KAAKR,OAAO/D,KAAK0N,mBAAsBC,IACnC,MAAMC,EAAiD,mBAA/BC,EAClBA,EAA2BF,QAC3BvD,EAON,OANiB,IAAbwD,EACAN,EAAe7G,IAAI,CAAEC,SAAS,IAG9B4G,EAAeH,UAEZS,CAAQ,CAEvB,CAEA,MAAME,EAAavJ,KAAK2H,iBAAiBc,OAAS,EAClD,IASI,IAAID,EAyBJ,OAjCA,QAAuBxI,KAAK6E,YAAa7E,KAAKR,QAC9CQ,KAAKyF,eAAe+D,0BAAyB,GACzCD,EACAvJ,KAAKuF,aAAasB,UAAUC,EAAA,sBAA+B,cAA0BrH,GAGrFO,KAAKuF,aAAasB,UAAUC,EAAA,cAAuB,cAA0BrH,GAK7E+I,EAFAxI,KAAK+G,yBAA2B/G,KAAKyJ,aAAahK,GAC7B,IAAIwI,EAAA,EAAwBjI,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB,0BAA4B6B,KAAKD,kBAAmBC,KAAK+G,wBAAyB/G,KAAK0J,mBAAmBjK,GAAUO,KAAK4F,sBAAuB/E,GAEzS8I,qBAAqBlK,EAASsJ,GAC9BF,OAAOxH,IACR,GAAIA,aAAauI,EAAA,KACb,QAAuBvI,GAGvB,OAFArB,KAAK+G,6BAA0BlB,EACR7F,KAAKsI,qBAAqBzH,GAC3BgJ,aAAapK,GAElC,GAAI4B,aAAayI,EAAA,GAGlB,OAFA9J,KAAKF,OAAOmH,QAAQ,mHACGjH,KAAKsI,qBAAqBzH,GAC3BgJ,aAAapK,GAGvC,MADAO,KAAKyF,eAAe+D,0BAAyB,GACvCnI,CAAC,IAIYrB,KAAKsI,qBAAqBzH,GACzBgJ,aAAapK,SAE5B+I,CACjB,CACA,MAAOnH,GAQH,MAPA0H,EAAe7G,IAAI,CAAEC,SAAS,GAASd,GACnCkI,EACAvJ,KAAKuF,aAAasB,UAAUC,EAAA,wBAAiC,cAA0B,KAAMzF,GAG7FrB,KAAKuF,aAAasB,UAAUC,EAAA,gBAAyB,cAA0B,KAAMzF,GAEnFA,CACV,CACJ,CAUA0I,kBAAkBtK,GACd,MAAMoB,EAAgBb,KAAK2G,wBAAwBlH,GAC7CuK,EAAqBhK,KAAKD,kBAAkBY,iBAAiBC,EAAA,qBAAqCC,GACxGmJ,EAAmBhB,IAAI,CACnBC,WAAYxJ,EAAQwJ,WACpBP,YAAapE,EAAe7E,EAAQ8E,WAExC,IACIvE,KAAKF,OAAOmH,QAAQ,2BAA4BpG,GAChD+D,EAAe5E,KAAK6E,YAAamF,GACjChK,KAAKyF,eAAe+D,0BAAyB,EACjD,CACA,MAAOnI,GAEH,OAAO4I,QAAQC,OAAO7I,EAC1B,CAEA,MAAMqG,EAAmB1H,KAAK2H,iBAO9B,IAAIa,EAoCJ,OA1CId,EAAiBe,OAAS,EAC1BzI,KAAKuF,aAAasB,UAAUC,EAAA,sBAA+B,WAAuBrH,GAGlFO,KAAKuF,aAAasB,UAAUC,EAAA,cAAuB,WAAuBrH,GAI1E+I,EADAxI,KAAKyJ,aAAahK,GACTO,KAAKmK,mBAAmB,IAC1B1K,EACHoB,iBACD,wBACE0H,MAAMjB,IACPtH,KAAKyF,eAAe+D,0BAAyB,GAC7CQ,EAAmB9H,IAAI,CACnBC,SAAS,EACTiI,gBAAgB,EAChBC,UAAW/C,EAAS+C,UACpB3B,YAAapE,EAAegD,EAAS/C,WAElC+C,KAENuB,OAAOxH,IACR,GAAIA,aAAauI,EAAA,KACb,QAAuBvI,GAGvB,OAFArB,KAAK+G,6BAA0BlB,EACX7F,KAAKsK,kBAAkBzJ,GACxBgJ,aAAapK,GAE/B,GAAI4B,aAAayI,EAAA,GAGlB,OAFA9J,KAAKF,OAAOmH,QAAQ,gHACAjH,KAAKsK,kBAAkBzJ,GACxBgJ,aAAapK,GAGpC,MADAO,KAAKyF,eAAe+D,0BAAyB,GACvCnI,CAAC,IAISrB,KAAKsK,kBAAkBzJ,GACtBgJ,aAAapK,GAE/B+I,EACFD,MAAMC,IAIad,EAAiBe,OAASzI,KAAK2H,iBAAiBc,OAEhEzI,KAAKuF,aAAasB,UAAUC,EAAA,gBAAyB,WAAuB0B,GAG5ExI,KAAKuF,aAAasB,UAAUC,EAAA,wBAAiC,WAAuB0B,GAExFwB,EAAmB9H,IAAI,CACnBC,SAAS,EACTkI,UAAW7B,EAAO6B,UAClBE,gBAAiB/B,EAAOgC,YAAY/B,OACpCgC,YAAajC,EAAOkC,QAAQjC,OAC5BC,YAAapE,EAAekE,EAAOjE,WAEhCiE,KAENK,OAAOxH,IACJqG,EAAiBe,OAAS,EAC1BzI,KAAKuF,aAAasB,UAAUC,EAAA,wBAAiC,WAAuB,KAAMzF,GAG1FrB,KAAKuF,aAAasB,UAAUC,EAAA,gBAAyB,WAAuB,KAAMzF,GAEtF2I,EAAmB9H,IAAI,CACnBC,SAAS,GACVd,GAEI4I,QAAQC,OAAO7I,KAE9B,CACA8E,qCACI,MAAMwE,EAAc3K,KAAK4K,sBACrB5K,KAAK6K,mCACJF,IAGL3K,KAAKF,OAAOwG,KAAK,uCAAwCqE,EAAYvC,MAAM0C,MAC3EH,EAAYI,UAAU,CAClBvE,sBAAuB,IAE/B,CAkBAlH,gBAAgBG,GACZ,MAAMoB,EAAgBb,KAAK2G,wBAAwBlH,GAC7CuL,EAAe,IACdvL,EAEHwL,OAAQxL,EAAQwL,OAChBpK,cAAeA,GAcnB,IAAI2H,EAgBJ,OA5BAxI,KAAK4K,qBAAuB5K,KAAKD,kBAAkBY,iBAAiBC,EAAA,aAA6BC,GACjGb,KAAK4K,sBAAsB5B,IAAI,CAC3BC,WAAYxJ,EAAQwJ,WACpBP,YAAapE,EAAe7E,EAAQ8E,WAExCK,EAAe5E,KAAK6E,YAAa7E,KAAK4K,sBACtC5K,KAAK4K,sBAAsBG,UAAU,CACjCvE,sBAAuB,IAE3B0E,SAASC,iBAAiB,mBAAoBnL,KAAKmG,oCACnDnG,KAAKF,OAAOmH,QAAQ,mBAAoBpG,GACxCb,KAAKuF,aAAasB,UAAUC,EAAA,mBAA4B,YAAwBkE,GAG5ExC,EADAxI,KAAKyJ,aAAauB,GACThL,KAAKmK,mBAAmBa,EAAc,gBAAiBnC,OAAOxH,IAEnE,GAAIA,aAAauI,EAAA,KAAmB,QAAuBvI,GAGvD,OAFArB,KAAK+G,6BAA0BlB,EACJ7F,KAAKoL,yBAAyBJ,EAAanK,eAC5CgJ,aAAamB,GAE3C,MAAM3J,CAAC,IAIgBrB,KAAKoL,yBAAyBJ,EAAanK,eAC1CgJ,aAAamB,GAEtCxC,EACFD,MAAMjB,IACPtH,KAAKuF,aAAasB,UAAUC,EAAA,qBAA8B,YAAwBQ,GAClFtH,KAAK4K,sBAAsB1I,IAAI,CAC3BC,SAAS,EACTiI,eAAgB9C,EAAS+D,iBACzBhB,UAAW/C,EAAS+C,UACpBE,gBAAiBjD,EAASkD,YAAY/B,OACtCgC,YAAanD,EAASoD,QAAQjC,OAC9BC,YAAapE,EAAegD,EAAS/C,WAElC+C,KAENuB,OAAOxH,IAKR,MAJArB,KAAKuF,aAAasB,UAAUC,EAAA,qBAA8B,YAAwB,KAAMzF,GACxFrB,KAAK4K,sBAAsB1I,IAAI,CAC3BC,SAAS,GACVd,GACGA,CAAC,IAENiK,SAAQ,KACTJ,SAASK,oBAAoB,mBAAoBvL,KAAKmG,mCAAmC,GAEjG,CAWA7G,yBAAyBG,GACrB,MAAMoB,EAAgBb,KAAK2G,wBAAwBlH,GACnDO,KAAKF,OAAO2G,MAAM,4BAA6B5F,GAC/C,MAAM2K,EAAkBxL,KAAKD,kBAAkBY,iBAAiBC,EAAA,sBAAsCC,GACtG+D,EAAe5E,KAAK6E,YAAa2G,GACjCxL,KAAKuF,aAAasB,UAAUC,EAAA,8BAAuC,YAAwBrH,GAC3F+L,EAAgBxC,IAAI,CAAEC,WAAYxJ,EAAQwJ,aAC1C,IACI,GAAIxJ,EAAQgM,MAAQhM,EAAQiM,gBAExB,MAAM,QAAuB,MAE5B,GAAIjM,EAAQgM,KAAM,CACnB,MAAME,EAAiBlM,EAAQgM,KAC/B,IAAInE,EAAWtH,KAAKqF,wBAAwBkC,IAAIoE,GAkChD,OAjCKrE,GA8BDtH,KAAKF,OAAOmH,QAAQ,4CAA6CpG,GACjE2K,EAAgB5C,YA9BhB5I,KAAKF,OAAOmH,QAAQ,4CAA6CpG,GACjEyG,EAAWtH,KAAK4L,wBAAwB,IACjCnM,EACHoB,kBAEC0H,MAAMC,IACPxI,KAAKuF,aAAasB,UAAUC,EAAA,gCAAyC,YAAwB0B,GAC7FxI,KAAKqF,wBAAwBwG,OAAOF,GACpCH,EAAgBtJ,IAAI,CAChBC,SAAS,EACTiI,eAAgB5B,EAAO6C,iBACvBhB,UAAW7B,EAAO6B,UAClBE,gBAAiB/B,EAAOgC,YAAY/B,OACpCgC,YAAajC,EAAOkC,QAAQjC,OAC5BC,YAAapE,EAAekE,EAAOjE,WAEhCiE,KAENK,OAAOpG,IAMR,MALAzC,KAAKqF,wBAAwBwG,OAAOF,GACpC3L,KAAKuF,aAAasB,UAAUC,EAAA,gCAAyC,YAAwB,KAAMrE,GACnG+I,EAAgBtJ,IAAI,CAChBC,SAAS,GACVM,GACGA,CAAK,IAEfzC,KAAKqF,wBAAwBoC,IAAIkE,EAAgBrE,UAMxCA,CACjB,CACK,GAAI7H,EAAQiM,gBAAiB,CAC9B,GAAI1L,KAAKyJ,aAAahK,EAASA,EAAQiM,iBAAkB,CACrD,MAAMlD,QAAexI,KAAKmK,mBAAmB,IACtC1K,EACHoB,iBACD,wBAA0BpB,EAAQiM,iBAAiB7C,OAAOxH,IAMzD,MAJIA,aAAauI,EAAA,KACb,QAAuBvI,KACvBrB,KAAK+G,6BAA0BlB,GAE7BxE,CAAC,IAMX,OAJAmK,EAAgBtJ,IAAI,CAChBwG,YAAapE,EAAekE,EAAOjE,SACnCpC,SAAS,IAENqG,CACX,CAEI,MAAM,QAAuB,KAErC,CAEI,MAAM,QAAuB,KAErC,CACA,MAAOnH,GAKH,MAJArB,KAAKuF,aAAasB,UAAUC,EAAA,gCAAyC,YAAwB,KAAMzF,GACnGmK,EAAgBtJ,IAAI,CAChBC,SAAS,GACVd,GACGA,CACV,CACJ,CAMA/B,8BAA8BG,GAC1BO,KAAKF,OAAO2G,MAAM,iCAAkChH,EAAQoB,eAC5Db,KAAK6K,mCACD7K,KAAKD,kBAAkBY,iBAAiBC,EAAA,2BAA2CnB,EAAQoB,eAC/Fb,KAAK6K,oCAAoCE,UAAU,CAC/CvE,sBAAuB,IAE3B0E,SAASC,iBAAiB,mBAAoBnL,KAAKmG,oCACnD,MAAM2F,EAAuB9L,KAAK+L,2BAA2BtM,EAAQoB,eAqBrE,aApBgCiL,EAC3BjC,aAAapK,GACb8I,MAAMjB,IACPtH,KAAK6K,oCAAoC3I,IAAI,CACzCC,SAAS,EACT6J,UAAW1E,EAAS0E,UACpB5B,eAAgB9C,EAAS+D,iBACzBhB,UAAW/C,EAAS+C,YAEjB/C,KAENuB,OAAOoD,IAIR,MAHAjM,KAAK6K,oCAAoC3I,IAAI,CACzCC,SAAS,GACV8J,GACGA,CAAiB,IAEtBX,SAAQ,KACTJ,SAASK,oBAAoB,mBAAoBvL,KAAKmG,mCAAmC,GAGjG,CAQA7G,4BAA4B4M,EAAeC,GAEvC,OADAnM,KAAKD,kBAAkBqM,oBAAoBxL,EAAA,yBAAyCsL,EAAcrL,eAC1FsL,GACJ,KAAK,aACL,KAAK,iBACL,KAAK,gCACD,MAAME,EAAoBrM,KAAKsM,wBAAwBJ,EAAcrL,eACrE,OAAO,IAAAqG,GAAYmF,EAAkBxC,aAAa3D,KAAKmG,GAAoBzL,EAAA,iCAAiDZ,KAAKF,OAAQE,KAAKD,kBAAmBmM,EAAcrL,cAAxK,CAAuLqL,GAClM,QACI,MAAM,QAAsBK,EAAA,IAExC,CAOAjN,iCAAiC4M,EAAeC,GAE5C,OADAnM,KAAKD,kBAAkBqM,oBAAoBxL,EAAA,8BAA8CsL,EAAcrL,eAC/FsL,GACJ,KAAK,aACL,KAAK,gCACL,KAAK,kBACL,KAAK,4BACD,MAAMK,EAAsBxM,KAAKyM,0BAA0BP,EAAcrL,eACzE,OAAO,IAAAqG,GAAYsF,EAAoB3C,aAAa3D,KAAKsG,GAAsB5L,EAAA,mCAAmDZ,KAAKF,OAAQE,KAAKD,kBAAmBmM,EAAcrL,cAA9K,CAA6LqL,GACxM,QACI,MAAM,QAAsBK,EAAA,IAExC,CAMAjN,iCAAiCG,GAC7BO,KAAKD,kBAAkBqM,oBAAoBxL,EAAA,8BAA8CnB,EAAQoB,eACjG,MAAM6L,EAAqB1M,KAAKoL,yBAAyB3L,EAAQoB,eACjE,OAAO,IAAAqG,GAAYwF,EAAmB7C,aAAa3D,KAAKwG,GAAqB9L,EAAA,kCAAkDZ,KAAKF,OAAQE,KAAKD,kBAAmBN,EAAQoB,cAArK,CAAoLpB,EAC/L,CAQAH,aAAaqN,GACT,MAAM9L,EAAgBb,KAAK2G,wBAAwBgG,GAEnD,OADA3M,KAAKF,OAAOX,QAAQ,mGAAoG0B,GACjHb,KAAK4M,eAAe,CACvB/L,mBACG8L,GAEX,CAMArN,qBAAqBqN,GACjB,MAAM9L,EAAgBb,KAAK2G,wBAAwBgG,GAInD,OAHA,QAAuB3M,KAAK6E,YAAa7E,KAAKR,QAC9CQ,KAAKyF,eAAe+D,0BAAyB,GACtBxJ,KAAKsI,qBAAqBzH,GAC3BgM,OAAOF,EACjC,CAKAG,YAAYH,GACR,IACI,MAAM9L,EAAgBb,KAAK2G,wBAAwBgG,GAInD,OAHA,QAAiB3M,KAAK6E,aACtB7E,KAAKyF,eAAe+D,0BAAyB,GACzBxJ,KAAKsK,kBAAkBzJ,GACxBgM,OAAOF,EAC9B,CACA,MAAOtL,GAEH,OAAO4I,QAAQC,OAAO7I,EAC1B,CACJ,CAKA/B,iBAAiBqN,GACb,MAAM9L,EAAgBb,KAAK2G,wBAAwBgG,GAEnD,OADoB3M,KAAKsM,wBAAwBzL,GAC9BgM,OAAOF,EAC9B,CAQAhF,eAAeoF,GACX,OAAO,QAAe/M,KAAKF,OAAQE,KAAKyF,eAAgBzF,KAAK/D,qBAAsB8Q,EACvF,CAMAC,WAAWD,GACP,OAAO,QAAWA,EAAe/M,KAAKF,OAAQE,KAAKyF,eACvD,CASAwH,qBAAqBC,GACjB,OAAO,QAAqBA,EAAUlN,KAAKF,OAAQE,KAAKyF,eAC5D,CAQA0H,mBAAmBC,GACf,OAAO,QAAmBA,EAAepN,KAAKF,OAAQE,KAAKyF,eAC/D,CAQA4H,oBAAoBC,GAChB,OAAO,QAAoBA,EAAgBtN,KAAKF,OAAQE,KAAKyF,eACjE,CAKA8H,iBAAiBhJ,IACb,QAAiBA,EAASvE,KAAKyF,eACnC,CAIA+H,mBACI,OAAO,QAAiBxN,KAAKyF,eACjC,CAQAnG,mBAAmBkJ,EAAQ/I,GACvBO,KAAKF,OAAOmH,QAAQ,uBAEpB,MAAMwG,EAAgBC,EAAA,wBAAoClF,EAAOjE,QAASiE,EAAOmF,mBAAoBnF,EAAOoF,aAE5G,OADA5N,KAAKyF,eAAeoI,WAAWJ,GAC3BjF,EAAO6C,kBACPrL,KAAKF,OAAOmH,QAAQ,sDAEbjH,KAAK4F,sBAAsBkI,aAAatF,EAAQ/I,IAGhDO,KAAKyF,eAAeqI,aAAatF,EAAQ/I,EAExD,CAMAH,yBAAyBG,EAASsO,EAAO7F,GAErC,GADAlI,KAAKF,OAAO2G,MAAM,8BACbzG,KAAK+G,wBACN,MAAM,QAAuB,MAGjC,OADqB,IAAIkB,EAAA,EAAwBjI,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB4P,EAAO/N,KAAKD,kBAAmBC,KAAK+G,wBAAyBmB,GAAalI,KAAK0J,mBAAmBjK,GAAUO,KAAK4F,sBAAuBnG,EAAQoB,eAC1RgJ,aAAapK,EACrC,CAKAgK,aAAahK,EAASyI,GAElB,GADAlI,KAAKF,OAAO2G,MAAM,wBACbO,EAAA,oBAAuChH,KAAKR,OAAQQ,KAAKF,OAAQE,KAAK+G,wBAAyBtH,EAAQuO,sBAExG,OADAhO,KAAKF,OAAO2G,MAAM,oEACX,EAEX,GAAIhH,EAAQwL,OACR,OAAQxL,EAAQwL,QACZ,KAAK,UACL,KAAK,aACL,KAAK,WACDjL,KAAKF,OAAO2G,MAAM,uDAClB,MACJ,QAEI,OADAzG,KAAKF,OAAO2G,MAAM,0BAA0BhH,EAAQwL,+DAC7C,EAGnB,SAAK/C,IAAclI,KAAK0J,mBAAmBjK,KACvCO,KAAKF,OAAO2G,MAAM,mEACX,GAGf,CAMAiD,mBAAmBjK,GACf,MAAM8E,EAAU9E,EAAQ8E,SACpBvE,KAAKgN,WAAW,CACZiB,UAAWxO,EAAQwO,UACnBC,IAAKzO,EAAQyO,OAEjBlO,KAAKwN,mBACT,OAAQjJ,GAAWA,EAAQmH,iBAAoB,EACnD,CAKApB,kBAAkBzJ,GACd,OAAO,IAAIsN,EAAA,EAAYnO,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB6B,KAAKD,kBAAmBC,KAAK4F,sBAAuB5F,KAAK+G,wBAAyBlG,EAC1N,CAKAyH,qBAAqBzH,GACjB,OAAO,IAAIuN,EAAA,EAAepO,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB6B,KAAKD,kBAAmBC,KAAK4F,sBAAuB5F,KAAK+G,wBAAyBlG,EAC7N,CAKAuK,yBAAyBvK,GACrB,OAAO,IAAIwN,EAAA,EAAmBrO,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB,eAAiB6B,KAAKD,kBAAmBC,KAAK4F,sBAAuB5F,KAAK+G,wBAAyBlG,EAClP,CAIAyL,wBAAwBzL,GACpB,OAAO,IAAIyN,EAAA,EAAkBtO,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB6B,KAAKD,kBAAmBC,KAAK+G,wBAAyBlG,EACpM,CAIA4L,0BAA0B5L,GACtB,OAAO,IAAI0N,EAAA,EAAoBvO,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB6B,KAAKD,kBAAmBC,KAAK+G,wBAAyBlG,EACtM,CAIAkL,2BAA2BlL,GACvB,OAAO,IAAI2N,EAAA,EAAqBxO,KAAKR,OAAQQ,KAAKyF,eAAgBzF,KAAKsF,cAAetF,KAAKF,OAAQE,KAAKuF,aAAcvF,KAAK7B,iBAAkB,wBAA0B6B,KAAKD,kBAAmBC,KAAK+G,wBAAyBlG,EACjO,CAKA4N,iBAAiBC,GACb,OAAO1O,KAAKuF,aAAakJ,iBAAiBC,EAC9C,CAKAC,oBAAoBC,GAChB5O,KAAKuF,aAAaoJ,oBAAoBC,EAC1C,CAOAC,uBAAuBH,GACnB,OAAO1O,KAAKD,kBAAkB8O,uBAAuBH,EACzD,CAOAI,0BAA0BF,GACtB,OAAO5O,KAAKD,kBAAkB+O,0BAA0BF,EAC5D,CAIAG,6BACI/O,KAAKuF,aAAawJ,4BACtB,CAIAC,8BACIhP,KAAKuF,aAAayJ,6BACtB,CAIAC,gBACI,OAAOjP,KAAK8F,UAChB,CAIAZ,YACI,OAAOlF,KAAKF,MAChB,CAKAoP,UAAUpP,GACNE,KAAKF,OAASA,CAClB,CAMAqP,yBAAyBC,EAAKC,GAE1BrP,KAAKyF,eAAe6J,mBAAmBF,EAAKC,EAChD,CAKAE,oBAAoBpR,GAChB6B,KAAK7B,iBAAmBA,CAC5B,CAIAqR,mBACI,OAAOxP,KAAKR,MAChB,CAIAiQ,uBACI,OAAOzP,KAAKD,iBAChB,CAIA2P,eACI,OAAO1P,KAAK/D,oBAChB,CAIA0T,kBACI,OAAO3P,KAAKuF,YAChB,CAQAoB,wBAAwBlH,GACpB,OAAIA,GAASoB,cACFpB,EAAQoB,cAEfb,KAAK/D,sBACE,UAMJ2T,EAAA,eACX,CAWAtQ,oBAAoBG,GAChB,MAAMoB,EAAgBb,KAAK2G,wBAAwBlH,GAEnD,OADAO,KAAKF,OAAOmH,QAAQ,uBAAwBpG,GACrCb,KAAK2J,qBAAqB,CAC7B9I,mBACIpB,GAAW,MAEvB,CAQAoQ,WAAWpQ,GACP,MAAMoB,EAAgBb,KAAK2G,wBAAwBlH,GAEnD,OADAO,KAAKF,OAAOmH,QAAQ,oBAAqBpG,GAClCb,KAAK+J,kBAAkB,CAC1BlJ,mBACIpB,GAAW,MAEvB,CAOAH,yBAAyBG,GACrB,MAAMoB,EAAgBb,KAAK2G,wBAAwBlH,GAC7CqQ,EAAiB9P,KAAKD,kBAAkBY,iBAAiBC,EAAA,sBAAsCC,GACrGiP,EAAe9G,IAAI,CACfmD,kBAAmB1M,EAAQ0M,kBAC3BlD,WAAYxJ,EAAQwJ,aAExBrE,EAAe5E,KAAK6E,YAAaiL,GACjC9P,KAAKF,OAAOmH,QAAQ,4BAA6BpG,GACjD,MAAM0D,EAAU9E,EAAQ8E,SAAWvE,KAAKwN,mBACxC,IAAKjJ,EACD,MAAM,QAAuB,MAEjCuL,EAAe9G,IAAI,CAAEN,YAAapE,EAAeC,KACjD,MAAMwL,EAAa,CACf5T,SAAU6D,KAAKR,OAAO/D,KAAKU,SAC3BC,UAAWqD,EAAQrD,WAAawT,EAAA,gBAChCI,OAAQvQ,EAAQuQ,OAChBC,sBAAuB1L,EAAQ6I,cAC/B8C,OAAQzQ,EAAQyQ,OAChBlC,qBAAsBvO,EAAQuO,qBAC9BjM,sBAAuBtC,EAAQsC,sBAC/BE,mBAAoBxC,EAAQwC,mBAC5BkO,UAAW1Q,EAAQ0Q,UACnBC,OAAQ3Q,EAAQ2Q,OAChBxN,WAAYnD,EAAQmD,YAElByN,EAAmBjR,KAAKC,UAAU0Q,GAClCO,EAAiBtQ,KAAKgG,0BAA0BuB,IAAI8I,GAC1D,QAA8B,IAAnBC,EAAgC,CACvCtQ,KAAKF,OAAOmH,QAAQ,uEAAwEpG,GAC5F,MAAMyG,GAAW,IAAAJ,GAAYlH,KAAKuQ,wBAAwBrK,KAAKlG,MAAOY,EAAA,2BAA2CZ,KAAKF,OAAQE,KAAKD,kBAAmBc,EAArI,CAAoJ,IAC9JpB,EACHoB,iBACD0D,GACEgE,MAAMC,IACPxI,KAAKgG,0BAA0B6F,OAAOwE,GACtCP,EAAe5N,IAAI,CACfC,SAAS,EACT6J,UAAWxD,EAAOwD,UAClB5B,eAAgB5B,EAAO6C,iBACvBc,kBAAmB1M,EAAQ0M,kBAC3B9B,UAAW7B,EAAO6B,UAClBE,gBAAiB/B,EAAOgC,YAAY/B,OACpCgC,YAAajC,EAAOkC,QAAQjC,SAEzBD,KAENK,OAAOpG,IAKR,MAJAzC,KAAKgG,0BAA0B6F,OAAOwE,GACtCP,EAAe5N,IAAI,CACfC,SAAS,GACVM,GACGA,CAAK,IAGf,OADAzC,KAAKgG,0BAA0ByB,IAAI4I,EAAkB/I,GAC9C,UACOA,EACVkJ,MAAO/Q,EAAQ+Q,MAEvB,CAKI,OAHAxQ,KAAKF,OAAOmH,QAAQ,0FAA2FpG,GAE/GiP,EAAelH,UACR,UACO0H,EACVE,MAAO/Q,EAAQ+Q,MAG3B,CAOAlR,8BAA8BG,EAAS8E,GACnC,MAAM0B,EAAsB,IAAMjG,KAAKiG,oBAAoBxG,EAAQoB,eACnEb,KAAKD,kBAAkBqM,oBAAoBxL,EAAA,2BAA2CnB,EAAQoB,eAC9Fb,KAAKuF,aAAasB,UAAUC,EAAA,sBAA+B,YAAwBrH,GAC/EA,EAAQoB,eACRb,KAAKD,kBAAkBwG,gBAAgB,CAAEC,sBAAuB,GAAK/G,EAAQoB,eAEjFqK,SAASC,iBAAiB,mBAAoBlF,GAC9C,MAAMwK,QAAsB,IAAAvJ,GAAY,IAAyBtG,EAAA,2BAA2CZ,KAAKF,OAAQE,KAAKD,kBAAmBN,EAAQoB,cAA7H,CAA4IpB,EAAS8E,EAASvE,KAAKR,OAAQQ,KAAKD,kBAAmBC,KAAKF,QAC9NqM,EAAoB1M,EAAQ0M,mBAAqB,aA4DvD,OA3DenM,KAAK0Q,2BAA2BD,EAAetE,GAAmBtD,OAAMvJ,MAAOqR,IAC1F,MAAMC,EAsHlB,SAAuDD,EAAmBxE,GACtE,MAAM0E,IAA0BF,aAA6B7G,EAAA,IAEzD6G,EAAkBG,WACdC,EAAA,IAEFC,EAA8BL,EAAkBhI,YAAcsI,EAAA,wBAChEN,EAAkBhI,YACd4D,EAAA,GAEF2E,EAAwBL,GAAyBG,GACnDL,EAAkBhI,YACdoI,EAAA,IACJJ,EAAkBhI,YACdoI,EAAA,GAEFI,EAAmB,cAA+BhF,GACxD,OAAO+E,GAAwBC,CACnC,CAxI+CC,CAA8CT,EAAmBxE,GACpG,GAAIyE,EAA4B,CAC5B,GAAK5Q,KAAKqR,oBAuBL,IAAIlF,IAAsB,UAAwB,CACnD,MAAOmF,EAAeC,GAAuBvR,KAAKqR,oBAClDrR,KAAKF,OAAOmH,QAAQ,8FAA8FsK,IAAuBd,EAAc5P,eACvJ,MAAM2Q,EAA+BxR,KAAKD,kBAAkBY,iBAAiBC,EAAA,yBAAyC6P,EAAc5P,eACpI2Q,EAA6BxI,IAAI,CAC7ByI,yBAA0BF,IAE9B,MAAMG,QAA4BJ,EAIlC,GAHAE,EAA6BtP,IAAI,CAC7BC,QAASuP,IAETA,EAGA,OAFA1R,KAAKF,OAAOmH,QAAQ,+CAA+CsK,mDAAsEd,EAAc5P,eAEhJb,KAAK0Q,2BAA2BD,EAAetE,GAKtD,MAFAnM,KAAKF,OAAOwG,KAAK,sCAAsCiL,sCAEjDZ,CAEd,CAII,OADA3Q,KAAKF,OAAOX,QAAQ,wQAAyQsR,EAAc5P,gBACpS,IAAAqG,GAAYlH,KAAK2R,2BAA2BzL,KAAKlG,MAAOY,EAAA,8BAA8CZ,KAAKF,OAAQE,KAAKD,kBAAmB0Q,EAAc5P,cAAzJ,CAAwK4P,EACnL,CAjD+B,CAC3B,IAAImB,EASJ,OAPA5R,KAAKqR,oBAAsB,CACvB,IAAIpH,SAAS4H,IACTD,EAAWC,CAAO,IAEtBpB,EAAc5P,eAElBb,KAAKF,OAAOmH,QAAQ,yGAA0GwJ,EAAc5P,gBACrI,IAAAqG,GAAYlH,KAAK2R,2BAA2BzL,KAAKlG,MAAOY,EAAA,8BAA8CZ,KAAKF,OAAQE,KAAKD,kBAAmB0Q,EAAc5P,cAAzJ,CAAwK4P,GAC1KlI,MAAMuJ,IACPF,GAAS,GACFE,KAENjJ,OAAOxH,IAER,MADAuQ,GAAS,GACHvQ,CAAC,IAENiK,SAAQ,KACTtL,KAAKqR,yBAAsBxL,CAAS,GAE5C,CA4BJ,CAGI,MAAM8K,CACV,IAGCpI,MAAMjB,IACPtH,KAAKuF,aAAasB,UAAUC,EAAA,wBAAiC,YAAwBQ,GACjF7H,EAAQoB,eACRb,KAAKD,kBAAkBgS,UAAU,CAC7B/F,UAAW1E,EAAS0E,UACpB5B,eAAgB9C,EAAS+D,iBACzBhB,UAAW/C,EAAS+C,WACrB5K,EAAQoB,eAERyG,KAENuB,OAAOoD,IAER,MADAjM,KAAKuF,aAAasB,UAAUC,EAAA,wBAAiC,YAAwB,KAAMmF,GACrFA,CAAiB,IAEtBX,SAAQ,KACTJ,SAASK,oBAAoB,mBAAoBtF,EAAoB,GAE7E,CAOA3G,iCAAiCmR,EAAetE,GAC5C,OAAInF,EAAA,oBAAuChH,KAAKR,OAAQQ,KAAKF,OAAQE,KAAK+G,wBAAyB0J,EAAczC,uBAC7GyC,EAAclM,QAAQmH,iBACtB1L,KAAKF,OAAOmH,QAAQ,yEACbjH,KAAKmK,mBAAmBsG,EAAe,oCAAqC5H,OAAMvJ,MAAO+B,IAE5F,GAAIA,aAAauI,EAAA,KAAmB,QAAuBvI,GAIvD,MAHArB,KAAKF,OAAOmH,QAAQ,8EACpBjH,KAAK+G,6BAA0BlB,GAEzB,QAAsB0G,EAAA,IAEhC,MAAMlL,CAAC,MAIXrB,KAAKF,OAAOmH,QAAQ,mEACb,IAAAC,GAAYlH,KAAKgS,sBAAsB9L,KAAKlG,MAAOY,EAAA,yBAAyCZ,KAAKF,OAAQE,KAAKD,kBAAmB0Q,EAAc5P,cAA/I,CAA8J4P,EAAetE,GAAmBtD,OAAOoJ,IAC1M,GAAI9F,IAAsB,iBACtB,MAAM8F,EAGV,OADAjS,KAAKuF,aAAasB,UAAUC,EAAA,8BAAuC,YAAwB2J,IACpF,IAAAvJ,GAAYlH,KAAKkS,2BAA2BhM,KAAKlG,MAAOY,EAAA,8BAA8CZ,KAAKF,OAAQE,KAAKD,kBAAmB0Q,EAAc5P,cAAzJ,CAAwK4P,EAAetE,EAAkB,IAG5N,oTC/xCJ,MAEMgG,EAAgB,UAIhBC,EAAkB,IAAIpO,WAAW,CAAC,EAAM,EAAM,IAE9CqO,EAAa,mBAEbC,EAAa,IAAIC,YAAY,GAC7BC,EAAyB,CAC3B1H,KAZyB,oBAazB1D,KAAM+K,EACNM,cAVmB,KAWnBC,eAAgBN,GAKpB,SAASO,EAAwB7S,GAC7B,KAAI,WAAY8S,QAKZ,MADA9S,EAAO2C,MAAM,mDACP,QAAuB,MAJ7B3C,EAAOmH,QAAQ,mDAMvB,CAOA3H,eAAeuT,EAAaC,EAAY/S,EAAmBc,GACvDd,GAAmBqM,oBAAoB,kBAAgCvL,GACvE,MACMkS,GADU,IAAInP,aACCC,OAAOiP,GAC5B,OAAOF,OAAOI,OAAOC,OAAOC,OAAOf,EAAeY,EACtD,CAKA,SAASI,EAAgBC,GACrB,OAAOR,OAAOI,OAAOG,gBAAgBC,EACzC,CAKA,SAASC,IAEL,OADAT,OAAOI,OAAOG,gBAAgBb,GACvBA,EAAW,EACtB,CAMA,SAASpS,IACL,MAAMoT,EAAmBC,KAAKC,MACxBC,EAA+B,KAApBJ,KAAiD,KAApBA,KAExCK,EAAQ,IAAI1P,WAAW,IAEvB2P,EAAQC,KAAKC,MAAMJ,EAAW,GAAK,IAEnCK,EAAUL,EAAY,GAAK,GAAK,EAEhCM,EAAUV,IAChBK,EAAM,GAAKJ,EAAmB,GAAK,GACnCI,EAAM,GAAKJ,EAAmB,GAAK,GACnCI,EAAM,GAAKJ,EAAmB,GAAK,GACnCI,EAAM,GAAKJ,EAAmB,MAC9BI,EAAM,GAAKJ,EAAmB,IAC9BI,EAAM,GAAKJ,EACXI,EAAM,GAAK,IAAQC,IAAU,EAC7BD,EAAM,GAAKC,EACXD,EAAM,GAAK,IAAQI,IAAY,GAC/BJ,EAAM,GAAKI,IAAY,GACvBJ,EAAM,IAAMI,IAAY,EACxBJ,EAAM,IAAMI,EACZJ,EAAM,IAAMK,IAAY,GACxBL,EAAM,IAAMK,IAAY,GACxBL,EAAM,IAAMK,IAAY,EACxBL,EAAM,IAAMK,EACZ,IAAIC,EAAO,GACX,IAAK,IAAI9M,EAAI,EAAGA,EAAIwM,EAAMjL,OAAQvB,IAC9B8M,GAAQ3B,EAAW4B,OAAOP,EAAMxM,KAAO,GACvC8M,GAAQ3B,EAAW4B,OAAkB,GAAXP,EAAMxM,IACtB,IAANA,GAAiB,IAANA,GAAiB,IAANA,GAAiB,IAANA,IACjC8M,GAAQ,KAGhB,OAAOA,CACX,CAMA1U,eAAe4U,EAAgBC,EAAaC,GACxC,OAAOxB,OAAOI,OAAOC,OAAOoB,YAAY7B,EAAwB2B,EAAaC,EACjF,CAKA9U,eAAegV,EAAUC,GACrB,OAAO3B,OAAOI,OAAOC,OAAOuB,UAAU,KAAgBD,EAC1D,CAOAjV,eAAemV,EAAUF,EAAKJ,EAAaC,GACvC,OAAOxB,OAAOI,OAAOC,OAAOyB,UAAU,KAAgBH,EAAK/B,EAAwB2B,EAAaC,EACpG,CAMA9U,eAAeqV,EAAKJ,EAAKxB,GACrB,OAAOH,OAAOI,OAAOC,OAAO0B,KAAKnC,EAAwB+B,EAAKxB,EAClE,CAKAzT,eAAemC,EAAWwC,GACtB,MAAM2Q,QAAmB/B,EAAa5O,GAChC4Q,EAAY,IAAI7Q,WAAW4Q,GACjC,OAAO,QAAaC,EACxB,8HCjJA,MAAMC,EAAyB,GAO/BxV,eAAeyV,EAAkBhV,EAAmBD,EAAQe,GACxDd,EAAkBqM,oBAAoB,uBAAqCvL,GAC3E,MAAMmU,GAAe,OAAOC,EAAsB,0BAAwCnV,EAAQC,EAAmBc,EAAhG,CAA+Gd,EAAmBD,EAAQe,GAE/J,MAAO,CACHqU,SAAUF,EACVG,gBAHwB,IAAAjO,GAAYkO,EAAmC,uCAAqDtV,EAAQC,EAAmBc,EAA/H,CAA8ImU,EAAcjV,EAAmBD,EAAQe,GAKvN,CAKA,SAASoU,EAAqBlV,EAAmBD,EAAQe,GACrD,IAEI,MAAMwU,EAAS,IAAIrR,WAAW8Q,GAI9B,OAHA,OAAO,KAAiB,qBAAmChV,EAAQC,EAAmBc,EAAtF,CAAqGwU,IAEzE,QAAaA,EAE7C,CACA,MAAOhU,GACH,MAAM,QAAuB,KACjC,CACJ,CAKA/B,eAAe8V,EAAkCE,EAAkBvV,EAAmBD,EAAQe,GAC1Fd,EAAkBqM,oBAAoB,uCAAqDvL,GAC3F,IAEI,MAAM0U,QAA+B,IAAArO,GAAY,KAAc,kBAAgCpH,EAAQC,EAAmBc,EAArF,CAAoGyU,EAAkBvV,EAAmBc,GAE9K,OAAO,QAAa,IAAImD,WAAWuR,GACvC,CACA,MAAOlU,GACH,MAAM,QAAuB,KACjC,CACJ,mFC5CA,SAAShB,EAAaD,GAClB,OAAO,IAAIoV,aAAcC,OAM7B,SAAwBC,GACpB,IAAIC,EAAgBD,EAAaE,QAAQ,KAAM,KAAKA,QAAQ,KAAM,KAClE,OAAQD,EAAclN,OAAS,GAC3B,KAAK,EACD,MACJ,KAAK,EACDkN,GAAiB,KACjB,MACJ,KAAK,EACDA,GAAiB,IACjB,MACJ,QACI,MAAM,QAAuB,MAErC,MAAME,EAAYC,KAAKH,GACvB,OAAO3R,WAAW+R,KAAKF,GAAYG,GAAMA,EAAEC,YAAY,IAAM,GACjE,CAtBoCC,CAAe9V,GACnD,yBCLA,SAAS+V,EAAU/V,GACf,OAAOgW,mBAAmBjW,EAAaC,GAClCwV,QAAQ,KAAM,IACdA,QAAQ,MAAO,KACfA,QAAQ,MAAO,KACxB,CAKA,SAASS,EAAaC,GAClB,OAAOC,EAAaD,GACfV,QAAQ,KAAM,IACdA,QAAQ,MAAO,KACfA,QAAQ,MAAO,IACxB,CAKA,SAASzV,EAAaC,GAClB,OAAOmW,GAAa,IAAI3S,aAAcC,OAAOzD,GACjD,CAKA,SAASmW,EAAaC,GAClB,MAAMX,EAAYY,MAAMV,KAAKS,GAASE,GAAMC,OAAOC,cAAcF,KAAIG,KAAK,IAC1E,OAAOC,KAAKjB,EAChB","sources":["webpack://iadviser/./node_modules/@azure/msal-browser/dist/config/Configuration.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/controllers/ControllerFactory.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/crypto/CryptoOps.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/controllers/StandardController.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/crypto/BrowserCrypto.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/crypto/PkceGenerator.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/encode/Base64Decode.mjs","webpack://iadviser/./node_modules/@azure/msal-browser/dist/encode/Base64Encode.mjs"],"sourcesContent":["/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { Constants, StubPerformanceClient, ProtocolMode, Logger, createClientConfigurationError, ClientConfigurationErrorCodes, ServerResponseType, AzureCloudInstance, LogLevel, DEFAULT_SYSTEM_OPTIONS, StubbedNetworkModule } from '@azure/msal-common';\nimport { BrowserCacheLocation, BrowserConstants } from '../utils/BrowserConstants.mjs';\nimport { NavigationClient } from '../navigation/NavigationClient.mjs';\nimport { FetchClient } from '../network/FetchClient.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n// Default timeout for popup windows and iframes in milliseconds\r\nconst DEFAULT_POPUP_TIMEOUT_MS = 60000;\r\nconst DEFAULT_IFRAME_TIMEOUT_MS = 10000;\r\nconst DEFAULT_REDIRECT_TIMEOUT_MS = 30000;\r\nconst DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS = 2000;\r\n/**\r\n * MSAL function that sets the default options when not explicitly configured from app developer\r\n *\r\n * @param auth\r\n * @param cache\r\n * @param system\r\n *\r\n * @returns Configuration object\r\n */\r\nfunction buildConfiguration({ auth: userInputAuth, cache: userInputCache, system: userInputSystem, telemetry: userInputTelemetry, }, isBrowserEnvironment) {\r\n    // Default auth options for browser\r\n    const DEFAULT_AUTH_OPTIONS = {\r\n        clientId: Constants.EMPTY_STRING,\r\n        authority: `${Constants.DEFAULT_AUTHORITY}`,\r\n        knownAuthorities: [],\r\n        cloudDiscoveryMetadata: Constants.EMPTY_STRING,\r\n        authorityMetadata: Constants.EMPTY_STRING,\r\n        redirectUri: Constants.EMPTY_STRING,\r\n        postLogoutRedirectUri: Constants.EMPTY_STRING,\r\n        navigateToLoginRequestUrl: true,\r\n        clientCapabilities: [],\r\n        protocolMode: ProtocolMode.AAD,\r\n        OIDCOptions: {\r\n            serverResponseType: ServerResponseType.FRAGMENT,\r\n            defaultScopes: [\r\n                Constants.OPENID_SCOPE,\r\n                Constants.PROFILE_SCOPE,\r\n                Constants.OFFLINE_ACCESS_SCOPE,\r\n            ],\r\n        },\r\n        azureCloudOptions: {\r\n            azureCloudInstance: AzureCloudInstance.None,\r\n            tenant: Constants.EMPTY_STRING,\r\n        },\r\n        skipAuthorityMetadataCache: false,\r\n        supportsNestedAppAuth: false,\r\n    };\r\n    // Default cache options for browser\r\n    const DEFAULT_CACHE_OPTIONS = {\r\n        cacheLocation: BrowserCacheLocation.SessionStorage,\r\n        temporaryCacheLocation: BrowserCacheLocation.SessionStorage,\r\n        storeAuthStateInCookie: false,\r\n        secureCookies: false,\r\n        // Default cache migration to true if cache location is localStorage since entries are preserved across tabs/windows. Migration has little to no benefit in sessionStorage and memoryStorage\r\n        cacheMigrationEnabled: userInputCache &&\r\n            userInputCache.cacheLocation === BrowserCacheLocation.LocalStorage\r\n            ? true\r\n            : false,\r\n        claimsBasedCachingEnabled: false,\r\n    };\r\n    // Default logger options for browser\r\n    const DEFAULT_LOGGER_OPTIONS = {\r\n        // eslint-disable-next-line @typescript-eslint/no-empty-function\r\n        loggerCallback: () => {\r\n            // allow users to not set logger call back\r\n        },\r\n        logLevel: LogLevel.Info,\r\n        piiLoggingEnabled: false,\r\n    };\r\n    // Default system options for browser\r\n    const DEFAULT_BROWSER_SYSTEM_OPTIONS = {\r\n        ...DEFAULT_SYSTEM_OPTIONS,\r\n        loggerOptions: DEFAULT_LOGGER_OPTIONS,\r\n        networkClient: isBrowserEnvironment\r\n            ? new FetchClient()\r\n            : StubbedNetworkModule,\r\n        navigationClient: new NavigationClient(),\r\n        loadFrameTimeout: 0,\r\n        // If loadFrameTimeout is provided, use that as default.\r\n        windowHashTimeout: userInputSystem?.loadFrameTimeout || DEFAULT_POPUP_TIMEOUT_MS,\r\n        iframeHashTimeout: userInputSystem?.loadFrameTimeout || DEFAULT_IFRAME_TIMEOUT_MS,\r\n        navigateFrameWait: 0,\r\n        redirectNavigationTimeout: DEFAULT_REDIRECT_TIMEOUT_MS,\r\n        asyncPopups: false,\r\n        allowRedirectInIframe: false,\r\n        allowNativeBroker: false,\r\n        nativeBrokerHandshakeTimeout: userInputSystem?.nativeBrokerHandshakeTimeout ||\r\n            DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS,\r\n        pollIntervalMilliseconds: BrowserConstants.DEFAULT_POLL_INTERVAL_MS,\r\n    };\r\n    const providedSystemOptions = {\r\n        ...DEFAULT_BROWSER_SYSTEM_OPTIONS,\r\n        ...userInputSystem,\r\n        loggerOptions: userInputSystem?.loggerOptions || DEFAULT_LOGGER_OPTIONS,\r\n    };\r\n    const DEFAULT_TELEMETRY_OPTIONS = {\r\n        application: {\r\n            appName: Constants.EMPTY_STRING,\r\n            appVersion: Constants.EMPTY_STRING,\r\n        },\r\n        client: new StubPerformanceClient(),\r\n    };\r\n    // Throw an error if user has set OIDCOptions without being in OIDC protocol mode\r\n    if (userInputAuth?.protocolMode !== ProtocolMode.OIDC &&\r\n        userInputAuth?.OIDCOptions) {\r\n        const logger = new Logger(providedSystemOptions.loggerOptions);\r\n        logger.warning(JSON.stringify(createClientConfigurationError(ClientConfigurationErrorCodes.cannotSetOIDCOptions)));\r\n    }\r\n    // Throw an error if user has set allowNativeBroker to true without being in AAD protocol mode\r\n    if (userInputAuth?.protocolMode &&\r\n        userInputAuth.protocolMode !== ProtocolMode.AAD &&\r\n        providedSystemOptions?.allowNativeBroker) {\r\n        throw createClientConfigurationError(ClientConfigurationErrorCodes.cannotAllowNativeBroker);\r\n    }\r\n    const overlayedConfig = {\r\n        auth: {\r\n            ...DEFAULT_AUTH_OPTIONS,\r\n            ...userInputAuth,\r\n            OIDCOptions: {\r\n                ...DEFAULT_AUTH_OPTIONS.OIDCOptions,\r\n                ...userInputAuth?.OIDCOptions,\r\n            },\r\n        },\r\n        cache: { ...DEFAULT_CACHE_OPTIONS, ...userInputCache },\r\n        system: providedSystemOptions,\r\n        telemetry: { ...DEFAULT_TELEMETRY_OPTIONS, ...userInputTelemetry },\r\n    };\r\n    return overlayedConfig;\r\n}\n\nexport { DEFAULT_IFRAME_TIMEOUT_MS, DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS, DEFAULT_POPUP_TIMEOUT_MS, DEFAULT_REDIRECT_TIMEOUT_MS, buildConfiguration };\n//# sourceMappingURL=Configuration.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { NestedAppOperatingContext } from '../operatingcontext/NestedAppOperatingContext.mjs';\nimport { StandardOperatingContext } from '../operatingcontext/StandardOperatingContext.mjs';\nimport { StandardController } from './StandardController.mjs';\nimport { NestedAppAuthController } from './NestedAppAuthController.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nasync function createV3Controller(config, request) {\r\n    const standard = new StandardOperatingContext(config);\r\n    await standard.initialize();\r\n    return StandardController.createController(standard, request);\r\n}\r\nasync function createController(config) {\r\n    const standard = new StandardOperatingContext(config);\r\n    const nestedApp = new NestedAppOperatingContext(config);\r\n    const operatingContexts = [standard.initialize(), nestedApp.initialize()];\r\n    await Promise.all(operatingContexts);\r\n    if (nestedApp.isAvailable() && config.auth.supportsNestedAppAuth) {\r\n        return NestedAppAuthController.createController(nestedApp);\r\n    }\r\n    else if (standard.isAvailable()) {\r\n        return StandardController.createController(standard);\r\n    }\r\n    else {\r\n        // Since neither of the actual operating contexts are available keep the UnknownOperatingContextController\r\n        return null;\r\n    }\r\n}\n\nexport { createController, createV3Controller };\n//# sourceMappingURL=ControllerFactory.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { PerformanceEvents, JoseHeader } from '@azure/msal-common';\nimport { base64Encode, urlEncode, urlEncodeArr } from '../encode/Base64Encode.mjs';\nimport { base64Decode } from '../encode/Base64Decode.mjs';\nimport { validateCryptoAvailable, createNewGuid, generateKeyPair, exportJwk, importJwk, sign, hashString } from './BrowserCrypto.mjs';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { AsyncMemoryStorage } from '../cache/AsyncMemoryStorage.mjs';\nimport { cryptoKeyNotFound } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and\r\n * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).\r\n */\r\nclass CryptoOps {\r\n    constructor(logger, performanceClient) {\r\n        this.logger = logger;\r\n        // Browser crypto needs to be validated first before any other classes can be set.\r\n        validateCryptoAvailable(logger);\r\n        this.cache = new AsyncMemoryStorage(this.logger);\r\n        this.performanceClient = performanceClient;\r\n    }\r\n    /**\r\n     * Creates a new random GUID - used to populate state and nonce.\r\n     * @returns string (GUID)\r\n     */\r\n    createNewGuid() {\r\n        return createNewGuid();\r\n    }\r\n    /**\r\n     * Encodes input string to base64.\r\n     * @param input\r\n     */\r\n    base64Encode(input) {\r\n        return base64Encode(input);\r\n    }\r\n    /**\r\n     * Decodes input string from base64.\r\n     * @param input\r\n     */\r\n    base64Decode(input) {\r\n        return base64Decode(input);\r\n    }\r\n    /**\r\n     * Encodes input string to base64 URL safe string.\r\n     * @param input\r\n     */\r\n    base64UrlEncode(input) {\r\n        return urlEncode(input);\r\n    }\r\n    /**\r\n     * Stringifies and base64Url encodes input public key\r\n     * @param inputKid\r\n     * @returns Base64Url encoded public key\r\n     */\r\n    encodeKid(inputKid) {\r\n        return this.base64UrlEncode(JSON.stringify({ kid: inputKid }));\r\n    }\r\n    /**\r\n     * Generates a keypair, stores it and returns a thumbprint\r\n     * @param request\r\n     */\r\n    async getPublicKeyThumbprint(request) {\r\n        const publicKeyThumbMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.CryptoOptsGetPublicKeyThumbprint, request.correlationId);\r\n        // Generate Keypair\r\n        const keyPair = await generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES);\r\n        // Generate Thumbprint for Public Key\r\n        const publicKeyJwk = await exportJwk(keyPair.publicKey);\r\n        const pubKeyThumprintObj = {\r\n            e: publicKeyJwk.e,\r\n            kty: publicKeyJwk.kty,\r\n            n: publicKeyJwk.n,\r\n        };\r\n        const publicJwkString = getSortedObjectString(pubKeyThumprintObj);\r\n        const publicJwkHash = await this.hashString(publicJwkString);\r\n        // Generate Thumbprint for Private Key\r\n        const privateKeyJwk = await exportJwk(keyPair.privateKey);\r\n        // Re-import private key to make it unextractable\r\n        const unextractablePrivateKey = await importJwk(privateKeyJwk, false, [\"sign\"]);\r\n        // Store Keypair data in keystore\r\n        await this.cache.setItem(publicJwkHash, {\r\n            privateKey: unextractablePrivateKey,\r\n            publicKey: keyPair.publicKey,\r\n            requestMethod: request.resourceRequestMethod,\r\n            requestUri: request.resourceRequestUri,\r\n        });\r\n        if (publicKeyThumbMeasurement) {\r\n            publicKeyThumbMeasurement.end({\r\n                success: true,\r\n            });\r\n        }\r\n        return publicJwkHash;\r\n    }\r\n    /**\r\n     * Removes cryptographic keypair from key store matching the keyId passed in\r\n     * @param kid\r\n     */\r\n    async removeTokenBindingKey(kid) {\r\n        await this.cache.removeItem(kid);\r\n        const keyFound = await this.cache.containsKey(kid);\r\n        return !keyFound;\r\n    }\r\n    /**\r\n     * Removes all cryptographic keys from IndexedDB storage\r\n     */\r\n    async clearKeystore() {\r\n        // Delete in-memory keystores\r\n        this.cache.clearInMemory();\r\n        /**\r\n         * There is only one database, so calling clearPersistent on asymmetric keystore takes care of\r\n         * every persistent keystore\r\n         */\r\n        try {\r\n            await this.cache.clearPersistent();\r\n            return true;\r\n        }\r\n        catch (e) {\r\n            if (e instanceof Error) {\r\n                this.logger.error(`Clearing keystore failed with error: ${e.message}`);\r\n            }\r\n            else {\r\n                this.logger.error(\"Clearing keystore failed with unknown error\");\r\n            }\r\n            return false;\r\n        }\r\n    }\r\n    /**\r\n     * Signs the given object as a jwt payload with private key retrieved by given kid.\r\n     * @param payload\r\n     * @param kid\r\n     */\r\n    async signJwt(payload, kid, shrOptions, correlationId) {\r\n        const signJwtMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.CryptoOptsSignJwt, correlationId);\r\n        const cachedKeyPair = await this.cache.getItem(kid);\r\n        if (!cachedKeyPair) {\r\n            throw createBrowserAuthError(cryptoKeyNotFound);\r\n        }\r\n        // Get public key as JWK\r\n        const publicKeyJwk = await exportJwk(cachedKeyPair.publicKey);\r\n        const publicKeyJwkString = getSortedObjectString(publicKeyJwk);\r\n        // Base64URL encode public key thumbprint with keyId only: BASE64URL({ kid: \"FULL_PUBLIC_KEY_HASH\" })\r\n        const encodedKeyIdThumbprint = urlEncode(JSON.stringify({ kid: kid }));\r\n        // Generate header\r\n        const shrHeader = JoseHeader.getShrHeaderString({\r\n            ...shrOptions?.header,\r\n            alg: publicKeyJwk.alg,\r\n            kid: encodedKeyIdThumbprint,\r\n        });\r\n        const encodedShrHeader = urlEncode(shrHeader);\r\n        // Generate payload\r\n        payload.cnf = {\r\n            jwk: JSON.parse(publicKeyJwkString),\r\n        };\r\n        const encodedPayload = urlEncode(JSON.stringify(payload));\r\n        // Form token string\r\n        const tokenString = `${encodedShrHeader}.${encodedPayload}`;\r\n        // Sign token\r\n        const encoder = new TextEncoder();\r\n        const tokenBuffer = encoder.encode(tokenString);\r\n        const signatureBuffer = await sign(cachedKeyPair.privateKey, tokenBuffer);\r\n        const encodedSignature = urlEncodeArr(new Uint8Array(signatureBuffer));\r\n        const signedJwt = `${tokenString}.${encodedSignature}`;\r\n        if (signJwtMeasurement) {\r\n            signJwtMeasurement.end({\r\n                success: true,\r\n            });\r\n        }\r\n        return signedJwt;\r\n    }\r\n    /**\r\n     * Returns the SHA-256 hash of an input string\r\n     * @param plainText\r\n     */\r\n    async hashString(plainText) {\r\n        return hashString(plainText);\r\n    }\r\n}\r\nCryptoOps.POP_KEY_USAGES = [\"sign\", \"verify\"];\r\nCryptoOps.EXTRACTABLE = true;\r\nfunction getSortedObjectString(obj) {\r\n    return JSON.stringify(obj, Object.keys(obj).sort());\r\n}\n\nexport { CryptoOps };\n//# sourceMappingURL=CryptoOps.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { CryptoOps } from '../crypto/CryptoOps.mjs';\nimport { DEFAULT_CRYPTO_IMPLEMENTATION, buildStaticAuthorityOptions, PerformanceEvents, invokeAsync, InteractionRequiredAuthError, createClientAuthError, ClientAuthErrorCodes, AccountEntity, PromptValue, Constants, InteractionRequiredAuthErrorCodes } from '@azure/msal-common';\nimport { BrowserCacheManager, DEFAULT_BROWSER_CACHE_MANAGER } from '../cache/BrowserCacheManager.mjs';\nimport { getAllAccounts, getAccount, getAccountByUsername, getAccountByHomeId, getAccountByLocalId, setActiveAccount, getActiveAccount } from '../cache/AccountManager.mjs';\nimport { TemporaryCacheKeys, InteractionType, ApiId, CacheLookupPolicy, DEFAULT_REQUEST, BrowserCacheLocation, iFrameRenewalPolicies, BrowserConstants } from '../utils/BrowserConstants.mjs';\nimport { blockAPICallsBeforeInitialize, redirectPreflightCheck, preflightCheck as preflightCheck$1 } from '../utils/BrowserUtils.mjs';\nimport { EventType } from '../event/EventType.mjs';\nimport { EventHandler } from '../event/EventHandler.mjs';\nimport { PopupClient } from '../interaction_client/PopupClient.mjs';\nimport { RedirectClient } from '../interaction_client/RedirectClient.mjs';\nimport { SilentIframeClient } from '../interaction_client/SilentIframeClient.mjs';\nimport { SilentRefreshClient } from '../interaction_client/SilentRefreshClient.mjs';\nimport { TokenCache } from '../cache/TokenCache.mjs';\nimport { NativeInteractionClient } from '../interaction_client/NativeInteractionClient.mjs';\nimport { NativeMessageHandler } from '../broker/nativeBroker/NativeMessageHandler.mjs';\nimport { NativeAuthError, isFatalNativeAuthError } from '../error/NativeAuthError.mjs';\nimport { SilentCacheClient } from '../interaction_client/SilentCacheClient.mjs';\nimport { SilentAuthCodeClient } from '../interaction_client/SilentAuthCodeClient.mjs';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { createNewGuid } from '../crypto/BrowserCrypto.mjs';\nimport { initializeSilentRequest } from '../request/RequestHelpers.mjs';\nimport { spaCodeAndNativeAccountIdPresent, unableToAcquireTokenFromNativePlatform, authCodeOrNativeAccountIdRequired, nativeConnectionNotEstablished, noAccountError } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\nfunction getAccountType(account) {\r\n    const idTokenClaims = account?.idTokenClaims;\r\n    if (idTokenClaims?.tfp || idTokenClaims?.acr) {\r\n        return \"B2C\";\r\n    }\r\n    if (!idTokenClaims?.tid) {\r\n        return undefined;\r\n    }\r\n    else if (idTokenClaims?.tid === \"9188040d-6c67-4c5b-b112-36a304b66dad\") {\r\n        return \"MSA\";\r\n    }\r\n    return \"AAD\";\r\n}\r\nfunction preflightCheck(initialized, performanceEvent) {\r\n    try {\r\n        preflightCheck$1(initialized);\r\n    }\r\n    catch (e) {\r\n        performanceEvent.end({ success: false }, e);\r\n        throw e;\r\n    }\r\n}\r\nclass StandardController {\r\n    /**\r\n     * @constructor\r\n     * Constructor for the PublicClientApplication used to instantiate the PublicClientApplication object\r\n     *\r\n     * Important attributes in the Configuration object for auth are:\r\n     * - clientID: the application ID of your application. You can obtain one by registering your application with our Application registration portal : https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RegisteredAppsPreview\r\n     * - authority: the authority URL for your application.\r\n     * - redirect_uri: the uri of your application registered in the portal.\r\n     *\r\n     * In Azure AD, authority is a URL indicating the Azure active directory that MSAL uses to obtain tokens.\r\n     * It is of the form https://login.microsoftonline.com/{Enter_the_Tenant_Info_Here}\r\n     * If your application supports Accounts in one organizational directory, replace \"Enter_the_Tenant_Info_Here\" value with the Tenant Id or Tenant name (for example, contoso.microsoft.com).\r\n     * If your application supports Accounts in any organizational directory, replace \"Enter_the_Tenant_Info_Here\" value with organizations.\r\n     * If your application supports Accounts in any organizational directory and personal Microsoft accounts, replace \"Enter_the_Tenant_Info_Here\" value with common.\r\n     * To restrict support to Personal Microsoft accounts only, replace \"Enter_the_Tenant_Info_Here\" value with consumers.\r\n     *\r\n     * In Azure B2C, authority is of the form https://{instance}/tfp/{tenant}/{policyName}/\r\n     * Full B2C functionality will be available in this library in future versions.\r\n     *\r\n     * @param configuration Object for the MSAL PublicClientApplication instance\r\n     */\r\n    constructor(operatingContext) {\r\n        this.operatingContext = operatingContext;\r\n        this.isBrowserEnvironment =\r\n            this.operatingContext.isBrowserEnvironment();\r\n        // Set the configuration.\r\n        this.config = operatingContext.getConfig();\r\n        this.initialized = false;\r\n        // Initialize logger\r\n        this.logger = this.operatingContext.getLogger();\r\n        // Initialize the network module class.\r\n        this.networkClient = this.config.system.networkClient;\r\n        // Initialize the navigation client class.\r\n        this.navigationClient = this.config.system.navigationClient;\r\n        // Initialize redirectResponse Map\r\n        this.redirectResponse = new Map();\r\n        // Initial hybrid spa map\r\n        this.hybridAuthCodeResponses = new Map();\r\n        // Initialize performance client\r\n        this.performanceClient = this.config.telemetry.client;\r\n        // Initialize the crypto class.\r\n        this.browserCrypto = this.isBrowserEnvironment\r\n            ? new CryptoOps(this.logger, this.performanceClient)\r\n            : DEFAULT_CRYPTO_IMPLEMENTATION;\r\n        this.eventHandler = new EventHandler(this.logger, this.browserCrypto);\r\n        // Initialize the browser storage class.\r\n        this.browserStorage = this.isBrowserEnvironment\r\n            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, buildStaticAuthorityOptions(this.config.auth), this.performanceClient)\r\n            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger);\r\n        // initialize in memory storage for native flows\r\n        const nativeCacheOptions = {\r\n            cacheLocation: BrowserCacheLocation.MemoryStorage,\r\n            temporaryCacheLocation: BrowserCacheLocation.MemoryStorage,\r\n            storeAuthStateInCookie: false,\r\n            secureCookies: false,\r\n            cacheMigrationEnabled: false,\r\n            claimsBasedCachingEnabled: false,\r\n        };\r\n        this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger, undefined, this.performanceClient);\r\n        // Initialize the token cache\r\n        this.tokenCache = new TokenCache(this.config, this.browserStorage, this.logger, this.browserCrypto);\r\n        this.activeSilentTokenRequests = new Map();\r\n        // Register listener functions\r\n        this.trackPageVisibility = this.trackPageVisibility.bind(this);\r\n        // Register listener functions\r\n        this.trackPageVisibilityWithMeasurement =\r\n            this.trackPageVisibilityWithMeasurement.bind(this);\r\n    }\r\n    static async createController(operatingContext, request) {\r\n        const controller = new StandardController(operatingContext);\r\n        await controller.initialize(request);\r\n        return controller;\r\n    }\r\n    trackPageVisibility(correlationId) {\r\n        if (!correlationId) {\r\n            return;\r\n        }\r\n        this.logger.info(\"Perf: Visibility change detected\");\r\n        this.performanceClient.incrementFields({ visibilityChangeCount: 1 }, correlationId);\r\n    }\r\n    /**\r\n     * Initializer function to perform async startup tasks such as connecting to WAM extension\r\n     * @param request {?InitializeApplicationRequest} correlation id\r\n     */\r\n    async initialize(request) {\r\n        this.logger.trace(\"initialize called\");\r\n        if (this.initialized) {\r\n            this.logger.info(\"initialize has already been called, exiting early.\");\r\n            return;\r\n        }\r\n        const initCorrelationId = request?.correlationId || this.getRequestCorrelationId();\r\n        const allowNativeBroker = this.config.system.allowNativeBroker;\r\n        const initMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.InitializeClientApplication, initCorrelationId);\r\n        this.eventHandler.emitEvent(EventType.INITIALIZE_START);\r\n        if (allowNativeBroker) {\r\n            try {\r\n                this.nativeExtensionProvider =\r\n                    await NativeMessageHandler.createProvider(this.logger, this.config.system.nativeBrokerHandshakeTimeout, this.performanceClient);\r\n            }\r\n            catch (e) {\r\n                this.logger.verbose(e);\r\n            }\r\n        }\r\n        if (!this.config.cache.claimsBasedCachingEnabled) {\r\n            this.logger.verbose(\"Claims-based caching is disabled. Clearing the previous cache with claims\");\r\n            await invokeAsync(this.browserStorage.clearTokensAndKeysWithClaims.bind(this.browserStorage), PerformanceEvents.ClearTokensAndKeysWithClaims, this.logger, this.performanceClient, initCorrelationId)(this.performanceClient, initCorrelationId);\r\n        }\r\n        this.initialized = true;\r\n        this.eventHandler.emitEvent(EventType.INITIALIZE_END);\r\n        initMeasurement.end({ allowNativeBroker, success: true });\r\n    }\r\n    // #region Redirect Flow\r\n    /**\r\n     * Event handler function which allows users to fire events after the PublicClientApplication object\r\n     * has loaded during redirect flows. This should be invoked on all page loads involved in redirect\r\n     * auth flows.\r\n     * @param hash Hash to process. Defaults to the current value of window.location.hash. Only needs to be provided explicitly if the response to be handled is not contained in the current value.\r\n     * @returns Token response or null. If the return value is null, then no auth redirect was detected.\r\n     */\r\n    async handleRedirectPromise(hash) {\r\n        this.logger.verbose(\"handleRedirectPromise called\");\r\n        // Block token acquisition before initialize has been called\r\n        blockAPICallsBeforeInitialize(this.initialized);\r\n        if (this.isBrowserEnvironment) {\r\n            /**\r\n             * Store the promise on the PublicClientApplication instance if this is the first invocation of handleRedirectPromise,\r\n             * otherwise return the promise from the first invocation. Prevents race conditions when handleRedirectPromise is called\r\n             * several times concurrently.\r\n             */\r\n            const redirectResponseKey = hash || \"\";\r\n            let response = this.redirectResponse.get(redirectResponseKey);\r\n            if (typeof response === \"undefined\") {\r\n                response = this.handleRedirectPromiseInternal(hash);\r\n                this.redirectResponse.set(redirectResponseKey, response);\r\n                this.logger.verbose(\"handleRedirectPromise has been called for the first time, storing the promise\");\r\n            }\r\n            else {\r\n                this.logger.verbose(\"handleRedirectPromise has been called previously, returning the result from the first call\");\r\n            }\r\n            return response;\r\n        }\r\n        this.logger.verbose(\"handleRedirectPromise returns null, not browser environment\");\r\n        return null;\r\n    }\r\n    /**\r\n     * The internal details of handleRedirectPromise. This is separated out to a helper to allow handleRedirectPromise to memoize requests\r\n     * @param hash\r\n     * @returns\r\n     */\r\n    async handleRedirectPromiseInternal(hash) {\r\n        const loggedInAccounts = this.getAllAccounts();\r\n        const request = this.browserStorage.getCachedNativeRequest();\r\n        const useNative = request &&\r\n            NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider) &&\r\n            this.nativeExtensionProvider &&\r\n            !hash;\r\n        const correlationId = useNative\r\n            ? request?.correlationId\r\n            : this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, true) || \"\";\r\n        const rootMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenRedirect, correlationId);\r\n        this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, InteractionType.Redirect);\r\n        let redirectResponse;\r\n        if (useNative && this.nativeExtensionProvider) {\r\n            this.logger.trace(\"handleRedirectPromise - acquiring token from native platform\");\r\n            const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.nativeExtensionProvider, request.accountId, this.nativeInternalStorage, request.correlationId);\r\n            redirectResponse = invokeAsync(nativeClient.handleRedirectPromise.bind(nativeClient), PerformanceEvents.HandleNativeRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(this.performanceClient, rootMeasurement.event.correlationId);\r\n        }\r\n        else {\r\n            this.logger.trace(\"handleRedirectPromise - acquiring token from web flow\");\r\n            const redirectClient = this.createRedirectClient(correlationId);\r\n            redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, rootMeasurement);\r\n        }\r\n        return redirectResponse\r\n            .then((result) => {\r\n            if (result) {\r\n                // Emit login event if number of accounts change\r\n                const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;\r\n                if (isLoggingIn) {\r\n                    this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, InteractionType.Redirect, result);\r\n                    this.logger.verbose(\"handleRedirectResponse returned result, login success\");\r\n                }\r\n                else {\r\n                    this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Redirect, result);\r\n                    this.logger.verbose(\"handleRedirectResponse returned result, acquire token success\");\r\n                }\r\n                rootMeasurement.end({\r\n                    success: true,\r\n                    accountType: getAccountType(result.account),\r\n                });\r\n            }\r\n            else {\r\n                /*\r\n                 * Instrument an event only if an error code is set. Otherwise, discard it when the redirect response\r\n                 * is empty and the error code is missing.\r\n                 */\r\n                if (rootMeasurement.event.errorCode) {\r\n                    rootMeasurement.end({ success: false });\r\n                }\r\n                else {\r\n                    rootMeasurement.discard();\r\n                }\r\n            }\r\n            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, InteractionType.Redirect);\r\n            return result;\r\n        })\r\n            .catch((e) => {\r\n            const eventError = e;\r\n            // Emit login event if there is an account\r\n            if (loggedInAccounts.length > 0) {\r\n                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Redirect, null, eventError);\r\n            }\r\n            else {\r\n                this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, InteractionType.Redirect, null, eventError);\r\n            }\r\n            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, InteractionType.Redirect);\r\n            rootMeasurement.end({\r\n                success: false,\r\n            }, eventError);\r\n            throw e;\r\n        });\r\n    }\r\n    /**\r\n     * Use when you want to obtain an access_token for your API by redirecting the user's browser window to the authorization endpoint. This function redirects\r\n     * the page, so any code that follows this function will not execute.\r\n     *\r\n     * IMPORTANT: It is NOT recommended to have code that is dependent on the resolution of the Promise. This function will navigate away from the current\r\n     * browser window. It currently returns a Promise in order to reflect the asynchronous nature of the code running in this function.\r\n     *\r\n     * @param request\r\n     */\r\n    async acquireTokenRedirect(request) {\r\n        // Preflight request\r\n        const correlationId = this.getRequestCorrelationId(request);\r\n        this.logger.verbose(\"acquireTokenRedirect called\", correlationId);\r\n        const atrMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPreRedirect, correlationId);\r\n        atrMeasurement.add({\r\n            accountType: getAccountType(request.account),\r\n            scenarioId: request.scenarioId,\r\n        });\r\n        // Override on request only if set, as onRedirectNavigate field is deprecated\r\n        const onRedirectNavigateCb = request.onRedirectNavigate;\r\n        if (onRedirectNavigateCb) {\r\n            request.onRedirectNavigate = (url) => {\r\n                const navigate = typeof onRedirectNavigateCb === \"function\"\r\n                    ? onRedirectNavigateCb(url)\r\n                    : undefined;\r\n                if (navigate !== false) {\r\n                    atrMeasurement.end({ success: true });\r\n                }\r\n                else {\r\n                    atrMeasurement.discard();\r\n                }\r\n                return navigate;\r\n            };\r\n        }\r\n        else {\r\n            const configOnRedirectNavigateCb = this.config.auth.onRedirectNavigate;\r\n            this.config.auth.onRedirectNavigate = (url) => {\r\n                const navigate = typeof configOnRedirectNavigateCb === \"function\"\r\n                    ? configOnRedirectNavigateCb(url)\r\n                    : undefined;\r\n                if (navigate !== false) {\r\n                    atrMeasurement.end({ success: true });\r\n                }\r\n                else {\r\n                    atrMeasurement.discard();\r\n                }\r\n                return navigate;\r\n            };\r\n        }\r\n        // If logged in, emit acquire token events\r\n        const isLoggedIn = this.getAllAccounts().length > 0;\r\n        try {\r\n            redirectPreflightCheck(this.initialized, this.config);\r\n            this.browserStorage.setInteractionInProgress(true);\r\n            if (isLoggedIn) {\r\n                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Redirect, request);\r\n            }\r\n            else {\r\n                this.eventHandler.emitEvent(EventType.LOGIN_START, InteractionType.Redirect, request);\r\n            }\r\n            let result;\r\n            if (this.nativeExtensionProvider && this.canUseNative(request)) {\r\n                const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenRedirect, this.performanceClient, this.nativeExtensionProvider, this.getNativeAccountId(request), this.nativeInternalStorage, correlationId);\r\n                result = nativeClient\r\n                    .acquireTokenRedirect(request, atrMeasurement)\r\n                    .catch((e) => {\r\n                    if (e instanceof NativeAuthError &&\r\n                        isFatalNativeAuthError(e)) {\r\n                        this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt\r\n                        const redirectClient = this.createRedirectClient(correlationId);\r\n                        return redirectClient.acquireToken(request);\r\n                    }\r\n                    else if (e instanceof InteractionRequiredAuthError) {\r\n                        this.logger.verbose(\"acquireTokenRedirect - Resolving interaction required error thrown by native broker by falling back to web flow\");\r\n                        const redirectClient = this.createRedirectClient(correlationId);\r\n                        return redirectClient.acquireToken(request);\r\n                    }\r\n                    this.browserStorage.setInteractionInProgress(false);\r\n                    throw e;\r\n                });\r\n            }\r\n            else {\r\n                const redirectClient = this.createRedirectClient(correlationId);\r\n                result = redirectClient.acquireToken(request);\r\n            }\r\n            return await result;\r\n        }\r\n        catch (e) {\r\n            atrMeasurement.end({ success: false }, e);\r\n            if (isLoggedIn) {\r\n                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Redirect, null, e);\r\n            }\r\n            else {\r\n                this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, InteractionType.Redirect, null, e);\r\n            }\r\n            throw e;\r\n        }\r\n    }\r\n    // #endregion\r\n    // #region Popup Flow\r\n    /**\r\n     * Use when you want to obtain an access_token for your API via opening a popup window in the user's browser\r\n     *\r\n     * @param request\r\n     *\r\n     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n     */\r\n    acquireTokenPopup(request) {\r\n        const correlationId = this.getRequestCorrelationId(request);\r\n        const atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, correlationId);\r\n        atPopupMeasurement.add({\r\n            scenarioId: request.scenarioId,\r\n            accountType: getAccountType(request.account),\r\n        });\r\n        try {\r\n            this.logger.verbose(\"acquireTokenPopup called\", correlationId);\r\n            preflightCheck(this.initialized, atPopupMeasurement);\r\n            this.browserStorage.setInteractionInProgress(true);\r\n        }\r\n        catch (e) {\r\n            // Since this function is syncronous we need to reject\r\n            return Promise.reject(e);\r\n        }\r\n        // If logged in, emit acquire token events\r\n        const loggedInAccounts = this.getAllAccounts();\r\n        if (loggedInAccounts.length > 0) {\r\n            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Popup, request);\r\n        }\r\n        else {\r\n            this.eventHandler.emitEvent(EventType.LOGIN_START, InteractionType.Popup, request);\r\n        }\r\n        let result;\r\n        if (this.canUseNative(request)) {\r\n            result = this.acquireTokenNative({\r\n                ...request,\r\n                correlationId,\r\n            }, ApiId.acquireTokenPopup)\r\n                .then((response) => {\r\n                this.browserStorage.setInteractionInProgress(false);\r\n                atPopupMeasurement.end({\r\n                    success: true,\r\n                    isNativeBroker: true,\r\n                    requestId: response.requestId,\r\n                    accountType: getAccountType(response.account),\r\n                });\r\n                return response;\r\n            })\r\n                .catch((e) => {\r\n                if (e instanceof NativeAuthError &&\r\n                    isFatalNativeAuthError(e)) {\r\n                    this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt\r\n                    const popupClient = this.createPopupClient(correlationId);\r\n                    return popupClient.acquireToken(request);\r\n                }\r\n                else if (e instanceof InteractionRequiredAuthError) {\r\n                    this.logger.verbose(\"acquireTokenPopup - Resolving interaction required error thrown by native broker by falling back to web flow\");\r\n                    const popupClient = this.createPopupClient(correlationId);\r\n                    return popupClient.acquireToken(request);\r\n                }\r\n                this.browserStorage.setInteractionInProgress(false);\r\n                throw e;\r\n            });\r\n        }\r\n        else {\r\n            const popupClient = this.createPopupClient(correlationId);\r\n            result = popupClient.acquireToken(request);\r\n        }\r\n        return result\r\n            .then((result) => {\r\n            /*\r\n             *  If logged in, emit acquire token events\r\n             */\r\n            const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;\r\n            if (isLoggingIn) {\r\n                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, InteractionType.Popup, result);\r\n            }\r\n            else {\r\n                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Popup, result);\r\n            }\r\n            atPopupMeasurement.end({\r\n                success: true,\r\n                requestId: result.requestId,\r\n                accessTokenSize: result.accessToken.length,\r\n                idTokenSize: result.idToken.length,\r\n                accountType: getAccountType(result.account),\r\n            });\r\n            return result;\r\n        })\r\n            .catch((e) => {\r\n            if (loggedInAccounts.length > 0) {\r\n                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Popup, null, e);\r\n            }\r\n            else {\r\n                this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, InteractionType.Popup, null, e);\r\n            }\r\n            atPopupMeasurement.end({\r\n                success: false,\r\n            }, e);\r\n            // Since this function is syncronous we need to reject\r\n            return Promise.reject(e);\r\n        });\r\n    }\r\n    trackPageVisibilityWithMeasurement() {\r\n        const measurement = this.ssoSilentMeasurement ||\r\n            this.acquireTokenByCodeAsyncMeasurement;\r\n        if (!measurement) {\r\n            return;\r\n        }\r\n        this.logger.info(\"Perf: Visibility change detected in \", measurement.event.name);\r\n        measurement.increment({\r\n            visibilityChangeCount: 1,\r\n        });\r\n    }\r\n    // #endregion\r\n    // #region Silent Flow\r\n    /**\r\n     * This function uses a hidden iframe to fetch an authorization code from the eSTS. There are cases where this may not work:\r\n     * - Any browser using a form of Intelligent Tracking Prevention\r\n     * - If there is not an established session with the service\r\n     *\r\n     * In these cases, the request must be done inside a popup or full frame redirect.\r\n     *\r\n     * For the cases where interaction is required, you cannot send a request with prompt=none.\r\n     *\r\n     * If your refresh token has expired, you can use this function to fetch a new set of tokens silently as long as\r\n     * you session on the server still exists.\r\n     * @param request {@link SsoSilentRequest}\r\n     *\r\n     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n     */\r\n    async ssoSilent(request) {\r\n        const correlationId = this.getRequestCorrelationId(request);\r\n        const validRequest = {\r\n            ...request,\r\n            // will be PromptValue.NONE or PromptValue.NO_SESSION\r\n            prompt: request.prompt,\r\n            correlationId: correlationId,\r\n        };\r\n        this.ssoSilentMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SsoSilent, correlationId);\r\n        this.ssoSilentMeasurement?.add({\r\n            scenarioId: request.scenarioId,\r\n            accountType: getAccountType(request.account),\r\n        });\r\n        preflightCheck(this.initialized, this.ssoSilentMeasurement);\r\n        this.ssoSilentMeasurement?.increment({\r\n            visibilityChangeCount: 0,\r\n        });\r\n        document.addEventListener(\"visibilitychange\", this.trackPageVisibilityWithMeasurement);\r\n        this.logger.verbose(\"ssoSilent called\", correlationId);\r\n        this.eventHandler.emitEvent(EventType.SSO_SILENT_START, InteractionType.Silent, validRequest);\r\n        let result;\r\n        if (this.canUseNative(validRequest)) {\r\n            result = this.acquireTokenNative(validRequest, ApiId.ssoSilent).catch((e) => {\r\n                // If native token acquisition fails for availability reasons fallback to standard flow\r\n                if (e instanceof NativeAuthError && isFatalNativeAuthError(e)) {\r\n                    this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt\r\n                    const silentIframeClient = this.createSilentIframeClient(validRequest.correlationId);\r\n                    return silentIframeClient.acquireToken(validRequest);\r\n                }\r\n                throw e;\r\n            });\r\n        }\r\n        else {\r\n            const silentIframeClient = this.createSilentIframeClient(validRequest.correlationId);\r\n            result = silentIframeClient.acquireToken(validRequest);\r\n        }\r\n        return result\r\n            .then((response) => {\r\n            this.eventHandler.emitEvent(EventType.SSO_SILENT_SUCCESS, InteractionType.Silent, response);\r\n            this.ssoSilentMeasurement?.end({\r\n                success: true,\r\n                isNativeBroker: response.fromNativeBroker,\r\n                requestId: response.requestId,\r\n                accessTokenSize: response.accessToken.length,\r\n                idTokenSize: response.idToken.length,\r\n                accountType: getAccountType(response.account),\r\n            });\r\n            return response;\r\n        })\r\n            .catch((e) => {\r\n            this.eventHandler.emitEvent(EventType.SSO_SILENT_FAILURE, InteractionType.Silent, null, e);\r\n            this.ssoSilentMeasurement?.end({\r\n                success: false,\r\n            }, e);\r\n            throw e;\r\n        })\r\n            .finally(() => {\r\n            document.removeEventListener(\"visibilitychange\", this.trackPageVisibilityWithMeasurement);\r\n        });\r\n    }\r\n    /**\r\n     * This function redeems an authorization code (passed as code) from the eSTS token endpoint.\r\n     * This authorization code should be acquired server-side using a confidential client to acquire a spa_code.\r\n     * This API is not indended for normal authorization code acquisition and redemption.\r\n     *\r\n     * Redemption of this authorization code will not require PKCE, as it was acquired by a confidential client.\r\n     *\r\n     * @param request {@link AuthorizationCodeRequest}\r\n     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n     */\r\n    async acquireTokenByCode(request) {\r\n        const correlationId = this.getRequestCorrelationId(request);\r\n        this.logger.trace(\"acquireTokenByCode called\", correlationId);\r\n        const atbcMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCode, correlationId);\r\n        preflightCheck(this.initialized, atbcMeasurement);\r\n        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_START, InteractionType.Silent, request);\r\n        atbcMeasurement.add({ scenarioId: request.scenarioId });\r\n        try {\r\n            if (request.code && request.nativeAccountId) {\r\n                // Throw error in case server returns both spa_code and spa_accountid in exchange for auth code.\r\n                throw createBrowserAuthError(spaCodeAndNativeAccountIdPresent);\r\n            }\r\n            else if (request.code) {\r\n                const hybridAuthCode = request.code;\r\n                let response = this.hybridAuthCodeResponses.get(hybridAuthCode);\r\n                if (!response) {\r\n                    this.logger.verbose(\"Initiating new acquireTokenByCode request\", correlationId);\r\n                    response = this.acquireTokenByCodeAsync({\r\n                        ...request,\r\n                        correlationId,\r\n                    })\r\n                        .then((result) => {\r\n                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_SUCCESS, InteractionType.Silent, result);\r\n                        this.hybridAuthCodeResponses.delete(hybridAuthCode);\r\n                        atbcMeasurement.end({\r\n                            success: true,\r\n                            isNativeBroker: result.fromNativeBroker,\r\n                            requestId: result.requestId,\r\n                            accessTokenSize: result.accessToken.length,\r\n                            idTokenSize: result.idToken.length,\r\n                            accountType: getAccountType(result.account),\r\n                        });\r\n                        return result;\r\n                    })\r\n                        .catch((error) => {\r\n                        this.hybridAuthCodeResponses.delete(hybridAuthCode);\r\n                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, InteractionType.Silent, null, error);\r\n                        atbcMeasurement.end({\r\n                            success: false,\r\n                        }, error);\r\n                        throw error;\r\n                    });\r\n                    this.hybridAuthCodeResponses.set(hybridAuthCode, response);\r\n                }\r\n                else {\r\n                    this.logger.verbose(\"Existing acquireTokenByCode request found\", correlationId);\r\n                    atbcMeasurement.discard();\r\n                }\r\n                return await response;\r\n            }\r\n            else if (request.nativeAccountId) {\r\n                if (this.canUseNative(request, request.nativeAccountId)) {\r\n                    const result = await this.acquireTokenNative({\r\n                        ...request,\r\n                        correlationId,\r\n                    }, ApiId.acquireTokenByCode, request.nativeAccountId).catch((e) => {\r\n                        // If native token acquisition fails for availability reasons fallback to standard flow\r\n                        if (e instanceof NativeAuthError &&\r\n                            isFatalNativeAuthError(e)) {\r\n                            this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt\r\n                        }\r\n                        throw e;\r\n                    });\r\n                    atbcMeasurement.end({\r\n                        accountType: getAccountType(result.account),\r\n                        success: true,\r\n                    });\r\n                    return result;\r\n                }\r\n                else {\r\n                    throw createBrowserAuthError(unableToAcquireTokenFromNativePlatform);\r\n                }\r\n            }\r\n            else {\r\n                throw createBrowserAuthError(authCodeOrNativeAccountIdRequired);\r\n            }\r\n        }\r\n        catch (e) {\r\n            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, InteractionType.Silent, null, e);\r\n            atbcMeasurement.end({\r\n                success: false,\r\n            }, e);\r\n            throw e;\r\n        }\r\n    }\r\n    /**\r\n     * Creates a SilentAuthCodeClient to redeem an authorization code.\r\n     * @param request\r\n     * @returns Result of the operation to redeem the authorization code\r\n     */\r\n    async acquireTokenByCodeAsync(request) {\r\n        this.logger.trace(\"acquireTokenByCodeAsync called\", request.correlationId);\r\n        this.acquireTokenByCodeAsyncMeasurement =\r\n            this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCodeAsync, request.correlationId);\r\n        this.acquireTokenByCodeAsyncMeasurement?.increment({\r\n            visibilityChangeCount: 0,\r\n        });\r\n        document.addEventListener(\"visibilitychange\", this.trackPageVisibilityWithMeasurement);\r\n        const silentAuthCodeClient = this.createSilentAuthCodeClient(request.correlationId);\r\n        const silentTokenResult = await silentAuthCodeClient\r\n            .acquireToken(request)\r\n            .then((response) => {\r\n            this.acquireTokenByCodeAsyncMeasurement?.end({\r\n                success: true,\r\n                fromCache: response.fromCache,\r\n                isNativeBroker: response.fromNativeBroker,\r\n                requestId: response.requestId,\r\n            });\r\n            return response;\r\n        })\r\n            .catch((tokenRenewalError) => {\r\n            this.acquireTokenByCodeAsyncMeasurement?.end({\r\n                success: false,\r\n            }, tokenRenewalError);\r\n            throw tokenRenewalError;\r\n        })\r\n            .finally(() => {\r\n            document.removeEventListener(\"visibilitychange\", this.trackPageVisibilityWithMeasurement);\r\n        });\r\n        return silentTokenResult;\r\n    }\r\n    /**\r\n     * Attempt to acquire an access token from the cache\r\n     * @param silentCacheClient SilentCacheClient\r\n     * @param commonRequest CommonSilentFlowRequest\r\n     * @param silentRequest SilentRequest\r\n     * @returns A promise that, when resolved, returns the access token\r\n     */\r\n    async acquireTokenFromCache(commonRequest, cacheLookupPolicy) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenFromCache, commonRequest.correlationId);\r\n        switch (cacheLookupPolicy) {\r\n            case CacheLookupPolicy.Default:\r\n            case CacheLookupPolicy.AccessToken:\r\n            case CacheLookupPolicy.AccessTokenAndRefreshToken:\r\n                const silentCacheClient = this.createSilentCacheClient(commonRequest.correlationId);\r\n                return invokeAsync(silentCacheClient.acquireToken.bind(silentCacheClient), PerformanceEvents.SilentCacheClientAcquireToken, this.logger, this.performanceClient, commonRequest.correlationId)(commonRequest);\r\n            default:\r\n                throw createClientAuthError(ClientAuthErrorCodes.tokenRefreshRequired);\r\n        }\r\n    }\r\n    /**\r\n     * Attempt to acquire an access token via a refresh token\r\n     * @param commonRequest CommonSilentFlowRequest\r\n     * @param cacheLookupPolicy CacheLookupPolicy\r\n     * @returns A promise that, when resolved, returns the access token\r\n     */\r\n    async acquireTokenByRefreshToken(commonRequest, cacheLookupPolicy) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenByRefreshToken, commonRequest.correlationId);\r\n        switch (cacheLookupPolicy) {\r\n            case CacheLookupPolicy.Default:\r\n            case CacheLookupPolicy.AccessTokenAndRefreshToken:\r\n            case CacheLookupPolicy.RefreshToken:\r\n            case CacheLookupPolicy.RefreshTokenAndNetwork:\r\n                const silentRefreshClient = this.createSilentRefreshClient(commonRequest.correlationId);\r\n                return invokeAsync(silentRefreshClient.acquireToken.bind(silentRefreshClient), PerformanceEvents.SilentRefreshClientAcquireToken, this.logger, this.performanceClient, commonRequest.correlationId)(commonRequest);\r\n            default:\r\n                throw createClientAuthError(ClientAuthErrorCodes.tokenRefreshRequired);\r\n        }\r\n    }\r\n    /**\r\n     * Attempt to acquire an access token via an iframe\r\n     * @param request CommonSilentFlowRequest\r\n     * @returns A promise that, when resolved, returns the access token\r\n     */\r\n    async acquireTokenBySilentIframe(request) {\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenBySilentIframe, request.correlationId);\r\n        const silentIframeClient = this.createSilentIframeClient(request.correlationId);\r\n        return invokeAsync(silentIframeClient.acquireToken.bind(silentIframeClient), PerformanceEvents.SilentIframeClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(request);\r\n    }\r\n    // #endregion\r\n    // #region Logout\r\n    /**\r\n     * Deprecated logout function. Use logoutRedirect or logoutPopup instead\r\n     * @param logoutRequest\r\n     * @deprecated\r\n     */\r\n    async logout(logoutRequest) {\r\n        const correlationId = this.getRequestCorrelationId(logoutRequest);\r\n        this.logger.warning(\"logout API is deprecated and will be removed in msal-browser v3.0.0. Use logoutRedirect instead.\", correlationId);\r\n        return this.logoutRedirect({\r\n            correlationId,\r\n            ...logoutRequest,\r\n        });\r\n    }\r\n    /**\r\n     * Use to log out the current user, and redirect the user to the postLogoutRedirectUri.\r\n     * Default behaviour is to redirect the user to `window.location.href`.\r\n     * @param logoutRequest\r\n     */\r\n    async logoutRedirect(logoutRequest) {\r\n        const correlationId = this.getRequestCorrelationId(logoutRequest);\r\n        redirectPreflightCheck(this.initialized, this.config);\r\n        this.browserStorage.setInteractionInProgress(true);\r\n        const redirectClient = this.createRedirectClient(correlationId);\r\n        return redirectClient.logout(logoutRequest);\r\n    }\r\n    /**\r\n     * Clears local cache for the current user then opens a popup window prompting the user to sign-out of the server\r\n     * @param logoutRequest\r\n     */\r\n    logoutPopup(logoutRequest) {\r\n        try {\r\n            const correlationId = this.getRequestCorrelationId(logoutRequest);\r\n            preflightCheck$1(this.initialized);\r\n            this.browserStorage.setInteractionInProgress(true);\r\n            const popupClient = this.createPopupClient(correlationId);\r\n            return popupClient.logout(logoutRequest);\r\n        }\r\n        catch (e) {\r\n            // Since this function is syncronous we need to reject\r\n            return Promise.reject(e);\r\n        }\r\n    }\r\n    /**\r\n     * Creates a cache interaction client to clear broswer cache.\r\n     * @param logoutRequest\r\n     */\r\n    async clearCache(logoutRequest) {\r\n        const correlationId = this.getRequestCorrelationId(logoutRequest);\r\n        const cacheClient = this.createSilentCacheClient(correlationId);\r\n        return cacheClient.logout(logoutRequest);\r\n    }\r\n    // #endregion\r\n    // #region Account APIs\r\n    /**\r\n     * Returns all the accounts in the cache that match the optional filter. If no filter is provided, all accounts are returned.\r\n     * @param accountFilter - (Optional) filter to narrow down the accounts returned\r\n     * @returns Array of AccountInfo objects in cache\r\n     */\r\n    getAllAccounts(accountFilter) {\r\n        return getAllAccounts(this.logger, this.browserStorage, this.isBrowserEnvironment, accountFilter);\r\n    }\r\n    /**\r\n     * Returns the first account found in the cache that matches the account filter passed in.\r\n     * @param accountFilter\r\n     * @returns The first account found in the cache matching the provided filter or null if no account could be found.\r\n     */\r\n    getAccount(accountFilter) {\r\n        return getAccount(accountFilter, this.logger, this.browserStorage);\r\n    }\r\n    /**\r\n     * Returns the signed in account matching username.\r\n     * (the account object is created at the time of successful login)\r\n     * or null when no matching account is found.\r\n     * This API is provided for convenience but getAccountById should be used for best reliability\r\n     * @param username\r\n     * @returns The account object stored in MSAL\r\n     */\r\n    getAccountByUsername(username) {\r\n        return getAccountByUsername(username, this.logger, this.browserStorage);\r\n    }\r\n    /**\r\n     * Returns the signed in account matching homeAccountId.\r\n     * (the account object is created at the time of successful login)\r\n     * or null when no matching account is found\r\n     * @param homeAccountId\r\n     * @returns The account object stored in MSAL\r\n     */\r\n    getAccountByHomeId(homeAccountId) {\r\n        return getAccountByHomeId(homeAccountId, this.logger, this.browserStorage);\r\n    }\r\n    /**\r\n     * Returns the signed in account matching localAccountId.\r\n     * (the account object is created at the time of successful login)\r\n     * or null when no matching account is found\r\n     * @param localAccountId\r\n     * @returns The account object stored in MSAL\r\n     */\r\n    getAccountByLocalId(localAccountId) {\r\n        return getAccountByLocalId(localAccountId, this.logger, this.browserStorage);\r\n    }\r\n    /**\r\n     * Sets the account to use as the active account. If no account is passed to the acquireToken APIs, then MSAL will use this active account.\r\n     * @param account\r\n     */\r\n    setActiveAccount(account) {\r\n        setActiveAccount(account, this.browserStorage);\r\n    }\r\n    /**\r\n     * Gets the currently active account\r\n     */\r\n    getActiveAccount() {\r\n        return getActiveAccount(this.browserStorage);\r\n    }\r\n    // #endregion\r\n    /**\r\n     * Hydrates the cache with the tokens from an AuthenticationResult\r\n     * @param result\r\n     * @param request\r\n     * @returns\r\n     */\r\n    async hydrateCache(result, request) {\r\n        this.logger.verbose(\"hydrateCache called\");\r\n        // Account gets saved to browser storage regardless of native or not\r\n        const accountEntity = AccountEntity.createFromAccountInfo(result.account, result.cloudGraphHostName, result.msGraphHost);\r\n        this.browserStorage.setAccount(accountEntity);\r\n        if (result.fromNativeBroker) {\r\n            this.logger.verbose(\"Response was from native broker, storing in-memory\");\r\n            // Tokens from native broker are stored in-memory\r\n            return this.nativeInternalStorage.hydrateCache(result, request);\r\n        }\r\n        else {\r\n            return this.browserStorage.hydrateCache(result, request);\r\n        }\r\n    }\r\n    // #region Helpers\r\n    /**\r\n     * Acquire a token from native device (e.g. WAM)\r\n     * @param request\r\n     */\r\n    async acquireTokenNative(request, apiId, accountId) {\r\n        this.logger.trace(\"acquireTokenNative called\");\r\n        if (!this.nativeExtensionProvider) {\r\n            throw createBrowserAuthError(nativeConnectionNotEstablished);\r\n        }\r\n        const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, apiId, this.performanceClient, this.nativeExtensionProvider, accountId || this.getNativeAccountId(request), this.nativeInternalStorage, request.correlationId);\r\n        return nativeClient.acquireToken(request);\r\n    }\r\n    /**\r\n     * Returns boolean indicating if this request can use the native broker\r\n     * @param request\r\n     */\r\n    canUseNative(request, accountId) {\r\n        this.logger.trace(\"canUseNative called\");\r\n        if (!NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider, request.authenticationScheme)) {\r\n            this.logger.trace(\"canUseNative: isNativeAvailable returned false, returning false\");\r\n            return false;\r\n        }\r\n        if (request.prompt) {\r\n            switch (request.prompt) {\r\n                case PromptValue.NONE:\r\n                case PromptValue.CONSENT:\r\n                case PromptValue.LOGIN:\r\n                    this.logger.trace(\"canUseNative: prompt is compatible with native flow\");\r\n                    break;\r\n                default:\r\n                    this.logger.trace(`canUseNative: prompt = ${request.prompt} is not compatible with native flow, returning false`);\r\n                    return false;\r\n            }\r\n        }\r\n        if (!accountId && !this.getNativeAccountId(request)) {\r\n            this.logger.trace(\"canUseNative: nativeAccountId is not available, returning false\");\r\n            return false;\r\n        }\r\n        return true;\r\n    }\r\n    /**\r\n     * Get the native accountId from the account\r\n     * @param request\r\n     * @returns\r\n     */\r\n    getNativeAccountId(request) {\r\n        const account = request.account ||\r\n            this.getAccount({\r\n                loginHint: request.loginHint,\r\n                sid: request.sid,\r\n            }) ||\r\n            this.getActiveAccount();\r\n        return (account && account.nativeAccountId) || \"\";\r\n    }\r\n    /**\r\n     * Returns new instance of the Popup Interaction Client\r\n     * @param correlationId\r\n     */\r\n    createPopupClient(correlationId) {\r\n        return new PopupClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.nativeInternalStorage, this.nativeExtensionProvider, correlationId);\r\n    }\r\n    /**\r\n     * Returns new instance of the Redirect Interaction Client\r\n     * @param correlationId\r\n     */\r\n    createRedirectClient(correlationId) {\r\n        return new RedirectClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.nativeInternalStorage, this.nativeExtensionProvider, correlationId);\r\n    }\r\n    /**\r\n     * Returns new instance of the Silent Iframe Interaction Client\r\n     * @param correlationId\r\n     */\r\n    createSilentIframeClient(correlationId) {\r\n        return new SilentIframeClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.ssoSilent, this.performanceClient, this.nativeInternalStorage, this.nativeExtensionProvider, correlationId);\r\n    }\r\n    /**\r\n     * Returns new instance of the Silent Cache Interaction Client\r\n     */\r\n    createSilentCacheClient(correlationId) {\r\n        return new SilentCacheClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.nativeExtensionProvider, correlationId);\r\n    }\r\n    /**\r\n     * Returns new instance of the Silent Refresh Interaction Client\r\n     */\r\n    createSilentRefreshClient(correlationId) {\r\n        return new SilentRefreshClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.nativeExtensionProvider, correlationId);\r\n    }\r\n    /**\r\n     * Returns new instance of the Silent AuthCode Interaction Client\r\n     */\r\n    createSilentAuthCodeClient(correlationId) {\r\n        return new SilentAuthCodeClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenByCode, this.performanceClient, this.nativeExtensionProvider, correlationId);\r\n    }\r\n    /**\r\n     * Adds event callbacks to array\r\n     * @param callback\r\n     */\r\n    addEventCallback(callback) {\r\n        return this.eventHandler.addEventCallback(callback);\r\n    }\r\n    /**\r\n     * Removes callback with provided id from callback array\r\n     * @param callbackId\r\n     */\r\n    removeEventCallback(callbackId) {\r\n        this.eventHandler.removeEventCallback(callbackId);\r\n    }\r\n    /**\r\n     * Registers a callback to receive performance events.\r\n     *\r\n     * @param {PerformanceCallbackFunction} callback\r\n     * @returns {string}\r\n     */\r\n    addPerformanceCallback(callback) {\r\n        return this.performanceClient.addPerformanceCallback(callback);\r\n    }\r\n    /**\r\n     * Removes a callback registered with addPerformanceCallback.\r\n     *\r\n     * @param {string} callbackId\r\n     * @returns {boolean}\r\n     */\r\n    removePerformanceCallback(callbackId) {\r\n        return this.performanceClient.removePerformanceCallback(callbackId);\r\n    }\r\n    /**\r\n     * Adds event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window\r\n     */\r\n    enableAccountStorageEvents() {\r\n        this.eventHandler.enableAccountStorageEvents();\r\n    }\r\n    /**\r\n     * Removes event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window\r\n     */\r\n    disableAccountStorageEvents() {\r\n        this.eventHandler.disableAccountStorageEvents();\r\n    }\r\n    /**\r\n     * Gets the token cache for the application.\r\n     */\r\n    getTokenCache() {\r\n        return this.tokenCache;\r\n    }\r\n    /**\r\n     * Returns the logger instance\r\n     */\r\n    getLogger() {\r\n        return this.logger;\r\n    }\r\n    /**\r\n     * Replaces the default logger set in configurations with new Logger with new configurations\r\n     * @param logger Logger instance\r\n     */\r\n    setLogger(logger) {\r\n        this.logger = logger;\r\n    }\r\n    /**\r\n     * Called by wrapper libraries (Angular & React) to set SKU and Version passed down to telemetry, logger, etc.\r\n     * @param sku\r\n     * @param version\r\n     */\r\n    initializeWrapperLibrary(sku, version) {\r\n        // Validate the SKU passed in is one we expect\r\n        this.browserStorage.setWrapperMetadata(sku, version);\r\n    }\r\n    /**\r\n     * Sets navigation client\r\n     * @param navigationClient\r\n     */\r\n    setNavigationClient(navigationClient) {\r\n        this.navigationClient = navigationClient;\r\n    }\r\n    /**\r\n     * Returns the configuration object\r\n     */\r\n    getConfiguration() {\r\n        return this.config;\r\n    }\r\n    /**\r\n     * Returns the performance client\r\n     */\r\n    getPerformanceClient() {\r\n        return this.performanceClient;\r\n    }\r\n    /**\r\n     * Returns the browser env indicator\r\n     */\r\n    isBrowserEnv() {\r\n        return this.isBrowserEnvironment;\r\n    }\r\n    /**\r\n     * Returns the event handler\r\n     */\r\n    getEventHandler() {\r\n        return this.eventHandler;\r\n    }\r\n    /**\r\n     * Generates a correlation id for a request if none is provided.\r\n     *\r\n     * @protected\r\n     * @param {?Partial<BaseAuthRequest>} [request]\r\n     * @returns {string}\r\n     */\r\n    getRequestCorrelationId(request) {\r\n        if (request?.correlationId) {\r\n            return request.correlationId;\r\n        }\r\n        if (this.isBrowserEnvironment) {\r\n            return createNewGuid();\r\n        }\r\n        /*\r\n         * Included for fallback for non-browser environments,\r\n         * and to ensure this method always returns a string.\r\n         */\r\n        return Constants.EMPTY_STRING;\r\n    }\r\n    // #endregion\r\n    /**\r\n     * Use when initiating the login process by redirecting the user's browser to the authorization endpoint. This function redirects the page, so\r\n     * any code that follows this function will not execute.\r\n     *\r\n     * IMPORTANT: It is NOT recommended to have code that is dependent on the resolution of the Promise. This function will navigate away from the current\r\n     * browser window. It currently returns a Promise in order to reflect the asynchronous nature of the code running in this function.\r\n     *\r\n     * @param request\r\n     */\r\n    async loginRedirect(request) {\r\n        const correlationId = this.getRequestCorrelationId(request);\r\n        this.logger.verbose(\"loginRedirect called\", correlationId);\r\n        return this.acquireTokenRedirect({\r\n            correlationId,\r\n            ...(request || DEFAULT_REQUEST),\r\n        });\r\n    }\r\n    /**\r\n     * Use when initiating the login process via opening a popup window in the user's browser\r\n     *\r\n     * @param request\r\n     *\r\n     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.\r\n     */\r\n    loginPopup(request) {\r\n        const correlationId = this.getRequestCorrelationId(request);\r\n        this.logger.verbose(\"loginPopup called\", correlationId);\r\n        return this.acquireTokenPopup({\r\n            correlationId,\r\n            ...(request || DEFAULT_REQUEST),\r\n        });\r\n    }\r\n    /**\r\n     * Silently acquire an access token for a given set of scopes. Returns currently processing promise if parallel requests are made.\r\n     *\r\n     * @param {@link (SilentRequest:type)}\r\n     * @returns {Promise.<AuthenticationResult>} - a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the {@link AuthResponse} object\r\n     */\r\n    async acquireTokenSilent(request) {\r\n        const correlationId = this.getRequestCorrelationId(request);\r\n        const atsMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenSilent, correlationId);\r\n        atsMeasurement.add({\r\n            cacheLookupPolicy: request.cacheLookupPolicy,\r\n            scenarioId: request.scenarioId,\r\n        });\r\n        preflightCheck(this.initialized, atsMeasurement);\r\n        this.logger.verbose(\"acquireTokenSilent called\", correlationId);\r\n        const account = request.account || this.getActiveAccount();\r\n        if (!account) {\r\n            throw createBrowserAuthError(noAccountError);\r\n        }\r\n        atsMeasurement.add({ accountType: getAccountType(account) });\r\n        const thumbprint = {\r\n            clientId: this.config.auth.clientId,\r\n            authority: request.authority || Constants.EMPTY_STRING,\r\n            scopes: request.scopes,\r\n            homeAccountIdentifier: account.homeAccountId,\r\n            claims: request.claims,\r\n            authenticationScheme: request.authenticationScheme,\r\n            resourceRequestMethod: request.resourceRequestMethod,\r\n            resourceRequestUri: request.resourceRequestUri,\r\n            shrClaims: request.shrClaims,\r\n            sshKid: request.sshKid,\r\n            shrOptions: request.shrOptions,\r\n        };\r\n        const silentRequestKey = JSON.stringify(thumbprint);\r\n        const cachedResponse = this.activeSilentTokenRequests.get(silentRequestKey);\r\n        if (typeof cachedResponse === \"undefined\") {\r\n            this.logger.verbose(\"acquireTokenSilent called for the first time, storing active request\", correlationId);\r\n            const response = invokeAsync(this.acquireTokenSilentAsync.bind(this), PerformanceEvents.AcquireTokenSilentAsync, this.logger, this.performanceClient, correlationId)({\r\n                ...request,\r\n                correlationId,\r\n            }, account)\r\n                .then((result) => {\r\n                this.activeSilentTokenRequests.delete(silentRequestKey);\r\n                atsMeasurement.end({\r\n                    success: true,\r\n                    fromCache: result.fromCache,\r\n                    isNativeBroker: result.fromNativeBroker,\r\n                    cacheLookupPolicy: request.cacheLookupPolicy,\r\n                    requestId: result.requestId,\r\n                    accessTokenSize: result.accessToken.length,\r\n                    idTokenSize: result.idToken.length,\r\n                });\r\n                return result;\r\n            })\r\n                .catch((error) => {\r\n                this.activeSilentTokenRequests.delete(silentRequestKey);\r\n                atsMeasurement.end({\r\n                    success: false,\r\n                }, error);\r\n                throw error;\r\n            });\r\n            this.activeSilentTokenRequests.set(silentRequestKey, response);\r\n            return {\r\n                ...(await response),\r\n                state: request.state,\r\n            };\r\n        }\r\n        else {\r\n            this.logger.verbose(\"acquireTokenSilent has been called previously, returning the result from the first call\", correlationId);\r\n            // Discard measurements for memoized calls, as they are usually only a couple of ms and will artificially deflate metrics\r\n            atsMeasurement.discard();\r\n            return {\r\n                ...(await cachedResponse),\r\n                state: request.state,\r\n            };\r\n        }\r\n    }\r\n    /**\r\n     * Silently acquire an access token for a given set of scopes. Will use cached token if available, otherwise will attempt to acquire a new token from the network via refresh token.\r\n     * @param {@link (SilentRequest:type)}\r\n     * @param {@link (AccountInfo:type)}\r\n     * @returns {Promise.<AuthenticationResult>} - a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the {@link AuthResponse}\r\n     */\r\n    async acquireTokenSilentAsync(request, account) {\r\n        const trackPageVisibility = () => this.trackPageVisibility(request.correlationId);\r\n        this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);\r\n        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, InteractionType.Silent, request);\r\n        if (request.correlationId) {\r\n            this.performanceClient.incrementFields({ visibilityChangeCount: 0 }, request.correlationId);\r\n        }\r\n        document.addEventListener(\"visibilitychange\", trackPageVisibility);\r\n        const silentRequest = await invokeAsync(initializeSilentRequest, PerformanceEvents.InitializeSilentRequest, this.logger, this.performanceClient, request.correlationId)(request, account, this.config, this.performanceClient, this.logger);\r\n        const cacheLookupPolicy = request.cacheLookupPolicy || CacheLookupPolicy.Default;\r\n        const result = this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy).catch(async (refreshTokenError) => {\r\n            const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy);\r\n            if (shouldTryToResolveSilently) {\r\n                if (!this.activeIframeRequest) {\r\n                    let _resolve;\r\n                    // Always set the active request tracker immediately after checking it to prevent races\r\n                    this.activeIframeRequest = [\r\n                        new Promise((resolve) => {\r\n                            _resolve = resolve;\r\n                        }),\r\n                        silentRequest.correlationId,\r\n                    ];\r\n                    this.logger.verbose(\"Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.\", silentRequest.correlationId);\r\n                    return invokeAsync(this.acquireTokenBySilentIframe.bind(this), PerformanceEvents.AcquireTokenBySilentIframe, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest)\r\n                        .then((iframeResult) => {\r\n                        _resolve(true);\r\n                        return iframeResult;\r\n                    })\r\n                        .catch((e) => {\r\n                        _resolve(false);\r\n                        throw e;\r\n                    })\r\n                        .finally(() => {\r\n                        this.activeIframeRequest = undefined;\r\n                    });\r\n                }\r\n                else if (cacheLookupPolicy !== CacheLookupPolicy.Skip) {\r\n                    const [activePromise, activeCorrelationId] = this.activeIframeRequest;\r\n                    this.logger.verbose(`Iframe request is already in progress, awaiting resolution for request with correlationId: ${activeCorrelationId}`, silentRequest.correlationId);\r\n                    const awaitConcurrentIframeMeasure = this.performanceClient.startMeasurement(PerformanceEvents.AwaitConcurrentIframe, silentRequest.correlationId);\r\n                    awaitConcurrentIframeMeasure.add({\r\n                        awaitIframeCorrelationId: activeCorrelationId,\r\n                    });\r\n                    const activePromiseResult = await activePromise;\r\n                    awaitConcurrentIframeMeasure.end({\r\n                        success: activePromiseResult,\r\n                    });\r\n                    if (activePromiseResult) {\r\n                        this.logger.verbose(`Parallel iframe request with correlationId: ${activeCorrelationId} succeeded. Retrying cache and/or RT redemption`, silentRequest.correlationId);\r\n                        // Retry cache lookup and/or RT exchange after iframe completes\r\n                        return this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy);\r\n                    }\r\n                    else {\r\n                        this.logger.info(`Iframe request with correlationId: ${activeCorrelationId} failed. Interaction is required.`);\r\n                        // If previous iframe request failed, it's unlikely to succeed this time. Throw original error.\r\n                        throw refreshTokenError;\r\n                    }\r\n                }\r\n                else {\r\n                    // Cache policy set to skip and another iframe request is already in progress\r\n                    this.logger.warning(\"Another iframe request is currently in progress and CacheLookupPolicy is set to Skip. This may result in degraded performance and/or reliability for both calls. Please consider changing the CacheLookupPolicy to take advantage of request queuing and token cache.\", silentRequest.correlationId);\r\n                    return invokeAsync(this.acquireTokenBySilentIframe.bind(this), PerformanceEvents.AcquireTokenBySilentIframe, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest);\r\n                }\r\n            }\r\n            else {\r\n                // Error cannot be silently resolved or iframe renewal is not allowed, interaction required\r\n                throw refreshTokenError;\r\n            }\r\n        });\r\n        return result\r\n            .then((response) => {\r\n            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, InteractionType.Silent, response);\r\n            if (request.correlationId) {\r\n                this.performanceClient.addFields({\r\n                    fromCache: response.fromCache,\r\n                    isNativeBroker: response.fromNativeBroker,\r\n                    requestId: response.requestId,\r\n                }, request.correlationId);\r\n            }\r\n            return response;\r\n        })\r\n            .catch((tokenRenewalError) => {\r\n            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, InteractionType.Silent, null, tokenRenewalError);\r\n            throw tokenRenewalError;\r\n        })\r\n            .finally(() => {\r\n            document.removeEventListener(\"visibilitychange\", trackPageVisibility);\r\n        });\r\n    }\r\n    /**\r\n     * AcquireTokenSilent without the iframe fallback. This is used to enable the correct fallbacks in cases where there's a potential for multiple silent requests to be made in parallel and prevent those requests from making concurrent iframe requests.\r\n     * @param silentRequest\r\n     * @param cacheLookupPolicy\r\n     * @returns\r\n     */\r\n    async acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy) {\r\n        if (NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider, silentRequest.authenticationScheme) &&\r\n            silentRequest.account.nativeAccountId) {\r\n            this.logger.verbose(\"acquireTokenSilent - attempting to acquire token from native platform\");\r\n            return this.acquireTokenNative(silentRequest, ApiId.acquireTokenSilent_silentFlow).catch(async (e) => {\r\n                // If native token acquisition fails for availability reasons fallback to web flow\r\n                if (e instanceof NativeAuthError && isFatalNativeAuthError(e)) {\r\n                    this.logger.verbose(\"acquireTokenSilent - native platform unavailable, falling back to web flow\");\r\n                    this.nativeExtensionProvider = undefined; // Prevent future requests from continuing to attempt\r\n                    // Cache will not contain tokens, given that previous WAM requests succeeded. Skip cache and RT renewal and go straight to iframe renewal\r\n                    throw createClientAuthError(ClientAuthErrorCodes.tokenRefreshRequired);\r\n                }\r\n                throw e;\r\n            });\r\n        }\r\n        else {\r\n            this.logger.verbose(\"acquireTokenSilent - attempting to acquire token from web flow\");\r\n            return invokeAsync(this.acquireTokenFromCache.bind(this), PerformanceEvents.AcquireTokenFromCache, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy).catch((cacheError) => {\r\n                if (cacheLookupPolicy === CacheLookupPolicy.AccessToken) {\r\n                    throw cacheError;\r\n                }\r\n                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, InteractionType.Silent, silentRequest);\r\n                return invokeAsync(this.acquireTokenByRefreshToken.bind(this), PerformanceEvents.AcquireTokenByRefreshToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy);\r\n            });\r\n        }\r\n    }\r\n}\r\n/**\r\n * Determines whether an error thrown by the refresh token endpoint can be resolved without interaction\r\n * @param refreshTokenError\r\n * @param silentRequest\r\n * @param cacheLookupPolicy\r\n * @returns\r\n */\r\nfunction checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy) {\r\n    const noInteractionRequired = !(refreshTokenError instanceof InteractionRequiredAuthError &&\r\n        // For refresh token errors, bad_token does not always require interaction (silently resolvable)\r\n        refreshTokenError.subError !==\r\n            InteractionRequiredAuthErrorCodes.badToken);\r\n    // Errors that result when the refresh token needs to be replaced\r\n    const refreshTokenRefreshRequired = refreshTokenError.errorCode === BrowserConstants.INVALID_GRANT_ERROR ||\r\n        refreshTokenError.errorCode ===\r\n            ClientAuthErrorCodes.tokenRefreshRequired;\r\n    // Errors that may be resolved before falling back to interaction (through iframe renewal)\r\n    const isSilentlyResolvable = (noInteractionRequired && refreshTokenRefreshRequired) ||\r\n        refreshTokenError.errorCode ===\r\n            InteractionRequiredAuthErrorCodes.noTokensFound ||\r\n        refreshTokenError.errorCode ===\r\n            InteractionRequiredAuthErrorCodes.refreshTokenExpired;\r\n    // Only these policies allow for an iframe renewal attempt\r\n    const tryIframeRenewal = iFrameRenewalPolicies.includes(cacheLookupPolicy);\r\n    return isSilentlyResolvable && tryIframeRenewal;\r\n}\n\nexport { StandardController };\n//# sourceMappingURL=StandardController.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { PerformanceEvents } from '@azure/msal-common';\nimport { KEY_FORMAT_JWK } from '../utils/BrowserConstants.mjs';\nimport { urlEncodeArr } from '../encode/Base64Encode.mjs';\nimport { cryptoNonExistent } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * This file defines functions used by the browser library to perform cryptography operations such as\r\n * hashing and encoding. It also has helper functions to validate the availability of specific APIs.\r\n */\r\n/**\r\n * See here for more info on RsaHashedKeyGenParams: https://developer.mozilla.org/en-US/docs/Web/API/RsaHashedKeyGenParams\r\n */\r\n// RSA KeyGen Algorithm\r\nconst PKCS1_V15_KEYGEN_ALG = \"RSASSA-PKCS1-v1_5\";\r\n// SHA-256 hashing algorithm\r\nconst S256_HASH_ALG = \"SHA-256\";\r\n// MOD length for PoP tokens\r\nconst MODULUS_LENGTH = 2048;\r\n// Public Exponent\r\nconst PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);\r\n// UUID hex digits\r\nconst UUID_CHARS = \"0123456789abcdef\";\r\n// Array to store UINT32 random value\r\nconst UINT32_ARR = new Uint32Array(1);\r\nconst keygenAlgorithmOptions = {\r\n    name: PKCS1_V15_KEYGEN_ALG,\r\n    hash: S256_HASH_ALG,\r\n    modulusLength: MODULUS_LENGTH,\r\n    publicExponent: PUBLIC_EXPONENT,\r\n};\r\n/**\r\n * Check whether browser crypto is available.\r\n */\r\nfunction validateCryptoAvailable(logger) {\r\n    if (\"crypto\" in window) {\r\n        logger.verbose(\"BrowserCrypto: modern crypto interface available\");\r\n    }\r\n    else {\r\n        logger.error(\"BrowserCrypto: crypto interface is unavailable\");\r\n        throw createBrowserAuthError(cryptoNonExistent);\r\n    }\r\n}\r\n/**\r\n * Returns a sha-256 hash of the given dataString as an ArrayBuffer.\r\n * @param dataString {string} data string\r\n * @param performanceClient {?IPerformanceClient}\r\n * @param correlationId {?string} correlation id\r\n */\r\nasync function sha256Digest(dataString, performanceClient, correlationId) {\r\n    performanceClient?.addQueueMeasurement(PerformanceEvents.Sha256Digest, correlationId);\r\n    const encoder = new TextEncoder();\r\n    const data = encoder.encode(dataString);\r\n    return window.crypto.subtle.digest(S256_HASH_ALG, data);\r\n}\r\n/**\r\n * Populates buffer with cryptographically random values.\r\n * @param dataBuffer\r\n */\r\nfunction getRandomValues(dataBuffer) {\r\n    return window.crypto.getRandomValues(dataBuffer);\r\n}\r\n/**\r\n * Returns random Uint32 value.\r\n * @returns {number}\r\n */\r\nfunction getRandomUint32() {\r\n    window.crypto.getRandomValues(UINT32_ARR);\r\n    return UINT32_ARR[0];\r\n}\r\n/**\r\n * Creates a UUID v7 from the current timestamp.\r\n * Implementation relies on the system clock to guarantee increasing order of generated identifiers.\r\n * @returns {number}\r\n */\r\nfunction createNewGuid() {\r\n    const currentTimestamp = Date.now();\r\n    const baseRand = getRandomUint32() * 0x400 + (getRandomUint32() & 0x3ff);\r\n    // Result byte array\r\n    const bytes = new Uint8Array(16);\r\n    // A 12-bit `rand_a` field value\r\n    const randA = Math.trunc(baseRand / 2 ** 30);\r\n    // The higher 30 bits of 62-bit `rand_b` field value\r\n    const randBHi = baseRand & (2 ** 30 - 1);\r\n    // The lower 32 bits of 62-bit `rand_b` field value\r\n    const randBLo = getRandomUint32();\r\n    bytes[0] = currentTimestamp / 2 ** 40;\r\n    bytes[1] = currentTimestamp / 2 ** 32;\r\n    bytes[2] = currentTimestamp / 2 ** 24;\r\n    bytes[3] = currentTimestamp / 2 ** 16;\r\n    bytes[4] = currentTimestamp / 2 ** 8;\r\n    bytes[5] = currentTimestamp;\r\n    bytes[6] = 0x70 | (randA >>> 8);\r\n    bytes[7] = randA;\r\n    bytes[8] = 0x80 | (randBHi >>> 24);\r\n    bytes[9] = randBHi >>> 16;\r\n    bytes[10] = randBHi >>> 8;\r\n    bytes[11] = randBHi;\r\n    bytes[12] = randBLo >>> 24;\r\n    bytes[13] = randBLo >>> 16;\r\n    bytes[14] = randBLo >>> 8;\r\n    bytes[15] = randBLo;\r\n    let text = \"\";\r\n    for (let i = 0; i < bytes.length; i++) {\r\n        text += UUID_CHARS.charAt(bytes[i] >>> 4);\r\n        text += UUID_CHARS.charAt(bytes[i] & 0xf);\r\n        if (i === 3 || i === 5 || i === 7 || i === 9) {\r\n            text += \"-\";\r\n        }\r\n    }\r\n    return text;\r\n}\r\n/**\r\n * Generates a keypair based on current keygen algorithm config.\r\n * @param extractable\r\n * @param usages\r\n */\r\nasync function generateKeyPair(extractable, usages) {\r\n    return window.crypto.subtle.generateKey(keygenAlgorithmOptions, extractable, usages);\r\n}\r\n/**\r\n * Export key as Json Web Key (JWK)\r\n * @param key\r\n */\r\nasync function exportJwk(key) {\r\n    return window.crypto.subtle.exportKey(KEY_FORMAT_JWK, key);\r\n}\r\n/**\r\n * Imports key as Json Web Key (JWK), can set extractable and usages.\r\n * @param key\r\n * @param extractable\r\n * @param usages\r\n */\r\nasync function importJwk(key, extractable, usages) {\r\n    return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, keygenAlgorithmOptions, extractable, usages);\r\n}\r\n/**\r\n * Signs given data with given key\r\n * @param key\r\n * @param data\r\n */\r\nasync function sign(key, data) {\r\n    return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);\r\n}\r\n/**\r\n * Returns the SHA-256 hash of an input string\r\n * @param plainText\r\n */\r\nasync function hashString(plainText) {\r\n    const hashBuffer = await sha256Digest(plainText);\r\n    const hashBytes = new Uint8Array(hashBuffer);\r\n    return urlEncodeArr(hashBytes);\r\n}\n\nexport { createNewGuid, exportJwk, generateKeyPair, getRandomValues, hashString, importJwk, sha256Digest, sign, validateCryptoAvailable };\n//# sourceMappingURL=BrowserCrypto.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { PerformanceEvents, invoke, invokeAsync } from '@azure/msal-common';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { urlEncodeArr } from '../encode/Base64Encode.mjs';\nimport { getRandomValues, sha256Digest } from './BrowserCrypto.mjs';\nimport { pkceNotCreated } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n// Constant byte array length\r\nconst RANDOM_BYTE_ARR_LENGTH = 32;\r\n/**\r\n * This file defines APIs to generate PKCE codes and code verifiers.\r\n */\r\n/**\r\n * Generates PKCE Codes. See the RFC for more information: https://tools.ietf.org/html/rfc7636\r\n */\r\nasync function generatePkceCodes(performanceClient, logger, correlationId) {\r\n    performanceClient.addQueueMeasurement(PerformanceEvents.GeneratePkceCodes, correlationId);\r\n    const codeVerifier = invoke(generateCodeVerifier, PerformanceEvents.GenerateCodeVerifier, logger, performanceClient, correlationId)(performanceClient, logger, correlationId);\r\n    const codeChallenge = await invokeAsync(generateCodeChallengeFromVerifier, PerformanceEvents.GenerateCodeChallengeFromVerifier, logger, performanceClient, correlationId)(codeVerifier, performanceClient, logger, correlationId);\r\n    return {\r\n        verifier: codeVerifier,\r\n        challenge: codeChallenge,\r\n    };\r\n}\r\n/**\r\n * Generates a random 32 byte buffer and returns the base64\r\n * encoded string to be used as a PKCE Code Verifier\r\n */\r\nfunction generateCodeVerifier(performanceClient, logger, correlationId) {\r\n    try {\r\n        // Generate random values as utf-8\r\n        const buffer = new Uint8Array(RANDOM_BYTE_ARR_LENGTH);\r\n        invoke(getRandomValues, PerformanceEvents.GetRandomValues, logger, performanceClient, correlationId)(buffer);\r\n        // encode verifier as base64\r\n        const pkceCodeVerifierB64 = urlEncodeArr(buffer);\r\n        return pkceCodeVerifierB64;\r\n    }\r\n    catch (e) {\r\n        throw createBrowserAuthError(pkceNotCreated);\r\n    }\r\n}\r\n/**\r\n * Creates a base64 encoded PKCE Code Challenge string from the\r\n * hash created from the PKCE Code Verifier supplied\r\n */\r\nasync function generateCodeChallengeFromVerifier(pkceCodeVerifier, performanceClient, logger, correlationId) {\r\n    performanceClient.addQueueMeasurement(PerformanceEvents.GenerateCodeChallengeFromVerifier, correlationId);\r\n    try {\r\n        // hashed verifier\r\n        const pkceHashedCodeVerifier = await invokeAsync(sha256Digest, PerformanceEvents.Sha256Digest, logger, performanceClient, correlationId)(pkceCodeVerifier, performanceClient, correlationId);\r\n        // encode hash as base64\r\n        return urlEncodeArr(new Uint8Array(pkceHashedCodeVerifier));\r\n    }\r\n    catch (e) {\r\n        throw createBrowserAuthError(pkceNotCreated);\r\n    }\r\n}\n\nexport { generatePkceCodes };\n//# sourceMappingURL=PkceGenerator.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\nimport { createBrowserAuthError } from '../error/BrowserAuthError.mjs';\nimport { invalidBase64String } from '../error/BrowserAuthErrorCodes.mjs';\n\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Class which exposes APIs to decode base64 strings to plaintext. See here for implementation details:\r\n * https://developer.mozilla.org/en-US/docs/Glossary/Base64#the_unicode_problem\r\n */\r\n/**\r\n * Returns a URL-safe plaintext decoded string from b64 encoded input.\r\n * @param input\r\n */\r\nfunction base64Decode(input) {\r\n    return new TextDecoder().decode(base64DecToArr(input));\r\n}\r\n/**\r\n * Decodes base64 into Uint8Array\r\n * @param base64String\r\n */\r\nfunction base64DecToArr(base64String) {\r\n    let encodedString = base64String.replace(/-/g, \"+\").replace(/_/g, \"/\");\r\n    switch (encodedString.length % 4) {\r\n        case 0:\r\n            break;\r\n        case 2:\r\n            encodedString += \"==\";\r\n            break;\r\n        case 3:\r\n            encodedString += \"=\";\r\n            break;\r\n        default:\r\n            throw createBrowserAuthError(invalidBase64String);\r\n    }\r\n    const binString = atob(encodedString);\r\n    return Uint8Array.from(binString, (m) => m.codePointAt(0) || 0);\r\n}\n\nexport { base64Decode };\n//# sourceMappingURL=Base64Decode.mjs.map\n","/*! @azure/msal-browser v3.23.0 2024-09-03 */\n'use strict';\n/*\r\n * Copyright (c) Microsoft Corporation. All rights reserved.\r\n * Licensed under the MIT License.\r\n */\r\n/**\r\n * Class which exposes APIs to encode plaintext to base64 encoded string. See here for implementation details:\r\n * https://developer.mozilla.org/en-US/docs/Web/API/WindowBase64/Base64_encoding_and_decoding#Solution_2_%E2%80%93_JavaScript's_UTF-16_%3E_UTF-8_%3E_base64\r\n */\r\n/**\r\n * Returns URL Safe b64 encoded string from a plaintext string.\r\n * @param input\r\n */\r\nfunction urlEncode(input) {\r\n    return encodeURIComponent(base64Encode(input)\r\n        .replace(/=/g, \"\")\r\n        .replace(/\\+/g, \"-\")\r\n        .replace(/\\//g, \"_\"));\r\n}\r\n/**\r\n * Returns URL Safe b64 encoded string from an int8Array.\r\n * @param inputArr\r\n */\r\nfunction urlEncodeArr(inputArr) {\r\n    return base64EncArr(inputArr)\r\n        .replace(/=/g, \"\")\r\n        .replace(/\\+/g, \"-\")\r\n        .replace(/\\//g, \"_\");\r\n}\r\n/**\r\n * Returns b64 encoded string from plaintext string.\r\n * @param input\r\n */\r\nfunction base64Encode(input) {\r\n    return base64EncArr(new TextEncoder().encode(input));\r\n}\r\n/**\r\n * Base64 encode byte array\r\n * @param aBytes\r\n */\r\nfunction base64EncArr(aBytes) {\r\n    const binString = Array.from(aBytes, (x) => String.fromCodePoint(x)).join(\"\");\r\n    return btoa(binString);\r\n}\n\nexport { base64Encode, urlEncode, urlEncodeArr };\n//# sourceMappingURL=Base64Encode.mjs.map\n"],"names":["DEFAULT_POPUP_TIMEOUT_MS","DEFAULT_IFRAME_TIMEOUT_MS","DEFAULT_REDIRECT_TIMEOUT_MS","DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS","buildConfiguration","auth","userInputAuth","cache","userInputCache","system","userInputSystem","telemetry","userInputTelemetry","isBrowserEnvironment","DEFAULT_AUTH_OPTIONS","clientId","authority","knownAuthorities","cloudDiscoveryMetadata","authorityMetadata","redirectUri","postLogoutRedirectUri","navigateToLoginRequestUrl","clientCapabilities","protocolMode","OIDCOptions","serverResponseType","defaultScopes","azureCloudOptions","azureCloudInstance","tenant","skipAuthorityMetadataCache","supportsNestedAppAuth","DEFAULT_CACHE_OPTIONS","cacheLocation","temporaryCacheLocation","storeAuthStateInCookie","secureCookies","cacheMigrationEnabled","claimsBasedCachingEnabled","DEFAULT_LOGGER_OPTIONS","loggerCallback","logLevel","piiLoggingEnabled","providedSystemOptions","loggerOptions","networkClient","navigationClient","loadFrameTimeout","windowHashTimeout","iframeHashTimeout","navigateFrameWait","redirectNavigationTimeout","asyncPopups","allowRedirectInIframe","allowNativeBroker","nativeBrokerHandshakeTimeout","pollIntervalMilliseconds","DEFAULT_TELEMETRY_OPTIONS","application","appName","appVersion","client","warning","JSON","stringify","async","createV3Controller","config","request","standard","initialize","CryptoOps","constructor","logger","performanceClient","this","AsyncMemoryStorage","createNewGuid","base64Encode","input","base64Decode","base64UrlEncode","encodeKid","inputKid","kid","publicKeyThumbMeasurement","startMeasurement","PerformanceEvent","correlationId","keyPair","EXTRACTABLE","POP_KEY_USAGES","publicKeyJwk","publicKey","publicJwkString","getSortedObjectString","e","kty","n","publicJwkHash","hashString","privateKeyJwk","privateKey","unextractablePrivateKey","setItem","requestMethod","resourceRequestMethod","requestUri","resourceRequestUri","end","success","removeItem","containsKey","clearInMemory","clearPersistent","Error","error","message","payload","shrOptions","signJwtMeasurement","cachedKeyPair","getItem","publicKeyJwkString","encodedKeyIdThumbprint","shrHeader","JoseHeader","header","alg","encodedShrHeader","cnf","jwk","parse","tokenString","tokenBuffer","TextEncoder","encode","signatureBuffer","signedJwt","Uint8Array","plainText","obj","Object","keys","sort","getAccountType","account","idTokenClaims","tfp","acr","tid","preflightCheck","initialized","performanceEvent","StandardController","operatingContext","getConfig","getLogger","redirectResponse","Map","hybridAuthCodeResponses","browserCrypto","eventHandler","EventHandler","browserStorage","BrowserCacheManager","nativeCacheOptions","nativeInternalStorage","undefined","tokenCache","TokenCache","activeSilentTokenRequests","trackPageVisibility","bind","trackPageVisibilityWithMeasurement","static","controller","info","incrementFields","visibilityChangeCount","trace","initCorrelationId","getRequestCorrelationId","initMeasurement","emitEvent","EventType","nativeExtensionProvider","NativeMessageHandler","verbose","i","clearTokensAndKeysWithClaims","hash","redirectResponseKey","response","get","handleRedirectPromiseInternal","set","loggedInAccounts","getAllAccounts","getCachedNativeRequest","useNative","getTemporaryCache","rootMeasurement","nativeClient","NativeInteractionClient","accountId","handleRedirectPromise","event","redirectClient","createRedirectClient","then","result","length","accountType","errorCode","discard","catch","eventError","atrMeasurement","add","scenarioId","onRedirectNavigateCb","onRedirectNavigate","url","navigate","configOnRedirectNavigateCb","isLoggedIn","setInteractionInProgress","canUseNative","getNativeAccountId","acquireTokenRedirect","NativeAuthError","acquireToken","InteractionRequiredAuthError","acquireTokenPopup","atPopupMeasurement","Promise","reject","acquireTokenNative","isNativeBroker","requestId","createPopupClient","accessTokenSize","accessToken","idTokenSize","idToken","measurement","ssoSilentMeasurement","acquireTokenByCodeAsyncMeasurement","name","increment","validRequest","prompt","document","addEventListener","createSilentIframeClient","fromNativeBroker","finally","removeEventListener","atbcMeasurement","code","nativeAccountId","hybridAuthCode","acquireTokenByCodeAsync","delete","silentAuthCodeClient","createSilentAuthCodeClient","fromCache","tokenRenewalError","commonRequest","cacheLookupPolicy","addQueueMeasurement","silentCacheClient","createSilentCacheClient","ClientAuthErrorCodes","silentRefreshClient","createSilentRefreshClient","silentIframeClient","logoutRequest","logoutRedirect","logout","logoutPopup","accountFilter","getAccount","getAccountByUsername","username","getAccountByHomeId","homeAccountId","getAccountByLocalId","localAccountId","setActiveAccount","getActiveAccount","accountEntity","AccountEntity","cloudGraphHostName","msGraphHost","setAccount","hydrateCache","apiId","authenticationScheme","loginHint","sid","PopupClient","RedirectClient","SilentIframeClient","SilentCacheClient","SilentRefreshClient","SilentAuthCodeClient","addEventCallback","callback","removeEventCallback","callbackId","addPerformanceCallback","removePerformanceCallback","enableAccountStorageEvents","disableAccountStorageEvents","getTokenCache","setLogger","initializeWrapperLibrary","sku","version","setWrapperMetadata","setNavigationClient","getConfiguration","getPerformanceClient","isBrowserEnv","getEventHandler","Constants","loginPopup","atsMeasurement","thumbprint","scopes","homeAccountIdentifier","claims","shrClaims","sshKid","silentRequestKey","cachedResponse","acquireTokenSilentAsync","state","silentRequest","acquireTokenSilentNoIframe","refreshTokenError","shouldTryToResolveSilently","noInteractionRequired","subError","InteractionRequiredAuthErrorCodes","refreshTokenRefreshRequired","BrowserConstants","isSilentlyResolvable","tryIframeRenewal","checkIfRefreshTokenErrorCanBeResolvedSilently","activeIframeRequest","activePromise","activeCorrelationId","awaitConcurrentIframeMeasure","awaitIframeCorrelationId","activePromiseResult","acquireTokenBySilentIframe","_resolve","resolve","iframeResult","addFields","acquireTokenFromCache","cacheError","acquireTokenByRefreshToken","S256_HASH_ALG","PUBLIC_EXPONENT","UUID_CHARS","UINT32_ARR","Uint32Array","keygenAlgorithmOptions","modulusLength","publicExponent","validateCryptoAvailable","window","sha256Digest","dataString","data","crypto","subtle","digest","getRandomValues","dataBuffer","getRandomUint32","currentTimestamp","Date","now","baseRand","bytes","randA","Math","trunc","randBHi","randBLo","text","charAt","generateKeyPair","extractable","usages","generateKey","exportJwk","key","exportKey","importJwk","importKey","sign","hashBuffer","hashBytes","RANDOM_BYTE_ARR_LENGTH","generatePkceCodes","codeVerifier","generateCodeVerifier","verifier","challenge","generateCodeChallengeFromVerifier","buffer","pkceCodeVerifier","pkceHashedCodeVerifier","TextDecoder","decode","base64String","encodedString","replace","binString","atob","from","m","codePointAt","base64DecToArr","urlEncode","encodeURIComponent","urlEncodeArr","inputArr","base64EncArr","aBytes","Array","x","String","fromCodePoint","join","btoa"],"sourceRoot":""}